Security BSides Springfield, 2017 (Drury University, Springfield, MO)- Talk 1.1 - Ernest "Cozy Panda" Wong (@ArmyCyberInst), West Point, "Learning How to Innovate '1n51d3-th3-b0x': Cyber Defense and Deterrence for the 21st Century.  

Download slides & full video at https://drive.google.com/open?id=0BxWhKP-qMw2kTFptSy1SeXF6VmM

video https://www.youtube.com/watch?v=Ld0BmvQ6Qww

Music featured end and begining "Over your cities grass will grow" by Ötone (Pablo Diserens), label YGAM https://soundcloud.com/ygam Used with permission.

Learn more about the artists and download the songs for free at
https://soundcloud.com/ygam/sets/otone-past-structures-present-matter-ep-ygm003-1 or at https://ygam.bandcamp.com/album/past-structures-present-matter

There is a video featured in the talk used with permission by the presenter.  All other audio is from the conference or the VOC team.  

Official Links:
@BSidesSpfd http://www.securitybsides.com/w/page/116970567/BSidesSpfd

VOC angels:
@ablythe https://twitter.com/ablythe
@cherokeejb_ https://twitter.com/cherokeejb_
Follow https://cherokeejb.blogspot.com/ for more video and audio from Springfield, as well as upcoming dfir, security operations, and forensics posts.

other volunteers included (thanks!)
    Beth Young
    Shannon McMurtrey 
    Lorne Hazlewood
    Steve McIntosh 
    Matt Stephenson
    Ryan Halstead 

Sponsors (also, a big thanks!)
with special thanks to https://augustalocksports.org/
* @pickaugusta
*Jack Henry & Associates, Inc.
* Drury University
* Revolutionary Seurity
* Forcepoint by Raytheon
* O'Reilly Media 
*Splunk
*Motta Network Experts, Inc.
*No Starch Press
*IBM

Other presenters:
@ablythe
@amaughan
@c2thewinkler
@securithid
@sysopfb
@motta_mike http://mnex.biz
@westongeorge
@sysopfb
   
 -

From the presenter:
Since our Republic’s founding, Americans have demonstrated a speculative knack and considerable optimism that have translated into innovative solutions for grappling with tough problems. From the first American colonists who made do with limited resources to today’s NASA astronauts who boldly explore space with minimal supplies in order to break free of gravity, Americans have a proud history of discovering new and better ways for getting the job done. Today innovation has become a buzzword in the US Army, and it is helping to shape the vision for the “Army of 2025 and Beyond” as an agile organization able to adapt and prevail in this complex world. But does the US Army have the capabilities needed to protect vital national interests in cyber and to succeed in the Multi-Domain Battle? Does the US Army know how to foster innovations that can keep pace with disruptive cyberattacks so that it is able to triumph against sophisticated peer enemy threats in the not-too-distant future? The rapid growth of the Internet in our globally connected world has meant that the tools within the cyber domain are constantly changing. In such a fluid environment, does America still have the capacity to gain the strategic advantage necessary to effectively out-hack those who attack us in the cyber domain? To make matters worse, there are those who believe the US Army is such an unwieldy bureaucracy that it can’t adapt to win tomorrow’s wars, particularly in places where it lacks expertise, such as space, cyberspace, and other contested areas including the information environment and the cognitive dimension of warfare. This presentation provides a simple framework for analyzing different types of innovation, and in doing so, asks us to think inside-the-box to promote better ways the US Army can defend and deter against attacks within cyberspace.  By analyzing what innovation really means and by highlighting the differences between four distinct types of innovation (disruptive, breakthrough, sustaining, and incr...

link & video cited in the talk:
https://www.cnet.com/news/cyberwarfare-security-west-point-military-nsa-digital-hacking/
https://www.youtube.com/watch?v=9zGeBbGFmgo

Past Structures, Present Matter

Over your cities grass will grow

BSides Springfield 2017 - Talk 1.1 - Ernest Wong, US Army, Leadership, Innovation, Cyber Defense

Security BSides Springfield, 2017 (Drury University, Springfield, MO)- Talk 1.2 - Aaron Blythe - Introduction to Shodan - updated version! Link to slides, download video and podcast versions of this and all BSides Springfield talks: https://drive.google.com/open?id=0BxW...  

Full video of this talk is https://www.youtube.com/watch?v=zSAZeAgWMYQ, or can be downloaded above.

