Mike Ossmann

Topic: SDR - Pseudo-Doppler Redux

The information security community has long suffered from a lack of effective and affordable tools and techniques for locating radio devices. Many methods are available, but most of them require multiple radio receivers and/or physical motion of one or more antennas. Pseudo-doppler is an old technique that implements Direction Finding (DF) by rapidly switching between multiple fixed antennas connected to a single radio receiver.

We have taken a modern approach to the implementation of pseudo-doppler DF with Software Defined Radio (SDR). Our open source solution enables low cost DF of bursty, packet-based target systems using arbitrary digital modulations. Additionally we will discuss our future work toward asymmetric pseudo-doppler approaches that eliminate the need for direction calibration and that can be used as a countermeasure against targets that attempt to spoof direction.

Bio:

Michael Ossmann is a wireless security researcher who makes hardware for hackers. Best known for the open source HackRF, Ubertooth, and GreatFET projects, he founded Great Scott Gadgets in an effort to put open source hardware into the hands of innovative people.

Filedescriptor

Topic: The mystery of Bug Bounty hunting

In 1995, Kevin Mitnick was arrested for multiple hacking activities. In 2016, the U.S. government launched Hack the Pentagon, a program that allows hackers to report vulnerabilities in Department of Defense. In 2017, HackerOne paid over $20Million to bug bounty hunters. Back in the old day, making money off security vulnabilities could get you into jail. Nowadays, bug bounty hunting is a way for hackers to legally report vulnerabilities to companies while earning a fortune. This talk will cover the following items

* Introduction to bug bounty
* How I got into bug bounty hunting
* My metholodogy of approaching a target
* Sharing of my interesting bugs

Bio:

As a Penetration Tester with Cure53, Filedescriptor focuses on web application security and specializes in XSS attacks and browser security. Filedescriptor is known as someone who helps to keep Twitter secure as he is currently ranked first among the participants of Twitter’s responsible disclosure program. He is also active in the XSS community through designing and participating in various challenges. Filedescriptor is further experienced in analyzing OAuth and similar authentication and authorization mechanisms.

Clarence Chio

Topic: The State of AI-assisted Fuzzing & Program Analysis

Fuzzing and program analysis are a security professional’s bread and butter. The faster we are able to find bugs in software, the more effectively we are able to secure systems. However, system and code complexity has been exponentially increasingly over time, and exhaustively analyzing programs is becoming an intractable task. In this talk, I analyze 10 of the most exciting research papers published in the last few years and try to identify trends of how this field is progressing. I will show that AI-assisted program analysis is the only way forward, and share some ideas of where the field is heading in the future.

Bio:

Clarence Chio is an engineer and entrepreneur who has given talks, workshops, and trainings on machine learning and security at DEF CON, BLACK HAT, and other security/software engineering conferences/meetups across more than a dozen countries. He is a co-author of the new O'Reilly Book "Machine Learning & Security - Protecting Systems with Data and Algorithms". He was previously a member of the security research team at Shape Security, a community speaker with Intel, and a security consultant for Oracle. Clarence advises a handful of startups on security data science, and is the founder and organizer of the “Data Mining for Cyber Security” meetup group, the largest gathering of security data scientists in the San Francisco Bay Area. He holds a B.S. and M.S. in Computer Science from Stanford University, specializing in data mining and artificial intelligence.

Daniel Ho

Topic: Keynote - The New Era of Hacking and Defence

In recent years, the issue of cyber security breaches is the talk of the town, senior managements are paying the most attention to cyber security. Even your organisation has sufficient budget on cyber security, the existence of hackers is hard to avoid.

It’s a general belief that hacking is a negative wording which implies of gaining unauthorized access to your computer systems for harmful reasons. Yet, there are some good hackers who will break into your systems and point out security flaws and bring attention to a cause.

Join us for this session, where we will deep dive into the latest defence approaches for automation, and how Advanced SOC addresses the shortage of cyber security professionals.

