Manager Information Security at Pakistan International Airlines , Pakistan

Highly experienced Networks, Infrastructure and Security Professional, with over 14 years of extensive IT Architecture and Management experience. Certified Information Security Manager (CISM) with In-depth understanding of Information Security practices, policies, frameworks, standards, methodologies and technology strategies, marking myself as accomplished professional to supervise the implementation and maintenance of a company’s IT Infrastructure Security and advising managers on how to use information technology systems to meet the organization business goals. Outstanding project and program leader, able to coordinate with teams, implementing new technologies, and collaborating with managers. Most importantly, I believe in leadership, analytical thinking, and problem solving approach.

Session: Information security management systems

This session will be describing the importance of ISO 27001 standard, its importance for organizations. How organizations implement the controls of this standard to protect their assets from threats.

Additional information and programme of International Cybersecurity & Digital Services Protection Conference – here

The post Muhammad Kamran Khan appeared first on DiTech Media.

Founder & CE of The Banchi Group , South Africa

Collen Mphabantshi is an analytic and meticulous individual who is passionate about learning new things and discovering new ways of doing things. A serial entrepreneur who is the Founder & CE of The Banchi Group which launched LyfBit.Com App in 2020, and about to launch Leafy Mall Marketplace in 2021. His professional experience spans across Mobile Development, Cyber Security (Forensic) and currently Fraud Strategy. He has worked with international teams in countries such as Tanzania, Kenya and Mozambique. As a Cyber Security pundit, he is frequently invited to speak on platforms such as The Legal Show conferences, Radio Shows and TV.
Collen is also an academic who holds BSc Computer Science Degree (2014) & BSc Computer Science Honours (2016) both from the University of Pretoria. He has completed various certifications and courses with globally recognized institutions. In July 2021 he’ll be enrolling for The Power MBA to further enhance his entrepreneurial skills and capacity. Some of his qualifications are as follows:
a. Post Graduate Certificate Project Management, 2015 with Regenesys Business School.
b. EnCase Certified EXAMINER (EnCE) certification, 2018 with OpenText.
c. GIAC Certified Forensic Examiner, 2019 with SANS Technology Institute.
d. Cybersecurity: Managing Risk in the Information Age, 2020 with Harvard University.
Collen is a highly motivated entrepreneur, an enthusiastic Public Speaker and a hardworking professional who continues to find ways to improve himself in all aspects of life.

Session: A Cyber Security Threat Perspective – SA’s 2020 Overview.

The session will take a posture of providing perspective on the cyber security effects after the introducing new technology, internet and smartphone to the broader society. The session will take its cue from the research I have conducted and personal experience on the ground in South Africa. I will also highlight the impact of Covid-19 on the South African Cyber Security Landscape.
I a nutshell the session will provide an overview of cyber security landscape and the impact of Covid-19.

Learning outcomes:

• A Cyber Security Problem & some prominect attacks recently in SA
• Why SA is vulnarable?
• What can organisations & people do to protect themselves?

The post Collen Mphabantshi appeared first on DiTech Media.

Founder of Eagles firm , Egypt

Ahmed is an entrepreneur in cyber security & forensic field and founder of the Eagles Firm, an Egyptian foundation working in the field of cyber security and digital forensic investigation since 2013 and has more than 15 partners from more than 6 countries.

Ahmed has extensive experience in the cyber security field and cyber investigation. He has participated in many operations in securing and investigating issues related to cyber security and cyber criminal investigation.

Ahmed has cooperate with many institutions, companies and law enforcement in many countries such as India, Taiwan, Poland & Egypt.

Session: Cyber Attacks in Pandmic Time

In this session i will talk about Cuber attacks in pandemic time and why it has been increased ,sources of this attacks ,big data leakage

Learning outcomes:

• Cyber attacks will never end
• Cyber attakcs numbers in Pandmic times
• Types of top attacks

The post Ahmed Mostafa appeared first on DiTech Media.

Global Research Manager at HackerSecurity Company, Brazil

I’ve been working Global Research Manager at Hacker Security and Research and Cyber ​​Security Manager at Zup Innovation, I have talked in Security events in Germany, Poland, Hungary and Brazil, served as University Professor in Undergraduate / MBA courses at colleges as FIAP / Mackenzie / UNIBTA and UNICIV, in addition, I’m Founder and Instructor of the Course – Malware Analysis – Fundamentals (HackerSec Company – Online Course – Portuguese Language).

Session: Demonstrate different kind of structures in the binaries as a PE (header and your sessions), ELF (header and your sessions), PDF(header/ body/cross-reference table/trailer), explaining how each session works within a binary and where it would be possible to “include” a malicious code.

Dissecting and Comparing different Binaries to Malware Analysis

Demonstrate different kind of structures in the binaries as a PE (header and your sessions) , ELF (header and your sessions), PDF(header/ body/cross-reference table/trailer), explaining how each session works within a binary, what are the techniques used such as packers, obfuscation with JavaScript (PDF) and more, explaining too about some anti-disassembly techniques, demonstrating as a is the action of these malware’s and where it would be possible to “include” a malicious code. By the end of this “talk” it will be clear to everyone, differences in binary structures, how can the researcher should conduct each of these kinds of analyzes, besides of course, it should seek more basic knowledge, with file structures, software architecture and programming language.

