1.9 wiccon-2024 2024-10-31 2024-11-01 2 00:05 https://program.wiccon.nl https://program.wiccon.nl/media/wiccon-2024/img/Somethings-brewing2x_XLkNDpz.png Europe/Amsterdam Main stage Talk 60 minutes 2024-10-31T09:00:00+01:00 09:00 01:00 Time to get to the venue, hang your coat, get your badge and get some coffee or tea. wiccon-2024-111-0-walk-in-registration en **Venue** Lichtfabriek, Energieplein 73, 2031 TC Haarlem, The Netherlands. **Parking** There is free street parking in the area, but as it is also an area with a lot of offices you may not be able to park in front of the venue on the street or maybe even have to walk a little bit. Another option is reserving a spot on the Haarlemmer Stroom parking terrain via [Mobypark](https://www.mobypark.com/nl/parkeerplaats/3967/parkeren-haarlemmerstroom-lichtfabriek-haarlem-parkeerplaats-haarlem-netherlands) or [ParkBee](https://maps-web.parkbee.com/nl/pages/garage-details/cfc97531-dbb9-4027-a7dc-9b6ddbd61b64?garageName=Haarlemmer%20Stroom&city=Haarlem&startTime=2024-10-15T13:45:00.000Z&endTime=2024-10-15T15:45:00.000Z&zoneNumber=27192&product=prepaid&address=My%20Way%20Parkeren%20Haarlemmer%20Stroom,%202031%20TD%20Haarlem,%20Netherlands&pbSessionId=1728998358490). **Public transport** Travel to Haarlem station, please check your route in advance because there is some maintenance on the tracks at Haarlem during WICCON. From Haarlem station there are 2 options to get to De Lichtfabriek: 1. Walking. De Lichtfabriek is 1 km away from the station. This is about a 13-minute walk. 2. By bike. You can rent an OV-fiets at Haarlem station. By bike you can reach De Lichtfabriek within 5 minutes. **Registration** Keep your ticket at hand, it was sent to you from tickets@eventix.nl **Badge** Once again this year you will get a badge from us, this time it will have plenty of space for SAO's, so bring them if you have them :) **Dress code** We don't have a dress code, but since we do WICCON during Halloween you are allowed to come dressed up! false https://program.wiccon.nl/wiccon-2024/talk/PSGUEL/ https://program.wiccon.nl/wiccon-2024/talk/PSGUEL/feedback/ Main stage Talk 30 minutes 2024-10-31T10:00:00+01:00 10:00 00:30 Opening of WICCON2024 wiccon-2024-107-opening Talks Chantal StekelenburgVMDaniëlle WagemakersJaimy ThepassFaith Opiyo en false https://program.wiccon.nl/wiccon-2024/talk/HBXDNG/ https://program.wiccon.nl/wiccon-2024/talk/HBXDNG/feedback/ Main stage Talk 60 minutes 2024-10-31T10:30:00+01:00 10:30 01:00 In the Netherlands we have a long standing tradition of voting using the red pencil and paper. But historically we have had a good decade where we voted using votingmachines/computers. The reason we went back to the paper way has everything to do with some very critical hackers. The result of their important work and effort is still relevant today. In this talk you will learn a little bit about the history of votingmachines in the Netherlands, what hackers had to do with them and what the challenges are that we face when trying to digitalize the voting proces. wiccon-2024-50-hacking-the-vote-why-the-paper-trail-matters-in-elections Talks /media/wiccon-2024/submissions/RV9HCB/Fleur_van_Leusden-70695_23mgqiV.jpg Fleur van Leusden en false https://program.wiccon.nl/wiccon-2024/talk/RV9HCB/ https://program.wiccon.nl/wiccon-2024/talk/RV9HCB/feedback/ Main stage Talk 30 minutes 2024-10-31T11:30:00+01:00 11:30 00:30 Imagine facing a list of the most commonly used malware variants for initial access. As the Dutch Police, where would you begin your investigation? In this talk, I will guide you through one of the investigations from Operation Endgame, where we began with just the name of the malware: IcedID. I will illustrate the complexities involved in tracking and dismantling the malware infrastructure, as well as apprehending the cybercriminals behind it. wiccon-2024-100-melting-the-ice-heating-up-the-icedid-infrastructure Talks Ilse Ruesink en Operation Endgame was a collaborative effort involving international law enforcement agencies, judicial authorities, and private industry, aimed at dismantling several key botnets that played a critical role in cybercrime. This operation enabled us to simultaneously take down these botnets and disrupt the infrastructure used by cybercriminals. Initially designed as a banking Trojan, IcedID has expanded its capabilities to include credential theft, financial fraud, and serving as a delivery mechanism for secondary threats such as ransomware. In this talk, I will provide a detailed analysis of its architecture, focusing on its modular design, command-and-control (C2) infrastructure, and our investigative findings. I will also highlight the collaborative efforts between law enforcement agencies and cybersecurity professionals in effectively combating the threat posed by IcedID. This includes the importance of threat intelligence sharing and the role of international cooperation in dismantling cybercrime networks. true https://program.wiccon.nl/wiccon-2024/talk/BW3JVQ/ https://program.wiccon.nl/wiccon-2024/talk/BW3JVQ/feedback/ Main stage Talk 60 minutes 2024-10-31T12:00:00+01:00 12:00 01:00 Prepare for a dynamic