FIRST Regional Symposium for Asia-Pacific 2022
2022-10-20..2022-10-21
-- online --
who it's for
csirt members, threat intelligence analysts, security operations engineers, secure software developers, embedded security engineers, security program managers
topics
DNS forwarder logging and DPI; DGA detection with neural classifiers; knowledge graph for NDR profiling; SIM3 CSIRT maturity model; mapping MITRE ATT&CK to NIST SSDF; OWASP ASVS for secure development; 3 petabyte cybersecurity AI dataset; retraining models for malware detection; email phishing detector improvements; TPM and secure element provisioning; IDevID/LDevID 802.1AR device identities; secure boot with e-fuse bound keys
| title | author | length |
|---|---|---|
| Attack Hunting with Threat Intelligence | Pengchao Li | 31m |
Claims that DNS logs remain the best IoC source but encryption (DoH/DoT) is reducing visibility and that simple DNS forwarder logging plus DPI sensors on… | ||
| Introduction of SIM3 Training in Japan | Seiichi Komura, Yoshiki Sugiura | 29m |
SIM3 is a CSIRT maturity model that defines 44 parameters across four quadrants (organization, human, tools, processes) and five implementation levels; OCF… | ||
| Resilient Secure Software Development Through Insights Learned from Adversarial Attack Campaigns | Lokesh Balu | 32m |
Claims a repeatable method that maps MITRE ATT&CK mitigations into concrete secure development controls by crosswalking them with NIST SSDF and OWASP ASVS and… | ||
| Introduction of Cybersecurity AI Dataset | Jeong Min Lee | 32m |
KISA builds a Cybersecurity AI Dataset consisting of 3 petabytes and roughly 800 million samples covering malware and incident files, plus follow‑up… | ||
| Supply Chain Security for IoT Devices | Mini TT | 30m |
Covers concrete, implementable measures: using TPM/secure element as a hardware root of trust, manufacturer-issued IDevID and locally significant LDevID… | ||
| nothing matches | ||