BSidesLV has ended

Create Your Own Event

BSidesLV

Thank you for joining us for our 5th Anniversary celebration! We certainly hope you enjoy the conference. Here’s to Education, Collaboration, and Community!

Remember, we don’t take ourselves too seriously and you shouldn’t, either! To quote the old motto of another collaborative community, "We trick into learning with a laugh".

We wish you both laughter and learning - and lots of both!

-= Team BSidesLV

09:00

Hacking the Hustle Hands-On, Infosec Resume and Career Strategies Tuscany SuitesEve Adams Wireless Essentials Tuscany SuitesZero Chaos • DaKahuna • Dragorn • Russell Handorf • Rick Mellendick

10:00

Opening Keynote -- Beyond Good and Evil: Towards Effective Security Tuscany SuitesAdam Shostack

11:00

SHA-1 backdooring and exploitation Tuscany SuitesJean-Philippe Aumasson #edsec: Hacking for Education Tuscany SuitesJessy Irwin The Power Law of Information Tuscany SuitesMichael Roytman USB write blocking with USBProxy Tuscany SuitesDominic Spill Skull And Bones (And Warez) - Secret Societies of the Computer Underground (and why you should create one too) Tuscany SuitesDatabeast • Space Rogue

11:35

So, you want to be a pentester? Tuscany SuitesHeather Pilkington

11:45

Evading code emulation: Writing ridiculously obvious malware that bypasses AV Tuscany SuitesKyle Adams

11:50

Measuring the IQ of your Threat Intelligence feeds Tuscany SuitesKyle Maxwell • Alex Pinto

12:00

Secure your email – Secure your password Tuscany SuitesPer Thorsheim Allow myself to encrypt...myself! Tuscany SuitesEvan Davison Custodiet watches your packets! The Open Source MSSP Framework Tuscany SuitesBilly Boatright • Joshua Marpet

12:10

Securing Sensitive Data: A Strange Game Tuscany SuitesJeff Elliot

12:30

Is Pavlovian Password Management The Answer? Tuscany SuitesLance James Highlights of CMU’s Recent Work in Preventing Bad Passwords Tuscany SuitesSean Segreti • Blase Ur

14:00

DoCatsLikeLemon? – Advanced phrase attacks and analysis Tuscany SuitesMarco Preuss Password Hashing Competition: the Candidates Tuscany SuitesJean-Philippe Aumasson Brick in the Wall vs Hole in the Wall Tuscany SuitesCaroline D Hardin What reaction to packet loss reveals about a VPN Tuscany SuitesSergey Bratus • Anna Shubina Security Management Without the Suck Tuscany SuitesTim Krabec • Tony Turner Master Serial Killer Tuscany SuitesChris Sistrunk Strategies Without Frontiers Tuscany SuitesMeredith L. Patterson C.R.E.A.M. – The Art of Social Engineering Report Writing Tuscany SuitesAaron Crawford

14:30

Tradeoff cryptanalysis of password hashing schemes Tuscany SuitesAlex Biryukov • Johann Großschädl • Dmitry Khovratovich What Microsoft would like from the Password Hashing Competition Tuscany SuitesMarsh Ray • Greg Zaverucha

14:35

Cut the sh**: How to reign in your IDS. Tuscany SuitesTony Robinson/da_667

15:00

Using cryptanalysis to speed-up password cracking Tuscany SuitesChristian Rechberger Untwisting the Mersenne Twister: How I killed the PRNG Tuscany Suitesmoloch • Dan 'AltF4' Petro Vulnerability Assessments on SCADA: How i 'owned' the Power Grid. Tuscany SuitesFadli B. Sidek 501(c)(3) for (un)fun and (non)profit Tuscany SuitesJack Daniel

15:10

Geek Welfare -- Confessions of a Convention Swag Hoarder Tuscany SuitesRachel Keslensky