Music featured at the end and begining "Over your cities grass will grow" by Ötone (Pablo Diserens), from the label YGAM @ygam Used with permission from YGAM and the artist. Learn more about the artists and download the songs for free at soundcloud.com/ygam/sets/otone-past-structures-present-matter-ep-ygm003-1 or at https://ygam.bandcamp.com/album/past-structures-present-matter

All other audio is from the conference or the VOC team. Official Links: @BSidesSpfd http://www.securitybsides.com/w/page/116970567/BSidesSpfd 

VOC angels: @ablythe twitter.com/ablythe @cherokeejb_ twitter.com/cherokeejb_ 

Follow https://cherokeejb.blogspot.com/ for more video and audio from Springfield, as well as upcoming dfir, security operations, and forensics posts. 

other volunteers included (thanks!) 
Beth Young 
Shannon McMurtrey
Lorne Hazlewood 
Steve McIntosh 
Matt Stephenson 
Ryan Halstead 

Sponsors (also, a big thanks!) 
with special thanks to augustalocksports.org/ * @pickaugusta 
*Jack Henry & Associates, Inc. 
* Drury University 
* Revolutionary Seurity 
* Forcepoint by Raytheon 
* O'Reilly Media 
*Splunk 
*Motta Network Experts, Inc. 
*No Starch Press 
*IBM 

Other presenters: 
@armycyberinstitute
@amaughan 
@c2thewinkler 
@securithid 
@sysopfb 
@motta_mike mnex.biz 
@westongeorge 
@sysopfb - 


From the presenter: 

 I imagine it goes without saying that the internet is an insecure place. With tens of billions of connected devices projected in the next 5 years, this will only become more insecure. Shodan is a powerful
search engine tool that can be used to aid you in making sure that you are not exposing any of your IoT devises (or even web servers or services for that matter) to the open internet. Aaron will walk through what Shodan is, how to use Shodan, ethics of using Shodan, and many other related topics.

Over  Your Cities Grass Will Grow

BSides Springfield - Talk 1.2 - Aaron Blythe - Introduction to Shodan - 7/22/2017 [FREE DOWNLOAD]

Security BSides Springfield, 2017 (Drury University, Springfield, MO)- Jason Reaves -  Malware C2 Over x509 - - Link to slides, download video and podcast versions of this and all BSides Springfield talks: drive.google.com/open?id=0BxW... If the slides for this talk are not there, they will be there very soon, please check back.

Full video of this talk is can be downloaded at https://drive.google.com/open?id=1w27_GGwy8NTOwjOZW1vNS94lxGkJiJZc HD or a small-file version, https://drive.google.com/open?id=1t671Tl4IvRkpxKSe0b8Z9MWvReyM9Pin,  and you can stream it in HD on Youtube at https://www.youtube.com/watch?v=eD5Arky7HnA

Music featured at the end and begining "Over your cities grass will grow" by Ötone (Pablo Diserens), from the label YGAM @ygam Used with permission from YGAM and the artist. Learn more about the artists and download the songs for free at soundcloud.com/ygam/sets/otone-past-structures-present-matter-ep-ygm003-1 or at ygam.bandcamp.com/album/past-struc…resent-matter-ep. 

All other audio is from the conference or the VOC team. Official Links: @BSidesSpfd www.securitybsides.com/w/page/116970567/BSidesSpfd

VOC angels: @ablythe twitter.com/ablythe @cherokeejb_ twitter.com/cherokeejb_

Follow cherokeejb.blogspot.com/ for more video and audio from Springfield, as well as upcoming dfir, security operations, and forensics posts.

other volunteers included (thanks!)
Beth Young
Shannon McMurtrey
Lorne Hazlewood
Steve McIntosh
Matt Stephenson
Ryan Halstead

Sponsors (also, a big thanks!)
with special thanks to augustalocksports.org/ * @pickaugusta
*Jack Henry & Associates, Inc.
* Drury University
* Revolutionary Seurity
* Forcepoint by Raytheon
* O'Reilly Media
*Splunk
*Motta Network Experts, Inc.
*No Starch Press
*IBM

Other presenters:
@armycyberinstitute
@amaughan
@c2thewinkler
@securithid
@sysopfb
@motta_mike mnex.biz
@westongeorge
@sysopfb -

From the presenter:

Malicious actors in the world are using more ingenuity than ever to for both data infiltration and exfiltration purposes, AKA command and control communications. While lots of attention is given to these techniques they are commonly done so after they’ve been used in an incident, making this area of cyber security very retroactive in its defensive posture. The aim in presenting this material is to demonstrate that we can take some lessons from the other areas of cyber security research, namely exploitation, and look at potential use cases in how malware authors could utilize technologies outside of their intended purposes to not only accomplish their goals but also end up bypassing common security measures in the process. Doing this sort of research can lead to more advances in defensive security postures by spurring discussions in the community on how a technique either does or doesn’t bypass security measures.

