NorthSec 2020 (Online Edition)

To see our schedule in grid from, please enable JavaScript.

09:00

15min

Opening Speeches

Admin

Opening speeches and welcome.

Twitch

09:20

45min

The Path to Software-Defined Cryptography via Multi-Party Computation

Prof. Yehuda Lindell

Exploring applied cryptography (Secure Multi-Party Computation) as an enabler of innovation, growth, and risk aversion in enterprise key management and protection.

Twitch

10:00

180min

Advanced Binary Analysis

Alexandre Beaulieu

Discover practical advanced binary analysis techniques like code emulation, symbolic execution and dynamic instrumentation to help dealing with and understanding obfuscated and packed executables.

Workshop Track 2

10:00

180min

Finding the Needle in the Needlestack: An Introduction to Digital Forensics

Emily Wicki

Learn how to apply the best forensics tool (spoiler: it's your brain!) to solve a mock insider threat investigation.

Workshop Track 1

10:10

45min

Dynamic Data Resolver IDA plugin – Extending IDA with dynamic data

Holger Unterbrink

Dynamic Data Resolver IDA plugin – Extending IDA with dynamic data

Twitch

11:00

45min

Regions are types, types are policy, and other ramblings

Compilers and interpreters make use of types to ensure a degree of semantic sanity. I will describe how types can be used outside this narrow paradigm to apply policies across address spaces.

Twitch

11:50

45min

High speed fingerprint cloning: myth or reality?

Paul Rascagnères, Vitor Ventura

During this presentation, we will explain how the democratization of resin 3D printers impacts the fingerprint cloning. And the security implications on devices such as phones, laptops or padlocks.

Twitch

12:40

45min

Defending Human Rights in the Age of Targeted Attacks

Etienne Maynier

In this talk, we will see what type of attacks are targeting Human Rights Defenders, how they evolved over the past years and how we are trying to respond to these attacks at Amnesty International.

Twitch

13:30

45min

Practical security in the brave new Kubernetes world

Alex Ivkin

Dive into a typical Kubernetes cluster by messing with the default security controls, popular sidecar containers and supporting infrastructure.

14:00

An introduction to Capture-The-Flag (CTF) with easy challenges and tips on how to approach them.

Workshop Track 1

14:00

180min

Offensive Cloud Security Workshop

Xavier Garceau-Aranda

The workshop is tailored towards individuals who have some experience with “the Cloud”, seeking to improve their proficiency at assessing the security of cloud hosted applications and infrastructures.

Workshop Track 2

14:20

45min

IOMMU and DMA attacks

Jean-Christophe Delaunay

Direct Memory Access technology allows peripherals to access RAM without relying on CPU. DMA increases performances but bring up security issues. An IOMMU was incorporated to address these concerns.

Twitch

15:10

45min

Look! There's a Threat Model in My DevSecOps

Alyssa Miller

Threat Modeling is a crucial activity that often gets left out of DevSecOps. This session will present a fast-paced backlog-based approach that doesn’t require tools or slow down development.

Twitch

16:00

45min

Stay quantum safe: future-proofing encrypted secrets

Christian Paquin

I present last year’s progress on the development of quantum-safe cryptography to protect communications susceptible to being intercepted today and decrypted later with the help of a quantum computer.

Twitch

16:50

45min

AMITT - Adversarial Misinformation Playbooks

Roger Johnston, Sara-Jayne Terp

We describe the use of adversarial misinformation playbooks to detect and counter disinformation, and explore advances in misinfosec tooling appropriated from the infosec community.

Twitch

17:40

45min

Unicode vulnerabilities that could byͥte you

Philippe Arteau

Transformation of Unicode characters can lead to various side effects. In this talk, you will learn why normalization and capitalization can be misused and affect modern applications.

Twitch

18:30

45min

Designing Customer Account Recovery in a 2FA World

Kelley Robinson

This session will show how to securely accommodate account recovery when the user has 2FA enabled while minimizing account takeover and support overhead.

Twitch