BSides Newcastle 2023 Programme

BSides NCL 2023 30th September

Organizers Room

Battle Bots

Cyborg Implantation

Vendors

Track 1: Resting Breach Face

Track 2 Papa Don’t Breach

Track 3: Son Of A Breach

Workshops

CTF

Start Time

Finish Time

Track One: Resting Breach Face

Track Two: Papa Don't Breach

Workshops: Kentucky Fried Fishing

Registration, networking, faffing etc

8.30am 9.00am

9.15am

BsidesNCL Team Welcome, Intros, Sing-alonga-BSidesNCL (track one)

9.15am

9.45am

Keynote - Lee Morton aka D34thbutch3r - "They know more than you, they do it for the big companies!" - or do they? (track one)

9.45am

Track Three: Son of a Breach

10.15am

Jon Henry - Cyber Roots

10.20am

10.50am

Vivian Band - Tales of the Notorious BGP

10.50am

11.15am

Break - 30mins

11.15am

11.45am

Brian Whelton - Delivering the Fail: The Post Office IT Scandal

Talk 1 - Tom Blue - An introduction to assembly and reverse engineering Talk 2 - Akolade "Kay" Adelaja Shifting Smart By Building Up Your Security Champions

Lightning Speakers Workshop - James Bore

Talk 1 - Jymit Khondhu - Why Oh Why! The confusion with SOC and IR Talk 2 - Andrew Carr - Can an old(ish) dog learn new (cyber) tricks?

Michael Lamb - The 'Thinking' Analyst: Unlocking Core SOC Analysis Skills

Mark Goodwin - What Your Browser Can Teach You About Secure Design

Gerald Benischke - Precision Munitions for Denial of Service

Tom Wise - Risk Based Response with SOAR

Melina Phillips - Dude, check your privilege! - Privileged Account Management Solutions and how they could either become your bestie or totally ruin your day (remote)

Eliza-May Austin - Horror Stories: When it's good it's great, when it's bad it F*$^%$g Stinks

Jake Keast Russian Roulette: Hacktivism in the Middle East

Track Two: Papa Don't Breach

Track Three: Son of a Breach

11.50am

12.20pm

12.25pm

12.55pm

Katie McMillan - Don't be a Data Dummy

1.00pm

1.45pm

Lunch and Tinfoil hats - 45 mins

Start Time

Finish Time

Track One: Resting Breach Face

1.45pm

2.15pm

Scrannote - Jerry Gamblin - Open Source Vulnerability Intelligence: A Key to Proactive Defense (track one)

2.20pm

2.50pm

2.55pm

3.25pm

3.30pm

4.00pm

Break - 30 mins

4.00pm

4.40pm

BSidesNCL Alumni Panel: Rosie Anderson, Jerry Gamblin, Ian Thornton-Trump, Kimberley Hendry - The Mandela Effect - Cybermythbusting

4.40pm

4.45pm

Ben Docherty and Sam Humphries - Celebrating the life of Duncan McAlynn (track one)

4.45pm

5.15pm

Locknote: Rosie Anderson - Ideas Live Forever (track one)

5.15pm

5.30pm

BSidesNCL Team - Closing, awards, and fucking off to the pub (track one)

7.00pm

Onwards

You’re in Ben's hands now.

Lightning Workshop Speakers

Marcus Tenorio - Look at me! I'm the manager now: Becoming a Security Engineer Manager, common pitfalls, lessons and more

Maya Boeckh - "I don't know what I'm doing!" - A hitchhiker's guide to impostor syndrome

Lightning Speakers Workshop - James Bore

Workshops: Kentucky Fried Fishing Lightning Speakers Workshop Prep / Talking Honing

Mark Goodwin - Return of the Robots (Talk) Return of the Robots - Workshop

Return of the Robots - Workshop

Lightning Speakers Workshop - Feedback

keynotes

KEYNOTE LEE MORTON AKA D34THBUTCH3R "THEY KNOW MORE THAN YOU, THEY DO IT FOR THE BIG COMPANIES!" - OR DO THEY?

