Agenda

The agenda is also available at pretalx.com/bsides-munich-2024/schedule/.

Workshops

2024-11-09

Lothstraße 64, 80335 München

Hochschule München

R0.007

09:00 - 18:00
IoT Device Security
Daniel Schwendner & Aled Jackson

R1.006

09:00 - 13:00
Securing Machine Learning: Identifying and Mitigating Emerging Threats
Michael Helwig & Benjamin Altmiks
14:00 - 18:00
Introduction to Velociraptor
Christian Kollee

R1.008

09:00 - 13:00
Zeek and Destroy with Python and Machine Learning Workshop
David Szili
14:00 - 18:00
How to Hack your Web Application
Janosch Braukmann

R1.007

09:00 - 13:00
Gamified Cyber Incident Simulation
Klaus-E. Klingner

Talks

2024-11-11

Arabellastraße 6, 81925 München

The Westin Grand Munich

Room: München

08:00 - 09:00
Registration
09:00 - 09:10
Welcome Note
09:10 - 09:40
Opening Keynote
Desiree Sacher-Boldewin - [recording]
09:40 - 10:00
Break
10:00 - 10:30
Real-Time Threat Intelligence with ML Feedback Loops
Tomer Doitshman - [recording] - [slides]
10:30 - 11:00
Demystifying the First Few Minutes After Compromising a Container
Stuart McMurray - [recording] - [slides]
11:00 - 11:30
Coffee Break
11:30 - 12:00
EDR Analysis: An Introduction to Reversing Sophisticated Detection
Daniel Feichter
12:00 - 12:30
Ground Control to Major Threat - Hacking the Space Link Extension Protocol
Andrzej Olchawa - [recording]
12:30 - 13:00
A Security Champion's Journey - How to Make Things a Bit More Secure than Yesterday Every Day
Lisi Hocke - [recording] - [slides]
13:00 - 14:00
Lunch Break
14:00 - 14:30
Some Thoughts on Penetration Test Reports
Hans-Martin Muench - [recording]
14:30 - 15:00
Demystifying Cloud Infrastructure Attacks
Alexander - [recording]
15:00 - 15:30
Coffee Break
15:30 - 16:00
Let's Get Physical: Stories From Behind Your Company's Gate
Moritz Thomas & Firat Acar - [recording] - [slides]
16:00 - 16:30
Becoming the Evil Maid - Hacking Android Disk Encryption for Fun and Profit
David Gstir - [recording] - [slides]
16:30 - 16:40
Break
16:40 - 17:10
Help, My Application Is Vulnerable, but How Bad Is It? - Practical Vulnerability Analysis for Development Teams
Michael Helwig & Alvaro Martinez - [recording]
17:20 - 17:50
Closing Keynote - Empowering Pentesters: Strategies for Team Motivation, Purpose and Success
Bettina Haas - [recording]
17:50 - 18:00
BSides Closing

Room: Garmisch

08:00 - 10:00
Closed
10:00 - 10:30
Leaking Kakao: How I found a 1-Click Exploit in Korea's Biggest Chat App
Dawin Schmidt - [recording] - [slides]
10:30 - 11:00
/proc for Security Analysts: Unveiling Hidden Threats and Forensic Treasures
Stephan Berger & Asger Strunk - [recording]
11:00 - 11:30
Coffee Break
11:30 - 12:00
Building and Leading Advanced Red Teams
Bjoern Trappe - [recording] - [slides]
12:00 - 12:30
From Boot to Root: Identifying and Mitigating Security Issues in Bootloaders
Richard Weinberger - [recording] - [slides]
12:30 - 13:00
Mystical Vulnerabilities: Exploring the Oddities in Cybersecurity
Massimo Morello - [recording] - [slides]
13:00 - 14:00
Lunch Break
14:00 - 14:30
Kobold Letters and Other Mischief - How Emails Can Deceive You
Konstantin Weddige - [recording] - [slides]
14:30 - 15:00
Reverse Engineering and Control Flow Analysis with Intel Processor Trace
Hagen Paul Pfeifer - [recording] - [slides]
15:00 - 15:30
Coffee Break
15:30 - 16:00
Beyond Manual: Enhancing and Scaling Security with Automation
Christian Bauer - [recording] - [slides]
16:00 - 16:30
NIS2 and CRA: From Legislation to Execution
Jennifer Janesko & Sneha Rajguru - [slides]
16:30 - 16:40
Break
16:40 - 17:10
z/OS for GenZ - Hack the Mainframe
Jonathan Prince - [recording] - [slides]