Proving Ground·23 min
Describes Azazel, a system that uses a cyber-scapegoat gateway to delay attackers tactically.
defensive-securityattacknetwork+1
Proving Ground BSidesLV 2025
Las Vegas, USA · August 2025 · 19 talks
Proving Ground talks from BSides Las Vegas 2025.
1–19 of 19 talks
Proving Ground·21 min
Mea Clift · Ashley Cihak
Explains how volunteering at a community computer lab builds hands-on security skills and supports career growth.
learningopen-sourcelinux+1
Proving Ground·19 min
Raviteja
Shows how cheap cloud credits and Kubernetes were used to scan VS Code extensions for leaked credentials.
kubernetesopen-sourcevulnerabilities+2
Proving Ground·27 min
Oudy Even Haim
Shows how LLM-based agents can reconstruct attack timelines and rank SOC alerts by business impact.
aisecurity-operationsincident-response+2
Proving Ground·24 min
Melanie Gonzalez
Shows how journalists, activists and other vulnerable people can threat model their devices, data and communities.
privacythreatrisk+2
Proving Ground·24 min
Jimmy Shah · Matthew Brown
Shows how admission policies and runtime enforcement can stop a Kubernetes container compromise before an attacker gains a foothold.
kubernetescontainerlinux+2
Proving Ground·26 min
Anushka Khare
Shows how AI-based anomaly detection and post-quantum cryptography can counter harvest-now, decrypt-later data theft.
aimachine-learningthreat-detection+1
Proving Ground·20 min
Moshe Bernstein
Shows how scanning Google-owned container images in Artifact Registry exposed many vulnerabilities and leaked secrets.
cloudvulnerabilitiesvulnerability-research+2
Proving Ground·23 min
Ben Kofman · Ali Kabeel
Walks through four ways attackers can exploit SaaS data platforms, from access control flaws to abusing serverless scaling.
cloudattackvulnerabilities+2
Proving Ground·26 min
Rafael Ayala
Uses grocery shopping analogies to explain third-party vendor risk, criticality, inherent and residual risk for business decisions.
risksupplymanagement+2
Proving Ground·27 min
Megg Sage
Explains how malicious packages reach developer machines and why scanners and SCA tools alone cannot stop them.
supplychainopen-source+2
Proving Ground·26 min
Jun Miura
Shows how a quantized local LLM with retrieval and agents drafts Sigma detection rules offline on a CPU.
threat-detectionaimachine-learning+2
Proving Ground·28 min
Mia Kralowetz
Explains how security teams can move from compliance-heavy gatekeeping to becoming trusted partners in product development.
managementriskteam+2
Proving Ground·25 min
Navan Chowan
Shows how to modify the iOS YouTube app to hide Shorts, using sideloading and runtime hooks instead of a jailbreak.
reverse-engineeringmobiletool+2
Proving Ground·27 min
Rain Baker
Shows how Sigma's platform-neutral rule format lets defenders write detections once and translate them to many SIEMs and EDRs.
threat-detectiondetectionhunting+2
Proving Ground·24 min
Examines how ATMs can be penetrated, with the theft of their cash as the central goal.
deviceattackembedded+1
Proving Ground·24 min
Ryan Mast
Shows how a Bluetooth blender's protocol was reverse engineered to build custom blend profiles without the vendor app.
reverse-engineeringiotdevice+2
Proving Ground·26 min
Hiroki Matsukuma
Shows how a class-instantiation weakness can bypass PHP __wakeup() guards inside deserialization gadget chains.
appsecwebvulnerabilities+2
Proving Ground·23 min
Uday Bhaskar Seelamantula
Shows how AI features in desktop applications widen old attack surfaces, with prompt injection and file-format fuzzing demos.
aiappsecapplication+3