Alexandra Ulsh

Talks

I’ve given a few talks over the past couple of years, mostly around information security.

How to launch and run a successful bug bounty program

O'Reilly Security Conference New York 2017
https://www.crunchbase.com/event/o-reilly-security-conference-2017-20171030

November 1, 2017 - Launching a bug bounty program is hard. Running and maintaining a successful bug bounty program is even harder. Using real-world stories of both failure and success, I describe how I used tools, processes, automation, and empathy to decrease response time by 90%, reduce noise, and improve average report quality for Mapbox’s bug bounty program.

While O’Reilly canceled all future conferences after COVID-19, this presentation is still available in their online learning platform. I have the rights to upload my presentation to Youtube and display it on my website.

Device security

https://github.com/alulsh/device-security
https://www.alexandraulsh.com/device-security/
0 0 - Created on Aug 12, 2017 - Last updated on Jan 28, 2021

Device security training at Georgetown Law

August 12, 2017 - A short presentation on digital device security I gave for DC Legal Hackers’ Digital Security Training workshop at Georgetown Law School’s Institute for Technology Law & Policy. This workshop won a 2017 Le Hackie award as one of the Top 10 Legal Hacks of the Year.

Intro to Security for Developers

https://github.com/alulsh/intro-to-security-for-developers
https://www.alexandraulsh.com/intro-to-security-for-developers/slides/#/
29 4 - Created on Sep 29, 2016 - Last updated on Feb 14, 2021

Two hour long interactive workshop with Node.js code samples for full stack developers. Topics include secure use of GitHub and npm, HTTPS, cross site scripting (XSS), designing authentication systems, information disclosure, protecting availability, and security HTTP headers. This workshops distills what I learned after my first year as an Information Security Engineer at Mapbox, primarily working in Node.js.

Intro to Git + Build Your Own Website with GitHub Pages and Cloud9

Intro to Git + Build Your Own Website with GitHub Pages and Cloud9

Hour long interactive workshop that teaches attendees git, GitHub, and creating your personal website using GitHub Pages and Cloud9 IDE. I chose Cloud9 IDE so that any attendee regardless of device (e.g., old Windows laptop, Chromebook, tablet, library computer, etc.) could learn git, GitHub, and GitHub Pages. AWS acquired Cloud9 in July 2016, so this service now requires an AWS account and is no longer free.