ComfyCon AU 2020 Summer

Building a vibrant and competitive ecosystem

Michelle Price

Cyber security is emerging as one of Australia’s most promising growth sectors.

Cyber Security Adulting

hoodiePony

There’s a lot of guidance out there for enterprise, and business to help guide Cyber Security Maturity, and what it means to be a “responsible adult” organisation.

Digital Forensics for Compressed Files

Josh Lemon

How and when timestamps change on a Windows system are well documented, but what happens to timestamps when threat actors ZIP/RAR/CAB up all the data they have collected in your network and exfiltrate it?

DownUnderCTF: Australia's Largest CTF in a Nutshell

DownUnderCTF

The story of how a group of individuals from 13 cyber security societies across Australia came together to manage to create Australia’s largest CTF.

Function Similarity Using Machine Learning

Paul Black

I will give an overview of the research in a recent paper where I have been using machine learning to predict function similarity in different malware families.

Guardians of the cloud: the sysadmin’s guide to cloud security

Bronwyn Mercer

Organisations are rapidly moving applications to the cloud to support remote work in the COVID-19 era, leaving sysadmins and security teams to secure a sprawling mass of cloud-based infrastructure.

It Starts with a Question - Inquiry for Cyber Security

Garth Schwer

As a cyber security hiring manager, I see one of the key differences between people who are successful and those who struggle is the ability to navigate uncertainty.

Let's talk CFPs - Stop putting off that conference submission

Lidia

So your favourite InfoSecurity conference has just published its Call for Paper (CFP) dates!

MageCart - modern web attacks for fun and profit

Allen Baranov

Magecart has been in the news many times due to high profile breaches such as when 100s of Australian website were found to have malware on them and when BA was fined for over $200m.

Mental Health in InfoSec - We Need To Talk

Simon Harvey

The Consulting, Digital, Information and Technology industries traditionally have attracted a certain “type” of person.

Peer Review: Bitter wisdom is better than sweet folly

Kirk Nicholls

Before responding to an important text or email it is wise to have a friend weigh in on your wording.

Planning Your Active Defence with MITRE Shield

Vlado Vajdic

MITRE Shield (https://shield.mitre.org/ ) is a recently published active defence knowledge base MITRE developed to capture and organise active defence techniques and adversary engagement.

Practical OSINT’ing... while Mountain Biking

Benzies

OSINT is any sort of intelligence gained through any publicly available source.

Red-Teaming cognitive principles for understanding complexity.

Simon Koch

Red-teaming has been used since the cold war to help decision makers overcome their own cognitive biases flawed group dynamics and arrive at more thorough judgments about the future.

Report Ranger: Pentesting reports with markdown and automation

Matt Strahan

We’re releasing a new tool for building penetration testing reports called Report Ranger.

Securing mobile apps using Google Firebase

Andrew McDonnell

Google firebase is a NoSQL database and mobile / web backend framework.

Security design flaws in Storage by Zapier

Alexei Doudkine

In this talk, I go through the vulnerabilities I discovered in a Zapier service called “Storage by Zapier”.

So you've decided to go out on your own... how to setup for business or subcontracting

Edward Farrell

Australia has an awesome talent pool of cybersecurity professionals & human beings that unfortunately is under the yoke of large businesses that will subjugate awesomeness for mediocrity.

Taming the Velociraptor: who needs EDR anyway?

MattG

This talk will look at some key capability I have learnt using Velociraptor in field, fighting evil over the last year and a bit.

Teach IT user’s not to get phished: Play the game, get the knowledge and confidence to handle phishing emails/websites

Gitanjali

Phishing attacks are prevalent and humans are central to this online identity theft attack, which aims to steal victims’ sensitive and personal information such as username, password, and online banking details.

The blunt advice about getting a job in cybersecurity

Rami Tawil

Cybersecurity is a well sought-after industry. So, you studied hard at University, maybe you want to transition from that accounting disciple, or perhaps you just watched Mr.

The Paradox at the Heart of Cloud Native Security

Josh Armitage

In a world where deploying new features to production multiple times a day, is ever more reality than myth, traditional enterprise security and compliance teams are scrambling to cope with the pace of change, the historial walls of the often cited “Church of No” are crumbling around them.

Threat hunting for dummies

hilt86

Hilt gives an introduction to threat hunting and how resource constrained organizations can boot strap a threat hunting program using open source tools.

Using statistical analysis to find beacon communication activity

civilized

I’ll cover the types of beacons out there in the wild, a little about some of the c2 frameworks and how beacons are configured and deployed.

What We Do in the Shadows

attacus

We’ve all done it. Setting up a Slack to chat to our colleagues when the proper system doesn’t cut it.