Bio:

Daniel Ho has spent the last 10 years as a security consultant, working with companies to protect them from cyber-attacks.
Currently he is a Solution Architect at Singtel. Daniel has extensive experience from emerging technology areas such as APT, SIEM, WAF as well as consulting services like PCI QSA, ISO 27001, Pen Test and incident response. He holds multiple security related certifications (CISSP, CEH, CISA, ISO 27001 LA).

Reum and Singi

Topic: Fuzzing Javascript Engines

Nowadays, web browsers are crucial to the internet.

A lot of users get billions of information via web browser everyday. Thus, web browsers are used everyday by a lot of people. Therefore, web browser security is very important. If a web browser is vulnerable, users' PC can be affected by malware without their knowledge, or give the attacker control over their PC.

In this presentation, we will introduce methods to find vulnerabilities in Javascript Engines for web browsers via fuzzing.

For this, we will talk about creating components for the fuzzer, and generating Javascript syntax efficiently.
Also, we will reveal our own crash classification method and parallel fuzzing framework.

And we will share some tips for patternizing the results of 1-day case analysis for making random javascript syntax. (And our custom pattern - L.E.G.O.)
If we find and successfully exploit a zeroday vulnerability before HITB2018AMS, we will disclose that too.

Bio:

reum
Areum Lee is an undergraduate student in Sejong University, Seoul. She has been studying security for 4 years, and has previously worked as an intern at Fortinet HQ, Infosec team. She has started out with security consulting, but is not limited to it. Currently she is expanding her fields by trying out her capabilities in various aspects of security, and gaining more interest in research.

singi
Singi (Jeonghoon Shin) is currently working as a researcher in Theori, and as a Mentor of B.o.B Program (Korea’s next generation security leader education program). He has great interest in bug hunting in hardware and software.

Jenius Shieh

Topic: Red team sharing

Bio:

Jenius is a Manager in the PwC’s Cyber team in Hong Kong. He has accumulated extensive experiences in the domain of cyber security across a range of industries, including financial services, utilities, retails and telecommunication. His main interest is on areas of red teaming, penetration testing and incident response.

Moonbeom Park

Topic: Secret Track

Secret Track

Bio:

Moonbeom, he is a deputy general researcher in TTPA(Trusted Third Party Agency) of Korea, has 10 years of experience in hacking analysis, digital forensic, research on hacking and forensic for IoT device, profiling hacking source. He is not only one of experts among government and private sector in fields of forensic, hacking analysis, hacker profiling, counter-attack on hackers, but also mentor of Korea's next generation security leader training program ‘Best of the Best(a.k.a BoB)’. Also he has participated in various international security conference such as VXCON, TROOPERS, HITB-GSEC, HITCON, Ekoparty, and RedPill.

Ma Sheng Hao

Topic: Software Packer Implement

Software developers wish to prevent their applications from cracking, analyzing by others, even looking for vulnerabilities. Generally, developers protect their applications by software packer, e.g. reducing the size of software by UPX Packer, using VMProtect Packer to obfuscate the execution logic, or using Themida Packer to deal with more complicated issues.

* What's PE structure?
* How compilers build a PE like executable file
* The logic of creating processes in PE Loader
* Case Study- RunPE — Malware Injection like a Loader
* Build your packer in C

Bio:

Sheng-Hao Ma is a core member of CHROOT Security Group and TDOHacker security community in Taiwan, he has over ten years of experience in reverse engineering and machine language, and mastered the intel 8086. His language interests include C/C++, C#, VB, MASM, Python, Swift, Node.js and Java. He expert in Windows vulnerability, reverse engineering.
Moreover, Sheng-Hao Ma has many papers presented in security conferences such as BSidesLV, ICNC, MC2015 and CISC, he was also a speaker at BlackHat Asia Arsenal, HITCON (Hackers In Taiwan Conference), SITCON (Students In Taiwan Conference), iThome#Chatbot.

