VB2017: a wide ranging and international conference programme

Posted by   Martijn Grooten on   Apr 13, 2017

Packets don't do borders, which makes computer security a very global problem and one that can only be tackled if we work together. For 26 years, the Virus Bulletin conference has been bringing together people from all over the world. Today, we are proud to present the very international programme of VB2017, the 27th Virus Bulletin International Conference, which will take place 4-6 October in Madrid, Spain.

So, what's on the programme?

Kaspersky Lab researchers Thiago Marques and Fabio Assolini will discuss ATM malware that is prevalent in Latin America; Tyrus Kamau (Euclid Consultancy) will discuss the state of cybersecurity in Kenya; and Trend Micro researchers Chia-Ching Fang and Shih-Hao Weng will discuss a long-lasting APT campaign targeting various Asian countries.

Of course, in this age of state-sponsored attacks, the programme contains more papers on APTs. Bitdefender's Tiberius Axinte will analyse XAgent, the Mac OS X component of the APT28 (a.k.a. Fancy Bear) cyber espionage campaign, while Kaspersky Lab researchers Juan Andres Guerrero-Saade and Costin Raiu explain how fourth-party collection makes attribution extremely difficult. Meanwhile, Cisco Talos researchers Paul Rascagnères and Warren Mercier will look at the reconnaissance phase of APT campaigns.

jags_costinraiu_vb2015_2.png

Juan Andres Guerrero-Saade and Costin Raiu.

'Ordinary' cybercrime attacks have increased in sophistication, too. Dhia Mahjoub (Cisco Umbrella) and Jason Passwaters (Intel471) will discuss sophisticated Eastern European bulletproof hosting campaigns. Magal Baz (IBM) will discuss the AtomBombing technique used by the infamous Dridex financial trojan. A paper by Adam Haertle (UPC Poland) on an 'Inept Persistent Threat' (IPT) actor will show, however, that not all attacks are particularly sophisticated.

And what about attacks that come from the inside? Along with her colleague, Richard Ford, Kristin Leary, HR manager at Forcepoint, will discuss how to defend against this threat, without treating all employees as potential adversaries.

Of course, many threats still come from the outside. As a company with a 225,000+ workforce, PwC sees a lot of such threats; Bart Parys will share details of the most interesting of the many attacks against PwC's networks. And while PwC is known for having a dedicated security team, most hospitals don't. Jelena Milosevic, a nurse with a passion for cybersecurity, will discuss what this looks like from the inside. Maybe hospitals could learn a thing or two from Claus Cramon Houmann's talk on minimum viable security, in which he will present how SMBs/SMEs can achieve security maturity on a small budget.

As always, the programme contains many deeply technical talks, analysing malware and threats but also sharing tools and techniques that make analysis easier. Fortinet researcher Axelle Apvrille, one of the world's most skilled researchers when it comes to mobile malware, will discuss various lesser-known techniques for Android malware analysis. Julia Karpin and Anna Dorfman (F5 Networks) will describe the "crypton" tool they developed to extract encrypted content from malware. Understanding the limits of new detection techniques is important as well, and the paper by Trend Micro researchers Gilbert Sison and Brian Cayanan on bypassing machine-learning AV will no doubt prove controversial.

axelleapvrille_vb2016.png

Axelle Apvrille.

Finally, a number of talks discuss attacks against the most vulnerable in our societies. Joseph Cox (a journalist for VICE Motherboard) will discuss how mobile spyware is used in abusive relationships, with often tragic consequences. Consequences can be just as tragic in attacks against civil society, and few know more about such threats than Claudio Guarnieri (Amnesty International); we are honoured to have him give a talk. Perhaps the most uncomfortable topic when it comes to online threats is child abuse. Mick Moran has spent years investigating this important issue and we are looking forward to the talk he will give on the subject.

The programme contains many more very interesting papers, as well as the keynotes from John Graham-Cumming and Brian Honan that we announced earlier this week.

There are also a few slots that have been left open for 'Last-Minute Papers' (the call for papers for these will open in summer, with the details of the papers to be announced a couple of weeks before the conference) and, as in previous years, we will also have a number of 'Small Talks', which are sessions intended to promote informal discussion; these will be announced in due course.

Registration for VB2017 will open very soon. In the meantime, should you have questions, don't hesitate to email us as conference@virusbulletin.com.

We look forward to seeing you in Madrid!

VB2017-325w.jpg

twitter.png
fb.png
linkedin.png
googleplus.png
reddit.png

 

Latest posts:

WannaCry shows we need to understand why organizations don't patch

Perhaps the question we should be asking about WannaCry is not "why do so many organizations allow unpatched machines to exist on their networks?" but "why doesn't patching work reasonably well most of the time?"

Modern security software is not necessarily powerless against threats like WannaCry

The WannaCry ransomware has affected many organisations around the world, making it probably the worst and most damaging of its kind. But modern security is not necessarily powerless against such threats.

Throwback Thursday: CARO: A personal view

This week sees the 11th International CARO Workshop taking place in Krakow, Poland – a prestigious annual meeting of anti-malware and security experts. As a founding member of CARO, Fridrik Skulason was well placed, in August 1994, to shed some light…

VB2016 paper: Uncovering the secrets of malvertising

Malicious advertising, a.k.a. malvertising, has evolved tremendously over the past few years to take a central place in some of today’s largest web-based attacks. It is by far the tool of choice for attackers to reach the masses but also to target…

Throwback Thursday: Tools of the DDoS Trade

As DDoS attacks become costlier to fix and continue to increase in both number and diversity, we turn back the clock to 2000, when Aleksander Czarnowski took a look at the DDoS tools of the day.