The APWG has a unique perspective on Internet phishing and fraud battles and strives to offer a balanced view of current and future Internet fraud trends. This presentation will offer a short introduction to phishing, the APWG and its experience-sharing initiatives, followed by analysis of current phishing statistics and expected future trends.
Presenter
Patrick Cain is a Research Fellow of the Anti-Phishing Working Group (APWG), and the President of The Cooper-Cain Group, Inc, a computer and Internet security consultancy. He has been associated with information security development and operations for over twenty years. He was previously the Security Advocate in the Office of the Chief Technology Officer, at Genuity Inc., a large Internet Service Provider. He is a Certified Information Systems Auditor (CISA), a Certified Information System Manager (CISM), a member of USENIX and ISSA, and an associate member of the American Bar Association. Mr. Cain participated in the FSTC Counter-Phishing project, is a research member of the Anti-Phishing Working Group, and currently leads the effort in the IETF to standardize phishing and electronic crime reports. He is the co-chair of the IETF Operations Security Working Group and has participated in a US White House working group identifying and addressing the vulnerabilities of the Internet.
Wietse presents lessons learned about persistence of information in file systems and in main memory of modern computers - how long information persists and why. The results are based on measurements of a variety of UNIX and Linux systems, with some results for Windows/XP, including how to recover encrypted files without knowing the key.
Presenter
Wietse Venema is a research staff member at the IBM T. J. Watson research center. After completing his Ph.D. in physics he changed career to computer science and never looked back. Wietse is known for his software such as the TCP Wrapper and the POSTFIX mail system. He co-authored the SATAN network scanner and the Coroner's Toolkit (TCT) for forensic analysis, as well as a book on Forensic Discovery. Wietse received awards from the System Administrator's Guild (SAGE) and from the Netherlands UNIX User Group (NLUUG). He served a two-year term as chair of the international Forum of Incident Response and Security Teams (FIRST).
The Internet is deluged with fraudulent criminal activity targetting consumers and banks. This presentation will discuss cooperative options available to consumers, private industry, and government that are unique in reporting and terminating the phishing criminal activity. This approach believes that free collaboration is the only path to success against online fraud.
Presenter
Paul Laudanski founded CastleCops with a focus on Internet security based on community, free collaboration, and cooperation in the global neighborhood. Internet security and privacy have become Paul's life work and passion. With the advent of PIRT, Paul has recently been on the talk circuit. Recently, Paul presented at RIPE53 as well as other NDA invitation only conferences.
The presentation will try to present current challenges in detecting advanced forms of stealth malware and explain why current detection approaches, as used in commercial A/V or IDS products, are insufficient. The author will try to convince the audience that detection is no less important then prevention and that we need a systematic approach to implement a good compromise detector, instead of a bunch of "hacks" as we have today.
Presenter
Joanna Rutkowska has been involved in computer security research for about six years. Originating in the filed of Linux and Win32 exploitation research, about four years ago she has moved toward stealth technology research. This includes various types of rootkits, network backdoors and covert channels. She has presented her work on many computer security conferences around the world, including Black Hat, Hack In The Box, CCC and others. She currently works as a security researcher for COSEINC, a Singapore based IT security company, where she recently created Advanced Malware Labs - a small team of researchers focusing on analyzing new techniques for creating malware as well as
methods for defending against them.