2.0 -//Pentabarf//Schedule//EN PUBLISH PSGUEL@@program.wiccon.nl -PSGUEL WALK-IN & REGISTRATION en en 20241031T090000 20241031T100000 1.00000

WALK-IN & REGISTRATION

**Venue** Lichtfabriek, Energieplein 73, 2031 TC Haarlem, The Netherlands. **Parking** There is free street parking in the area, but as it is also an area with a lot of offices you may not be able to park in front of the venue on the street or maybe even have to walk a little bit. Another option is reserving a spot on the Haarlemmer Stroom parking terrain via [Mobypark](https://www.mobypark.com/nl/parkeerplaats/3967/parkeren-haarlemmerstroom-lichtfabriek-haarlem-parkeerplaats-haarlem-netherlands) or [ParkBee](https://maps-web.parkbee.com/nl/pages/garage-details/cfc97531-dbb9-4027-a7dc-9b6ddbd61b64?garageName=Haarlemmer%20Stroom&city=Haarlem&startTime=2024-10-15T13:45:00.000Z&endTime=2024-10-15T15:45:00.000Z&zoneNumber=27192&product=prepaid&address=My%20Way%20Parkeren%20Haarlemmer%20Stroom,%202031%20TD%20Haarlem,%20Netherlands&pbSessionId=1728998358490). **Public transport** Travel to Haarlem station, please check your route in advance because there is some maintenance on the tracks at Haarlem during WICCON. From Haarlem station there are 2 options to get to De Lichtfabriek: 1. Walking. De Lichtfabriek is 1 km away from the station. This is about a 13-minute walk. 2. By bike. You can rent an OV-fiets at Haarlem station. By bike you can reach De Lichtfabriek within 5 minutes. **Registration** Keep your ticket at hand, it was sent to you from tickets@eventix.nl **Badge** Once again this year you will get a badge from us, this time it will have plenty of space for SAO's, so bring them if you have them :) **Dress code** We don't have a dress code, but since we do WICCON during Halloween you are allowed to come dressed up! PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/PSGUEL/ Main stage PUBLISH HBXDNG@@program.wiccon.nl -HBXDNG OPENING en en 20241031T100000 20241031T103000 0.03000

OPENING

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/HBXDNG/ Main stage Chantal Stekelenburg VM Daniëlle Wagemakers Jaimy Thepass Faith Opiyo PUBLISH RV9HCB@@program.wiccon.nl -RV9HCB Hacking the vote: why the paper trail matters in elections en en 20241031T103000 20241031T113000 1.00000

Hacking the vote: why the paper trail matters in elections

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/RV9HCB/ Main stage Fleur van Leusden PUBLISH BW3JVQ@@program.wiccon.nl -BW3JVQ Melting the Ice: Heating up the IcedID infrastructure en en 20241031T113000 20241031T120000 0.03000

Melting the Ice: Heating up the IcedID infrastructure

Operation Endgame was a collaborative effort involving international law enforcement agencies, judicial authorities, and private industry, aimed at dismantling several key botnets that played a critical role in cybercrime. This operation enabled us to simultaneously take down these botnets and disrupt the infrastructure used by cybercriminals. Initially designed as a banking Trojan, IcedID has expanded its capabilities to include credential theft, financial fraud, and serving as a delivery mechanism for secondary threats such as ransomware. In this talk, I will provide a detailed analysis of its architecture, focusing on its modular design, command-and-control (C2) infrastructure, and our investigative findings. I will also highlight the collaborative efforts between law enforcement agencies and cybersecurity professionals in effectively combating the threat posed by IcedID. This includes the importance of threat intelligence sharing and the role of international cooperation in dismantling cybercrime networks. PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/BW3JVQ/ Main stage Ilse Ruesink PUBLISH FFCVZK@@program.wiccon.nl -FFCVZK Inside Job: Tackling Insider Risk from All Angles en en 20241031T120000 20241031T130000 1.00000

