HITBSecConf Malaysia Initial Speaker List Announced

Here's a taste of some presentations you can expect at #HITB2013KUL in October. You can register here. The 2013 edition of the Hack in the Box security conference in Malaysia takes place between October 14 and October 17 at the InterContinental Hotel in Kuala Lumpur.

Highlighted presentations include:

Hey Captain, Where's Your Ship? Attacking Vessel Tracking Systems for Fun and Profit

In recent years, automated identification systems (AISes) have been introduced to enhance vessels tracking and provide extra safety to marine traffic, on top of conventional radar installations. AIS, which is currently a mandatory installation for all passenger ships and ships over 300 metric tonnes, works by acquiring GPS coordinates and exchanging vessel’s position, course and information with nearby ships, offshore installation, i.e. harbors and traffic controls, and Internet tracking and visualizing providers. In this talk, we share with you our finding, i.e how we have able to hijack and perform man-in-the-middle attacks on existing vessels, take over AIS communications, tamper with the major online tracking providers and eventually fake our own yacht!.

Demystifying Game Console Security: Over 10 Years of Ownage Unraveled

Are you interested to learn about the delicate hacks and tricks that go on behind the curtains of the scene better known as “the console hacking scene”? Are you eager to find out who/what is behind all this incredible work that allows your little Nephew to play a copy of Call of Duty on his XBOX? Then this talk is for you!

Defeating Signed BIOS Enforcement

In this secure BIOS update scheme, there are two primary attack surfaces that can be targeted in an attempt to break the signed BIOS requirement: the Intel architecture protection mechanisms, and the vendor’s implementation of the signature enforcement and update routine. This presentation demonstrates two attacks; one against each of these targets. Both of these attacks allow an attacker to arbitrarily re-flash the BIOS on a number of systems despite the presence of signed BIOS enforcement.

The initial speaker list includes the following experts:

1.     Adam Laurie (Director, Aperture Labs)
2.     Alesandro Pasta (Independent Researcher)
3.     Ashar Javed (Research Assistant, Ruhr University Bochum)
4.     Cem Gurkok (Threat Intelligence R&D Manager, Verizon Terremark)
5.     Collin Mulliner (Researcher, Systems Security Lab, Northeastern University)
6.     Corey Kallenberg (Security Researcher, The MITRE Corporation)
7.     Dominic Chell (Director, MDSec)
8.     Eric Michaud (Rift Recon)
9.     Job de Haas (Senior Specialist, Riscure)
10.     John Butterworth (Security Researcher, The MITRE Corporation)
11.     Joshua ‘@p0sixninja’ Hill (Independent Security Researcher)
12.     Joaquim Espinhara (Security Consultant, Trustwave)
13.     Kyle Wihoit (Threat Researcher, Trend Micro)
14.     Luiz Eduardo (Director, Trustwave Spiderlabs)
15.     Dr. Marco Balduzzi (Senior Researcher, Trend Micro)
16.     Mark Vincent Yason (Security Researcher, IBM X-Force)
17.     Mathias Morbitzer (Masters Student, Radboud University Nijmegen)
18.     Peter ‘@bl4sty’ Geissler (Independent Security Researcher)
19.     Rahul Sasi (Security Researcher)
20.     Ryan Lackey (HavenCo)
21.     Shaun Colley (Security Consultant, MDSec)
22.     Stefan Esser (Head of R&D, SektionEins GmbH)
23.     Vladimir Katalov (Co-Founder, ElcomSoft Co. Ltd.)
24.     Wes Brown (Chief Architect, ThreatGRID)
25.     Xeno Kovah (Lead Infosec Engineer, The MITRE Corporation)