15:30

ClusterF*ck - Actionable Intelligence from Machine Learning Tuscany SuitesDavid Dorsey • Mike Sconzo

15:40

Password Security in the PCI DSS Tuscany SuitesJarred White How Forced Password Expiration Affects Password Choice Tuscany SuitesBruce Marshall

15:45

No InfoSec Staff? No Problem. Tuscany SuitesAnthony Czarnik

16:00

Anatomy of memory scraping, credit card stealing POS malware Tuscany SuitesAmol Sarwate Malware Analysis 101 - N00b to Ninja in 60 Minutes Tuscany Suitesgrecs Protecting Data – How Cultural-Political Heritage Shapes Security Approaches Tuscany SuitesMalte Pollmann

16:20

Can I Code Against an API to Learn a Product? Tuscany SuitesAdrienne Merrick-Tagore Know thy operator Tuscany SuitesMisty Blowers

16:50

Defense with 2FA Tuscany SuitesSteve Thomas Security for the People: End-User Authentication Security on the Internet Tuscany SuitesMark Stanislav

16:55

Bridging the Air Gap: Cross Domain Solutions Tuscany SuitesPatrick Orzechowski

17:00

Cluck Cluck: On Intel's Broken Promises Tuscany SuitesJacob Torrey Travel Hacking With The Telecom Informer Tuscany SuitesTProphet FAP Fully Automated Pwning Techniques for Automated Reversing Tuscany SuitesEdmond 'bigezy' Rogers

17:10

Improving security by avoiding traffic and still get what you want in data transfers Tuscany SuitesArt Conklin

17:30

Back Dooring the Digital Home Tuscany SuitesDavid Lister

18:00

I have the hashcat so I make the rules Tuscany SuitesYiannis Chrysanthou Authentication in the Cloud – Building Service Tuscany SuitesDan Cvrcek The Semantic Age - or - A Young Ontologist's Primer Tuscany Suites

18:40

Penetrate your OWA Tuscany SuitesNate Power How EFF is Making STARTTLS Resistant to Active Attacks Tuscany SuitesJacob Hoffman-Andrews • Yan Zhu

19:10

Surprise talk + advisory release Tuscany SuitesDominique Bongard

09:00

You Hack, We Capture: Attack Analysis with Honeypots Tuscany SuitesIoannis Koniaris Wireless Essentials Tuscany SuitesZero Chaos • DaKahuna • Dragorn • Russell Handorf • Rick Mellendick

10:00

All your SAP P@$$w0ЯdZ belong to us Tuscany SuitesDmitry Chastuhin • Alex Polyakov Proof of work as an additional factor of authentication Tuscany SuitesJason Nehrboss • Phillippe Paquet iOS URL Schemes: omg:// Tuscany SuitesGuillaume Ross A Better Way to Get Intelligent About Threats Tuscany SuitesAdam Vincent The untold story about ATM Malware Tuscany SuitesDaniel Regalado Introduction and Overview: I Am The Cavalry and Empowering Researchers Tuscany SuitesI Am The Cavalry Business lessons that made me a better Security Professional Tuscany SuitesTony Vargas

10:30

Target specific automated dictionary generation Tuscany SuitesMatt Marx The future of mobile authentication is here Tuscany SuitesSam Crowther

10:35

Oops, That Wasn't Suppossed To Happen: Bypassing Internet Explorer's Cross Site Scripting Filter Tuscany SuitesCarlos Munoz

11:00

Bring your own Risky Apps Tuscany SuitesDomingo Guerra • Michael Raggo Using Superpowers for Hardware Reverse Engineering Tuscany SuitesJoe Grand Problem Space Overview: I Am The Cavalry Tuscany SuitesI Am The Cavalry Reverse Engineering Mac Malware Tuscany SuitesSarah Edwards

11:10

What I've Learned As A Con-Man Tuscany SuitesMaster Chen Bitslice DES with LOP3.LUT Tuscany SuitesSteve Thomas Password hashing delegation: How to get clients work for you Tuscany SuitesThomas Pornin