Inside Job: Tackling Insider Risk from All Angles

In today's threat landscape, insider risk remains a critical yet often overlooked issue. While cybersecurity professionals have primarily focused on external threats, experience has shown that these measures are far from sufficient. Our presentation will delve into the complexities of managing malicious insider threats, highlighting the unique challenges organisations face in detection and mitigation. We will discuss the rise of awareness in Europe, contrasting it with the US focus on technical tools and Europe's emphasis on employee protection and privacy. Key topics include: • The portrait of a malicious insider: Understanding these characteristics, personal traits, and motives that drive people to commit insider crimes. • Balanced Approach: Combining technical tools with employee protection, favouring in-house capacity building over-reliance on large American providers. • Comprehensive Mitigation: Addressing Governance & Culture, IT & Physical Security, Employee and Third-Party Management, and Training & Communication, with an emphasis on the importance of employee awareness and training against social engineering. PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/FFCVZK/ Main stage Diana Makienko Lucile Renhas PUBLISH L37CN3@@program.wiccon.nl -L37CN3 LUNCH en en 20241031T130000 20241031T140000 1.00000

LUNCH

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ Main stage PUBLISH 7UJDQF@@program.wiccon.nl -7UJDQF Turning Neurodiversity into a Strength en en 20241031T140000 20241031T144500 0.04500

Turning Neurodiversity into a Strength

What's a topic that's as critical as finding your phone charger when it’s on 1% ? The shortage of cybersecurity professionals. But here's the twist: is there really a shortage, or are we just looking for talent in all the wrong places with outdated criteria? I'll share my personal journey of being diagnosed with autism later in life and starting a cybersecurity career without traditional diplomas. This talk is aimed at employers to educate them on neurodiversity, helping them understand why some individuals may lack formal qualifications and how to successfully integrate these talented people into their teams. PUBLIC CONFIRMED Talk 45 minutes https://program.wiccon.nl/wiccon-2024/talk/7UJDQF/ Main stage Tirza PUBLISH R3DYWZ@@program.wiccon.nl -R3DYWZ AirDrop Forensics en en 20241031T144500 20241031T153000 0.04500

AirDrop Forensics

Talk outline: - What is AirDrop & how the technology works - Existing AirDrop security issues - Forensics artefacts created by an AirDrop transfer PUBLIC CONFIRMED Talk 45 minutes https://program.wiccon.nl/wiccon-2024/talk/R3DYWZ/ Main stage Kinga Kieczkowska PUBLISH 37QRBX@@program.wiccon.nl -37QRBX Metrics matter in effective human risk management en en 20241031T153000 20241031T160000 0.03000

Metrics matter in effective human risk management

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/37QRBX/ Main stage Gerine Lodder PUBLISH X9JMK9@@program.wiccon.nl -X9JMK9 BREAK en en 20241031T160000 20241031T163000 0.03000

BREAK

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ Main stage PUBLISH E9STQ8@@program.wiccon.nl -E9STQ8 How to navigate the Cyber Resilience Act en en 20241031T163000 20241031T170000 0.03000

How to navigate the Cyber Resilience Act

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/E9STQ8/ Main stage Raluca Viziteu PUBLISH ESLPUH@@program.wiccon.nl -ESLPUH From Galactic Hacker Party 1989 to WHY2025; the history, future and importance of Dutch Hacker Camps. en en 20241031T170000 20241031T180000 1.00000

From Galactic Hacker Party 1989 to WHY2025; the history, future and importance of Dutch Hacker Camps.

Dutch Hacker Camp is part of the larger series of international hacker camps, including the Chaos Communication Camp (Germany) and the Electromagnetic Field (UK). These camps often feature a diverse range of activities including workshops, talks, hacking competitions, art installations, and social gatherings. Attendees can learn about topics such as computer security, hardware hacking, cryptography, privacy, and free software. Over the years, Dutch Hacker Camps have evolved and grown in size and popularity, attracting not only hackers and tech enthusiasts but also artists, activists, educators, and others who are passionate about exploring the intersection of technology and society. Overall, Dutch Hacker Camps play an important role in fostering a sense of community, promoting innovation and creativity, and advocating for digital rights and freedoms. They provide a unique space for people to come together, learn from each other, and collaborate on projects that push the boundaries of technology and imagination. This talk will take you through the history of Dutch Hacker Camps, and prepares you for the next big one in 2025; WHY2025. PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/ESLPUH/ Main stage Boekenwuurm PUBLISH XDY8PX@@program.wiccon.nl -XDY8PX Closing keynote - are we quiet quitting in Cyber? en en 20241031T180000 20241031T183000 0.03000

Closing keynote - are we quiet quitting in Cyber?