SCRANNOTE JERRY GAMBLIN OPEN SOURCE VULNERABILITY INTELLIGENCE: A KEY TO PROACTIVE DEFENSE (TRACK ONE)

LOCKNOTE ROSIE ANDERSON AKA LADYCYBERROSIE IDEAS LIVE FOREVER

9:15 LEE MORTON OPENING KEYNOTE

13:45 JERRY GAMBLIN SCRAN NOTE

16:45 ROSIE ANDERSON LOCKNOTE

track 1 Resting Breach face

CYBER ROOTS WITH ALL THE CYBER-THIS AND CYBER-THAT, WHAT DOES IT EVEN MEAN? LET’S DIVE DEEP INTO THE ORIGIN OF ‘CYBER’ TO UNDERSTAND THE ROOTS OF THE TERM WHILE LOOKING AT THE EARLY HISTORY OF CYBERNETICS. LET’S TRY TO UNDERSTAND HOW WE GOT HERE, IN A WORLD WHERE CYBER SECURITY PRACTITIONERS ARE IN A CONSTANT BATTLE TO PRESERVE THE INTEGRITY, AUTHENTICITY AND ACCESS TO INFORMATION AND SECURE OUR LIVES AND BUSINESS. WE START BY LOOKING AT THE SOURCE [NOT CODE] OF CYBER BY UNDERSTANDING CYBERNETICS. WE WILL DIVE INTO SOME OF THE WORKS OF NORBERT WIENER, GUY DEBORD, ALVIN TOFFLER AND WILLIAM GIBSON, AND EVEN LOOK AT SOME OF THE ORIGINAL ROOTS OF THE WORD ‘CYBER’ IN GREEK AND LATIN. INFORMATION IS THE CORE OF CYBERNETICS, AND IT IS MOVED THROUGH THE DYNAMIC FEEDBACK MEDIUMS OF OUR WORLD, GETTING PROCESSED AND CHANGED, AND MANIPULATED. HOW DO WE PRESERVE INFORMATION SO THAT IT ISN’T CORRUPTED AS IT FLOWS THROUGH MACHINES, ORGANISMS, AND SOCIETY? IF ALL INFORMATION CHANGES THROUGH PROCESSING, WHAT DOES CORRUPTION EVEN MEAN IN REGARD TO INFORMATION? HOW DO WE VALIDATE THAT A PROCESS IS EVEN TRUE? HOW DO WE PADDLE THROUGH THE STREAMS OF FEEDBACK AND NOISE OF OUR REALITY WITH AN UNSINKABLE SHIP? NOT MUCH HAS BEEN DONE TO BRIDGE TOGETHER CYBERNETICS AND CYBER SECURITY. WE WILL ALSO EXPLORE SOME OF THE CONTEMPORARY AUTHORS AND PHILOSOPHERS THAT TACKLE THE CYBER REALM OF PHILOSOPHY, INCLUDING THE RECENT PAPERS BY T. VINNAKOTA. WE WILL LOOK TO FORM SOME PLAUSIBLE ANALOGIES SO THAT WE CAN BRIDGE CYBERNETICS WITH CYBER SECURITY FOR PRACTICAL SOLUTIONS. THE GOAL OF THIS PRESENTATION IS TO BROADEN THE SCOPE OF CYBER SECURITY AND BRIDGE IT WITH CYBERNETICS IN ORDER TO UNDERSTAND HOW INFORMATION GOVERNS THE INDIVIDUAL AND THE MACHINE. WITH CYBERNETICS AND CYBER SECURITY MERGING, CAN WE FEEL A BIT MORE SECURE? OR CAN WE MAYBE JUST UNDERSTAND THAT SECURITY IS ONLY AN ILLUSION THAT IS PRESENTED TO OUR ADVERSARY IN ORDER TO MAKE THEM FEEL INSECURE!