and engaging presentation by two field specialists (Diana Makienko: Business Information Security Officer (BISO) at Swift and Lucile Renhas: Insider Risk Consultant at Signpost Six). This session will blend theoretical insights, academic studies, and real-life examples to provide a comprehensive understanding of insider risk. Attendees will uncover hidden risks within their organisation and learn how to effectively combat insider threats. This session will equip them with the knowledge and tools to enhance their organisation's resilience, ensuring a holistic approach to security. wiccon-2024-61-inside-job-tackling-insider-risk-from-all-angles Talks Diana MakienkoLucile Renhas en In today's threat landscape, insider risk remains a critical yet often overlooked issue. While cybersecurity professionals have primarily focused on external threats, experience has shown that these measures are far from sufficient. Our presentation will delve into the complexities of managing malicious insider threats, highlighting the unique challenges organisations face in detection and mitigation. We will discuss the rise of awareness in Europe, contrasting it with the US focus on technical tools and Europe's emphasis on employee protection and privacy. Key topics include: • The portrait of a malicious insider: Understanding these characteristics, personal traits, and motives that drive people to commit insider crimes. • Balanced Approach: Combining technical tools with employee protection, favouring in-house capacity building over-reliance on large American providers. • Comprehensive Mitigation: Addressing Governance & Culture, IT & Physical Security, Employee and Third-Party Management, and Training & Communication, with an emphasis on the importance of employee awareness and training against social engineering. false https://program.wiccon.nl/wiccon-2024/talk/FFCVZK/ https://program.wiccon.nl/wiccon-2024/talk/FFCVZK/feedback/ Main stage Talk 60 minutes 2024-10-31T13:00:00+01:00 13:00 01:00 Lunch wiccon-2024-108-0-lunch en false https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ https://program.wiccon.nl/wiccon-2024/talk/L37CN3/feedback/ Main stage Talk 45 minutes 2024-10-31T14:00:00+01:00 14:00 00:45 Neurodiversity as your superpower. wiccon-2024-64-turning-neurodiversity-into-a-strength Talks Tirza en What's a topic that's as critical as finding your phone charger when it’s on 1% ? The shortage of cybersecurity professionals. But here's the twist: is there really a shortage, or are we just looking for talent in all the wrong places with outdated criteria? I'll share my personal journey of being diagnosed with autism later in life and starting a cybersecurity career without traditional diplomas. This talk is aimed at employers to educate them on neurodiversity, helping them understand why some individuals may lack formal qualifications and how to successfully integrate these talented people into their teams. false https://program.wiccon.nl/wiccon-2024/talk/7UJDQF/ https://program.wiccon.nl/wiccon-2024/talk/7UJDQF/feedback/ Main stage Talk 45 minutes 2024-10-31T14:45:00+01:00 14:45 00:45 In this talk we’ll examine Apple’s AirDrop functionality from a forensic perspective. We will look at the various forensic artefacts an AirDrop file transfer creates, including unified logs, file metadata, extended attributes and the quarantine database, as well as how to find and analyse them. We will also discuss some of the privacy & security concerns regarding the protocol behind AirDrop. wiccon-2024-92-airdrop-forensics Talks Kinga Kieczkowska en Talk outline: - What is AirDrop & how the technology works - Existing AirDrop security issues - Forensics artefacts created by an AirDrop transfer false https://program.wiccon.nl/wiccon-2024/talk/R3DYWZ/ https://program.wiccon.nl/wiccon-2024/talk/R3DYWZ/feedback/ Main stage Talk 30 minutes 2024-10-31T15:30:00+01:00 15:30 00:30 Achieving lasting behavioural change is crucial for reducing the human risk element in cybersecurity. However, many decision-makers in cybersecurity are ill-equipped to identify which buttons to push to foster truly cyber-safe behaviour. In presentation, based on research involving over 6,000 employees and insights from the human risk management movement, I challenge the gut feelings that often inform behaviour programs and advocate for a measurement-driven approach to inform interventions. I willl provide practical advice for implementing this approach, including the use of user experience tests, questionnaires, and existing data sources. These tools can inform decisions about effective behavioural interventions. By shifting from intuition to evidence, we can fortify the human element in cybersecurity more effectively. wiccon-2024-74-metrics-matter-in-effective-human-risk-management Talks /media/wiccon-2024/submissions/37QRBX/Slide1_K8HDkNP.jpeg Gerine Lodder en false https://program.wiccon.nl/wiccon-2024/talk/37QRBX/ https://program.wiccon.nl/wiccon-2024/talk/37QRBX/feedback/ Main stage Talk 30 minutes 2024-10-31T16:00:00+01:00 16:00 00:30 Break wiccon-2024-109-0-break en false https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/feedback/ Main stage Talk 30 minutes 2024-10-31T16:30:00+01:00 16:30 00:30 The Cyber Resilience Act is an upcoming EU cybersecurity legislation. It is designed to make sure products with digital elements are developed more securely, ultimately protecting consumers all over Europe. It supplements the existing legal framework for the CE mark (EU declaration of conformity) for security properties. The Cyber Resilience Act marks the first-ever EU-wide legislation of its kind, mandating cybersecurity requirements for both hardware and software products throughout their entire life cycle. This presentation will give an overview of everything you need to know now about the regulation. wiccon-2024-53-how-to-navigate-the-cyber-resilience-act Talks Raluca Viziteu en false https://program.wiccon.nl/wiccon-2024/talk/E9STQ8/ https://program.wiccon.nl/wiccon-2024/talk/E9STQ8/feedback/ Main stage Talk 60 minutes 2024-10-31T17:00:00+01:00 17:00 01:00 Dutch Hacker Camp culture is deeply rooted in the ethos of openness, collaboration, and exploration. These camps are typically organized by volunteers from various hacker and maker communities in the Netherlands and attract participants from all over the world who are interested in technology, hacking, DIY culture, and digital freedom. They have a rich history and in this talk, an overview of this history is given . wiccon-2024-60-from-galactic-hacker-party-1989-to-why2025-the-history-future-and-importance-of-dutch-hacker-camps- Talks Boekenwuurm en Dutch Hacker Camp is part of the larger series of international hacker camps, including the Chaos Communication Camp (Germany) and the Electromagnetic Field (UK). These camps often feature a diverse range of activities including workshops, talks, hacking competitions, art installations, and social gatherings. Attendees can learn about topics such as computer security, hardware hacking, cryptography, privacy, and free software. Over the years, Dutch Hacker Camps have evolved and grown in size and popularity, attracting not only hackers and tech enthusiasts but also artists, activists, educators, and others who are passionate about exploring the intersection of technology and society. Overall, Dutch Hacker Camps play an important role in fostering a sense of community, promoting innovation and creativity, and advocating for digital rights and freedoms. They provide a unique space for people to come together, learn from each other, and collaborate on projects that push the boundaries of technology and imagination. This talk will take you through the history of Dutch Hacker Camps, and prepares you for the next big one in 2025; WHY2025. false https://program.wiccon.nl/wiccon-2024/talk/ESLPUH/ https://program.wiccon.nl/wiccon-2024/talk/ESLPUH/feedback/ Main stage Talk 30 minutes 2024-10-31T18:00:00+01:00 18:00 00:30 Despite the array of incentives—from subsidies and grants to regulations, DARPA challenges, and X Prizes—cybersecurity remains a persistent and evolving problem. With so many efforts aimed at fixing the vulnerabilities in our digital landscape, why do we still struggle to get it right? wiccon-2024-96-closing-keynote-are-we-quiet-quitting-in-cyber- Talks Jaya Baloo en false https://program.wiccon.nl/wiccon-2024/talk/XDY8PX/ https://program.wiccon.nl/wiccon-2024/talk/XDY8PX/feedback/ Main stage Talk 60 minutes 2024-10-31T18:30:00+01:00 18:30 01:30 Networking dinner and a little party wiccon-2024-115-networking-dinner-party en false https://program.wiccon.nl/wiccon-2024/talk/8YBURU/ https://program.wiccon.nl/wiccon-2024/talk/8YBURU/feedback/ Workshops Talk 60 minutes 2024-10-31T09:00:00+01:00 09:00 01:00 Time to get to the venue, hang your coat, get your badge and get some coffee or tea. wiccon-2024-111-1-walk-in-registration en **Venue** Lichtfabriek, Energieplein 73, 2031 TC Haarlem, The Netherlands. **Parking** There is free street parking in the area, but as it is also an area with a lot of offices you may not be able to park in front of the venue on the street or maybe even have to walk a little bit. Another option is reserving a spot on the Haarlemmer Stroom parking terrain via [Mobypark](https://www.mobypark.com/nl/parkeerplaats/3967/parkeren-haarlemmerstroom-lichtfabriek-haarlem-parkeerplaats-haarlem-netherlands) or [ParkBee](https://maps-web.parkbee.com/nl/pages/garage-details/cfc97531-dbb9-4027-a7dc-9b6ddbd61b64?garageName=Haarlemmer%20Stroom&city=Haarlem&startTime=2024-10-15T13:45:00.000Z&endTime=2024-10-15T15:45:00.000Z&zoneNumber=27192&product=prepaid&address=My%20Way%20Parkeren%20Haarlemmer%20Stroom,%202031%20TD%20Haarlem,%20Netherlands&pbSessionId=1728998358490). **Public transport** Travel to Haarlem station, please check your route in advance because there is some maintenance on the tracks at Haarlem during WICCON. From Haarlem station there are 2 options to get to De Lichtfabriek: 1. Walking. De Lichtfabriek is 1 km away from the station. This is about a 13-minute walk. 2. By bike. You can rent an OV-fiets at Haarlem station. By bike you can reach De Lichtfabriek within 5 minutes. **Registration** Keep your ticket at hand, it was sent to you from tickets@eventix.nl **Badge** Once again this