News Releases

IOActive Announces IOAsis San Francisco 2017 Security Talks
Top Security Researchers to Discuss Security and Threats for Critical Infrastructure, IoT, Smart Cities, Embedded Chips and more

SEATTLE, Feb. 9, 2017 /PRNewswire-USNewswire/ -- IOActive, Inc., the worldwide leader in research-driven security services, has announced the speaker lineup and location of its annual IOAsis San Francisco event, including information on the various talks being delivered by top researchers on IoT, critical infrastructure, auto security, semiconductors and more.

"Our San Francisco IOAsis has become a marquee event for IOActive to present thought leading security insights and information to the industry and we're always thrilled by the turnout and support from the cybersecurity community," said Jennifer Steffens, CEO of IOActive. "Our speakers are well-known for their groundbreaking security content and we're primed to deliver once again -- from identifying vehicle vulnerabilities to semiconductor reverse engineering and securing critical infrastructure, smart cities and IoT devices – we have a great line-up for our IOAsis attendees." 

The IOAsis San Francisco 2017 Talk schedule includes:

Tuesday, February 14
1:00 P.M. Critical Infrastructure Security - Resilience vs. Prevention
Daniel Miessler, IOActive
Session Description: A shift from prevention to resilience is underway as massive networks of connected devices strain traditional models. Learn how to evolve, respond, and get back to regular operations quickly.

2:00 P.M. Hardcore Cloud Forensics
Shane Macaulay, IOActive
Session Description: Detecting the most advanced threats on the latest Windows server 2016 in seconds. A quick demo and explanation of cloud based in-memory detection of the latest metasploit/meterpreter. We will also demonstrate some open source tools for dynamic kernel reflection introspection using python.

3:00 P.M. Security Plan Development: Move to a Better Security Reality
Brad Hegrat, IOActive
Session Description: In a converged IoT world, complex, connected embedded systems translate into tangible and potentially material security problems. This group discussion will focus on how to move organizations towards mature processes with increased security qualities and values and in a better position to defend their business from the negative impact of digital events.

4:00 P.M. Security Opportunities and Privacy Nightmares in Big IoT Data
Corey Thuen, IOActive
Session Description: This talk examines the ways in which connected data can be useful for securing infrastructure and devices while avoiding the potential privacy and logistical concerns in performing such analysis.

5:00 P.M. Exfiltration without Javascript
Keith Makan, IOActive
Session Description: Gain hands-on knowledge of how to perform data exfiltration during an HTML injection attack without relying on Javascript execution. There will also be a discussion on the Content Security Policy in browsers and how to craft exfiltration attacks when its protections are enabled, as well as defenses for the attacks, and by extension how to defend against XSS in depth.

Wednesday, February 14
1:00 P.M. Securing Smart Cities
Daniel Miessler, IOActive
Session Description: Smart cities offer great promise but also present real challenges when it comes to cybersecurity. Learn the importance of threat modeling, vulnerability assessments and new perimeter security models.

2:00 P.M. Back to the Future of AutoSec  
Corey Thuen, IOActive
Session Description: IOActive has devoted countless hours to vehicle cybersecurity and netted findings that have made headlines worldwide. Listen to the latest updates and findings from Corey Thuen, including a big picture overview of the types of vulnerabilities identified, the systems and attack vectors targeted, and how significant the vulnerabilities really are.

3:00 P.M. Large Area Blackbox Semiconductor Reverse Engineering 
Mike Davis, IOActive
Session Description: An update on IOActive Labs' 'moonshot' blackbox silicon reverse engineering project presenting some of the problems, solutions, and ultimate goals of the long term project in an emerging semiconductor security market.

4:00 P.M. Implementing Inexpensive Honeytrap Techniques 
Daniel Miessler, IOActive
Session Description: Learn how to implement inexpensive honeytrap techniques to spot attackers without having to invest in commercial tools. Talk will also touch on logging, monitoring, and responding to anomalous activity.

5:00 P.M. Embedded Device Security and Reverse Engineering
Thomas Kilbride, IOActive
Session Description: Using a hoverboard to demonstrate, this session will cover various techniques and methods used to reverse engineer embedded systems. The importance of designing for security will be discussed, as will the top 10 vulnerabilities found in embedded devices, and ways to design smarter.

IOActive IOAsis San Francisco 2017 will be held at Elan Event Center - 839 Howard St San Francisco, CA 94105, right across the street from Moscone West. Click here or visit http://www.ioactive.com/alerts/ioasis-san-francisco-2017.html for more information and to register for IOActive IOAsis San Francisco 2017. 

About IOActive
IOActive is the industry's only research-driven, high-end information security services firm with a proven history of better securing our customers through real-world scenarios created by our security experts. Our world-renowned consulting and research teams deliver a portfolio of specialist security services ranging from penetration testing and application code assessment to chip reverse engineering across multiple industries. IOActive is the only security services firm that has a dedicated practice focusing on Smart Cities and the transportation and technology that connects them. Global 500 companies across every industry continue to trust IOActive with their most critical and sensitive security issues. Founded in 1998, IOActive is headquartered in Seattle, US, with global operations through the Americas, EMEA, and Asia Pac regions. Visit www.ioactive.com for more information. Read the IOActive Labs Research Blog: http://blog.ioactive.com. Follow IOActive on Twitter: http://twitter.com/ioactive.

 

SOURCE IOActive, Inc.

For further information: Michelle Schafer, Merritt Group, 703.390.1525, IOActive@merrittgrp.com