SungLee Lim, Taejin Jang, Nikolay Akatyev

Topic: Connecting Dark Web and Surface Web - Korean Cyber Underground

South/North American and European criminals in dark corners of the web; numerous leaked DBs in Chinese underground forums, everyone talks about that. But what happens in the most connected country, Korea!?
Five students and two mentors from the BoB cyber security education program in South Korea teamed up in order to dig into the Korean Dark Web. They found interesting cases and reported their investigations to law enforcement agencies in Korea. Their initial findings were presented at Hitcon Pacific.
The team continued their expansion of the research in the cyber underground. They discovered new places and analyzed more data. As well as they built automation tools which helped extract evidence from a bunch of unstructured data and untangle the investigation.
At VXCON, the team will present new findings from the Korean cyber underground as well as from international multi-language sources including sales of malware and exploits. They will also explain their approaches for the research of the cyber underground and demo tools which they built to facilitate their investigations.

Bio:

Sunghee Lim / Researcher / Team Member
Sunghee Lim is an undergraduate student at Seoul Women's University. She is majoring in information security and is in fourth grade. She is interested in post quantum cryptography and network security research. She studied digital forensics in BoB (Korea's Next Generation security leader education program) and conducted a threat information project.

Taejin Jang / Developer / Team Member
Taejin Jang is majoring in computer science at Kookmin University, and is in the second grade. He is interested in finding various vulnerabilities. Currently he is studying at BoB (Korea's Next Generation Security Leader Training Program) Vulnerability Analysis Track.

Nikolay Akatyev
twitter - @kolyaak
BoB digital forensics mentor and VP of Engineering at Horangi Cyber Security
Interests - Digital Forensics, IoT Security, Software Security, Cyberspace and International Relations

Kelvin Chan

Topic: Dive into PMU

After this presentation, you will know more deeply about the processor architecture, as a security research that shows how to leverage the component of the processor architecture to make a really high quality attack accross all platform, such as thread hijacking, system call hijacking with a hidden itself perfectly.

Bio:

Kelvin, is working in Tencent Game Security R&D department, responsible for kernel-based security solution design, low-level and new solution research.

He has been keeping on research for software security solution for over 8 years, which is including Windows Internals, processors architecture leverages, moreover, he is a representative that cooperate with Mircosoft security team from Tencent Game Security Team(Kernel), meanwhile, he develops the open-source project(kHypervisor) which helps researchers to understand more about virtualization technology from nested-virtualization perspectives. Also, he is a regular speaker in VXCON.

Tan Kean Siong

Topic: Poking IoT Botnets With a Honeypot

Beginning of early year 2017, we started to listen quietly to the Telnet traffic after Mirai attacks. In this session, we love to share the interesting stories from a single home-based IoT (Internet of Things) honeypot.

We would like to present the design of the 'IoT device' with Telnet protocol emulation, by improving the open source network honeypot Glutton. With a handful of emulated Telnet responses, our 'device' has been pwned and taken over countlessly and aggressively.

We observed emerges of multiple Mirai variants with different well-crafted characteristics and custom naming by their bot herders. While 'Mirai' means 'the future", different variants were named interestingly with various Japanese words, popular arcade video games and trending memes. By tracing the distinct characteristic, we discovered the variant belongs to notorious threat group. In addition, we found sneaky Hajime botnet mutants evolve with different evasive tricks over time, unexpected visitors with amusing commands, mis-configured botnets, etc...

Bio:

Tan Kean Siong is an independent security researcher and member of The Honeynet Project. He involved in several open source network sensor and honeypot development, including Dionaea, Honeeepi and Glutton. He have spoken in conferences e.g. DEF CON Packet Hacking Village, HITB, HITCON, TROOPERS, Kaspersky SAS, Honeynet Project Workshop and other open source community events"

Hong Kyo Kim and Jae Yun Kim

Topic: Wi-Fi dashboard camera vulnerability analysis using threat modeling

Nowadays, the advancement of ICT(Information and Communications Technology) caused limitless collecting and using of private information without the agreement of their owner. Especially, the advancement of IoT(that is connected to the internet anytime) and the introduction of smartphone increased the risk of security and private information leakage.

Wireless Communication Technology such as Wi-Fi is started to apply to the dashboard camera for the vehicle(provide critical evidence for solving traffic accidents, crime) a few years ago. So, the video could be downloaded, played, removed using the smartphone from the remote distance. However, insufficient security consideration makes hard to apply existing security threat detection system/solution to it.