Category of your talk (such as: malware, phishing, etc.)

Malware, MalDoc, PDFMalicious, Ransomware

Publications:

https://pentestmag.com/product/pentest-fuzzing-techniques/

https://www.linkedin.com/feed/update/urn:li:activity:6658688388310401024/

https://github.com/filipi86/MalwareAnalysis-in-PDF

https://medium.com/@filipi86/malware-analysis-dissecting-pdf-file-a95a0ffa0dce

Additional information and International Cybersecurity & Digital Services Protection Conference programme – here

The post Filipi Pires appeared first on DiTech Media.

Head of Research at Advanced Intelligence, LLC., USA

Yelisey Boguslavskiy is the CEO & Founder of a New York-based cyber risk prevention firm Advanced Intelligence, LLC. His Subject Matter Expert team conducts advanced HUMINT and SIGINT investigations into cyber fraud, ransomware, and digital organized crime threats, especially those from Eastern Europe and the MENA regions offering intelligence solutions to businesses and investigative support to US law enforcement. Additionally Advanced Intelligence, LLC heavily focuses on providing intelligence on top-tier threats of political manipulation, violent extremist propaganda, and meddling, conducted through digital infrastructure.

Born in Kazakhstan Yelisey has actively participated in international law enforcement initiatives, such as 2017-2018 a year-long investigative research in collaboration with the University of Passau (Germany) School of Law and Kazakhstan’s Ministry of Finance analyzing anti-money laundering and financial compliance mechanisms in Kazakhstan, Germany, and Russia. Prior to starting Advanced Intelligence LLC, Yelisey worked as an investigator in the business intelligence community, including Kroll, a division of Duff & Phelps, TD International, and Flashpoint Inc. Yelisey holds an M.A. degree in Security Policy Studies from the Elliott School of International Affairs of George Washington University with a focus on political violence prevention and business intelligence.

Session: Policing & Technology. How advanced digital intelligence and technical innovation can lead to accountable and human-oriented policing

Law Enforcement & Tech: Organic Alliance for in a Fight for Human-Oriented Policing

The presentation covers recent innovations and challenges of technological modernization and digitalization of law enforcement, primarily based on the examples of the US and UK. The survey covers subjects of community policing, combating white-collar crime, terrorism, and the introduction of accountability measures within policing operations. Finally, the presentation addresses best practices and urgent challenges that can be potentially overcome by the introduction of technology and digital solutions.

Learning outcomes:

• Learning of technology innovation within contemporary policing practices.
• Learning of urgent challenges and how they may be overcome.
• Learning of best practices.
• Familiarization with the current state of affairs of public and security environment.

Additional information and International Cybersecurity & Digital Services Protection Conference programme – here

The post Yelisey Boguslavskiy appeared first on DiTech Media.

CEO of SoCyber, Bulgaria

Krasimir Kotsev, CEO and Founder of the cybersecurity company SoCyber, has many years of experience as a Cybersecurity Expert. During his talk, he will share some of his extensive knowledge of Information Security, Vulnerability Assessment, Vulnerability Management, and Network & System security hardening.

SoCyber is specialized in Security Assessment and Vulnerabilities management in different industries, like eCommerce and Fintech. The company’s testing is based on OWASP and NIST methodologies and the SoCyber’s experts hold leading industry certifications like OSCP, OSWP, CEH, CCNP Security and CCSA.

Session: Vulnerability Management

Vulnerability Discovery – A Piece of the Puzzle

It is vital that a company has their vulnerability testing done properly. However, the importance of the subsequent vulnerability management is often underestimated. Security issues are reported, but remain unfixed for the simple reason that there is no process or team in place to deal with handling the discovered vulnerabilities. We will reveal best practices from our experience on how to create and implement strong rules when it comes to vulnerability remediation.

Learning outcomes:

• Gain a deeper understanding of the importance of proper vulnerability management.
• Become familiar with the most common mistakes that companies make when it comes to vulnerability mitigation.
• Learn about the industry’s best practices in the field of vulnerability management.
• Receive advice on how to put in place a well-working vulnerability management process.

Additional information and International Cybersecurity & Digital Services Protection Conference programme – here

The post Krasimir Kotsev appeared first on DiTech Media.

CEO at VSEC, Vietnam

I graduated from Vietnam National University with Bachelor Degree on Information Technology. I was a member on Innovation&Entrepreneur Course in Israel and Management Course in Germany. When I was in university, I joined a team in the Young Talent Center to research on cybersecurity. Till now, I have had about 15 years experience on Cybersecurity from many roles: Researcher on Cryptography and Penetration Testing, Helpdesk, Consultant, System Administrator. By those roles, I collected many viewpoint to startup the company on cyber security, specialize on hacking, exploit development and penetration testing. My passion is to help enterprise secure their IT application with the view from attackers.

