Keynote

Dubai Police Combating Cyber Crime

Colonel Al Hajeri will talk about the history of cyber challenges and evolution of the cyber crime and cyber criminals. Then he will shed light on the current situation and strategy moving forward.

Colonel Saeed Al Hajeri / Director of CID's Cyber Crime Department at Dubai Police  

4:00pm-5:00pm (GST)

COVID-19 Cyber Attacks and Defending Against Them

Robert uncovers threat actors that have seized on the media attention surrounding COVD-19 attacks. Click to find out more...

Roberto Sanchez / Threat Intelligence - Anomali  

4:00pm-5:00pm (GST)

Domain Squatting In 2020

This talk covers some of the types of domain squatting that are still applicable in 2020 and the motivations behind them. It also highlights prevention methods that domain owners can use to safeguard themselves from squatters as well as practical and legal solutions available to them.

Dr. Marwan Alzarouni / Director of Information Services at Dubai Electronic Security Center  

6:00pm-6:35pm (GST)

How Attackers Leverage Your Web Browser

In this talk Ahmed will discuss and demonstrate the newest techniques attackers use to leverage users web browsers having them performing sophisticated cyber attacks.

Ahmed AlHussain / Manager of Crisis Response at Dubai Electronic Security Center  

6:40pm-7:15pm (GST)

Securing Critical Infrastructure: Principles and Approaches

The talk discusses the practical and systemic challenges of cyber in critical facilities and proposes models for addressing sustainable and continuous improvement.

Sultan Al-Owais / Director of Digital Services at the UAE Prime Minister's Office  

7:20pm-7:55pm (GST)

Red Teaming in Time of COVID-19

The talk discusses how COVID-19 is increasing the risks organizations are now exposed to and how security professionals and criminals, can (ab)use such change.

Matteo Beccaro / CTO at Lateral Thinking  

8:00pm-8:35pm (GST)

Demystifying COVID-19 Threat Intelligence

With all this there has been a lot of discussions on COVID-19 related threat intelligence. But what is this really all about? Are threat actors really doing anything different? This talk will explore this.

Milad Aslaner & Christos Ventouris / Microsoft  

9:20pm-9:55pm (GST)

Threat Intelligence Cookbook

In this talk, we will explore some recipes that utilize threat intelligence as a main ingredient in SOC operations. We will be utilizing these recipes to gain additional insight to what you can do to protect your environment.

Abdulla Buali / Cyber Incident Response Team Leader at Computer Emergency Response Team of the UAE (aeCERT),  

6:00pm-6:35pm (GST)

DevSecOps: Separating Myth From Reality

As more companies begin to embrace DevSecOps, both organizations and security managers have discovered that DevSecOps has its own complexities. In this talk Imran will separate myth from reality.

Mohammed A. Imran / Founder at practical-devsecops.com  

6:40pm-7:15pm (GST)

Deserialization Attacks 

In this talk we will discuss, analyze and demo Deserialization vulnerabilities and exploits in multiple programming languages, including analysis of some high profile vulnerabilities like CVE-2019-0604. 

Mohammed Aldoub / Independent Researcher  

7:20pm-7:55pm (GST)

Work From Home, A Security Perspective And Approach

As a director of information security at Smart Dubai Government, Hamad will discuss work from home security considerations and challenges.

Hamad Musabeh / Director of Information Security at Smart Dubai Government  

8:00pm-8:35pm (GST)

SOCKS Over RDP – Pentesting Over Jump Boxes

In this talk Balazs will reveal a tool that creates a virtual channel over an RDP connection and spins up a SOCKS5 proxy on a remote host, just like SSH’s –D switch

Balazs Bucsay / Managing Security Consultant at NCC Group  

8:40pm-9:15pm (GST)

Windows Password Cracking For The Blue Team

The talk describes how to defend the removal of complexity rules during an external audit and will finish with cracking 12 character passwords  in a Windows environment

James McKinlay / Group Information Security Officer at Barbican Insurance Group  

9:20pm-9:55pm (GST)

The Legend of Shortcuts: A LNK to the Past (Searches)

This talk will go through the code-level analysis that was performed during research on CVE-2020-0729

John Simpson / Staff Researcher at Trend Micro