year you will get a badge from us, this time it will have plenty of space for SAO's, so bring them if you have them :) **Dress code** We don't have a dress code, but since we do WICCON during Halloween you are allowed to come dressed up! false https://program.wiccon.nl/wiccon-2024/talk/PSGUEL/ https://program.wiccon.nl/wiccon-2024/talk/PSGUEL/feedback/ Workshops Workshop 60 minutes 2024-10-31T10:30:00+01:00 10:30 01:00 Serious game expert Nancy Beers and Karen Sikkema will show you the super power of using games and playfulness to raise security awareness and use playfulness as an educational tool. wiccon-2024-104-serious-gaming-for-behavioural-change- Workshops Nancy BeersKaren Sikkema en false https://program.wiccon.nl/wiccon-2024/talk/NSBN3N/ https://program.wiccon.nl/wiccon-2024/talk/NSBN3N/feedback/ Workshops Workshop 60 minutes 2024-10-31T11:30:00+01:00 11:30 01:00 During Emily Jacometti's demo at Wiccon, you’ll walk away with key takeaways, including: - A deep understanding of HackShield’s mission and how it positively impacts digital safety for children. - Insights into how gamification and storytelling can make education fun and engaging. - Practical steps on how to become a guest teacher and contribute to the movement. - A clear vision of how HackShield is creating societal change and fostering future talent in tech. Don't miss the chance to learn how you can be part of this impactful initiative! wiccon-2024-113-hackshield Workshops Emily Jacometti en false https://program.wiccon.nl/wiccon-2024/talk/KTVF3E/ https://program.wiccon.nl/wiccon-2024/talk/KTVF3E/feedback/ Workshops Talk 60 minutes 2024-10-31T13:00:00+01:00 13:00 01:00 Lunch wiccon-2024-108-1-lunch en false https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ https://program.wiccon.nl/wiccon-2024/talk/L37CN3/feedback/ Workshops Workshop 120 minutes 2024-10-31T14:00:00+01:00 14:00 02:00 Explore the art of incident response. Join our D&D-style campaign to thwart the Cryptic Sorceress, recover the crown jewels, and gain resilience in the face of digital calamity. There will be a bit of humor and silliness, unexpected twists and turns and opportunity to learn a lot about incident response. But beware - victory isn’t guaranteed. wiccon-2024-79-defender-chronicles-the-defeat-of-the-ransomware-curse Workshops Maresa VermulstMartine Koch en false https://program.wiccon.nl/wiccon-2024/talk/W8ZCGW/ https://program.wiccon.nl/wiccon-2024/talk/W8ZCGW/feedback/ Workshops Talk 30 minutes 2024-10-31T16:00:00+01:00 16:00 00:30 Break wiccon-2024-109-1-break en false https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/feedback/ Workshops Workshop 60 minutes 2024-10-31T16:30:00+01:00 16:30 01:00 Education about hazardous substances doesn’t have to be dull—it can be engaging and fun! In this interactive session, discover how "100 Ways to Die at Work", a serious game, tackles critical safety issues in an innovative way: Protect your co-workers, ensure your own safety, and learn about hazard symbols, all at the same time. wiccon-2024-112-100-ways-to-die-at-work Workshops Tamara Onos en false https://program.wiccon.nl/wiccon-2024/talk/KYX8V7/ https://program.wiccon.nl/wiccon-2024/talk/KYX8V7/feedback/ Workshops Workshop 60 minutes 2024-10-31T17:30:00+01:00 17:30 01:00 How do you handle dilemmas in information security? Test your knowledge and decision-making skills with our Conversation Starter game, where you'll face challenging scenarios designed to put your critical thinking and information security skills to the test. wiccon-2024-120-conversation-starters-security-privacy-skill-games Workshops /media/wiccon-2024/submissions/TJADYK/AW_logo_RGB_Dark_KNGsnEJ.png Za-Zie KuipersYaren Cirit en Conversation Starters & Security & Privacy Skill Games How do you handle dilemmas in information security? Test your knowledge and decision-making skills with our Conversation Starter game, where you'll face challenging scenarios designed to put your critical thinking and information security skills to the test. Do you dare to make the right decisions to protect your organization? Find out with the Awareways Conversation Starter Game! Knowledge is the foundation, but the ability to apply that knowledge and refine your skills is the key to success. Practice makes perfect, after all. With this principle in mind—and inspired by various learning theories—Awareways has developed multiple Security & Privacy Skill Games. In a safe and engaging environment, you'll have the chance to elevate your skills. On Wiccon, you can play Clickventure, Risky Business, or Handle With Care in the gamified online learning environment, Wave. Save the company party by identifying all fraudulent links in Clickventure. Train the latest invention and teach it to assess risks in Risky Business. After a lightning strike, Privacy Inc. has gone offline—in Handle With Care, it's up to you to get the information systems back up and running. Did you know that these games are also available as arcade cabinets? Stop by for more info! ? false https://program.wiccon.nl/wiccon-2024/talk/TJADYK/ https://program.wiccon.nl/wiccon-2024/talk/TJADYK/feedback/ Main stage Talk 60 minutes 