In this presentation, we will show listeners the ways to find the vulnerability and critical scenarios by analyzing 3 different brand-name dashboard cameras used by most of the users. We analyzed the structure of the dashboard camera using threat modeling(which is originally used for S/W development design) and found multiple attack vectors for each product. We could find a few zero-day vulnerabilities using them.

With these vulnerabilities, the attacker can manipulate dashboard camera remotely to remove/modify the video, and the dashboard camera can infect the other dashboard camera to spread malware such as ransomware. The announcement of our project will lead the users to be aware of the invasion of privacy by IoT product and the makers will be motivated for manufacturing the safer device.

Bio:

Hong-Kyo Kim
He is an information security graduate of Sangmyung University, and is a researcher in hacking and cyber security academy 'Best of the Best(as known as BoB)'. He is a Member of 'MoTs', Sangmyung University's Information Security Club.
He have analyzed software vulnerabilities of IoT devices including dash cams and checked How it can be exploited & tested worm viruses to see if some dashcams using specific firmware can be exposed to massive attack.

Jae-Yun Kim
He is a senior student in information security, and is a researcher in hacking and cyber security academy 'Best of the Best(as known as BoB)'. He is a leader of CERT-IS , Pukyong University's Information Security Club. He have Analyzed software vulnerabilities of IoT devices including dash cams. he identified, analyzed and support fixing the risks of backdoors.

C K Chen

Topic: Symbolic Execution and Bug Hunting + VMI Sandbox Implementaion and Application Workshop

In this workshop, we would like members to learn the concept and play with a powerful program analysis techniqu, symbolic execution. Before the symbolic execution, instrumentation and SMT are first delivered as the fundamental tool to the symbolic. Then symbolic execution and concolic execution, which is also called dynamic symbolic execution, are introduced with hand-on practices. In the end, some proof-of-concept applications, especially bug hunting, are built with two symbolic execution engines, Triton and Angr, to make the members understand symbolic execution from concept to practice.

Bio:

Chong-Kuan Chen(Bletchley) is a Ph.D. candidate of the Distributed System and Network Security Lab at the National Chiao-Tung University in Taiwan. His research interests include malware, virtualisation, reverse engineering, vulnerability and program analysis. He is also involved in several security projects. SECMAP, a scalable malware collect and storage platform. Forensor, a malicious document detector. MrKIP, a VM-based hooking system. C.K is also the CTF player. As the captain of NCTU campus hacker team BambooFox, he also attends CTFs and NCTU PT. He joins the MBA team, which is an open source malware sandbox dedicated to the modern Window 10 x64 environment.

Anthony Lai

Topic: Secret Track

Secret Track

Bio:

Anthony Lai focus on offensive "Kungfu", malware analysis, target attack research as well as attribution. He is passionate over Capture the Flag game, reverse engineering and exploitation for years.

After inspired by Black Hat and DEFCON in 2007-8, he has found a non-profit making research group called VXRL (Valkyrie-X Security Research Group) since 2009 in Hong Kong, researchers have published various research in various security and hacker conference including AVTokyo, Codegate, Blackhat USA, DEFCON, DFRWS, HITCON, HTCIA USA and Asia Pacific. He organized a small conference called VXCON (www.vxcon.hk) and line up various his good friends to give cutting edge sharing and workshop.

Anthony acts as a director of Knownsec Hong Kong and Macau (knownsec.asia) and currently engages a part-time PhD program in Hong Kong University of Science and Technology, his research focus is on malware/threat attribution, machine learning and software analysis. He has been invited to be the technical team coach with Zetta KE and Alan HO for the CTF Team named "FireBird" sponsored and supported by Cyber Security Lab in HKUST (cybersecurity.cse.ust.hk).

Angelboy

Topic: Advanced Binary Exploitation

TBC

Bio:

Angeboy is a member of chroot and HTICON CTF team. He is researching in linux binary exploitation, especially in heap related exploitation. He participated in a lot of ctf, such as HITB、DEFCON、Boston key party, won 2nd in HITB GSEC 2016 and won 1st in Boston key party 2016,2017 with HTICON CTF Team.