Ruxcon

Details

When	Friday 27th April 2018
Where	402 Swanston Street, RMIT City Campus: Building 12, floor 7, room 2
Time	6:00 PM
After Talks	Captain Melville, 34 Franklin St, Melbourne
Organisers	Luke
Contact	melbourne@ruxmon.com
Save Event

Notification List

Please sign up to our email notification list for advanced notification of planned Ruxmon events and presentation details.

Location

402 Swanston Street, RMIT City Campus: Building 12, floor 7, room 2

Presentations

How to improve your threat research, YARA + KLara - Noushin Shabab

Level: Intermediate

YARA is a tool used by security researchers to hunt, identify and classify malwares. Using YARA is relatively easy, however it can result in amazing findings. YARA is specially very powerful when used on big sample collections. But its real powers are only unleashed when scanning big libraries happen in a time-efficient way with no computing power issues or storage limitations. KLara is a distributed system that can run a fast, distributed series of YARA scans and is now in open source domain and is available to everyone. In this talk we will have a look at YARA with some of its interesting features and also will learn what KLara is and how it can help the hunting job.

Bio

Noushin Shabab (@NoushinShbb) is a cyber security researcher based in Australia specialising in reverse engineering and targeted attack investigations. She joined Kaspersky Lab in 2016 as a senior security researcher in the Global Research & Analysis Team (GReAT). Her research focuses on the investigation of advanced cyber criminal activities and targeted attacks with a particular focus on local threats in the Australia/New Zealand and Asia Pacific region.

Adventure Time Cont. - Joaquim Espinhara

Level: Intermediate

Around the world fraud represents the biggest threats to financial institutions, especially banks, many of which are investing significant amounts of money in modern anti-fraud systems that do not completely prevent abuses, but actually, reduce the losses. Around two or three years ago I started by myself in my spare time looking into a popular anti-fraud software common in Brazil which is used by the biggest banks.

In this time, I released details about vulnerabilities and weakness present in the "agent" installed in the bank's customer's computers that might pose risk to the users. Some context about the software, Warsaw is a software developed by Gas Tecnologia, now part of Diebold group, and has become the industry security standard solution used by most various banks in Latin America. Under the guise of protecting the customer's online banking transactions, Warsaw is mandatory to be installed on personal computers which the user needs to access Internet Banking, with no alternatives left to bank customers. This quick presentation is intended to share with you some old and new findings and potentially new tricks that could be applied to other targets/software.

Bio

Joaquim Espinhara is just a random guy that likes computer and (in)security. Working daytime as Principal Security Consultant at Threat Intelligence Pty performing countless network and application (Web/Mobile/Desktop) penetration tests and security-focused code reviews for various organisations across the globe, including government, banks, retail and etc. Also, acting as Chief Hacking Officer at Bitwise Labs, a research security group focused on vulnerability research and exploits development in my spare time, and last but not least, I'm a TheGoonies CTF team player. Finally, playing as "professional" speaker, recent presentations include Infiltrate, H2HC, YSTS, Confidence, Black Hat USA, Black Hat Brazil Summit, HITB Kuala Lumpur, HITB Amsterdam, Roadsec, Ruxmon, Ruxcon Turbo Talks, Silver Bullet, Secure Brasil and others.

Supported By