9:45 - 10:15 JON HENRY CYBER ROOTS

TALES OF THE NOTORIOUS BGP IS THE IP ADDRESS YOU’RE TALKING TO REALLY A GENUINE INSTANCE OF THAT IP ADDRESS OR A MALICIOUS COUNTERFEIT? THE BORDER GATEWAY PROTOCOL (BGP) IS ONE OF THE MOST IMPORTANT PROTOCOLS KEEPING THE MODERN INTERNET MOVING, BUT IT STILL RELIES ON A HIGH DEGREE OF TRUST BETWEEN NETWORK OPERATORS. BGP HIJACKING HAS THE POTENTIAL TO SEND HUGE VOLUMES OF TRAFFIC TO AN INCORRECT NETWORK - ACCIDENTAL BGP ERRORS ARE OFTEN QUICKLY REVERTED, BUT INTENTIONAL HIJACKS CAN BE USED TO IMPERSONATE LEGITIMATE NETWORKS TO PERFORM MALICIOUS ACTIVITIES AT SCALE. IN THIS TALK WE’LL GO THROUGH A CRASH COURSE ON HOW BENIGN BGP ANNOUNCEMENTS WORK, THEN WE’LL LOOK AT HOW WE CAN USE OPEN SOURCE TOOLS TO EXAMINE UNUSUAL BGP ANNOUNCEMENTS AND EVALUATE THEIR SEVERITY. WE’LL ALSO GO THROUGH A CASE STUDY OF A ‘BGP HIJACK FACTORY’, WHICH WAS ONE OF THE FIRST NETWORK OPERATORS TO BE EFFECTIVELY BANNED FROM THE INTERNET DUE TO REPEATED MALICIOUS BGP ANNOUNCEMENTS.

10:20 - 10:50 VIVIAN BAND TALES OF THE NOTORIOUS BGP

DELIVERING THE FAIL: THE POST OFFICE IT SCANDAL COMPUTERS NEVER LIE, SO THERE IS NO REASON TO NOT BELIEVE THEIR TRANSACTIONAL AND LOG OUTPUT? LEGALLY THAT MAY WELL BE THE CASE. FOR NEARLY 25 YEARS, THE LARGEST MISCARRIAGE OF JUSTICE IN CIVIL AND CRIMINAL LEGAL HISTORY TOOK PLACE LARGELY UNNOTICED AS THE FIRST, AND THE OLDEST GOVERNMENT AGENCY, THE POST OFFICE, SOUGHT TO COVER UP THE NUMEROUS FAILINGS OF ITS IT SYSTEM, HORIZON. INSTEAD THEY CHOSE TO CENSURE, PROSECUTE, AND IN SOME CASES IMPRISON HARD WORKING INNOCENT PEOPLE, AND DEMANDED MANY THOUSANDS OF POUNDS FROM THOUSANDS OF OTHERS TO COVER LOSSES THAT HORIZON INCORRECTLY REPORTED WAS MISSING. LIVES HAVE BEEN DESTROYED, FAMILIES BROKEN UP, HOMES LOST AND PEOPLE’S LONG GAINED RESPECTED AND WELL EARNED REPUTATIONS DESTROYED. THE POST OFFICE HORIZON IT SCANDAL IS A STORY YOU WON’T BE ABLE TO BELIEVE WAS POSSIBLE OR EVEN HAPPENED, BUT IT WAS, AND IT DID, AND ALL BECAUSE ‘PROFESSIONAL’ PEOPLE WITHIN THE IT AND LEGAL COMMUNITIES FELT THEIR EMPLOYERS REPUTATION WAS MORE IMPORTANT THEN ADMITTING ISSUES EXISTED. FOUR SUICIDES HAVE BEEN ATTRIBUTED TO THIS SCANDAL, AND A FURTHER 27 PEOPLE HAVE DIED WITHOUT HEARING THEIR NAMES CLEARED, MORE MAY DO SO. AND IT’S NOT OVER YET…