Jason Reaves -  Malware C2 Over x509 - talk from Bsides Springfield - 1.9 - 2017

Security BSides Springfield, 2017 (Drury University, Springfield, MO)- Talk 1.8 Bsides Sgf - Weston George - Don't be a Hammer. Learning more tools with VMs and Vulnhub 22 - Link to slides, download video and podcast versions of this and all BSides Springfield talks: drive.google.com/open?id=0BxW... This talk was mostly a live demonstration of metasploit and vulnhub

Full video of this talk is at https://youtu.be/1FCW7eOAJvY or can be downloaded above in HD or a small-file version.

Music featured at the end and begining "Over your cities grass will grow" by Ötone (Pablo Diserens), from the label YGAM @ygam Used with permission from YGAM and the artist. Learn more about the artists and download the songs for free at soundcloud.com/ygam/sets/otone-past-structures-present-matter-ep-ygm003-1 or at https://ygam.bandcamp.com/album/past-structures-present-matter. 

All other audio is from the conference or the VOC team. Official Links: @BSidesSpfd www.securitybsides.com/w/page/116970567/BSidesSpfd

VOC angels: @ablythe twitter.com/ablythe @cherokeejb_ twitter.com/cherokeejb_

Follow cherokeejb.blogspot.com/ for more video and audio from Springfield, as well as upcoming dfir, security operations, and forensics posts.

other volunteers included (thanks!)
Beth Young
Shannon McMurtrey
Lorne Hazlewood
Steve McIntosh
Matt Stephenson
Ryan Halstead

Sponsors (also, a big thanks!)
with special thanks to augustalocksports.org/ * @pickaugusta
*Jack Henry & Associates, Inc.
* Drury University
* Revolutionary Seurity
* Forcepoint by Raytheon
* O'Reilly Media
*Splunk
*Motta Network Experts, Inc.
*No Starch Press
*IBM

Other presenters:
@armycyberinstitute
@amaughan
@c2thewinkler
@securithid
@sysopfb
@motta_mike mnex.biz
@westongeorge
@sysopfb -

From the presenter:

A lot of people get sucked into using just a couple of tools for vulnerability research. When I first started out, I focused solely on the Metasploit Framework. While that is a great utility, there is so much more out there. In this talk I hope to show that through the use of sites like vulnhub.com, and the walkthroughs they provide, you can branch out into other tools that will greatly expand your skillset, and change the way you approach CTF and vuln assessment.

https://ygam.bandcamp.com/album/past-structures-present-matter

BSides Spfd - 1.8  Weston George - Don't be a Hammer. Learning more tools with VMs and Vulnhub

Security BSides Springfield, 2017 (Drury University, Springfield, MO)- Talk 1.6 ATT&CK Yourself: Using Discrete Adversary TTPs to Make Your Network and Systems More Defendable by Jason Holcomb.  Link to slides, download video and podcast versions of this and all BSides Springfield talks: drive.google.com/open?id=0BxW... Slides for this talk are not available

Full video of this talk can be downloaded from https://drive.google.com/open?id=1w27_GGwy8NTOwjOZW1vNS94lxGkJiJZc HD and much smaller at https://drive.google.com/open?id=1t671Tl4IvRkpxKSe0b8Z9MWvReyM9Pin for streaming in HD at Youtube at https://www.youtube.com/watch?v=kmX8VvHrsKs

Music featured at the end and begining "Over your cities grass will grow" by Ötone (Pablo Diserens), from the label YGAM @ygam Used with permission from YGAM and the artist. Learn more about the artists and download the songs for free at soundcloud.com/ygam/sets/otone-past-structures-present-matter-ep-ygm003-1 or at https://ygam.bandcamp.com/album/past-structures-present-matter. 