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/XDY8PX/ Main stage Jaya Baloo PUBLISH 8YBURU@@program.wiccon.nl -8YBURU NETWORKING DINNER & PARTY en en 20241031T183000 20241031T200000 1.03000

NETWORKING DINNER & PARTY

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/8YBURU/ Main stage PUBLISH PSGUEL@@program.wiccon.nl -PSGUEL WALK-IN & REGISTRATION en en 20241031T090000 20241031T100000 1.00000

WALK-IN & REGISTRATION

**Venue** Lichtfabriek, Energieplein 73, 2031 TC Haarlem, The Netherlands. **Parking** There is free street parking in the area, but as it is also an area with a lot of offices you may not be able to park in front of the venue on the street or maybe even have to walk a little bit. Another option is reserving a spot on the Haarlemmer Stroom parking terrain via [Mobypark](https://www.mobypark.com/nl/parkeerplaats/3967/parkeren-haarlemmerstroom-lichtfabriek-haarlem-parkeerplaats-haarlem-netherlands) or [ParkBee](https://maps-web.parkbee.com/nl/pages/garage-details/cfc97531-dbb9-4027-a7dc-9b6ddbd61b64?garageName=Haarlemmer%20Stroom&city=Haarlem&startTime=2024-10-15T13:45:00.000Z&endTime=2024-10-15T15:45:00.000Z&zoneNumber=27192&product=prepaid&address=My%20Way%20Parkeren%20Haarlemmer%20Stroom,%202031%20TD%20Haarlem,%20Netherlands&pbSessionId=1728998358490). **Public transport** Travel to Haarlem station, please check your route in advance because there is some maintenance on the tracks at Haarlem during WICCON. From Haarlem station there are 2 options to get to De Lichtfabriek: 1. Walking. De Lichtfabriek is 1 km away from the station. This is about a 13-minute walk. 2. By bike. You can rent an OV-fiets at Haarlem station. By bike you can reach De Lichtfabriek within 5 minutes. **Registration** Keep your ticket at hand, it was sent to you from tickets@eventix.nl **Badge** Once again this year you will get a badge from us, this time it will have plenty of space for SAO's, so bring them if you have them :) **Dress code** We don't have a dress code, but since we do WICCON during Halloween you are allowed to come dressed up! PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/PSGUEL/ Workshops PUBLISH NSBN3N@@program.wiccon.nl -NSBN3N Serious gaming for behavioural change. en en 20241031T103000 20241031T113000 1.00000

Serious gaming for behavioural change.

PUBLIC CONFIRMED Workshop 60 minutes https://program.wiccon.nl/wiccon-2024/talk/NSBN3N/ Workshops Nancy Beers Karen Sikkema PUBLISH KTVF3E@@program.wiccon.nl -KTVF3E Hackshield en en 20241031T113000 20241031T123000 1.00000

Hackshield

PUBLIC CONFIRMED Workshop 60 minutes https://program.wiccon.nl/wiccon-2024/talk/KTVF3E/ Workshops Emily Jacometti PUBLISH L37CN3@@program.wiccon.nl -L37CN3 LUNCH en en 20241031T130000 20241031T140000 1.00000

LUNCH

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ Workshops PUBLISH W8ZCGW@@program.wiccon.nl -W8ZCGW Defender Chronicles: the defeat of the ransomware curse en en 20241031T140000 20241031T160000 2.00000

Defender Chronicles: the defeat of the ransomware curse

PUBLIC CONFIRMED Workshop 120 minutes https://program.wiccon.nl/wiccon-2024/talk/W8ZCGW/ Workshops Maresa Vermulst Martine Koch PUBLISH X9JMK9@@program.wiccon.nl -X9JMK9 BREAK en en 20241031T160000 20241031T163000 0.03000

BREAK

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ Workshops PUBLISH KYX8V7@@program.wiccon.nl -KYX8V7 100 Ways to Die at Work en en 20241031T163000 20241031T173000 1.00000