11:15 - 12:20PM BRIAN WHELTON DELIVERING THE FAIL

DONT BE A DATA DUMMY: PROTECTING YOUR BITS AND BYTES WITH A SECURITY STRATEGY TO SUIT YOU

12:25 - 12:55 KATIE MCMILLAN DON’T BE A DATA DUMMY

WE’LL BE DIVING INTO THE IMPORTANCE OF HAVING A STRONG HUMAN SECURITY STRATEGY, AND HOW TRAINING AND EDUCATION CAN MAKE ALL THE DIFFERENCE. PLUS, WE’LL BE SHOWING YOU HOW TO USE MICROSOFT PURVIEW AND SENTINEL TO ADD LAYERS OF PROTECTION AROUND YOUR DATA, SO YOU CAN REST EASY KNOWING YOUR INFORMATION IS IN GOOD HANDS. • UNDERSTAND THE BIGGEST THREAT TO DATA SECURITY: HUMAN ERROR • CREATING A CULTURE OF SECURITY WITH CLEAR POLICIES AND PROCEDURES • IDENTIFYING POTENTIAL SECURITY INCIDENTS AND DETECTING AND RESPONDING TO INSIDER THREATS WE’LL BE EXPLORING WHY PEOPLE ARE THE BIGGEST THREAT TO DATA SECURITY AND TAKING A CLOSER LOOK AT HOW BEING TOO CHILL OR FORGETFUL CAN LEAVE YOUR DATA WIDE OPEN FOR ATTACKS. AND LET’S BE REAL, NOBODY WANTS TO BE THE CAUSE OF A DATA BREACH.

BY THE END OF THIS SESSION, YOU’LL HAVE AN UNDERSTANDING OF THE HUMAN SIDE OF DATA SECURITY, AND YOU’LL BE ARMED WITH THE KNOWLEDGE AND TOOLS TO CREATE A SUPER-STRONG SECURITY STRATEGY THAT MITIGATES THE RISKS ASSOCIATED WITH HUMAN ERROR. SO GET READY TO BECOME A DATA SECURITY SUPERHERO!

track 2 papa don’t Breach

AN INTRODUCTION TO ASSEMBLY AND REVERSE ENGINEERING

THIS TALK WOULD BE AN OVERVIEW OF HOW BASIC ASSEMBLY AND MEMORY WORKS, THE STRUCTURE OF PROGRAMS COMPILED IN C AND HOW TO FOLLOW THE LOGIC OF DISASSEMBLED PROGRAMS. I’D ALSO COVER HOW TO USE TOOLS SUCH AS GHIDRA TO DECOMPILE CODE AND TO MAKE THE REVERSE ENGINEERING PROCESS MORE EFFICIENT, AND IF THERE’S TIME I’D COVER THINGS SUCH AS BUFFER OVERFLOWS, PATCHING CODE AND RETURN ORIENTED PROGRAMMING.

9:45 - 10 TOM BLUE AN INTRODUCTION TO ASSEMBLY AND REVERSE ENGINEERING

SHIFTING SMART BY BUILDING UP YOUR SECURITY CHAMPIONS

10 - 10:15 AKOLADE "KAY" ADELAJA SHIFTING SMART BY BUILDING UP YOUR SECURITY CHAMPIONS

THIS TALK AIMS TO UNCOVER AN EFFECTIVE METHOD FOR INCREASING THE SAFETY AND SECURITY OF ANY ORGANIZATION WHILE WORKING WITH A LIMITED BUDGET, THROUGH THE INNOVATIVE CONCEPT OF ‘SECURITY CHAMPIONS’! DURING THE COURSE OF THIS INFORMATIVE, ENGAGING, AND INSIGHTFUL 15-MINUTE PRESENTATION, WE WILL REVEAL THIS AMAZING MODEL WHERE ORDINARY EMPLOYEES ARE TRANSFORMED INTO POWERFUL AND RELIABLE SECURITY ALLIES. DELVE INTO THE HIDDEN TECHNIQUES USED TO SUCCESSFULLY RECRUIT, MOTIVATE, AND EDUCATE YOUR TEAM MEMBERS SO THAT THEY EVOLVE INTO VIGILANT PROTECTORS WHO CONTRIBUTE TO THE ENHANCEMENT OF SAFETY THROUGHOUT YOUR ENTIRE WORKPLACE. WE’LL DISCUSS EVERYTHING FROM THE IMPORTANCE OF ACKNOWLEDGING AND REWARDING THEIR EFFORTS TO PROVIDING ONGOING GUIDANCE AND MENTORSHIP. THIS PRESENTATION IS DESIGNED TO OFFER A DETAILED ROADMAP FOR CREATING A MORE SECURE AND PROTECTED ENVIRONMENT FOR ALL EMPLOYEES AND STAKEHOLDERS TO ENJOY.

