Conference: March 5-7, 2018

Workshops: March 8-9, 2018

Track:

Security: Red XOR Blue Team

Location: Mountbatten, 6th flr.

Day of week: Monday

Security from the defender's AND the attacker's point of view

Track Host:
Christina Camilleri
Security Solutions Specialist @@riotgames

Christina Camilleri works on the infosec team at Riot Games where she focuses on improving security awareness training for Rioters, running awareness tests, and making use of data to inform on Rioter behaviors around security. Christina’s primary areas of expertise are web application penetration testing, open-source intelligence (OSINT), and social engineering -- not only the psychological and physical involvement of social engineering, but also the manipulation and social influencing techniques that are able to exploit (and help!) the behavior of others. Prior to joining Riot Games, Christina worked as a penetration tester at Bishop Fox, where she primarily concentrated her efforts in social engineering and web-application penetration testing. In her free time, Christina enjoys whiskey, Brazilian Jiu Jitsu and patting cats.

10:35am - 11:25am

by Anastasiia Voitova
Security Enthusiast & Product Engineer @cossacklabs
Encryption Without Magic, Risk Mngmnt Without Pain

In-depth technical inquiry about cryptography in a wider context: how it helps to narrow more significant risks to controlled attack surfaces, enables managing the risk efficiently and elegantly, how tools and algorithms sit in a broader context of managing infrastructure-wide risks associated with handling sensitive data.
Apart from discussing general technical approaches, we will focus on what do we need to do after we’ve implemented some kind of encryption in our system: monitoring...

11:50am - 12:40pm

by Laura Bell
Founder of SafeStack
Bigger, Faster and More Secure

Many people don't care about security. It's OK, don't worry! I'm not judging.

Security is the world of defense, of caution and of risk. Securing systems is hard and we don't have great solutions to the many challenges it poses. Security folk on the whole are the least exciting people to invite to your parties.

The time has come to change this.

So what if we...

1:40pm - 2:30pm
Security Open Space
2:55pm - 3:45pm

by Emma McCall
Security Analyst @RiotGames
EternalBlue: Exploit Analysis and Beyond

In this presentation we will analyze the EternalBlue exploit that was leaked in early 2017 which was then abused to great effect throughout the year.
 
Beginning a journey into InfoSec research can be daunting. We will discuss how targeted analysis can help develop security skills while still assisting company, clients and colleagues. Even when dealing with sophisticated exploits and malware in situations such as these.
 

4:10pm - 5:00pm

by Marisa Fagan
Product Security Lead @Synopsys
Security Champions: Only YOU Can Prevent File Forgery

As a Developer, there will come a time when you realize that you have the power to not only ship awesome features, but also protect them so that no one else can tamper with all your hard work. Every Developer is responsible for coding securely, but there are a brave few among us that will take this power one step further by wearing the mantle of a Security Champion.

This talk will be your guide to becoming the Security Champion...

5:25pm - 6:15pm

by Michael Brunton-Spall
Independent Security Consultant, previously Deputy Director for Technology and Operation, & Head of CyberSecurity of Government Digital Service
Attack Trees, Security Modeling for Agile Teams

Agile software development and security often don’t feel like good bedfellows. Many traditional security methodologies for analysing risk and threats are based on old military or government based software development methodologies which favour traditional, slow moving, low change systems.

Attack tree’s is a new way of understanding how your system might be attacked and how to prioritise security measures to be implemented.  It makes it easy for product managers and technical...

Last Year's Tracks

Monday, 5 March

Tuesday, 6 March

Wednesday, 7 March

This Year's Schedule

Learn trends from innovator and early adopter companies that you can bring home to your team

Sign up to be informed when registration for QCon London 2019 (Mar 4-8) opens!

Sign Up