BSides Vancouver 2021
| title | author | length |
|---|---|---|
| Take Down Cyberthreat Dwell Time With Kaspersky Optimum Security | Eric Payne | 37m |
Kaspersky Optimum Security combines 24/7 threat hunting, EDR Optimum and endpoint protection to cut adversary dwell time; a real IR case shows responders… | ||
| DevSecOps: The Good, the Bad and the Ugly | Nivedita Murthy | 26m |
Claims that DevSecOps scales security through automation with real metrics: 30 microservices onboarded in two hours and a security team of four supporting 700… | ||
| Understanding the Latest Mitre Att&Ck Evaluation Data | Norm Chan | 21m |
Walks through the MITRE ATT&CK 2021 raw data showing a three day test of 174 steps against 30 vendors using real actor playbooks for Carbanak and FIN7 across… | ||
| Social Engineering: Tactics and Techniques | Savannah Lazzara | 16m |
Optiv sponsor presentation describes step‑by‑step social engineering ops: heavy OSINT on Instagram/Facebook/Google Maps to map onsite staff and badge tech… | ||
| Is the Power Grid a Huge Cybersecurity Risk? | Vivek Ponnada | 34m |
Power systems use SCADA/PLC/DCS layers and must balance supply and demand on milliseconds balance with almost no bulk storage; Canada’s grid has regional mixes… | ||
| Projects sanity check | Adele Farhadian | 23m |
Argues for a project sanity check by tracing requirement history, interviewing finance and stakeholders, and doing a cost-benefit spreadsheet that exposes weak… | ||
| Simulation Hacking, the Good, Bad and the Ugly | Jacques van zijl | 41m |
Demonstrates that OS isolation and TPM-backed Credential Guard change whether credential-dumping attacks succeed, using the DG Readiness toolkit to enable… | ||
| Linux Sessions for Monitoring and Reviewing Linux Workloads | Mike Sample | 15m |
Defines a Linux session as the group of processes created by the setsid system call and shows how to record who what when and where by capturing UTC timestamps… | ||
| Discovering C&C in Malicious PDF with Obfuscation, Encoding and Other Techniques | Filipi Pires | 48m |
Scan of a malicious PDF reveals 15 objects and an open action executes JavaScript that auto-runs on open; analysis uses file/libmagic, pdfid and pdf-parser… | ||
| How to Secure Microservices Without Traditional Firewall | Petr McAllister | 23m |
Claims that VPNs are replaceable by identity and proxy based controls using mTLS with per-service x.509 certificates, and shows a concrete stack of Envoy… | ||
| Damn GraphQL - Defending and Attacking APIs | Dolev Farhi | 29m |
Claims that GraphQL often exposes an introspection dump and always returns 200 while embedding errors, and that field suggestions are enabled by default… | ||
| So You Cracked a Bunch of Passwords. Now What? | Chris Timmons | 28m |
Cracks at about 160 billion NTLM hashes per second, uses PACK to extract masks but finds manual import into reporting tools wasteful, so builds PERP PowerShell… | ||
| Privacy Concerns in the Connected Car Ecosystem | Ruchi Gautam | 25m |
Connected cars generate geolocation, navigation, telematics and in‑car audio that companies and insurers aggregate for profiling: the uploader cites 200… | ||
| Get Smart on Smart Tech! | Rossilyne Tan, Danielle Cheng | 43m |
Covers concrete incidents and fixes: an Industroyer malware campaign exploits a Siemens SPIROTECH flaw to blackout Kyiv’s grid; a water plant breach uses… | ||
| Sysmon Monitoring Different Way | Marek Mikita | 11m |
A small web UI visualizes Sysmon events as a graph backed by Neo4j backend and populated by a PowerShell collector available in a Docker + PowerShell collector… | ||
| A Study on Intrusion Detection Systems with a Practical Experiment on Snort | Vigneshwar Sethuraman | 24m |
Snort is implemented on Kali with its config, rules, MySQL schema and BASE for viewing; local rules flag ICMP and signature matches. Practical lab runs on two… | ||
| Attack of the Graph: Visual Tools for Cyber Analysis | Christian Miles | 20m |
Covers using interactive network visuals to find real cyber risk: mapping package dependency trees (NPM example) to surface downstream vulnerable packages… | ||
| Kubernetes Security: Attacking and Defending K8s Clusters | Magno Logan | 38m |
A live exploit of a vulnerable Drupal site (Drupalgeddon2 (CVE-2018-7600)) yields a shell in a pod and attackers spin up crypto‑miners within 24 hours… | ||
| How Nation States Use Your Domain to Compromise Your Cloud Infrastructure | Alex Parsons | 01h 00m |
Nation-state intrusions start from a compromised on‑prem AD (often via supply‑chain) and pivot to Azure AD by modifying existing OAuth apps or adding client… | ||
| The Overlooked Security Risk: 3rd Party Risk Management | Rose | 51m |
Covers a full vendor lifecycle with concrete steps: governance, scoping, questionnaires, contract negotiation, ongoing monitoring and termination, plus… | ||
| Securing Kubernetes in the Cloud | Amiran Alavidze | 33m |
Managed cloud Kubernetes (EKS/AKS/GKE) gives a usable security baseline but the most likely breach is a compromised workload that leverages mounted service… | ||
| Attacking Zero Trust Designs in 2021 | Michael Cavallin | 31m |
Zero Trust promises continual verification but 2021 deployments often fail on specifics: many SaaS apps do not accept device trust signals, session revocation… | ||
| Presenting Technical Evidence in Court | Rob Slade | 44m |
Focuses on the concrete rules that win or lose cases: make a bit-for-bit image using hardware write‑blockers, keep a sealed original and a working copy… | ||
| Current State of Exploit Mitigations in the Linux Kernel | Lucas Amorim | 24m |
Covers a real keyring vulnerability where an integer overflow of reference counter wraps usage to zero, the slab is freed and a use‑after‑free lets an attacker… | ||
| Building Security Champions | Tanya Janca | 37m |
There are 3.5 million unfilled cyber jobs, so the claim is that a security champions program scales security capacity with big ROI by teaching and delegating… | ||
| Challenging Barriers to Entry and Rejection | Aarti Gadhia | 27m |
Claims that there is no cybersecurity skills shortage backed by Infosec figures (4.1M → 3.2M) and a simple math argument; shows hires who came from HR, project… | ||
| Human Vulnerability Management and Assessment in the Age of Zero Trust | June Jeremiah | 41m |
Claims that 92% of breaches trace to humans and that human-error breaches cost about $3.5M average and $133 per record drive a programmatic approach: run… | ||
| In-App Protection For Android: Selecting the Right Platform | Patience Mpofu | 13m |
For financial Android apps aiming for PCI compliance the talk lists a concrete minimum: obfuscation, log stripping, runtime threat detection, plus signature… | ||
| Measuring Cybersecurity Maturity with the NIST CSF | Josh Sokol | 29m |
Replaces Gartner’s vague advice with a concrete roadmap by mapping each of the NIST Cybersecurity Framework’s 23 categories to a six‑point maturity scale… | ||
| nothing matches | ||