WHY OH WHY! THE CONFUSION WITH SOC AND IR

AN ANALYSIS AND RECOMMENDATION FOR COMMONLY NOTICED MISUNDERSTANDINGS I SEE FROM SOC OPERATORS NOWADAYS. THE AREAS OF RESPONSIBILITY IN SOC’S, AND WHY WORKING IN A SOC DOES NOT AUTOMATICALLY MAKE YOU AN INCIDENT RESPONDER.

10:20 - 10:35 JYMIT KHONDHU WHY OH WHY! THE CONFUSION WITH SOC AND IR

CAN AN OLD(ISH) DOG LEARN NEW (CYBER) TRICKS?

CAN A 31 YEAR OLD NETWORK ADMIN, TURNED IT MANAGER, REINVENT HIMSELF IN A CYBER SECURITY ROLE WITH THE HELP OF A DEGREE APPRENTICESHIP? FIND OUT WHAT HE WAS TAUGHT AND HOW THAT MAYBE DIFFERED FROM WHAT HE LEARNT. DO SUCH APPRENTICESHIPS WORK AND COULD THEY BE FOR YOU? ARE THERE OTHER (BETTER?) WAYS TO LEARN THE SAME THINGS AND COULD THE 3 YEARS HAVE BEEN BETTER SPENT DOING SOMETHING ELSE? IF YOU DO IT AND GET TO THE END, CAN YOU GET A NEW JOB? SPOILER - YES

10:35 - 10:50 ANDREW CARR CAN AN OLD (ISH) DOG LEAR NEW (CYBER) TRICKS?

WHAT YOUR BROWSER CAN TEACH YOU ABOUT SECURE DESIGN THE BROWSER IS NEAR UBIQUITOUS; WE USE IT FOR PRETTY MUCH EVERYTHING AND TRUST IT WITH SOME OF OUR MOST IMPORTANT INFORMATION ASSETS… BUT BROWSERS ARE PRETTY SCARY FROM A SECURITY PERSPECTIVE; THEY EXECUTE ARBITRARY CODE FROM UNTRUSTED SOURCES BY DESIGN… AND WE’RE SUPPOSED TO BE OK WITH THAT? THIS TALK, BY A RECOVERING BROWSER SECURITY ENGINEER, LOOKS AT SOME OF THE LESSONS WE CAN LEARN FROM HOW A WEB BROWSER DOES WHAT IT DOES (AND A COUPLE OF LESSONS FROM HOW BROWSERS DO THINGS THEY SHOULDN’T).

11:15 - 11:45 MARK GOODWIN WHAT YOUR BROWSER CAN TEACH YOU ABOUT SECURE DESIGN

RISK BASED RESPONSE WITH SOAR HOW CAN YOU EXPEDITE TRUST IN SECURITY AUTOMATION WITH SOAR TO FULLY AUTOMATED CONTAINMENT AND REMEDIATION OF SECURITY EVENTS? WITH A RISK BASED RESPONSE FRAMEWORK THAT ALLOWS YOU TO BOTH CONTROL & FINELY TUNE YOUR AUTOMATED RESPONSES! CREATE YOUR OWN “SECRET SAUCE” FOR YOUR SPECIFIC RISK APPETITE!

11:5O - 12:20 TOM WISE RISK BASED RESPONSE WITH SOAR

HORROR STORIES: WHEN IT'S GOOD IT'S GREAT, WHEN IT'S BAD IT F*$^%$G STINKS SYNOPSIS: WHETHER ITS PEN-TESTING A FACTORY AND KNOCKING IT OFF LINE, SELLING SIEM AND FORGETTING TO TURN IT ON, OR MAYBE SOMETHING SMALL LIKE ATTEMPTING TO SABOTAGE A CISO THAT WANTS TO CHANGE VENDOR... MANY OF US CAN AGREE CYBERSECURITY IS PRETTY INTERESTING, BUT JUST HOW MANY OF US HAVE PEELED BACK THE SHEETS OF THE VENDOR MARKET AND SMELT THE DUTCH OVEN? LET'S DISCUSS.