100 Ways to Die at Work

PUBLIC CONFIRMED Workshop 60 minutes https://program.wiccon.nl/wiccon-2024/talk/KYX8V7/ Workshops Tamara Onos PUBLISH TJADYK@@program.wiccon.nl -TJADYK Conversation Starters & Security & Privacy Skill Games en en 20241031T173000 20241031T183000 1.00000

Conversation Starters & Security & Privacy Skill Games

Conversation Starters & Security & Privacy Skill Games How do you handle dilemmas in information security? Test your knowledge and decision-making skills with our Conversation Starter game, where you'll face challenging scenarios designed to put your critical thinking and information security skills to the test. Do you dare to make the right decisions to protect your organization? Find out with the Awareways Conversation Starter Game! Knowledge is the foundation, but the ability to apply that knowledge and refine your skills is the key to success. Practice makes perfect, after all. With this principle in mind—and inspired by various learning theories—Awareways has developed multiple Security & Privacy Skill Games. In a safe and engaging environment, you'll have the chance to elevate your skills. On Wiccon, you can play Clickventure, Risky Business, or Handle With Care in the gamified online learning environment, Wave. Save the company party by identifying all fraudulent links in Clickventure. Train the latest invention and teach it to assess risks in Risky Business. After a lightning strike, Privacy Inc. has gone offline—in Handle With Care, it's up to you to get the information systems back up and running. Did you know that these games are also available as arcade cabinets? Stop by for more info! ? PUBLIC CONFIRMED Workshop 60 minutes https://program.wiccon.nl/wiccon-2024/talk/TJADYK/ Workshops Za-Zie Kuipers Yaren Cirit PUBLISH 9RMGC7@@program.wiccon.nl -9RMGC7 WALK-IN en en 20241101T090000 20241101T100000 1.00000

WALK-IN

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/9RMGC7/ Main stage PUBLISH J7DJNM@@program.wiccon.nl -J7DJNM Mission: Impossible - Chatcontrol en en 20241101T100000 20241101T110000 1.00000

Mission: Impossible - Chatcontrol

The regulation aims to create a system for detecting and reporting online CSAM and so the last two years the EU plans to counter CSAM revolve around breaking encryption (via backdoors) and clientside scanning. If you've heard of it, you probably know the ideas by the name 'Chat Control'. So far, members states are divided because of details, but they seem to be getting closer to passing new rules. Hungary, which took up the rotating Council presidency for six months starting July 1st, is keen to work further on the topic. But what exactly does it mean (spoiler, it's not just about your chat messages), what impact could it have? In this talk I will address the scope of the plans and their possible impact, the legal side, the technical side and the human factor and what could be a reasonable approach with an emphasis on solid security and privacy. PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/J7DJNM/ Main stage Helma de Boer PUBLISH VTSDJT@@program.wiccon.nl -VTSDJT A crash-course in container security: what is a container and what does it have to do with security? en en 20241101T110000 20241101T113000 0.03000

A crash-course in container security: what is a container and what does it have to do with security?

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/VTSDJT/ Main stage Irina Chiscop PUBLISH CCHBRX@@program.wiccon.nl -CCHBRX Running Forward: Year 1 of Building a CTI capability for a Sportswear Brand en en 20241101T113000 20241101T120000 0.03000

Running Forward: Year 1 of Building a CTI capability for a Sportswear Brand

In "Running Forward: Year 1 of Building a CTI capability for a Sportswear Brand," Jennifer Wennekers will discuss ASICS’ recently started Cyber Threat Intelligence (CTI) journey. She will cover the evolution of ASICS' CTI capability, including the initial ad-hoc phase and the subsequent development of a formal capability. Jennifer will address the strategic, operational, and tactical aspects of intelligence and how ASICS integrates them with their security and business capabilities, while also highlighting the challenges and opportunities encountered. Additionally, she will touch on stakeholder management, the role of technology and tools, and the process of generating internal threat reports. Finally, she will reflect on the lessons learned in the first year and outline ASICS' planned next steps in the CTI journey. PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/CCHBRX/ Main stage Jennifer Wennekers PUBLISH CQ333M@@program.wiccon.nl -CQ333M When artificial becomes authentic, how do I prove I am me? en en 20241101T120000 20241101T123000 0.03000

When artificial becomes authentic, how do I prove I am me?

