VB2015 Conference Programme

Wednesday 30 September

Keynote address

• Keynote address: The Internet of Bad Things, Observed Ross Anderson, University of Cambridge

Red room

• Economic sanctions on malware Prof. Igor Muttik, Intel Security
• Sizing cybercrime: incidents and accidents, hints and allegations Stephen Cobb, ESET
• Attack on the drones: security vulnerabilities of unmanned aerial vehicles Oleg Petrovsky, HP
• Modelling the network behaviour of malware to block malicious patterns. The Stratosphere Project: a behavioural IPS Sebastian Garcia, CTU University, Prague
• The Kobayashi Maru dilemma Morton Swimmer, Trend Micro; Nick FitzGerald, Independent researcher; Andrew Lee, ESET
• Does prevalence matter? Ranking anti-malware products by potential victim impact Holly Stewart, Microsoft; Peter Stelzhammer, Philippe Rödlach, & Andreas Clementi, AV-Comparatives
• A quantitative examination of the current state of corporate security practices Clint Gibler, NCC Group Domain Services
• Privacy: a growing commodity in the modern age and our Remotium virtual solution to protect it (sponsor presentation) Filip Chytrý, AVAST Software

Green room

• DDoS trojan: a malicious concept that conquered the ELF format Peter Kalnai & Jaromir Horejsi, Avast Software
• Doing more with less: a study of file-less infection attacks Benjamin S. Rivera & Rhena U. Inocencio, Trend Micro
• It's a file infector... it's ransomware... it's Virlock Vlad Craciun, Andrei Nacu, & Mihail Andronic, Bitdefender
• The evolution of ransomware: from CryptoLocker to CryptoWall Christy Chung & Neo Tan, Fortinet
• The TAO of .NET and PowerShell malware analysis Santiago Pontiroli & Roberto Martinez, Kaspersky Lab
• Botnet milking: malware freshly served from the source Moritz Kroll, Philipp Wolf, Jan-Eric Herting & Ayoub Faouzi, Avira
• WaveAtlas: surfing through the landscape of current malware packers Joan Calvet, ESET; Fanny Lalonde Lévesque,Erwann Traourouder,François Menet, José M. Fernandez, École Polytechnique de Montréal; Jean-Yves Marion, Université de Lorraine
• Unpack your troubles*: .NET packer tricks and countermeasures (sponsor presentation)
  Marcin Hartung, ESET

Small talks

• A timeless watch — ransomware on IoT devices Candid Wueest, Symantec
• SSL man-in-the-middle secure solution Mark Kennedy, Symantec; Righard Zwienenberg, ESET; Prof. Igor Muttik, Intel Security
• Windows 10 and the anti-malware ecosystem Dennis Batchelder, Microsoft
• The Clean Software Alliance, security, and the future of unwanted behaviours Nav Jagpal, Google; Barak Shein, Microsoft

Thursday 1 October

Red room

• Solving the (in)security of home networked devices Pavel Sramek & Martin Smarda, Avast Software
• Ubiquity, security and you - malware, security and the Internet of Things Heather Goudey, Independent researcher; Jasmine Sesso, Microsoft
• POS fraud - trends and counter-actions to mass fraud Ken Dunham, iSIGHT Partners
• Speaking Dyreza protocol. Advantages of 'learning' a new language Alexandru Maximciuc & Cristina Vatamanu, Bitdefender
• Anonymity is king Michael John S. Marcos & Anthony Joe Melgarejo, Trend Micro
• How malware eats cookies - an empirical study of cookies in malware's communication Zhaoyan Xu, Wei Xu & Kyle Sanders, Palo Alto Networks
• Mobile banking fraud via SMS in North America: who's doing it and how Cathal Mc Daid, Adaptive Mobile Security
• Will Android trojan, worm or rootkit survive in SEAndroid and containerization? William Lee & Rowland Yu, Sophos
• Dare 'DEVIL': beyond your senses with Dex Visualizer Jun Yong Park & Seolwoo Joo, AhnLab
• Android ransomware: turning CryptoLocker into CryptoUnlocker (live demo) Alexander Adamov, NioGuard Security Lab
• Malware classification meets crowd sourcing (sponsor presentation) John Park, HP

