Cyber Warriors Unification Workshop

Agenda

Session 1: “From Data to Value in One Easy Lesson”

One of the biggest challenges security analysts face is extracting value from the ever-growing volumes of data. As data volume, velocity and variety increase--not to mention attacker sophistication, security professionals need to understand how to use the latest data analytic techniques. Charles will demonstrate how to use a collection of open source tools to rapidly explore security data and extract value from it. He will also demonstrate how to apply machine learning to security problems.

Session 2: “Trust Abusing in Unix and Windows”

Presenter: Alex Testa, Attack Research

This session discusses the trust relationships shared across networks and hosts regardless of the underlying operating systems. Topics include:

• Unix & Windows Trusts and Relationships
• Trusts Between Users/Hosts/Networks

• Abusing Trusts

  • Attacker/Defender Perspective
  • Disguising Malicious Behavior as User Activity

Bio: Alex has been a Security Researcher, Pen Tester, and Developer for Attack Research, LLC for over 5 years. He has over 20 years of experience in private sector development and security research. Attack Research is a boutique computer security consulting firm which is devoted to a deep understanding of the mechanics of computer attacks. Industry specialties range from embedded systems, avionics, and automotive to government, financial and Fortune 500 enterprise environments.

Session 3: “The Burglar's Guide to Your Facility”

Presenter: Robert Pingor, Core Group

Robert has planned and participated in dozens of successful red team operations on government targets and Fortune 100 entities. Join him for an intimate and candid talk on what makes his entries possible. During this session, you’ll get an unprecedented opportunity to rummage through his tool bag to see the gear he often utilizes on jobs as well as hear about the pretexts he uses on unwitting security personnel and employees. This session will expand your horizons and help you shore up your defenses against would-be adversaries.

Bio: Robert Pingor founded Nomad Tactical Solutions. His policing and operations background was honed during his years at the National Security Agency where he served with distinction in four different specialty units as a Corporal. Robert has extensive training in both the government and private sectors. He has instructed for the Department of Defense, the State Department, the National Security Agency, the United States Air Force, the United States Military Academy at West Point, the United States Naval Academy at Annapolis, the National Defense University, the Sig Sauer Academy and countless local law enforcement agencies. Additionally, he regularly conducts trainings for Black Hat, the SANS Institute, Google, and other technical conferences. Outside of work, Robert volunteers for a variety of charities and non-profits. He runs the Future Blue Program, an organization dedicated to developing young people into competent law enforcement professionals and he trains volunteers to fight childhood sex trafficking. His work has been featured in Recoil Magazine, Counterterrorist Magazine, Tribecca Film Festival, and the TV series The Sentinel.

Session 4: “Attacking Complex Java Objects for Unauthenticated Remote Code Execution”

Presenter: Steven Seeley, Source Incite

Drawing from his own experience, Steven will detail how he found three different vulnerabilities in a high-end Cisco appliance and how he chained them together to achieve unauthenticated remote code execution as root. The attack chains presented will demonstrate the complexity of server-side Java attacks due to several layers of abstraction and how this can be broken down by a security analyst or sophisticated attacker

Bio: Steven is a full-time bounty hunter and has been a Zeroday Initiative (ZDI) platinum researcher for the last four years running. Previously, Steven was the lead developer of the AWAE course held by Offensive Security and has trained students at both BlackHat Asia and BlackHat USA. When he's not (ab)using code, he's often out riding his Harley Davidson or lifting heavy weights.