Day 1 Keynote: The Total Security System Approach - A Perspective From The Financial Industry
Lim Khee Ming, Deputy General Manager (Technology & Operations), Network for Electronic Transfers (S) Pte Ltd (NETS)

In view of today's increasing security breaches, companies need to take a total system approach in analyzing the needs and to design the most cost effective solutions. These include the importance of applying risk management concept in addressing security threats and designing counter-measures; mitigating measures and security systems. Citing case studies of some local companies on their efforts in overcoming their security weaknesses and constructing a robust security system.

Mr Lim Khee Ming is the Deputy General Manager (Technology & Operations) for Network for Electronic Transfers (S) Pte Ltd. He heads both Technology and Operations for greater synergies and charts the direction of the development of new payment services, products and infrastructure for the physical and the virtual worlds.

Having been in the IT industry for more than 20 years, Mr Lim has extensive experience in IT strategy formulation, IT architecture design, technology management, large scale systems development and project management. Mr Lim has worked with Internet computing, mobile computing and smart card based technologies.

Mr. Lim also sits on the Cards & Personal Identification Technical Committee (CPITC) under the IT Standards Committee and chairs the Crypto and Contact Smart Card Work Group.

Mr. Lim holds a B. Engineering (Electrical) from University of Singapore.

Day 2 Keynote: Cyber-crime
Harry SK Tan, Director, Centre for Asia Pacific Technology Law & Policy (CAPTEL)

Electronic crime is the fastest growing field of criminal activity. The use of the new technologies for crime challenges the law in ways that many were not prepared for. These include business organisations, banks, enforcement agencies and governments. Recently there have been international developments to address the many problems including cyber-terrorism faced by law enforcement agencies. This presentation will review some of the current reported cases of cyber-crimes and the current legal standards in place for the investigation, prosecution and sentencing of cyber-crimes in Singapore. The presentation will also address some basics of computer forensics and the organisational policies that should be in place for proper cyber-crime risk management.

Associate Professor Harry Tan is the Director of Centre for Asia Pacific Technology Law & Policy (CAPTEL) at the Nanyang Business School, Nanyang Technological University. CAPTEL is a research centre founded to investigate and research issues on how businesses and economies are being affected by the challenges of new technologies on law, regulation and policy. (http://captel.ntu.edu.sg)

Prof Harry Tan was awarded the Fulbright Scholarship in 1999 by the Council of International Exchange of Scholars and the Fulbright Commission to conduct research on the development of infrastructure for electronic commerce. He is a Visiting Scholar at Berkeley Centre for Law & Technology at University of California, Berkeley, He has been the principal lecturer for E-Business: Law Policy & Strategy since its inception in 1997 at the Nanyang MBA Programme.

Prof Tan is also regularly involved in presenting papers and public seminars at internationally renowned venues. In 1999, he was invited to deliver a public paper at Stanford University’s Japan US Centre for Management of Technology. He has also authored several journal articles on E-Business Law, Cybercrime and E-Fraud.

He has been involved in conducting industry professional development programmes for the management of legal risks in electronic commerce and information technology for the past five years for financial institutions, government offices, law firms and law enforcement agencies.

He has an online consultancy practice at http://ByteLawyer.com and together with the related site http://E-Business-Law.com, he maintains a public information service on the developments of E-Business Law.

Win32 One-Way Shellcode
S.K. Chong, Co-Founder & Security Consultant, SCAN Associates

The presentation will describe the inner workings of reusable Win32 shellcodes. It will starts with explanation on fundamental techniques to make the shellcode re-locatable and service pack independent. It also will cover processes involved in constructing and testing shellcode which are usually left out in most buffer overflow tutorial. A few simple but handy tools will be introduced in the process. Then, the limitations of existing shellcodes will be discussed. It will leads to the development of one-way shellcode that will overcome those limitations. The talk will also describe a technique to upload/download file in command line. Throughout the presentation, various real exploits using different shellcode will be demonstrated.

S.K. Chong is Co-Founder and Security Consultant for SCAN Associates; a Malaysian based consulting and security Services Company. SCAN Associates is also two-time winner of the Capture the Flag hacking competition held last year in Malaysia. SK Chong is also the author of several white papers including "SQL Injection Walkthrough" and "Win32 Buffer Overflow Walkthrough". The paper detailed findings previously unknown exploit in Microsoft's SQL Server. Over the last 2 years, he has conducted more than 20 professional penetration testings on various local government and military agencies, financial and ISP companies as well as profession binary audit for company in Fortune 500. His primary interests include binary and code audits, exploit research and penetration testing.

A Security Microcosm - Attacking/Defending Shiva, A Linux Executable Encryptor
Shaun Clowes, IT Director, SecureReality

Shiva is an ELF encryption tool written by Neel Mehta and Shaun Clowes. Its purpose is to "encrypt" (or obfuscate) generic ELF executables (Linux programs) to make them more difficult to reverse engineer or modify. While executable encryptors have existed for a long time on Windows, they are an immature technology on Unix platforms. Shiva is an attempt to advance the field, and an interesting experiment in the dynamics of Security.

