Final Competition and Awards Schedule

Technology and how we use it is ever-changing. This panel discussion will focus on how we need to change to combat the increasingly organized and sophisticated cybercriminal fraternity. Moderator: Dennis Fisher, Editor in Chief, Threatpost
Panelists:

• Tim Armstrong, Researcher, Global Research & Analysis Team Kaspersky Lab
• Steven Furnell, Head of the Centre for Security, Communications & Network Research at the University of Plymouth (UK)
• Professor Nasir Memon, Director of the Information Systems and Internet Security (ISIS) laboratory at NYU-Poly
• Dr. Charles P. Pfleeger, Security Consultant and Principal of the Pfleeger Consulting Group
• Roel Schouwenberg, Senior Anti-Virus Researcher, Americas, Global Research & Analysis Team (GReAT), Kaspersky Lab

At the end of August, word got out about a rogue *.google.com certificate which had been found in the wild. It turned out that a Dutch certificate company, DigiNotar, had been compromised. Telemetry showed ~99% of the affected machines were based out of Iran. Hundreds of fraud SSL certificates were issued including domains toward Yahoo, Twitter, MSFT and the CIA. This incident can easily be classified as one of the most significant of the year.

In this presentation we'll look at the Diginotar attack as well as the attacks that preceded it. We'll also look at the ramifications of these CA breaches and the impact they've had. The presentation will be concluded with an outline of possible solutions to these problems.

In this lab, I will cover the basics of decompiling and reverse engineering Android applications. I will cover the use of a couple of tools; dex2jar and jd-gui that can make viewing decompiled source code easy and efficient. We'll look at two examples of Android malware and discuss the pros and cons of this decompilation method.