Green room

• Last-minute paper: We know what you did this summer: Android banking trojan exposing its sins in the cloud Stephan Huber, Fraunhofer SIT; Siegfried Rasthofer, TU Darmstadt / CASED; Carlos Castillo, Intel Security; Eric Bodden, TU Darmstadt / Fraunhofer SIT; Alex Hinchliffe, Intel Security
• Last-minute paper: From Asia with love? Smartphones with pre-installed malware Alexander Burris, G Data Software
• Last-minute paper: Making a dent in Russian mobile banking phishing Sebastian Porst, Google
• Last-minute paper: Anonymizing VPN services as a botnet monetization strategy — analysing the Bunitu botnet Sergei Frankoff, Sentrant; hasherezade, Malwarebytes
• Last-minute paper: Duqu 2.0 Win32k exploit analysis Jeong Wook Oh & Elia Florio, Microsoft
• Last-minute paper: Exposing Gatekeeper Patrick Wardle, Synack
• Last-minute paper: Operation Potao Express: analysis of a cyber-espionage toolkit Robert Lipovsky & Anton Cherepanov, ESET
• Last-minute paper: Linux/Moose endangered or extinct? An update on this atypical embedded Linux botnet Olivier Bilodeau, ESET
• Last-minute paper: The mysterious case of Linux.Wifatch Mario Ballano, Symantec
• Last-minute paper: TurlaSat: The Fault in our Stars Kurt Baumgartner, Kaspersky Lab

Small talks

• Helping the helpless: targeted threats to civil society Claudio Guarnieri, Independent researcher
• I am the Cavalry Claus Cramon Houmann, I am the Cavalry
• Personnel shortage and diversity in IT: Is it truly a problem? Lysa Myers & Stephen Cobb, ESET

Friday 2 October

Red room

• The Volatility Bot-Excavator Martin Korman, IBM Trusteer
• Labeless - no more Aliaksandr Chailytko & Aliaksandr Trafimchuk, Check Point
• Inside recent FQDN (Fully Qualified Domain Name) surges on the Internet Erik Wu, Nominum
• Breaking the bank(er): automated configuration data extraction for banking malware James Wyke, Sophos
• ROSCO: Repository Of Signed COde Dorottya Papp, Balázs Kócsó, Tamás Holczer, Levente Buttyán & Boldizsár Bencsáth, CrySyS Lab
• Dead and buried in their crypts: defeating modern ransomware Samir Mody & Gregory Panakkal, K7 Computing
• Building a malware lab in the age of Big Data Vanja Svajcer, HP

Green room

• The ethics and perils of APT research: an unexpected transition into intelligence brokerage Juan Andrés Guerrero-Saade, Kaspersky Lab
• Effectively testing APT defences Simon PG Edwards, Dennis Technology Labs; Richard Ford, Florida Institute of Technology; Gabor Szappanos, Sophos
• Digital 'Bian Lian' (face changing): the skeleton key malware Chun Feng, Michael Cherny & Tal Be'ery, Microsoft; Stewart McIntyre, Dell SecureWorks
• Catching the silent whisper: understanding the Derusbi family tree Micky Pun, Eric Leung & Neo Tan, Fortinet
• C&C-as-a-Service: abusing third-party web services as C&C channels Artturi Lehtiö, F-Secure Corporation
• The elephant in the room Marion Marschalek, Cyphort
• The Unbearable Lightness of APTing Yaniv Balmas, Shahar Tal & Ron Davidson, Check Point Software Technologies

Small talks

• Lightning talks Various 
• Operation Safety-Net: global best practices provide a secure path forward Neil Schwartzman, Messaging, Mobile & Malware Anti-Abuse Working Group
• Cross-platform mobile malware: write once run everywhere William Lee & Xinran Wu, Sophos

Keynote address

• Keynote address: One man's anti-malware researcher is... Costin Raiu, Kaspersky Lab

Reserve papers

• Stego-malware in Google Play. Findings and limitations Alfonso Muñoz & Antonio Guzmán, 11paths - Telefonica

VB2015