2024-11-01T09:00:00+01:00 09:00 01:00 Time to get to the venue, hang your coat and get some coffee or tea. wiccon-2024-110-0-walk-in en false https://program.wiccon.nl/wiccon-2024/talk/9RMGC7/ https://program.wiccon.nl/wiccon-2024/talk/9RMGC7/feedback/ Main stage Talk 60 minutes 2024-11-01T10:00:00+01:00 10:00 01:00 The EU wants to address digital CSAM (Child Sexual Abuse Material). Their ideas of getting rid of it direct us into a minefield of problems, as the current plans would lead to an unparalleled surveillance of 450 million EU citizens, while it is not clear what it can bring. It is a topic that seems to contrast the protection of privacy versus the protection of children. But is that really the case? And are there other solutions? wiccon-2024-62-mission-impossible-chatcontrol Talks /media/wiccon-2024/submissions/J7DJNM/BrokenGlass_fE8qYeq.jpg Helma de Boer en The regulation aims to create a system for detecting and reporting online CSAM and so the last two years the EU plans to counter CSAM revolve around breaking encryption (via backdoors) and clientside scanning. If you've heard of it, you probably know the ideas by the name 'Chat Control'. So far, members states are divided because of details, but they seem to be getting closer to passing new rules. Hungary, which took up the rotating Council presidency for six months starting July 1st, is keen to work further on the topic. But what exactly does it mean (spoiler, it's not just about your chat messages), what impact could it have? In this talk I will address the scope of the plans and their possible impact, the legal side, the technical side and the human factor and what could be a reasonable approach with an emphasis on solid security and privacy. false https://program.wiccon.nl/wiccon-2024/talk/J7DJNM/ https://program.wiccon.nl/wiccon-2024/talk/J7DJNM/feedback/ Main stage Talk 30 minutes 2024-11-01T11:00:00+01:00 11:00 00:30 Nowadays container technology has become a key component of modern software development and deployment practices. In this talk, we will talk about how containers work, what are the security risks that come with them, and how to address these. No specific background required in order to follow this presentation :) wiccon-2024-80-a-crash-course-in-container-security-what-is-a-container-and-what-does-it-have-to-do-with-security- Talks Irina Chiscop en false https://program.wiccon.nl/wiccon-2024/talk/VTSDJT/ https://program.wiccon.nl/wiccon-2024/talk/VTSDJT/feedback/ Main stage Talk 30 minutes 2024-11-01T11:30:00+01:00 11:30 00:30 In the presentation "Running Forward: Year 1 of Building a CTI capability for a Sportswear Brand" Jennifer Wennekers will discuss ASICS' ongoing Cyber Threat Intelligence (CTI) journey, including the evolution of their CTI capability, challenges, opportunities, stakeholder management, technology, and future plans. wiccon-2024-55-running-forward-year-1-of-building-a-cti-capability-for-a-sportswear-brand Talks Jennifer Wennekers en In "Running Forward: Year 1 of Building a CTI capability for a Sportswear Brand," Jennifer Wennekers will discuss ASICS’ recently started Cyber Threat Intelligence (CTI) journey. She will cover the evolution of ASICS' CTI capability, including the initial ad-hoc phase and the subsequent development of a formal capability. Jennifer will address the strategic, operational, and tactical aspects of intelligence and how ASICS integrates them with their security and business capabilities, while also highlighting the challenges and opportunities encountered. Additionally, she will touch on stakeholder management, the role of technology and tools, and the process of generating internal threat reports. Finally, she will reflect on the lessons learned in the first year and outline ASICS' planned next steps in the CTI journey. false https://program.wiccon.nl/wiccon-2024/talk/CCHBRX/ https://program.wiccon.nl/wiccon-2024/talk/CCHBRX/feedback/ Main stage Talk 30 minutes 2024-11-01T12:00:00+01:00 12:00 00:30 In 2024, we have an extensive archive of cyber-related incidents illustrating the various forms of attacks that organizations and individuals face daily. Few things for veterans in the cyber domain can be considered 'surprising' or 'shocking,' and many believe not even AI is going to rock the boat. Cybercrime is, after all, an evolution, not a revolution, and at its core, we recognize its DNA. However, the advent of generative AI introduces unprecedented challenges in both scale and complexity, particularly in the realm of impersonation fraud and identity theft. This presentation aims to delve into how generative AI, with its ability to create highly convincing deepfakes and clone voices, is revolutionizing financial identity theft. We will explore what countermeasures, if any, are already being taken and how we can avoid situations where victims bear the reverse burden of proof. Drawing on my previous research into the facilitating factors of financial identity theft, I will examine how AI complicates an already complex issue and discuss potential strategies to mitigate these emerging threats. wiccon-2024-101-when-artificial-becomes-authentic-how-do-i-prove-i-am-me- Talks