Tuesday
August 9th

Wednesday
August 10th

8:00

Registration opens

8:30

Middle Ground opens

9:30-10:25

Keynote in Breaking Ground

10:30-12:30

Talks

12:30-14:00

Lunch break

14:00-15:55

Talks

16:00-16:55

Happy hour

17:00-19:00

Talks

19:00

Closing ceremonies in Breaking Ground

22:00-2:00

Pool Party

9:30-10:25

Amanda Walker

Beyond logs and time series: observability for security & privacy

10:30-11:25

Matt Muir

A Tale of Two Malware Families - Overcoming Anti-Forensics and Foiling Botnets in the Cloud

11:30-12:25

Vladimir De Turckheim

Everything I know about prototype pollutions: how to react when confronted to a brand new vulnerability

14:00-14:55

Felipe A Pr0teus

The Northern Virginia Shuffle: Lateral Movement and other Creative Steps Attackers Take in AWS Cloud Environments and how to detect them.

15:00-15:55

Cookie Monster: Exfiltrating Data and More, Byte by Tasty Byte

17:00-17:55

Klaus Agnoletti

Detecting Log4J on a global scale using collaborative security

18:00-18:55

Ransomware Emulation Done Right

10:30-11:25

Trust Me, I'm a Robot: Can we trust RPA with our most guarded secrets?

11:30-12:25

Rodrigo Montoro

Understanding, Abusing and Monitoring AWS AppStream 2.0

14:00-14:55

The Technical Trap

15:00-15:55

Carl Hertz

Secure IT Operations, or, How to Shoehorn Security into a Small/Medium Business

17:00-17:55

Wendy Knox Everette

Weaponizing Your Fitness Tracker Against You: Health, Fitness, & Location Tracking in a Post-Roe World

18:00-18:55

Jack Hatwick

Busting Biases in Infosec

10:30-11:25

Kellon Benson

I got an alert, now what?

11:30-12:25

Uriel Kosayev

Malware Analysis - Red Team Edition

14:00-14:55

Cher Boon Sim

Parsing Differential Problem

15:00-15:55

Blue Hephaestus

Tomb Raider - Automating Data Recovery and Digital Forensics

17:00-17:55

Zero Days should not be a fire drill

18:00-18:55

Cheryl Biswas

Code Dependency: Chinese APTs in Software Supply Chain Attacks

10:30-11:25

Tracy Z Maleeff

Long Overdue: Making InfoSec Better Through Library Science

11:30-12:25

It was a million to one shot, Doc. Million to one' -- Lessons learned while modeling rare catastrophic cyber loss events

14:00-14:55

Gabriel Bassett

Attack Flow: From Data Points to Data Paths

15:00-15:55

Weeding Out Living-off-the-land Attacks at Scale

17:00-17:55

Brittany Bahk

Repurposing Vulnerability Tickets to Predict Severity Levels: An Introduction to Natural Language Processing and Classification Algorithms

18:00-18:55

Sven Cattell

Model Robustness Isn't Security

Don't forget to take advantage of our Career Coaches & Resume Reviewers

10:30-11:25

Tom Eston

Management Hacking 101: Leading High Performance Teams

11:30-12:25

Phillip Wylie

Penetration Testing Experience and How to Get It

14:00-14:55

So Who’s Line Is It Anyway? (A Recruiter Panel)

10:30-11:25

M33t the Press: CyberSafety Got Real… Now What?

11:30-12:25

#SBOM is here: making progress (not excuses)

14:00-14:55

Yael Basurto

ICS Security Assessments 101 or How da Fox I Test Dis?

15:00-15:55

We're not from the government, but we're here to help them help you

17:00-17:55

IATC Workshop Part 1: Next Phase of IATC Mission

18:00-18:55

IATC Workshop Part 2: Next Phase of IATC Mission

10:30-11:25

Cecilie Wian

I know...But I Have a System

11:30-12:25

Mathew Woodyard

Protecting Against Breached Credentials in Identity Workflows

14:00-14:55

Susan Paskey

Secrets of the Second Factor: Threat Hunting with Multi Factor Authentication

15:00-15:55

The One With The Foreign Wordlist

17:00-17:55

Per Thorsheim

Cracking passwords for good, bad & commercial purposes: second thoughts on password cracking

18:00-18:55

Robert “TProphet” Walker

The Exclave Experience: Relocating To 'Almost Canada'

10:30-10:55

Michael Lisi

How to Succeed as a Freelance Pentester

11:00-11:25

Oauth third party not departing

12:00-12:25

Andrew Lewton

Reverse engineering a DOS PC FMV Game from 1994

14:00-15:55

PG Forensics. (No, the other Forensics.)

17:00-17:55

PG Forensics. (No, the other Forensics.)

18:00-18:25

Lawrence Fox

Solid Tradecraft for Cryptomarket Drug Trafficking

8:30-12:25

Adding DAST to CI/CD, Without Losing Any Friends WORKSHOP

8:30-12:25

CICD security: A new eldorado (training)

8:30-12:25

Joe Schottman

Building Security Automation Using Jupyter Notebooks