BSides Tampa 2021
| title | author | length |
|---|---|---|
| Raspberry Pi SDR | Jonathan Singer | 45m |
Raspberry Pi paired with cheap USB radios (notably an RTL‑SDR dongle) becomes a portable radio lab: builds include a touchscreen frequency analyzer running… | ||
| Mobile Penetration Testing Hybrid | Buddy Smith | 44m |
Shows how to unpack Cordova/PhoneGap apps (unzip/apktool) to get the www folder, run the app in a browser with cordova.simulate and proxy traffic through Burp… | ||
| Perspective and Opportunity Costs of Cyber Attacks | Kyle Bess | 31m |
Argues that the largest cost of breaches is opportunity cost—time and revenue diverted from normal operations—illustrated by a cited $2.3M Google outage and a… | ||
| Who are the people in your neighborhood? Tracking 'Shady' CIDR blocks | John Smith | 43m |
Shows a reproducible workflow that converts cloud CIDR lists into /24s, merges them with Zeek/bro conn.log and public feeds, and flags persistent external… | ||
| IAM and why it is important in Cloud environments | Dan Thormodsgaard | 31m |
Explains concrete guardrails: using AWS Organizations and service control policies (SCPs) plus tagging and multi-account design to limit blast radius, plus… | ||
| Don’t fall asleep at the wheel … in Cloud | Brent Keator | 43m |
Argues that tooling alone doesn’t secure cloud platforms and gives concrete fixes: replace brittle homegrown Slack bot for temporary DB access with a database… | ||
| The Evolving Role of the CISO and the Security Organization | Sallie Wright | 47m |
Security leadership shifts from hands‑on ops to risk and governance with concrete metrics: 21% of CISOs report to the CEO, 51% to the CIO, CEO‑reporting CISOs… | ||
| Cyber Security Careers Security Specialties & Skills Development | Scott Stanton | 44m |
Covers concrete ways to start and advance: entry via help desk or desktop support then pivot into sysadmin, network or identity roles; hands‑on skills… | ||
| So you wanna be a CISO … Are you sure? | Larry Whiteside | 39m |
CISO work shifts from hands‑on tech to business risk management, requiring sales, legal and budget skills; many CSOs log 60–100 hour workweeks and treat… | ||
| CISO Panel | John Burger, Guy Albertini, Michael Phillips, Barry Kortekas, Jon Sargent | 42m |
Hiring prioritizes three specifics: understanding cyber risk, persistent curiosity and teamwork, and T‑shaped skills (security plus networking or development)… | ||
| Guardrails in the Cloud | Rohini Sulatycki | 44m |
Cloud adoption accelerates security risk—digital strategies compress six years into one—and the concrete guardrails are: use AWS Organizations and SCPs to… | ||
| Ransomware; The Real Pandemic | Jeremy Rasmussen | 52m |
Firm receives about one ransomware cleanup call per week and reports 60% via RDP/remote access, 30% phishing, 10% patch gaps. Maze operators use credential… | ||
| The Hole in Your SOC: How a compromise of your SIEM could | Michael Music | 51m |
Shows how full SIEM access gives an attacker instant target maps, credentials and cloud keys by parsing firewall, DHCP and web logs and Windows event IDs (e.g… | ||
| So You Want to Build a Threat Hunt Program | Bryan Bowie | 36m |
Defines threat hunting as human-driven, proactive, iterative work and gives a starter program: choose unstructured ad hoc hunts or a structured, ticketed team… | ||
| Egregor Awakens: Taking a Tour of a Threat Action New Digs | Lindsay Kaye | 34m |
Egregor emerges September 2020 as a Sekhmet-related RaaS that claims 206 victims by year end, uses phishing, RDP/VPN exploits and Cobalt Strike, and stages… | ||
| Analyzing Emotet infections | Brad Duncan | 54m |
Shows how Emotet infection proceeds from a malicious Word macro to an initial DLL download, then encrypted HTTP command‑and‑control and spambot modules… | ||
| Luck is Not a Career Success Strategy | Suzanne Ricci | 46m |
Outlines a concrete five-year plan method with reverse engineering and quarterly check-ins, prescribes contacting career interviews of 3–5 people for 15–30… | ||
| A Glance at Interpreted Language Bytecode Trickery | Chris Lyne | 41m |
Researcher encounters a product of compiled Python 2.7 packaged with py2exe whose .pyc files break uncompyle6 with an unknown magic number 62216. Investigation… | ||
| Managing Organizational Risk during a World Pandemic | Michael Melore, Hussein Syed, Charles Gagnon, Timothy Swope | 52m |
Remote work pushes risk out of the office to home devices and vendors, so teams create a simple risk register, use spreadsheets then a SIEM/DLP stack, and… | ||
| Detecting and analyzing files-less malware | Christopher Williams, Evan Wagner | 47m |
Network logs show two infected hosts (192.168.100.181 and .180) beaconing to C2, with RITA + Zeek flagging 3,129 unique subdomains under evil.lab as DNS… | ||
| Metrics that Matter.Confidence & Resilience in Your Security Program | John Burger | 53m |
Focuses on concrete measures: break out mean time to resolve from mean time to respond and track false positives versus true positives and anomalous safe… | ||
| Closing Remarks & Thank you | 12m | |
Conference wraps after a successful first virtual run with solid turnout, platform support from vSummits/V Summers, and a special roast from Terrazzo Mountain… | ||
| nothing matches | ||