33rd Annual FIRST Conference (Virtual Event)
2021-06-06..2021-06-09
-- online --
who it's for
threat hunters, malware analysts, security operations center analysts, incident responders, vulnerability managers, product security engineers, digital forensics examiners
topics
MITRE ATT&CK technique sequencing; Dridex loader and RC4 analysis; zoom domain spearphishing threats; IoT-ICS high-interaction honeypots; DNS anomaly detection with LSTM; random forest tunnel classification; machine learning evasion for malware; vulnerability management dashboards; security advisory prioritization practices; Verizon DBIR incident trends; SailfishOS forensic artifacts
| title | author | length |
|---|---|---|
| Adversary Emulation: Generating MITRE ATT&CK Technique Sequences | Martin Eian | 31m |
Automates sequencing of MITRE ATT&CK techniques by modeling each technique as promises (requires/provides) and building a promise vocabulary covering all… | ||
| Breaking Dridex Malware | Felipe Duarte Domingues, Gustavo Palazolo | 19m |
Analysis unpacks Dridex loaders (often custom-packed in memory) by monitoring VirtualProtect/VirtualAlloc or using tools like Immunity Debugger and Hollow’s… | ||
| COVID-19 and Cyber Security: Side Effects or Business as Usual? | Eddy Willems, Righard Zwienenberg | 29m |
Mass shift to home offices exposes concrete failures: unprotected Zoom meetings and zoom domains registered enable meeting takeover and spearphishing campaigns… | ||
| The Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain | Mars Cheng, Patrick Kuo | 30m |
Claims a deployed pipeline that ingests 25 TB of traffic, runs 350+ global hunting engines and an hourly automatic workflow that detected over 1.1 billion… | ||
| IDACUT: Inspecting DNS Anomalies Crossing Uncertain Times | Meng han Tsai (John), Wei Chieh Yang (Andy) | 33m |
A production pipeline ingests ~100M daily DNS logs via Logstash, Kafka and Spark into a scalable store and runs ensemble detectors: a character-level LSTM for… | ||
| Machine Learning Security Evasion Competition 2020 | Zoltan Balazs | 26m |
A competition modifies 50 Windows malware samples to evade three ML engines (EMBER plus two submitted models), first as a white‑box then as a black‑box… | ||
| Product Security Vulnerability Management Metrics are Hard | Sonny van Lingen | 27m |
Ericsson builds a state‑of‑the‑art web Technology Dashboard that pulls vulnerability data into executive reviews to drive action, not vanity. It aggregates… | ||
| Security Advisories and Vulnerability Prioritization in the Wild | Xander Bouman, Stephanie de Smale, Rik van Dijk | 24m |
Study of 24 semi‑structured interviews maps how organizations actually handle the flood of ~19,000 CVEs/year and ~1,000 NCSC advisories per year (about 40… | ||
| What a Year! - Insights and Forecasts from the 2021 DBIR | Alex Pinto | 37m |
Verizon’s DBIR uses a 14‑year consolidated dataset (5,000+ breaches, ~80,000 incidents) and shows phishing up 11 points, with 61% of breaches involving… | ||
| In Depth Review of SailfishOS Forensic Artifacts | Krassimir Tzvetanov | 26m |
SailfishOS resists common commercial mobile forensic suites, forcing full imaging via adb/dd over USB and partition extraction with SlotKit; Autopsy extracts… | ||
| nothing matches | ||