12:25 - 12:55 ELIZA-MAY AUSTIN - HORROR STORIES: WHEN IT'S GOOD IT'S GREAT, WHEN IT'S BAD IT F*$^%$G STINKS

"I DON'T KNOW WHAT I'M DOING!" - A HITCHHIKER'S GUIDE TO IMPOSTOR SYNDROME

2:20 - 2:50 MAYA BOECKH "I DON'T KNOW WHAT I'M DOING!" A HITCHHIKER'S GUIDE TO IMPOSTOR SYNDROME

IMPOSTOR SYNDROME: YOU HAVE IT, I HAVE (A LOT OF) IT, MOST PEOPLE IN THE INDUSTRY HAVE (SOME FORM OF) IT. BEING THE IMPOSTOR IS A FEELING THAT KNAWS AT YOUR GUTS, MAKES YOU DOUBT YOURSELF FROM WHEN YOU WAKE UP UNTIL WHEN YOU GO TO SLEEP, AND MAKE THE REMARKABLE DEEDS YOU’VE DONE SEEM LIKE “FLUKES” OR “HAPPY ACCIDENTS”.

I WANT TO SHARE MY OWN EXPERIENCES WITH IMPOSTOR SYNDROME (INCLUDING SUBMITTING A TALK ON A TOPIC I’M INTIMATELY CONNECTED TO BUT HAVE NO EXPERTISE IN), HOW I DIDN’T DEAL WITH THEM, AND HOW I HAVE APPARENTLY INADVERTENTLY BEEN CONSTANTLY WEAPONIZING IT TO IMPROVE SOME OF MY ABILITIES.

track 3 son of a Breach

LOOK AT ME! I'M THE MANAGER NOW: BECOMING A SECURITY ENGINEER MANAGER, COMMON PITFALLS, LESSONS AND MORE OH, NOW YOU’RE A MANAGER, BUT HOW DOES THAT CHANGE YOUR LIFE? HOW WILL YOU FACE THE CHALLENGES? WILL ALL THOSE HOURS OF OFFICE SPACE AND THE OFFICE BE USEFUL? ENTER THE FUN WORLD OF BEING A SECURITY MANAGER WITH ALL ITS FUN AND RISKS.DID I SAY WE’RE GOING TO HAVE MEMES? WOW MUCH MEMES. THIS SESSION DIVES INTO TRANSITIONING FROM A SECURITY ENGINEER TO A SECURITY ENGINEERING MANAGER, ADDRESSING COMMON PITFALLS, VALUABLE LESSONS, AND CRITICAL ERRORS TO AVOID. WE WILL HAVE SOME INSIGHTS INTO THE CHALLENGES FACED DURING THIS TRANSITION AND LEARN PRACTICAL STRATEGIES TO OVERCOME THEM. THE TALK EMPHASIZES THE IMPORTANCE OF EFFECTIVE COMMUNICATION, STAKEHOLDER MANAGEMENT, AND CULTIVATING A COLLABORATIVE TEAM CULTURE BY SHARING REAL-WORLD EXAMPLES AND PROVIDING GUIDANCE ON NAVIGATING POTENTIAL ERRORS (THAT I DID, AGAIN OH DEAR SO MANY)

9:45 - 10:15 MARCUS TENORIO LOOK AT ME! I'M THE MANAGER NOW

THE 'THINKING' ANALYST: UNLOCKING CORE SOC ANALYSIS SKILLS EVER ASKED WHAT SEPARATES A NOVICE AND SEASONED BLUE TEAMER, AND BEEN MET WITH A RESPONSE NOTHING MORE THAN “EXPERIENCE”?

THIS TALK WILL GIVE YOU PRACTICAL DAY TO DAY EXAMPLES OF THINKING MODELS, BIAS RECOGNITION TIPS, COMMUNICATION METHODS, QUESTION FORMATION TIPS AND MORE. WE WILL EXPLORE AND PROVE, REGARDLESS OF TOOLSET AND ENVIRONMENT, THAT A CHANGE IN YOUR THINKING TOWARDS INVESTIGATIONS, YOU CAN BECOME A MORE SEASONED ANALYST.

