BSides Strasbourg 2024
as the organisers put it
BSides Strasbourg is a day of technical conferences, workshops led by international experts and a hacking village. And a boat. The conference is open to professionals, students and curious.
| title | author | length |
|---|---|---|
| Aftermovie | 02m | |
A short montage showcases BSides Strasbourg 2024, a regional security meetup with over 500 attendees bringing together consultants, in-house defenders, and… | ||
| Opening Keynote | Dorian Nicoletti | 20m |
Overview of the sharp increase in cyberattacks in 2024 (10× vs 2023), highlighting ransomware, data exfiltration, generative-AI deepfake misuse and GPU theft… | ||
| Shift Happens: Secure Your Cloud Native Environments | Stéphane Montri | 37m |
Covers security risks and threats affecting Cloud Native applications and multi‑cloud infrastructure, including vulnerabilities from open‑source packages and… | ||
| OAuth 2.1 Explained Simply (Even If You're Not a Dev)! | Julien Topçu | 40m |
OAuth 2.1 is presented as the industry standard for delegated authorization that web applications must use; the talk explains OAuth concepts (roles, flows) and… | ||
| The rise of (evil) robots - cyber meeting safety in autonomous systems | Dan Horovitz | 42m |
Autonomous Mobile Robots already move payloads from ~100 kg up to 2 tonnes and attackers shift from economics to physical harm by tampering control and… | ||
| Fuzzing Your Code | Jérôme Molière | 47m |
Introduces fuzz testing aimed at programmers to find security bugs in codebases written in Java, C, Python and others. Covers benefits of fuzzing, costs of… | ||
| Revelations from Analyzing 1 Million Domains: Sensitive Data on the Web | Swan Beaujard | 26m |
An engineer from Escape reports on a study that scanned 1 million domains to find exposed API tokens and RSA keys, uncovering over 18,000 credentials with 41%… | ||
| The Offensive Approach to Cybersecurity | Tristan TARRIEUX, Noé Zenner | 27m |
Describes an offensive cybersecurity approach where long-duration red team engagements (months, not short pentests) emulate real attackers using a… | ||
| Neural Network Security: Live Demonstration of an Adversarial Attack | Mathis Hammel | 44m |
Overview of adversarial attacks against neural networks, explaining how small, targeted perturbations to inputs can make embedded real-time AI systems (like… | ||
| From Text to Exploits: Vulnerabilities of Apps Using Generative AI and LLMs | Paul Molin | 40m |
Explains how large language models (LLMs) and generative AI are integrated into applications, details common vulnerabilities that arise in such deployments… | ||
| Practical Threat Hunting: Straight Facts and Substantial Impacts | Grifter | 42m |
Threat hunting means doing incident response before alerts arrive, human-driven and hypothesis-led, not a vendor box; focus on collecting logs, full packet… | ||
| Secure Your Open-Source Project with GitHub | Adrien Pessu | 25m |
Shows how to secure an open-source project using GitHub’s built-in tooling, specifically demonstrating GitHub SAST (static application security testing) and… | ||
| Don’t use a WAF, and when you should, anyway. | Joshua Fox | 42m |
Argues WAFs like Cloud Armor stop some attacks — demo shows it blocked XSS and flagged SQL injection signatures — but causes false positives that break bug… | ||
| Where have the women of tech history gone? | Laura Durieux | 31m |
Chronicles Ada Lovelace as the origin of programming with early loop and function ideas, Hedy Lamarr patenting frequency hopping (FHSS) in 1942 now underlying… | ||
| nothing matches | ||