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/CQ333M/ Main stage Nicole van der Meulen PUBLISH SDGSCJ@@program.wiccon.nl -SDGSCJ Build your own role-playing game: the business continuity drill en en 20241101T123000 20241101T130000 0.03000

Build your own role-playing game: the business continuity drill

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/SDGSCJ/ Main stage Janna Brummel PUBLISH L37CN3@@program.wiccon.nl -L37CN3 LUNCH en en 20241101T130000 20241101T140000 1.00000

LUNCH

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ Main stage PUBLISH JMRPSX@@program.wiccon.nl -JMRPSX Charting The Course: Navigating Maritime Cybersecurity en en 20241101T140000 20241101T144500 0.04500

Charting The Course: Navigating Maritime Cybersecurity

PUBLIC CONFIRMED Talk 45 minutes https://program.wiccon.nl/wiccon-2024/talk/JMRPSX/ Main stage Anna Prudnikova PUBLISH XVGYKK@@program.wiccon.nl -XVGYKK Abacus: Software for Secure and Transparent Voting Results en en 20241101T144500 20241101T153000 0.04500

Abacus: Software for Secure and Transparent Voting Results

The Dutch Electoral Council is developing new election software in-house. For security and transparency, voting in the Netherlands still happens on paper and the ballots are still counted by hand, but that doesn't mean that no software is involved at all. Once the ballots are counted for each polling station, a piece of software sums up all the counts and determines the distribution of seats. With the necessary checks and balances in place to ensure the results are trustworthy, of course. As such, it's a interesting piece of software. It's not used very often. There's on average one election per year, during which the software is used for a period of only two weeks. And it doesn't run in the cloud, it runs air-gapped at each of the 342 Dutch municipalities. Last year the Dutch Electoral Council gathered a team of nerds and asked us to help build this new election software: 'Abacus Software voor verkiezingsuitslagen en zetelverdeling', or Abacus for short. The contrast between the importance of election software and its incidental use makes for interesting security challenges. Our challenge is not to just build an application that runs correctly and securely, but there is also the human factor to take into account. We aim for high usability, making sure the application supports the municipalities as best as possible during the stressful times of running elections, and due to its short usage period it's important that we get it right the first time. This means catching and preventing security threats to the software itself, such as bugs, vulnerabilities, and user errors. On top of that, the physical (paper) trail needs to be protected as well. We will talk about both aspects of security and explain how we strive to make software that follows the core values of the Dutch Electoral Council: delivering trustworthy and verifiable election results with transparency and integrity. The talk we want to give will start with some background about the Dutch Electoral Council and why we're building the software. We will present a summary of the languages and technologies we're using, and we will explain our reasoning for the choices we've made. As mentioned in the previous paragraph, we will detail what cyber and non-cyber security threats and concerns this project entails, and how we plan to address them. Last but not least, we will present a clickable demo that paints a clear picture of the software and what it aims to do. As we are looking for input on the best way to approach security measures and address threats, along with any other useful input, we would love to be able to present this at Wiccon. PUBLIC CONFIRMED Talk 45 minutes https://program.wiccon.nl/wiccon-2024/talk/XVGYKK/ Main stage Marjolein Tamis Ellen van Leeuwen PUBLISH RXP8XF@@program.wiccon.nl -RXP8XF Building an Appsec Program from Scratch en en 20241101T153000 20241101T160000 0.03000

Building an Appsec Program from Scratch

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/RXP8XF/ Main stage Mireia Cano PUBLISH X9JMK9@@program.wiccon.nl -X9JMK9 BREAK en en 20241101T160000 20241101T163000 0.03000

BREAK

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ Main stage PUBLISH 8FSEZ9@@program.wiccon.nl -8FSEZ9 IR to CTI - the other side of the coin en en 20241101T163000 20241101T170000 0.03000

IR to CTI - the other side of the coin

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/8FSEZ9/ Main stage Daniela PUBLISH JQHTJK@@program.wiccon.nl -JQHTJK A Glimpse into the World of ICS Monitoring en en 20241101T170000 20241101T173000 0.03000