Nicole van der Meulen en false https://program.wiccon.nl/wiccon-2024/talk/CQ333M/ https://program.wiccon.nl/wiccon-2024/talk/CQ333M/feedback/ Main stage Talk 30 minutes 2024-11-01T12:30:00+01:00 12:30 00:30 Business continuity is a discipline where SRE and Security meet: they both care about mitigating risks and keeping services available and secure. Whereas it’s often clear how to engineers respond to and manage incident, disasters that threaten a business’ ability to operate their core functions (luckily) don’t occur that frequently and often involve a different group of decision makers. To improve any organization’s resiliency, it’s advisable to run business continuity drills without breaking all applications for our users: this is where simulations and tabletop drills can help you out. In this talk, Janna will share her experiences in creating and running a business continuity drill as a joint effort by Security and SRE teams at WeTransfer. She will share a step-by-step guide for creating a tabletop business continuity drill, including real-life examples, and what her team learned along the way. This way, the audience will leave with the knowledge required to become game masters of their own drills. wiccon-2024-52-build-your-own-role-playing-game-the-business-continuity-drill Talks Janna Brummel en false https://program.wiccon.nl/wiccon-2024/talk/SDGSCJ/ https://program.wiccon.nl/wiccon-2024/talk/SDGSCJ/feedback/ Main stage Talk 60 minutes 2024-11-01T13:00:00+01:00 13:00 01:00 Lunch wiccon-2024-108-2-lunch en false https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ https://program.wiccon.nl/wiccon-2024/talk/L37CN3/feedback/ Main stage Talk 45 minutes 2024-11-01T14:00:00+01:00 14:00 00:45 The proposed talk will focus on cybersecurity within the maritime industry and its intricate ties to Industrial Control Systems (ICS) domains. This session will dissect the essence of cybersecurity for ships, covering the spectrum from understanding threats and actual cyber attacks to fortifying networks, implementing risk management strategies, and offering actionable recommendations. We'll delve into the specifics, examining the unique challenges faced in securing maritime networks against unauthorized access and potential breaches. Additionally, we'll explore comprehensive risk management tactics tailored specifically for maritime operations, emphasizing the importance of proactive measures to address cybersecurity threats effectively. A highlight of this talk will be a compelling case study illustrating the intricacies of threat modeling for a cruise ship. By dissecting vulnerabilities and devising preventive measures, attendees will gain a tangible understanding of enhancing onboard security measures. Moreover, our discussion will extend beyond the maritime sphere, exploring the interconnected nature of cybersecurity across various ICS industries. Understanding these connections is pivotal in comprehending the broader implications and implementing collaborative strategies for a robust cybersecurity framework. wiccon-2024-86-charting-the-course-navigating-maritime-cybersecurity Talks Anna Prudnikova en false https://program.wiccon.nl/wiccon-2024/talk/JMRPSX/ https://program.wiccon.nl/wiccon-2024/talk/JMRPSX/feedback/ Main stage Talk 45 minutes 2024-11-01T14:45:00+01:00 14:45 00:45 The Dutch Electoral Council has gathered a team of nerds who are developing new election software, named Abacus, to support the process of counting votes during Dutch elections. This talk will focus on the security challenges and threats associated with the software itself and the process of determining election results. What can go wrong and what can we do about it? wiccon-2024-85-abacus-software-for-secure-and-transparent-voting-results Talks /media/wiccon-2024/submissions/XVGYKK/abacus_vkgwIws.png Marjolein TamisEllen van Leeuwen en The Dutch Electoral Council is developing new election software in-house. For security and transparency, voting in the Netherlands still happens on paper and the ballots are still counted by hand, but that doesn't mean that no software is involved at all. Once the ballots are counted for each polling station, a piece of software sums up all the counts and determines the distribution of seats. With the necessary checks and balances in place to ensure the results are trustworthy, of course. As such, it's a interesting piece of software. It's not used very often. There's on average one election per year, during which the software is used for a period of only two weeks. And it doesn't run in the cloud, it runs air-gapped at each of the 342 Dutch municipalities. Last year the Dutch Electoral Council gathered a team of nerds and asked us to help build this new election software: 'Abacus Software voor verkiezingsuitslagen en zetelverdeling', or Abacus for short. The contrast between the importance of election software and its incidental use makes for interesting security challenges. Our challenge is not to just build an application that runs correctly and securely, but there is also the human factor to take into account. We aim for high usability, making sure the application