Schedule
This information is also available at Khan Fu.
| Saturday, January 19, 2019 |
| Time |
Build It! |
Belay It! |
Bring it On! |
| 0930 |
Registration Opens |
| 1000 |
Writing a Fuzzer for Any Language with American Fuzzy Lop
Ariel Zelivansky
|
High Confidence Malware Attribution using the Rich Header
Kevin Bilzer, RJ Joyce, and Seamus Burke
|
The Beginner’s Guide to the Musical Scales of Cyberwar
Jessica ‘Zhanna’ Malekos Smith
|
| 1100 |
CryptoLocker Deep-Dive: Tracking security threats on the Bitcoin public ledger
Olivia Thet and Nicolas Kseib
|
BECs and Beyond: Investigating and Defending Office 365
Douglas Bienstock
|
The APT at Home: The attacker that knows your mother’s maiden name
Chris Cox
|
| 1200 |
Process Control Through Counterfeit Comms: Using and Abusing Built-In Functionality to Own a PLC
Jared Rittle
|
Five-sigma Network Events (and how to find them)
John O’Neil
|
Firemen vs. Safety Matches: How the current skills pipeline is wrong
Amélie Koran
|
| 1300 |
Break |
| 1400 |
Be an IoT Safety Hero: Policing Unsafe IoT through the Consumer Product Safety Commission
Andrea Matwyshyn and Elliot Kaye
|
Electronic Voting in 2018: Bad or Worse?
Matt Blaze
|
Ground Truth: 18 vendors, 6000 firmware images, 2.7 million binaries, and a flaw in the Linux/MIPS stack
Parker Thompson, Mudge, and Tim Carstens
|
| 1500 |
Trip Wire(less)
Omaha
|
Analyzing Shodan Images With Optical Character Recognition
Michael Portera
|
Advancing a Scientific Approach to Security Tool Evaluations with MITRE ATT&CK™
Francis Duff
|
| 1530 |
Social Network Analysis: A scary primer
Andrew Wong and Phil Vachon
|
Security Response Survival Skills
Ben Ridgway
|
Mentoring the Intelligent Deviant: What the special operations and infosec communities can learn from each other
Nina Kollars and Paul Brister
|
| 1600 |
Three Ways DuckDuckGo Protects User Privacy While Getting Things Done (and how you can too)
Marc Soda
|
iPhone Surgery for the Practically Paranoid
Evan Jensen and Rudy Cuevas
|
A Little Birdy Told Me About Your Warrants
Avi Zajac
|
| 1630 |
Post-quantum Crypto: Today’s defense against tomorrow’s quantum hacker
Christian Paquin
|
A Code Pirate’s Cutlass: Recovering Software Architecture from Embedded Binaries
evm
|
A Tisket, a Tasket, a Dark Web Shopping Basket
Emma Zaballos and Anne Addison Meriwether
|
| 1700 |
24/7 CTI: Operationalizing Cyber Threat Intelligence
Xena Olsen
|
0wn the Con
The Shmoo Group
|
Behind Enemy Lines: Inside the operations of a nation state’s cyber program
Andrew Blaich and Michael Flossman
|
| 2100 |
Saturday Night Party |
