Keynote

Emerging Trends in Cyber

Gergana Winzer

Gergana Winzer will be opening our conference this year and will talk about Emerging Cyber Trends in her keynote at Track One at Guthrie Theatre. As Cybersecurity professional, Gergana works with clients to develop creative and pragmatic approaches to reduce their cyber and data security risks. She assists organisations to improve their cyber security posture and supports them to achieve cyber resilience outcomes. Gergana believes that cyber is a business enabler; an intrinsic part of developing the business that can help organisations become more competitive in today’s world. Gergana has worked within several industries and assisted clients to achieve their cyber security goals in Federal, State and Local Government, Banking and Financial Services Industry, Health, Utilities, Education, Agriculture, Transport, Retail and others and is an experienced and respected member of the cybersecurity community in Australia and Asia and an engaging keynote and public speaker on cyber security and privacy matters, risks and issues to the business community. In her spare time, she mentors young professionals and is an advocate for diversity.

Guthrie Theatre

How to hack an AI

Harriet Farlow

Harriet Farlow is a PhD Candidate in Cyber Security at UNSW Canberr and an Assistant Director at the Department of Defence. With a passion for bridging technical and non-technical disciplines, Harriet’s professional experience spans consulting, academia and a technology start-up. She has worked and lived in the UK and the USA. She holds a Bachelor of Science in Physics and Bio-anthropology, and a Master of Cyber Security, Strategy and Diplomacy.

"Adversarial machine learning (or AML) is a field growing in prominence that represents the ability to ‘hack’ artificial intelligence (AI) and machine learning (ML) algorithms by poisoning data sets imperceptibly before training, by evading classification, leaking confidential information or by hijacking the model’s function to make it do something it wasn’t intended to. The rapid uptake of AI/ML systems by organisations means the attack surface is growing significantly. "

Cinema Theatre

DFIR in 2022: The Wild Wild East

Jack Rutherford

Jack Rutherford is the CTO of Triskele Labs, an Australian cyber security boutique. Having spent 5 years at Triskele Labs and 10 years in cyber, he comes from an offensive security background, previously leading the penetration testing and red teams within Triskele Labs. Before that, he spent several years working in cyber security in government at both Defence and the ATO. Jack sits on the Australasian Advisory Board for CREST International and represents the Australasian chapter on the CREST International penetration testing subcommittee.

"Triskele Labs presents their DFIR experiences from 2022, which has included many ransomware and BEC incidents, often involving sophisticated Threat Actors such as Conti and Black Basta. We discuss trends, techniques, indicators, and deep dive into a particularly ruthless attack in which the Threat Actor achieved complete domain compromise, exfiltration and ransomware execution in just 14 hours."

Guthrie Theatre

Phishing- Fake it til you Make it

Venessa Ninovic

Ever since her first Tracelabs CTF in 2020, Venessa has dived head first into the OSINT space and not looked back. Participating in various CTFs, engaging with the OSINT community, and writing blogs in her spare time, Venessa is constantly learning new skills and techniques. She is currently an intelligence analyst, and won the AIPIO 'Emerging Intelligence Practitioner' Award for 2022.

"I will be talking about the risks involved with uploading your resume, birthday, security clearance level, work pass, certificates, offer letters/emails and role descriptions that are too technical and in depth. I will explain the risks involved and how these posts can be used by threat actors, in addition to providing the audience with alternatives to these uploads that can be made, from an OPSEC perspective."

Guthrie Theatre

It’s time to uplift developer security maturity and erase common mistakes

Erica Wass

Erica Wass is Vice President of Product Management leading product and content teams and driving product strategy and roadmap at SecureCodeWarriors. Erica credits her lifelong interest in technology as driving her interest in product and its role in improving business outcomes. Before joining us, Erica was a Senior Director of Product in Zendesk’s Melbourne office. In 2018 she was honored and named a Leading Woman in Product in Australia. She moved to Melbourne from New York City with her family in 2014. Erica is a graduate of Barnard College in New York City and holds advanced degrees in journalism and law, where she focused her studies on digital storytelling and the Internet.

"Developers work hard to create software that users love but the topic of security is often seen as someone else’s responsibility. Developers rarely get the training they need to work with a security-first mindset. AppSec teams are there to point out coding problems and tear apart a developer’s beautiful software. This relationship can be fixed with a security-first approach for developers."

Cinema Theatre

SMS-based MFA isn't keeping you safe

John Abood

Security consultant at CyberCX, with a background in Infrastructure Support and before that a career in Radio operations! In his own word, John is a horrible romantic for social engineering, physical penetration testing and any other unorthodox methods of hacking.

"With the ACMA Determination released in April, traditional methods of SIM swapping have been mitigated. But that's not to say that it's impossible to pull off a SIM swap, leaving all of your accounts 'secured' by SMS-based MFA completely vulnerable. This talk is a collection of my desperate attempts to SIM swap in Australia, in 2022. Some methods make some sense, some are completely unorthodox, unwarranted and ridiculous... lets explore."