11:45

Training with Raspberry Pi Tuscany SuitesNathaniel Davis

12:00

Invasive Roots of Anti-Cheat Software Tuscany SuitesAlissa Torres Why am I surrounded by friggin' idiots?!? (Because you hired them!) Tuscany SuitesStephen Heath Secret Pentesting Techniques Part Duex Tuscany SuitesDavid Kennedy Building Skills, Understanding and Influencing People Tuscany SuitesI Am The Cavalry

12:10

Net hashes: A review of many network protocols Tuscany SuitesRobert David Graham Throw the User ID Down the Well Tuscany SuitesDaniel Reich

12:20

Black Magic and Secrets: How Certificates Influence You! Tuscany SuitesRobert Lucero

14:00

Attacking Drupal Tuscany SuitesGreg Foss Vaccinating Android Tuscany SuitesMilan Gabor • Danijel Grah Demystiphying and Fingerprinting the 802.15.4/ZigBee PHY Tuscany SuitesSergey Bratus • Ira Ray Jenkins Energy-efficient bcrypt cracking Tuscany SuitesKatja Malvoni Password Generators & Extended Character Set Passwords Tuscany SuitesWilliam Gray • Stephen Lombardo Ripped from the Headlines What the news tells us about Information Security Incidents Tuscany SuitesKevin Thompson • Suzanne Widup RFID Hacking Tuscany SuitesJoshua Perrymon • Sean Satterlee

14:35

Hackers vs Auditors Tuscany SuitesDan Anderson

15:00

Insider Threat Kill Chain: Human Indicators of Compromise Tuscany SuitesKen Westin Security testing for Smart Metering Infrastructure Tuscany SuitesRobert Hawk • Steve Vandenberg Fuck These Guys: Practical Countersurveillance Tuscany SuitesLisa Lorenzin

15:10

The problem with the real world Tuscany SuitesMichal Špaček Encryption and Authentication: Passwords for all reasons Tuscany SuitesJeffrey Goldberg Third-Party Service Provider Diligence: Why are we doing it all wrong? Tuscany SuitesPatrice Coles

15:30

A Place to Hang Our Hats: Security Community and Culture Tuscany SuitesDomenic Rizzolo

15:45

Pwning the hapless or How to Make Your Security Program Not Suck Tuscany SuitesCasey Dunham • Emily Pience

15:50

Password Topology Histogram Wear-Leveling, a.k.a. PathWell Tuscany SuitesRick Redman Enhancing Password Based Key Derivation Techniques Tuscany SuitesStephen Lombardo • Nick Parker

16:00

The Savage Curtain Tuscany SuitesTushar Dalvi • Anthony Trummer Booze, Devil's Advocate, and Hugs: the Best Debates Panel You'll See at BSidesLV 2014 Tuscany SuitesMort • Josh Corman • David Kennedy • Zach Lanier • Jay Radcliffe Ask the EFF Tuscany SuitesKurt Opsahl • Nate Cardozo • Eva Galperin • Mark Jaycox • Yan Zhu

16:20

Teach a man to Phish... Tuscany SuitesVinny Lariza

16:55

The Lore shows the Way Tuscany SuitesEric Rand

17:00

Beam Me Up Scotty! – Passwords in the Enterprise Tuscany SuitesDimitri Fousekis Capturing Passwords into the Secure Desktop Tuscany SuitesMarcio Almeida de Macedo • Bruno Gonçalves de Oliveira We Hacked the Gibson! Now what? Tuscany SuitesSoldier of FORTRAN Pwning the Pawns with WiHawk Tuscany SuitesSanthosh Kumar • Anamika Singh The Only Way to Tell the Truth is in Fiction: The Dynamics of Life in the National Security State Tuscany SuitesRichard Thieme

18:00

Closing Keynote Tuscany SuitesIt\'s A S3kr37