This speech will describe Shiva, what it is and how it works. It will also cover the Security implications of technologies like Shiva, both positive (i.e assisting defenders) and negative (i.e assisting attackers).

Shiva has had two public releases at this stage, the most recent at Black Hat USA 2003. Since its initial release in November of 2002 we are aware of at least three, successful, generic attacks against it. In this way Shiva is a microcosm of Security technologies in general since it is a protection technology like any other (e.g a Firewall) but works in the most exposed of all environments (an uncontrolled machine) and on a small scale. Thus Shiva is much simpler to attack, and much harder to defend, than many other technologies. Effectively it is a standard security arms race but escalates much more rapidly. Shiva's attack/defence timeline and history is interesting from this (and a technical) perspective, so the speech will also cover this evolution.

Finally, the speech will culminate in the release of a new version of Shiva, that is resistant to all known attacks. While technology like Shiva is locked in an endless arms race, it stirs things up and provokes new research in the process. We've gained a lot from the project so far... lets progress the race and see where it takes us.

Shaun Clowes is the IT Director of SecureReality, a small cutting edge security consultancy based in Sydney, Australia. Shaun holds an honors degree in Computing Science from the University of Technology Sydney and has a wide technical background in IT including Unix systems programming, networking and systems/security administration. Shaun leads the vulnerability research arm of SecureReality which is broadly exploring the security landscape testing both the obvious targets and the glue that holds everything together.

Jennifer Stisa Granick joined Stanford Law School in January 2001, as Lecturer in Law and Executive Director of the Center for Internet and Society (CIS). She teaches, speaks and writes on the full spectrum of Internet law issues including computer crime, national security and constitutional rights, and electronic surveillance, areas in which her expertise is recognized nationally.

Granick came to Stanford after almost a decade practicing criminal defense law in California. Her experience includes stints at the Office of the State Public Defender and at a number of criminal defense boutiques, before founding the Law Offices of Jennifer S. Granick, where she focused on hacker defense and other computer law representations at the trial and appellate level in state and federal court. At Stanford, she currently teaches the Cyberlaw Clinic, one of the nation's few law and technology litigation clinics.

Granick continues to consult on computer crime cases and serves on the Board of Directors of the Honeynet Project, which collects data on computer intrusions for the purposes of developing defensive tools and practices. She earned her law degree from University of California, Hastings College of the Law and her undergraduate degree from the New College of the University of South Florida.

The rise in prominence of incident response and digital forensic analysis has prompted a reaction from the underground community. Increasingly, attacks against forensic tools and methodologies are being used in the wild to hamper investigations. This talk will: familiarize the audience with Unix file system structures; examine the forensic tools commonly used, and explore the theories behind file system anti-forensic attacks. In addition, several implementations of new anti-forensic techniques will be released during the talk.

Anti-forensics has cost the speaker one job. This material has never been presented in the North American continent because anti-forensics scares the feds. Find out why.

The grugq has been researching anti-forensics for almost 5 years. Grugq has worked to secure the networks and hosts of global corporations, and hes also worked for security consultanting companies. His work as a security consultant was cut short by the publication of an article on anti-forensics. Currently, he slaves for a start-up, designing and writing IPS software.

Grugq has presented to the UK's largest forensic practioner group where he scared the police. In his spare time, grugq likes to drink and rant.

This talk will explain how to fight Internet worms by using technologies related to honeypots. The first part will focus on essential needed theory concepts about Internet worms, to move on a second part reminding interesting functions about current honeypots (and Honeynets). Then, Laurent will propose ideas and demonstrations about how honeypots can be used to fight off Internet worms or even fight them back! A strong technical case study will be given to show how Honeyd may be used to deal with MSBlast worms (catching the worms, detecting them, slowing them, stopping them, cleaning them, etc).

Laurent Oudot is a French security expert who works for the CEA. He is also a member of a team called "rstack" composed of security addicts and geeks. Oudot's research focus on defensive technologies highly closed to blackhats activities like honeypots, intrusion prevention, intrusion detection, firewalls, sandboxes, MAC, etc.

Laurent is the (co-)author of several research papers recently published and released at rstack.org, MISC magazine and Linux Magazine France. He has presented at national and international conferences and meetings such as annual Honeynet Project meeting (Chicago), Libre Software Meeting (Metz), FOSDEM (Bruxelles), etc.

In his spare time, Laurent co-organized security events such as the Libre Software Meeting (co-chairman of the Security Topic with Bradley Spengler from Grsecurity), Symposium Sécurité des Technologies de l'Information et de la Communication (SISTIC), etc.

Laurent teaches network and systems security, and has managed numerous security projects..

Recently with Nicolas Fischbach, he co-created the French Honeynet Project which is part of the international Alliance of Honeynets.