Session: The topic is about cybersecurity. My presentation focus on sharing the protection of company IT application through the viewpoint of attackers

How does the attacker viewpoint protect your company IT application?

In this topic, I am sharing my professional experience when delivering whitehat hacker service to many big companies over 10 years. In this sharing, I give the approach of protecting the company IT application with the viewpoint of an attacker. What is this viewpoint about? How does this approach help the company to balance the cybersecurity risks and cost?

Learning outcomes:

• Understanding the viewpoint of an attackers.
• Apply the process, tools to protect their IT software application.
• Train their staff more effective on cybersecurity.
• Grow the company along with the support of cybersecurity.

Additional information and International Cybersecurity & Digital Services Protection Conference programme – here

The post Louis Truong appeared first on DiTech Media.

Founder of Atlant Security, Bulgaria

Alexander has consulted government organizations, banks, and nuclear power plants on cybersecurity in the Middle East, Asia, Europe, Australia, and the USA.

He has written two books on defending organizations from cybercrime and is a frequent speaker at security conferences.

He specializes in security architecture and breach prevention.

Session: How to spend all your money on security and still get hacked

This talk outlines the ways organizations waste money in buying their way into being protected and how this often leads to the same outcome as spending nothing at all.

We will also cover straightforward ways to focus on defense without spending all your IT and Security budget on it.

Learning outcomes:

• Learn how to spot ineffective security solutions and vendors.
• Learn how to prioritize security spending.
• Learn the biggest mistakes leading to the largest data breaches in history
• Prevent a breach at your organization in the most efficient way.

Additional information and International Cybersecurity & Digital Services Protection Conference programme – here

The post Alexander Sverdlov appeared first on DiTech Media.

Security Analyst at The Institute for Security and Open Methodologies, Myanmar

Htet Aung is a System and Network Administration professional with a strong experience in End-User support, IT department management, and technical consulting. Aung has been building his skills in cybersecurity, teaching and writing in the Hacker Highschool community and preparing for various certifications including the OSSTMM Professional Security Tester and The Offensive Security Certified Professional. He strongly favors research and troubleshooting, a natural insight into problem solving which he applies to IT and security related tasks such as the design and implementation of a secure network infrastructure from people to wires to servers. With strong customer support, financial, and economics skills and a positive make-it-happen attitude, Aung is both an excellent teammate and manager.

Mr. Htet Aung is currently working as a Manager of the IT Department of Pyay Garden Residences of Zaykabar Co., Ltd and actively contributing to Hacker Highschool, a non-profit project by ISECOM.

Aung began working in the IT industry as a junior System and Network Administrator in 2004 in Wintheingi Engineering Co., Ltd. and he grew into a Network Specialist position at Cherry FM of Zaykabar Co., Ltd in July 2011 where he was promoted to Manager of the IT department of the Zaykabar Group of companies in November 2011.

His self-starter attitude got him deeply involved in the Hacker Highschool Project in 2014 by translating the open source courses into the Burmese Language. Through that he became heavily involved in cybersecurity, learning network security, system administration security, ethical hacking, scripting, python, and the methodology of the OSSTMM.

Aung is continually learning and applies that to articles in both English and Burmese. He has made security awareness video lessons and is actively running the Hacker Highschool Myanmar Community to increase his role and international connections as an ISECOM team member.

Session: Sharing some of the “how-a-system-may-go-wrong” affairs that I’ve experienced in my realworld environment and how we can protect using OSSTMM.

Assumptions, the Deadliest Vulnerability

Learning outcomes:

• People are assumed in the security industry and some of them think it’s a Myth.
• About some unsafe real world environment around me with some slide of experiments that I’ve done.
• About how we use hardening of environment before we use fancy commercial tools
• About how we protect as far as possible from the unsafe environment.

Additional information and International Cybersecurity & Digital Services Protection Conference programme – here

The post Htet Aung appeared first on DiTech Media.

Information Security Officer at Phoenix GSB, Malta

I have been working in the world of IT and Information Security for over a decade and decided to specialise in Information Security about 3 years ago after working in more technical systems administrator type roles. Throughout my career I have worked with a large number of different technologies and vendors, gaining wide experience in all of this. The same applies for my time working in Information Security where I have been responsible for the drafting of policy, implementation of security technologies and the set up, implementation and management of a Security Awareness Education platform.

Session: Security Awareness Education Program

The Importance and Effectiveness of Security Awareness for SMEs

Security Awareness Education Programs are usually implemented in large organisations and overlooked by SMEs, though these have been proven to be highly effective in bolstering an organisation’s human firewall, the first line of defense. With minimal financial resources, organisations can educate their users and assist in protecting exploitation via phishing, BEC or social engineering tactics, which are some of the highest ranking reasons for exploitation.

Learning outcomes:

• Implement security awareness on a budget
• Increase level of protection to the organisation through employee action/inaction
• Further protect organisation against external threats without additional, expensive technologies
• Add to employee satisfaction and show that you care about their well-being

Additional information and International Cybersecurity & Digital Services Protection Conference programme – here

The post Malcolm Portelli appeared first on DiTech Media.