10:20 - 10:50 MICHAEL LAMB - THE 'THINKING' ANALYST: UNLOCKING CORE SOC ANALYSIS SKILLS

PRECISION MUNITIONS FOR DENIAL OF SERVICE WHY USE CARPET BOMB DDOS WHEN A TARGETED STRIKE CONSISTENT A FEW WELL CRAFTED REQUESTS CAN CRIPPLE A SERVICE? AS AN ADDED BONUS, PRECISION STRIKES MAKE IT THAT MUCH EASIER TO AVOID WAF COUNTERMEASURES. AND WHERE TO FIND THIS AMAZING CYBER WEAPON? WHY IN A SEEMINGLY UNIMPORTANT CVSS SCORE 7.5.

11:15 - 11:45 GERALD BENISCHKE PRECISION MUNITIONS FOR DENIAL OF SERVICE

DUDE, CHECK YOUR PRIVILEGE! - PRIVILEGED ACCOUNT MANAGEMENT SOLUTIONS AND HOW THEY COULD EITHER BECOME YOUR BESTIE OR TOTALLY RUIN YOUR DAY ALTHOUGH PAM SOLUTIONS ARE UNABLE TO PROTECT AN ORGANIZATION JUST BY THEMSELVES, THEY DEFINITELY PLAY AN IMPORTANT PART WHEN IT COMES TO SECURITY CONTROLS. A DISCUSSION OF HOW BEST PRACTICES CAN PROVIDE A DEFENSE IN DEPTH LAYER OR HAND ATTACKERS THE KEYS TO THE KINGDOM ON A SILVER PLATTER.

11:50 - 12:20 MELINA PHILLIPS - DUDE, CHECK YOUR PRIVILEGE!

RUSSIAN ROULETTE: HACKTIVISM IN THE MIDDLE EAST SINCE FEBRUARY, I’VE BEEN TRACKING SEVERAL MIDDLE EASTERN THREAT GROUPS AFTER FALLING INTO A RABBIT HOLE. FROM TYG TEAM TO A LITTLE GROUP KNOWN AS ANONYMOUS SUDAN, HACKTIVISM HAS GROWN SUBSTANTIALLY. I’M COVERING INFIGHTING, WARS BETWEEN GROUPS, AND HACKTIVISTS TURNED APTS, PLUS RUSSIAN INVOLVEMENT.

1230 - 13:00 JAKE KEAST RUSSIAN ROULETTE: HACKTIVISM IN THE MIDDLE EAST

RETURN OF THE ROBOTS TALK & WORKSHOP

LAST YEAR, WE COVERED “BUILDING ROBOTS FOR COMPLETE BEGINNERS”. THIS YEAR, WE’LL BUILD ON THE FOUNDATION (DON’T WORRY, IT’S STILL SUITABLE FOR BEGINNERS) AND CREATE SOMETHING A BIT MORE… INTERESTING. THERE WILL STILL BE MICROCONTROLLERS. AND LEGO. AND, POSSIBLY, SOME ACTUAL REVERSE ENGINEERING. 14:20 - 15:30 16:00 - 16:30 MARK GOODWIN RETURN OF THE ROBOTS TALK & WORKSHOP

workshops kentucky fried fishing

LIGHTNING SPEAKERS WORKSHOPS GIVING ATTENDEES THE OPPORTUNITY TO STEP IN, WRITE A LIGHTNING TALK (3-5 MINUTES), AND DELIVER IT ALL WITHIN THE SAME DAY. ATTENDEES WILL COME IN (IDEALLY WITH THOUGHTS ON TOPICS ALREADY), BE TAKEN THROUGH OUTLINING AND STRUCTURING THEIR TALK, PRACTICAL TIPS ON BUILDING SLIDES, AND PRESENTING. THEY’LL WALK AWAY WITH A FULLY BUILT PRESENTATION AND TALK STRUCTURE READY TO BE DELIVERED, AND EITHER AT THE END OF THE WORKSHOP (IF A WORKSHOP) OR AT DESIGNATED POINTS DURING THE DAY (IF A VILLAGE) THEY WILL DELIVER THEIR TALKS LIVE (PREFERABLY RECORDED AND ON A STAGE).

JAMES BORE LIGHTNING SPEAKERS WORKSHOPS