First Round of HITBSecConf Kuala Lumpur speakers announced
Posted on 26 August 2013.
Here's a taste of some presentations you can expect at HITBSecConf Malaysia in October. You can register here.


Conference speakers
  • Collin Mulliner (Researcher, Systems Security Lab, Northeastern University)
  • Corey Kallenberg (Security Researcher, The MITRE Corporation)
  • Job de Haas (Senior Specialist, Riscure)
  • John Butterworth (Security Researcher, The MITRE Corporation)
  • Joshua "@p0sixninja" Hill (Independent Security Researcher)
  • Joaquim Espinhara (Security Consultant, Trustwave)
  • Luiz Eduardo (Director, Trustwave Spiderlabs)
  • Dr. Marco Balduzzi (Senior Researcher, Trend Micro)
  • Mark Vincent Yason (Security Researcher, IBM X-Force)
  • Mathias Morbitzer (Masters Student, Radboud University Nijmegen)
  • Peter "@bl4sty" Geissler (Independent Security Researcher)
  • Stefan Esser (Head of R&D, SektionEins GmbH)
  • Vladimir Katalov (Co-Founder, ElcomSoft)
  • Xeno Kovah (Lead Infosec Engineer, The MITRE Corporation)
Highlighted presentations include:

Hey Captain, Where's Your Ship? Attacking Vessel Tracking Systems for Fun and Profit

In recent years, automated identification systems (AISes) have been introduced to enhance vessels tracking and provide extra safety to marine traffic, on top of conventional radar installations. AIS, which is currently a mandatory installation for all passenger ships and ships over 300 metric tonnes, works by acquiring GPS coordinates and exchanging vessel’s position, course and information with nearby ships, offshore installation, i.e. harbors and traffic controls, and Internet tracking and visualizing providers.

In this talk, we share with you our finding, i.e how we have able to hijack and perform man-in-the-middle attacks on existing vessels, take over AIS communications, tamper with the major online tracking providers and eventually fake our own yacht!.

Demystifying Game Console Security: Over 10 Years of Ownage Unraveled

Are you interested to learn about the delicate hacks and tricks that go on behind the curtains of the scene better known as “the console hacking scene”? Are you eager to find out who/what is behind all this incredible work that allows your little Nephew to play a copy of Call of Duty on his XBOX? Then this talk is for you!

Defeating Signed BIOS Enforcement

In this secure BIOS update scheme, there are two primary attack surfaces that can be targeted in an attempt to break the signed BIOS requirement: the Intel architecture protection mechanisms, and the vendor’s implementation of the signature enforcement and update routine.

This presentation demonstrates two attacks; one against each of these targets. Both of these attacks allow an attacker to arbitrarily re-flash the BIOS on a number of systems despite the presence of signed BIOS enforcement.





Spotlight

Chrome extension thwarts user profiling based on typing behavior

Infosec consultant Paul Moore came up with a working solution to thwart a type of behavioral profiling. The result is a Chrome extension called Keyboard Privacy, which prevents profiling of users by the way they type by randomizing the rate at which characters reach the DOM.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Wed, Jul 29th
    COPYRIGHT 1998-2015 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //