BSides Edmonton 2024
as the organisers put it
BSides Edmonton Annual Cyber Security Conference in Edmonton. Monday September 13 & Tuesday September 14, 2027
| title | author | length |
|---|---|---|
| Disinform your Surroundings: AI and disinformation campaigns | Tess (killrbunn3) | 35m |
AI-generated images and video convincingly impersonate real people, with at least one deepfake video destroyed a career and vetted cases of political… | ||
| Effects of Weaponized Malware on End-to-End Encryption and Exfiltrating Data from Signal Messenger | Geoffrey Green | 49m |
Overview of how commercial spyware like NSO Group’s Pegasus, Intellexa’s Predator and RCS Labs’ Hermit use zero-click exploits and tactical infections to get… | ||
| Securing Buy-In for Security Budgets | Chantel Duplantie, Suliha Mukhtar-Lasisi, Sara Iyer, Sridevi Sadhineni | 48m |
Advocates recommend starting with a risk assessment and inventory, then prioritize internet‑facing and high‑criticality systems; leverage existing licenses… | ||
| Fabricated Realities: AI Personas and Simulacra and the Threats They Pose | Sarah Hunt | 36m |
Voice cloning moves from minutes to 3 seconds of audio and enables realistic synthetic video and audio used in extortion and phishing at scale; provenance… | ||
| Disinform your Surroundings: AI and disinformation campaigns | Tess (killrbunn3) | 36m |
Describes concrete harms: AI image and voice generators produce seamless deepfakes that have destroyed a person’s career and reuse real faces because models… | ||
| Streamlining Threat Hunting in Cloud Environments with Jupyter | Chi Phong Huynh, Kai Iyer | 31m |
Jupyter notebooks load CloudTrail and Azure audit CSVs from S3, run NetworkX mapping to MITRE ATT&CK, and flag concrete actions like disabling Defender… | ||
| Revolutionizing Cyber Defense: The NIST CSF 2.0 Advantage | Saif Azwar | 35m |
NIST CSF v2 adds a dedicated Govern (new function) and expands supply chain risk management, folding privacy into security outcomes and mapping to ISO/CIS… | ||
| MITRE Attack Flow: Laying Foundations for Predictive Intelligence | Prashant | 34m |
BSides Edmonton September 23-24, 2024
Talk:
MITRE Attack Flow: Laying Foundations for Predictive Intelligence
Abstract:
I will like to propose a talk as a… | ||
| Developing Cybersecurity - How do you make Staff Know Security | Connor Boucher | 44m |
Mandatory cybersecurity modules get clicked through and forgotten; KnowBe4 phishing tests often breed mistrust. Cited failures include a CrowdStrike update… | ||
| Improving Cyber Risk Management with Threat Modeling | Alyssa Hartford | 44m |
Government of Alberta teams use threat modeling as a proactive five‑stage process, applying STRIDE and PASTA and running the Microsoft Threat Modeling Tool to… | ||
| Security Architecture, An Adventure? | Tumraj Gill | 45m |
Describes a practical plan: create a custom security architecture framework aligned to business goals, enforce a standard Q&A assessment sent to every vendor… | ||
| Stories from the trenches - How a red team exercise gained full control of a client network | Cristian Cordeiro | 49m |
A red team starts with forgotten and spoofed domains, registers lookalike names, and hosts a cloned site that serves a fake Windows update; voice-based social… | ||
| AppSec From the Ground Up | Gavin Miller | 41m |
Company grows from two AppSec devs to 19 security staff supporting ~250 developers and a $3B valuation while building concrete systems: a homegrown inventory… | ||
| Differences Between European And Canadian Approach For Cybersecurity | Tony Dong | 45m |
Compares penetration testing adoption: Dutch firms require pentests almost universally (only ~12% lack policy, real rate <10%) while many Canadian firms show… | ||
| Raising Our Kids In A Connected World | Michael Spaling | 49m |
University security teams triage specific incidents: a meme introduction flagged as "Inigo Montoya" death threat and explained as pop‑culture, a professor… | ||
| Securing the Internet of Things (IoT) in a Decentralized World | Agbai Obasi, Ruth Ogadina | 36m |
Claims that replacing username/password logins with no-password authentication (public/private keys registered on a blockchain) prevents credential stuffing… | ||
| The Human Factor: Building a Culture of Identity Security in a Decentralized Workforce | Femi Ogunji | 46m |
Claims that identity is the new network perimeter, citing a 2022 study where 62% of workers report remote work and incidents that show gaps: Equifax lets… | ||
| Beyond Recognition: A Cautionary Tale of AI and Identity Fraud | Amit Anand, Kim Krushell | 39m |
Generative AI creates synthetic IDs and deepfakes that bypass ordinary checks; law enforcement busted a ring that made over 680 synthetic identities used to… | ||
| Securing at Scale Building Resilient Defences for a Growing Digital World | Rajiv Gupta | 01h 27m |
The Cyber Centre says it monitors ~100+ federal departments with almost a million sensors and handles ~2,200 incidents a year, sending ~250 pre‑ransomware… | ||
| Securing the Digital Supply Chain: What we should do for Supply Chain Security in DevSecOps? | Harvinder Dhami, Tanya Janca, Dwayne Budzak, Michael Schwab | 54m |
Panel lists concrete attack examples (polyfill typosquatting, Log4j, CrowdStrike outage) and practical fixes: use SCA that reports reachable vulnerabilities… | ||
| Microsoft Security Co-Pilot: Do you really need AI in your SOC? | Thomas Dang | 39m |
Yukon Government deploys Microsoft Security Co‑Pilot piloted in Early Access to query Entra ID, Sentinel and Defender logs, run playbooks and auto‑generate… | ||
| Tales From the Crypt…Analyst: The After Life | Jeff Man | 01h 14m |
Third installment traces a career shift from NSA to private sector with concrete milestones: designs the first NSA software cryptosystem that moves one‑time… | ||
| nothing matches | ||