supports the municipalities as best as possible during the stressful times of running elections, and due to its short usage period it's important that we get it right the first time. This means catching and preventing security threats to the software itself, such as bugs, vulnerabilities, and user errors. On top of that, the physical (paper) trail needs to be protected as well. We will talk about both aspects of security and explain how we strive to make software that follows the core values of the Dutch Electoral Council: delivering trustworthy and verifiable election results with transparency and integrity. The talk we want to give will start with some background about the Dutch Electoral Council and why we're building the software. We will present a summary of the languages and technologies we're using, and we will explain our reasoning for the choices we've made. As mentioned in the previous paragraph, we will detail what cyber and non-cyber security threats and concerns this project entails, and how we plan to address them. Last but not least, we will present a clickable demo that paints a clear picture of the software and what it aims to do. As we are looking for input on the best way to approach security measures and address threats, along with any other useful input, we would love to be able to present this at Wiccon. false https://program.wiccon.nl/wiccon-2024/talk/XVGYKK/ https://program.wiccon.nl/wiccon-2024/talk/XVGYKK/feedback/ Main stage Talk 30 minutes 2024-11-01T15:30:00+01:00 15:30 00:30 In today's digital landscape, application security is crucial for safeguarding sensitive data and maintaining user trust. Without a robust AppSec program, or with one poorly implemented, chaos can ensue, leading to vulnerabilities and breaches. This talk explores our journey of establishing an AppSec program from the ground up. We will share the valuable lessons we learned along the way, detailing the obstacles we overcame and the cultural challenges we faced. Join us as we present real-world examples and best practices, offering practical guidance to help you navigate similar challenges and build a resilient AppSec program. wiccon-2024-57-building-an-appsec-program-from-scratch Talks Mireia Cano en false https://program.wiccon.nl/wiccon-2024/talk/RXP8XF/ https://program.wiccon.nl/wiccon-2024/talk/RXP8XF/feedback/ Main stage Talk 30 minutes 2024-11-01T16:00:00+01:00 16:00 00:30 Break wiccon-2024-109-3-break en false https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/feedback/ Main stage Talk 30 minutes 2024-11-01T16:30:00+01:00 16:30 00:30 The most relevant intel is intel which applies directly to our environment. It's also the most neglected source of intel. It has become my favourite subject during last few years. wiccon-2024-122-ir-to-cti-the-other-side-of-the-coin Talks Daniela en false https://program.wiccon.nl/wiccon-2024/talk/8FSEZ9/ https://program.wiccon.nl/wiccon-2024/talk/8FSEZ9/feedback/ Main stage Talk 30 minutes 2024-11-01T17:00:00+01:00 17:00 00:30 Network monitoring is standard practice in the corporate IT world, but what about monitoring industrial process networks? These networks operate factories, control energy grids, water dikes and support other essential aspects of our modern life and yet they often lag in security. In this session, we’ll dive into the deployment of ICS (Industrial Control Systems) monitoring solutions, the challenges we often face, lessons learned and of course what to look for once we gain the visibility! wiccon-2024-121-a-glimpse-into-the-world-of-ics-monitoring Talks Dominika Rusek Jonkers en false https://program.wiccon.nl/wiccon-2024/talk/JQHTJK/ https://program.wiccon.nl/wiccon-2024/talk/JQHTJK/feedback/ Main stage Talk 30 minutes 2024-11-01T17:30:00+01:00 17:30 00:30 If an attacker could execute arbitrary policies on a policy engine, would that pose a danger? Turns out, the answer is yes. Policy engines are crucial for enforcing compliance and security rules within business-critical processes, including Infrastructure-as-Code (IaC) deployments and Kubernetes operations. Our research focused on inherent risks associated with popular policy-as-code and IaC domain-specific languages (DSLs): OPA's Rego language and Terraform's Hashicorp Configuration Language (HCL). In this talk, we will explore and demonstrate malicious techniques targeting these DSLs, including novel methods such as DNS tunneling discovered during our research. We will discuss the adoption of these techniques by attackers and evaluate the effectiveness of current scanning tools against them. Finally, we will conclude by providing practical detection rules and best practices to safeguard PaC and IaC environments against such risks. wiccon-2024-69-who-watches-the-watchmen-stealing-credentials-from-policy-as-code-engines-and-beyond- Talks /media/wiccon-2024/submissions/QJQTHB/shelly-raban-400_eHUCQGP.png Shelly Raban en false https://program.wiccon.nl/wiccon-2024/talk/QJQTHB/ https://program.wiccon.nl/wiccon-2024/talk/QJQTHB/feedback/ Main stage Talk 30 minutes 2024-11-01T18:00:00+01:00 18:00 00:30 The closing of WICCON wiccon-2024-118-closing Talks Chantal StekelenburgVM