Breaking Ground·49 min
Phil Young · Grant Dobbe · Daemon Tamer
Panelists explain how the Proving Ground mentorship track at BSides Las Vegas helps first-time speakers build talks and careers.
panellearninglessons-learned+1
August 2024 · Las Vegas, USA
BSides Las Vegas
9 sessions · 109 talks
Sessions at this event
Breaking Ground
15 talks
Breaking Ground talks from BSides Las Vegas 2024.
Common Ground
13 talks
Common Ground talks from BSides Las Vegas 2024.
Ground Floor
16 talks
Ground Floor talks from BSides Las Vegas 2024.
Ground Truth
14 talks
Ground Truth talks from BSides Las Vegas 2024.
Hire Ground
8 talks
Hire Ground talks from BSides Las Vegas 2024.
I Am The Cavalry
11 talks
I Am The Cavalry talks from BSides Las Vegas 2024.
Keynotes
3 talks
Keynotes talks from BSides Las Vegas 2024.
PasswordsCon
13 talks
PasswordsCon talks from BSides Las Vegas 2024.
Proving Ground
16 talks
Proving Ground talks from BSides Las Vegas 2024.
All BSidesLV 2024 talks
Filters+
1–24 of 106 talks / 109
Breaking Ground·37 min
Jay Chen · Ravid Mazon
Shows how large language models can automate finding broken object level authorization flaws in APIs.
vulnerability-researchaiweb+2
Breaking Ground·16 min
Nick Frost
Walks through three ways to steal Chrome cookies on macOS and the Santa and osquery controls that block or detect them.
attackdefensive-securitydetection+2
Breaking Ground·17 min
Demonstrates how misconfigured OIDC authentication in cloud environments can be abused to gain access.
cloudidentityattack+1
Breaking Ground·20 min
Amelia Weeding · Dave Bailey
Shows how a cheap Tuya-based weather station leaks credentials in firmware and accepts forged commands over its network.
iotreverse-engineeringembedded+2
Breaking Ground·29 min
Dominic Zanardi · Matthew Sullivan
Shows how Instacart automates just-in-time access approvals with an LLM that scores requests against existing role holders.
identityaiautomation+2
Breaking Ground·38 min
Fabricio Bortoluzzi
Presents a Terraform-based cloud telescope that captures unsolicited internet traffic and profiles Mirai infection patterns.
cloudiotmalware-analysis+2
Breaking Ground·40 min
Patrick Kiley
Introduces an open-source adapter that connects to serial, JTAG, SPI, I2C and SWD targets at mixed logic levels.
hardwareembeddedopen-source+3
Breaking Ground·20 min
Elysee Franchuk · Mohnish Dhage
Shows how raw Ethernet frames can carry covert remote shell traffic that slips past common layer 3 and higher detections.
networkattackdetection+1
Breaking Ground·42 min
Brian Reilly
Maps ColdFusion attack surface through recent vulnerabilities and offers ways to reduce exposure in legacy deployments.
appsecvulnerabilitiesweb+2
Breaking Ground·17 min
Liv Matan
Explains how shared cloud parent domains enable session fixation, using a one-click AWS Airflow account takeover as the case study.
cloudwebvulnerability-research+2
Breaking Ground·36 min
Oreen Livni Shein · Elad Pticha
Shows how a compromised pod can poison Argo CD's Redis cache to deploy malicious workloads and take over a Kubernetes cluster.
kubernetesvulnerability-researchdevops+2
Breaking Ground·26 min
Chris Formosa · crudd
Traces a proxy botnet back from the dead and the criminal proxy service it was feeding, plus a failed takedown.
malware-analysisintelligencenetwork+2
Breaking Ground·44 min
Allyn Stott
Shows how to build detection and response metrics that answer real questions, drive progress, and avoid gaming.
threat-detectionincident-responsesecurity-operations+2
Breaking Ground·42 min
Kaichi Sameshima · Atsushi Kanda · Ryo Minakawa
Tracks a pro-Russian hacktivist group's DDoS botnet, its command-and-control protocol, and the infrastructure it keeps rotating.
intelligencethreatinfrastructure+2
Common Ground·34 min
Mike Larkin
Shows how third-party dependencies make applications open files, load code and make network calls the developers never intended.
applicationsupplymonitoring+2
Common Ground·45 min
Yotam Perkal
Shows how SBOM, CSAF and VEX data can automate vulnerability triage and shift prioritization toward real risk.
vulnerabilitiesriskautomation+2
Common Ground·43 min
Laura Johnson
Shows how targets of online harassment can document abuse, seek protective orders, and find support.
socialprivacylessons-learned+1
Common Ground·44 min
Kirill Efimov · Eitan Worcel
Shows why AI-generated vulnerability fixes often break applications, and how a hybrid approach can work better.
aiappsecvulnerabilities+2
Common Ground·19 min
Dade
Explores how beginners and experts alike fall into cognitive biases, and offers a divergent thinking exercise to counter them.
learningteamlessons-learned+2
Common Ground·42 min
Caleb Davis · Kyle Shockley
Traces an engineer's path from circuit-board mistakes to hardware hacking, touching on fault injection and power analysis.
hardwarelessons-learnedembedded+2
Common Ground·45 min
Grey Fox
Walks through software defined radio basics, from FM listening and ADS-B tracking to replaying signals and disrupting Wi-Fi.
deviceiotnetwork+2
Common Ground·48 min
Harriet Farlow
Shows how adversarial machine learning can weaken facial recognition, framed as a casino heist.
aimachine-learningattack+2
Common Ground·17 min
Examines how a single port can be abused in Google Cloud Shell, the browser-based environment for GCP.
cloudattackvulnerabilities+1