Day 1 Stream 1·42 min
Raghudeep Kannavara · Alan Sheng
Shows how malicious firmware on a PCIe subsystem can reach host memory through DMA without physical access.
hardwareembeddedattack+3
August 2021 · Las Vegas, USA
BSides Las Vegas
5 sessions · 49 talks
Sessions at this event
Day 1 Stream 1
10 talks
Day 1 Stream 1 talks from BSides Las Vegas 2021.
Day 1 Stream 2
11 talks
Day 1 Stream 2 talks from BSides Las Vegas 2021.
Day 2 Stream 1
10 talks
Day 2 Stream 1 talks from BSides Las Vegas 2021.
Day 2 Stream 2
10 talks
Day 2 Stream 2 talks from BSides Las Vegas 2021.
Extras
8 talks
Extras talks from BSides Las Vegas 2021.
All BSidesLV 2021 talks
Filters+
1–24 of 41 talks / 49
Day 1 Stream 1·47 min
Vincenzo Ciancaglini · Philippe Z Lin
Shows how unauthenticated APIs and unencrypted traffic let attackers abuse edge access control cameras and door relays.
iotdevicetrust+2
Day 1 Stream 1·51 min
JP Perez-Etchegoyen
Surveys recent exploitation of SAP vulnerabilities, attacker timelines, and post-exploitation activity in ERP systems.
threatintelligencevulnerabilities+2
Day 1 Stream 1·46 min
Wendy Knox Everette
Explains what SOC 2 audits check, how to prepare for a first audit, and how evidence and scope shape the result.
riskmanagementprivacy+2
Day 1 Stream 1·47 min
Andy Applebaum · Ron Alford
Explores how deception could slow or misdirect automated planners that chain attack actions across enterprise networks.
aimachine-learningattack+2
Day 1 Stream 1·54 min
Andrew Brandt · Gabor Szappanos
Traces how poisoned search results and compromised WordPress sites deliver the Gootloader malware chain to Windows users.
malware-analysiswebattack+2
Day 1 Stream 1·50 min
Emily Rexer · Henry Reed
Shows how converting Windows executables into images and applying transfer learning can flag malware never seen before.
malware-analysismachine-learningdetection+1
Day 1 Stream 1·51 min
Colleen Dai · Grayson Hardaway
Shows how secure coding guardrails and static analysis rules could have prevented many real-world XSS bugs in open source code.
appsecwebvulnerabilities+2
Day 1 Stream 1·44 min
Douglas Brush
Offers a candid personal account of burnout and anxiety in security work, plus practical self-care steps.
mental-healthmanagementteam+1
Day 1 Stream 2·33 min
Joshua Danielson · Brittany Little · Dileep Gurazada
Walks through one company's zero trust rollout, covering use cases, product categories, device health checks and deployment lessons.
identitydevicetrust+3
Day 1 Stream 2·49 min
Itsik Mantin
Shows how poisoned training data skews machine learning models and how threshold-based learning can limit the damage.
aimachine-learningattack+2
Day 1 Stream 2·29 min
Chris Neal
Walks through decompiling, de-obfuscating and triaging AutoIt-compiled malware, using a real-world RAT sample as a case study.
malware-analysisreverse-engineeringwindows+1
Day 1 Stream 2·50 min
Tamás Vörös
Presents a data-driven approach to detecting malicious internet infrastructure.
threatdetectioninfrastructure+2
Day 1 Stream 2·31 min
Che' Jackson
Outlines the main healthcare security risks, from phishing and ransomware to cloud misconfigurations and connected medical devices.
healthcareransomwarerisk+3
Day 1 Stream 2·26 min
Kelly Ohlert
Shows how tabletop role-playing techniques can make incident response exercises more engaging and memorable.
incident-responselearninglessons-learned+1
Day 1 Stream 2·47 min
Diana Kramer · Norberto García Marín
Shows how a serverless Google Cloud framework turns BigQuery log queries into scheduled security detections.
cloudthreat-detectionautomation+2
Day 1 Stream 2·47 min
Per Thorsheim
Shows how a one-page paper power-of-attorney form gave outsiders access to a Norwegian bank account.
identitytrustvulnerabilities+1
Day 1 Stream 2·30 min
Masha Arbisman
Shows how behavior-change techniques lowered credential capture and raised password manager adoption at a large organization.
phishingsocialdefensive-security+2
Day 1 Stream 2·29 min
Samuel J Greenfeld
Shows how OCR and camera capture can pull sensitive on-screen data out of an environment without digital traces.
attackmachine-learningprivacy+1
Day 1 Stream 2·30 min
Jeremy Brown
Compares major and privacy-focused email providers on jurisdiction, security features, legal resilience and price.
privacycloudtrust+2
Day 2 Stream 1·56 min
Chris Krebs
Explores disinformation, software supply chain risk, and policy levers for better security, from a former federal cyber official's view.
interviewdiscussionsupply+2
Day 2 Stream 1·35 min
Chen Cao · Daniel Stinson
Explains how a cloud-native, serverless SIEM on Google Cloud ingests logs, runs detections, and automates alert handling.
threat-detectionsecurity-operationscloud+3
Day 2 Stream 1·49 min
Luis Quispe Gonzales
Walks through reentrancy, integer overflow and on-chain data exposure in Ethereum DApps, with a live demo of each bug.
smart-contractsvulnerabilitiesexploit+1