BSides Lisbon 2018
| title | author | length |
|---|---|---|
| Welcome To BSides | 12m | |
-- no description -- | ||
| Protecting Crypto Exchanges From A New Wave Of MitB Attacks | Pedro Fortuna | 53m |
Crypto exchanges face real Man‑in‑the‑Browser campaigns (Zeus Panda Ramnit Trickbot) that inject a one‑line first‑stage script into every endpoint, grab… | ||
| VPNFilter - YetAnotherBotNet Or Maybe Not... | Vitor Ventura, Warren Mercer | 35m |
A multi-stage router malware chain uses a Stage‑1 photo hosting JPEG fetch (embedded IP) with fallbacks, infects ~500,000 devices across 54 countries and 11… | ||
| Cruising Ocean Threat With TheHive, Cortex & MISP Without Sinking | Saâd Kadhi | 38m |
Free, open-source stack combining TheHive, Cortex and MISP for CTI and DFIR, demonstrated as a working production system used by 50+ organizations. Cortex runs… | ||
| Welcome To BSides (Day 2) | 12m | |
-- no description -- | ||
| Keynote - The Infosec Survival Field Guide | Stefan Friedli | 39m |
InfoSec spends hit 124 billion and only about 10% targets privacy, so practical priorities matter: examples include Swiss e‑voting debates, Sleep Number… | ||
| (In)Secure Messaging Apps: A Lateral Movement Into Your Privacy | Vitor Ventura | 32m |
Reverse engineering of a Python info‑stealer finds code targeting Telegram cache and a PBKDF2 key derivation using 4000 iterations, proving desktop session… | ||
| Data Analytics-Based Detection At Scale | Pedro Chaves, Jan Pospisil | 46m |
A next-generation analytics platform replaces a legacy CM with a Flink-based distributed rules engine reading from Kafka, stores raw events in Athena and runs… | ||
| OAuth2: Beyond The Specs | Daniele Timo Secondi | 33m |
Pipedrive describes migrating hundreds of integrations from API keys to OAuth, building an API-token exchange endpoint to convert old tokens and avoiding… | ||
| SE, Applied Educational Theory, And The Gap Between Them | Rose Regina Lawrence | 19m |
Argues that social engineering yields short‑term compliance but undermines long‑term security habits and trust, and recommends teaching strategies instead… | ||
| SecOps Automation And Orchestration | Nicolas Mattiocco | 32m |
Open-source SecOps framework called PatrOwl automates scans and aggregates findings into a single DB, using Dockerized engines written in Python/Django (Nmap… | ||
| Open Source Intelligence Based Intrusion Detection System | Ivo Vacas | 43m |
An automated pipeline pulls, normalizes and scores 49 OSINT feeds, generates Snort-style rules and blacklists, and pushes them to an IDS and firewall in… | ||
| Living With Kodi And A Hole In Your Network | Yevgen Goncharuk | 18m |
Shows a working exploit that hijacks Kodi’s HTTP-based update flow by replacing addons.xml and the ZIP with a malicious service.py Python payload that runs on… | ||
| Keynote - How To Build Your Own Infosec Company | Mario Heiderich | 01h 02m |
Builds a small boutique infosec firm (5–20 people), gets the first client via Twitter, uses Google Docs and Slack, git, off‑site backups and a strict calendar… | ||
| Closing Ceremony | 56m | |
480 registered and 400 attended, making this the largest BSides Lisbon yet; a 3.5‑hour CTF runs with 10 teams, 14 challenges of which 8 get solved. Web flaws… | ||
| Securing^WAttacking Kubernetes | Vincent Ruijter | 30m |
Live demos show obtaining a shell via exposed APIs and command injection, then using kubectl exec to create a pod with privileged:true and a hostPath mount of… | ||
| Exfiltrate All The Things! | David Sopas, Pedro Umbelino | 39m |
Research shows practical airgap exfiltration via two concrete builds: abuse of an IoT Bluetooth Low Energy light bulb to encode data onto visible-light… | ||
| CookieMonstruo: Apple Flavour | Martin Von Knobloch | 56m |
Demonstrates that browser session cookies on macOS are recoverable and reusable end to end by extracting the Chrome safe storage key from the user keychain… | ||
| Rogue One: A Wifi Story | Ricardo Goncalves | 40m |
A modular Linux tool called Rogue AP Detector scans with iwlist or Kismet, fingerprints APs with Nmap, and runs active probes using airbase-ng and hcxdumptool… | ||
| A Novel Runtime Technique For Identifying Malicious Applications | Chris Le Roy | 48m |
Proposes identifying Android malware by scanning a process heap at runtime to find instantiated objects (no APK access required), uses Frida-based object… | ||
| Project DiSIEM | Ana Respício, Fernando Alves, Alysson Bessani, Pedro Ferreira | 50m |
Project DiSIEM extends existing SIEMs with concrete plugins that are already prototyped and integrated: five diversity mechanisms (OSINT collection and fusion… | ||
| nothing matches | ||