en false https://program.wiccon.nl/wiccon-2024/talk/QKZDGT/ https://program.wiccon.nl/wiccon-2024/talk/QKZDGT/feedback/ Main stage Talk 60 minutes 2024-11-01T18:30:00+01:00 18:30 01:00 Friday afternoon networking drinks and some snacks wiccon-2024-117-vrijmibo en false https://program.wiccon.nl/wiccon-2024/talk/AW9MXA/ https://program.wiccon.nl/wiccon-2024/talk/AW9MXA/feedback/ Workshops Talk 60 minutes 2024-11-01T09:00:00+01:00 09:00 01:00 Time to get to the venue, hang your coat and get some coffee or tea. wiccon-2024-110-1-walk-in en false https://program.wiccon.nl/wiccon-2024/talk/9RMGC7/ https://program.wiccon.nl/wiccon-2024/talk/9RMGC7/feedback/ Workshops Workshop 120 minutes 2024-11-01T10:00:00+01:00 10:00 02:00 Step into the world of Industrial Control Systems (ICS) with our immersive workshop designed for cybersecurity enthusiasts and professionals. This hands-on session provides a foundational introduction to ICS and protocols. wiccon-2024-58-introduction-to-industrial-control-systems-hands-on-hacking Workshops Marc Visser en You'll get practical experience with our "Factory in a Suitcase"—a fully virtualized environment where you can safely explore and hack critical industrial protocols. We’ll guide you through: - **ICS Basics:** Understand what a PLC is and how it operates within real-world industrial settings, illustrated with personal examples. - **Hacking:** Gain hands-on experience hacking the Modbus protocol, allowing you to control devices like switching a lamp on or off in a virtualized environment. We'll also delve into the basics of hacking the Siemens S7 protocol. - **Reverse Engineering:** Get an introduction to the basics of reverse engineering firmware files. You'll work with older ABB software, learning how to extract passwords and explore the fascinating backstory behind these devices. - **Do’s and Don’ts:** Learn the essential best practices and common pitfalls in the world of Operational Technology (OT) security. **Requirements:** Participants must bring a laptop with Kali Linux installed. All other tools and materials will be provided. This workshop is perfect for those looking to build a strong foundation in ICS security, with practical skills that can be applied in real-world scenarios. Don't miss out on this unique opportunity to get hands-on with the technology that drives today's industrial systems. false https://program.wiccon.nl/wiccon-2024/talk/8VRJN3/ https://program.wiccon.nl/wiccon-2024/talk/8VRJN3/feedback/ Workshops Talk 60 minutes 2024-11-01T13:00:00+01:00 13:00 01:00 Lunch wiccon-2024-108-3-lunch en false https://program.wiccon.nl/wiccon-2024/talk/L37CN3/ https://program.wiccon.nl/wiccon-2024/talk/L37CN3/feedback/ Workshops Workshop 60 minutes 2024-11-01T14:00:00+01:00 14:00 01:00 At The Hague, the city of peach & justice, (cyber) security is very important to keep the information and citizens of The Hague safe. Since 2017 we organize a hacking competition called Hâck The Hague. wiccon-2024-78-hck-the-hague-making-impact-with-your-vulnerability-reports Workshops Lilian KnippenbergReinout Hoornweg en In order to stay resilient to cyber threats, we need to work together. The hacking competition Hâck The Hague is an example of working together with professional and student hackers, where the goal is to try to find vulnerabilities and fix them together with hacker, municipality and suppliers. But what are we, as an organization, looking for in the vulnerability reports? And what do you as hacker find important? Both from a business and technical perspective, in this workshop we will figure that out! false https://program.wiccon.nl/wiccon-2024/talk/AQBQJE/ https://program.wiccon.nl/wiccon-2024/talk/AQBQJE/feedback/ Workshops Talk 30 minutes 2024-11-01T16:00:00+01:00 16:00 00:30 Break wiccon-2024-109-2-break en false https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/ https://program.wiccon.nl/wiccon-2024/talk/X9JMK9/feedback/ Workshops Workshop 60 minutes 2024-11-01T16:30:00+01:00 16:30 01:00 Is Telegram the new Dark Web? That is the main question during this interactive presentation. Due to specific functionalities, Telegram has developed into much more than a chat application and this has not gone unnoticed by criminals. Partly due to the strict privacy and security options and the extensive options for group chats, the use of Telegram has not only increased exponentially, but there has also been a strong growth in criminal activities on Telegram. In this interactive presentation we will take you through the dark sides of Telegram, full of drugs, weapons and more, using concrete examples. During this interactive presentation we not only provide an insight into the criminal activities that take place on Telegram, we would also like to discuss the practical and legal possibilities and limitations for investigation by Law Enforcement. We challenge you to share your thoughts about possible solutions to reduce criminal activities on Telegram. wiccon-2024-102-is-telegram-the-new-darkweb- Workshops Laura PaviasMaike Borst en true https://program.wiccon.nl/wiccon-2024/talk/EUYBAS/ https://program.wiccon.nl/wiccon-2024/talk/EUYBAS/feedback/