All other audio is from the conference or the VOC team. Official Links: @BSidesSpfd www.securitybsides.com/w/page/116970567/BSidesSpfd

VOC angels: @ablythe twitter.com/ablythe @cherokeejb_ twitter.com/cherokeejb_

Follow cherokeejb.blogspot.com/ for more video and audio from Springfield, as well as upcoming dfir, security operations, and forensics posts.

other volunteers included (thanks!)
Beth Young
Shannon McMurtrey
Lorne Hazlewood
Steve McIntosh
Matt Stephenson
Ryan Halstead

Sponsors (also, a big thanks!)
with special thanks to augustalocksports.org/ * @pickaugusta
*Jack Henry & Associates, Inc.
* Drury University
* Revolutionary Seurity
* Forcepoint by Raytheon
* O'Reilly Media
*Splunk
*Motta Network Experts, Inc.
*No Starch Press
*IBM

Other presenters:
@armycyberinstitute
@amaughan
@c2thewinkler
@securithid
@sysopfb
@motta_mike mnex.biz
@westongeorge
@sysopfb -

From the presenter:

Penetration testing and vulnerability assessment have their place but could there be a security testing technique that provides greater value? In this presentation, we will introduce and explore MITRE’s ATT&CK framework in the context of building discrete test cases around specific attacker Tactics, Techniques, and Procedures (TTP). We will then look at how this type of testing can provide valuable insight into weaknesses in your current defensive posture from monitoring and detection to blocking and response.

BSides Springfield - 1.6 Jason Holcomb - ATT&CK Yourself: Using Discrete Adversary TTPs - Systems

Security BSides Springfield, 2017 (Drury University, Springfield, MO)- talk 1.3 - Anthony Maughan - "Using Revello to create a Security Lab in the cloud" - Link to slides, download video and podcast versions of this and all BSides Springfield talks: drive.google.com/open?id=0BxW ... Slides for this talk were not available.

Full video of this talk is can be downloaded at [link coming soon] or a small-file version, [link coming soon], and you can stream it in HD on Youtube at [link coming soon]

Music featured at the end and begining "Over your cities grass will grow" by Ötone (Pablo Diserens), from the label YGAM @ygam Used with permission from YGAM and the artist. Learn more about the artists and download the songs for free at soundcloud.com/ygam/sets/otone-past-structures-present-matter-ep-ygm003-1 or at https://ygam.bandcamp.com/album/past-structures-present-matter

All other audio is from the conference or the VOC team. Official Links: @BSidesSpfd www.securitybsides.com/w/page/116970567/BSidesSpfd

VOC angels: @ablythe twitter.com/ablythe @cherokeejb_ twitter.com/cherokeejb_

Follow cherokeejb.blogspot.com/ for more video and audio from Springfield, as well as upcoming dfir, security operations, and forensics posts.

other volunteers included (thanks!)
Beth Young
Shannon McMurtrey
Lorne Hazlewood
Steve McIntosh
Matt Stephenson
Ryan Halstead

Sponsors (also, a big thanks!)
with special thanks to augustalocksports.org/ * @pickaugusta
*Jack Henry & Associates, Inc.
* Drury University
* Revolutionary Seurity
* Forcepoint by Raytheon
* O'Reilly Media
*Splunk
*Motta Network Experts, Inc.
*No Starch Press
*IBM

Other presenters:
@armycyberinstitute
@amaughan
@c2thewinkler
@securithid
@sysopfb
@motta_mike mnex.biz
@westongeorge
@sysopfb -

From Anthony:

Do you ever want to try the latest techniques or develop new technical skills? Do you find it expensive or hard to find an environment for yourself or your team to practice? Using the cloud is the perfect place to experiment and learn. Come see how one cloud provider Ravello can get you quickly into a new security lab. Go home with a new tool in your tool belt to learn security.

Anthony Maughan - Using Revello to create a Security Lab in the cloud - from BSides Springfield 2017

An community-based account to compile and share audio podcast versions of talks from Security BSides events around the world.  The talks are events are often related to Information Security (infosec), IT, Forensics, Digital Forensics & Incident Reponse(DFIR), Capture the Flag (CTF), and other technology-related topics.

Each BSides is a community-driven framework for building events for and by information security community members.  

Message us if you don't see a talk here, or you have a repost to share.

http://www.securitybsides.com

Security BSides

Popular tracks