talk

DC9723 October Meeting

My impressions from the DC9723 October 2017 meeting where I gave a talk on the 2015 Ukraine Power Grid Attack

The Ukraine Power-Grid Cyber Attack

The cyber-attack on the Ukraine power grid was unique in that it was public, not that it happened. In this talk, I will discuss some unique characteristics of the attack, its structure, and the possible ramifications. As this attack was attributed as …

Offensive AI: "Some rules can be bent, others can be broken"

Adversarial Machine Learning allows us to leverage techniques used by ML algorithm to gauge their weak points and exploiting them. ML is great at identifying and classifying patterns, but an attacker can use the gray areas to influence (or even …

Containers are not virtual machines!

There is a wild misconception that containers are the next best thing, much better than VMs. The conversation often revolves around how easy they are to deploy, how fast – but rarely how much insecurity they bring into production environments. In …

What every hacker once knew, a walk down history's lane

This is a talk adapted from some interesting historical archives exploring some older technologies and concepts that still have roots in today’s world, even if their origin is forgotten. Going beyond a mere trip down a nostalgic avenue, I will …

The Threat Horizon: Preparing for the Future

Internal Intel Event Won 3rd place :-)

What every hacker used to know, a walk down history's lane

This is a talk adapted from some interesting historical archives exploring some older technologies and concepts that still have roots in today’s world, even if their origin is forgotten. Going beyond a mere trip down a nostalgic avenue, I will …

The Future of Malware

This talk is focused on understanding malware, discussing the recent (May 17) “WannaCry” ransomware attack and some thought to future directions that malware might evolve in.

Security Development Lifecycle - how did we get so lost along the way?

It worked on my computer!

A generic way to solve one of the most annoying integrations ever encounered, "it worked on my computer". With the process we developed, we make it easier to collaborate and integrate our complex code together while automating the boring stuff away.