A Glimpse into the World of ICS Monitoring

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/JQHTJK/ Main stage Dominika Rusek Jonkers PUBLISH QJQTHB@@program.wiccon.nl -QJQTHB Who Watches the Watchmen? Stealing Credentials from Policy-as-Code Engines (and beyond) en en 20241101T173000 20241101T180000 0.03000

Who Watches the Watchmen? Stealing Credentials from Policy-as-Code Engines (and beyond)

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/QJQTHB/ Main stage Shelly Raban PUBLISH QKZDGT@@program.wiccon.nl -QKZDGT Closing en en 20241101T180000 20241101T183000 0.03000

Closing

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/QKZDGT/ Main stage Chantal Stekelenburg VM PUBLISH AW9MXA@@program.wiccon.nl -AW9MXA VRIJMIBO en en 20241101T183000 20241101T193000 1.00000

VRIJMIBO

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/AW9MXA/ Main stage PUBLISH 9RMGC7@@program.wiccon.nl -9RMGC7 WALK-IN en en 20241101T090000 20241101T100000 1.00000

WALK-IN

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/9RMGC7/ Workshops PUBLISH 8VRJN3@@program.wiccon.nl -8VRJN3 Introduction to Industrial Control Systems: Hands-On Hacking en en 20241101T100000 20241101T120000 2.00000

Introduction to Industrial Control Systems: Hands-On Hacking

You'll get practical experience with our "Factory in a Suitcase"—a fully virtualized environment where you can safely explore and hack critical industrial protocols. We’ll guide you through: - **ICS Basics:** Understand what a PLC is and how it operates within real-world industrial settings, illustrated with personal examples. - **Hacking:** Gain hands-on experience hacking the Modbus protocol, allowing you to control devices like switching a lamp on or off in a virtualized environment. We'll also delve into the basics of hacking the Siemens S7 protocol. - **Reverse Engineering:** Get an introduction to the basics of reverse engineering firmware files. You'll work with older ABB software, learning how to extract passwords and explore the fascinating backstory behind these devices. - **Do’s and Don’ts:** Learn the essential best practices and common pitfalls in the world of Operational Technology (OT) security. **Requirements:** Participants must bring a laptop with Kali Linux installed. All other tools and materials will be provided. This workshop is perfect for those looking to build a strong foundation in ICS security, with practical skills that can be applied in real-world scenarios. Don't miss out on this unique opportunity to get hands-on with the technology that drives today's industrial systems. PUBLIC CONFIRMED Workshop 120 minutes https://program.wiccon.nl/wiccon-2024/talk/8VRJN3/ Workshops Marc Visser PUBLISH L37CN3@@program.wiccon.nl -L37CN3 LUNCH en en 20241101T130000 20241101T140000 1.00000

LUNCH

PUBLIC CONFIRMED Talk 60 minutes https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ Workshops PUBLISH AQBQJE@@program.wiccon.nl -AQBQJE Hâck The Hague: making impact with your vulnerability reports en en 20241101T140000 20241101T150000 1.00000

Hâck The Hague: making impact with your vulnerability reports

In order to stay resilient to cyber threats, we need to work together. The hacking competition Hâck The Hague is an example of working together with professional and student hackers, where the goal is to try to find vulnerabilities and fix them together with hacker, municipality and suppliers. But what are we, as an organization, looking for in the vulnerability reports? And what do you as hacker find important? Both from a business and technical perspective, in this workshop we will figure that out! PUBLIC CONFIRMED Workshop 60 minutes https://program.wiccon.nl/wiccon-2024/talk/AQBQJE/ Workshops Lilian Knippenberg Reinout Hoornweg PUBLISH X9JMK9@@program.wiccon.nl -X9JMK9 BREAK en en 20241101T160000 20241101T163000 0.03000

BREAK

PUBLIC CONFIRMED Talk 30 minutes https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ Workshops PUBLISH EUYBAS@@program.wiccon.nl -EUYBAS Is Telegram the new darkweb? en en 20241101T163000 20241101T173000 1.00000

Is Telegram the new darkweb?

PUBLIC CONFIRMED Workshop 60 minutes https://program.wiccon.nl/wiccon-2024/talk/EUYBAS/ Workshops Laura Pavias Maike Borst