AI security: how we apply AI test AI

TBC

Secret Track

TBC

Fuzzer

TBC

AI security: how we apply AI test AI

TBC

Secret Track

TBC

AI security: how we apply AI test AI

TBC

Secret Track

TBC

Car Hacking

TBC

Automotive security workshop with RAMN

This workshop will feature practical hands-on activities using RAMN (Resistant Automotive Miniature Network), a small CAN bus testbed that will be lent to participants for the duration of the workshop - participants only need to bring a laptop.

Participants will learn how to analyze CAN traffic and how to interact with Electronic Control Units (ECUs) through various protocols, notably Unified Diagnostic Services (UDS). The workshop will follow the content available at https://ramn.readthedocs.io/en/latest/userguide.html.

After the workshop, participants will be given time to either play with RAMN’s automotive CTF training module, tackle advanced challenges from past professional CTFs, or interact with a RAMN connected to a CARLA car simulator.

Participants should read and follow the instructions here to prepare their hands-on environment: https://ramn.readthedocs.io/en/latest/userguide/ramn_introduction.html#preparing-a-linux-machine-with-can-utils

Laptop Requirements:

• Windows 7 and above or native Linux
• (For Windows) Kali VM or Ubuntu VM
• Administrative Privileges
• At least one USB A port

Automotive security 101

This workshop will feature practical hands-on activities using RAMN (Resistant Automotive Miniature Network), a small CAN bus testbed that will be lent to participants for the duration of the workshop - participants only need to bring a laptop.

Participants will learn how to analyze CAN traffic and how to interact with Electronic Control Units (ECUs) through various protocols, notably Unified Diagnostic Services (UDS). The workshop will follow the content available at https://ramn.readthedocs.io/en/latest/userguide.html.

After the workshop, participants will be given time to either play with RAMN’s automotive CTF training module, tackle advanced challenges from past professional CTFs, or interact with a RAMN connected to a CARLA car simulator.

Participants should read and follow the instructions here to prepare their hands-on environment: https://ramn.readthedocs.io/en/latest/userguide/ramn_introduction.html#preparing-a-linux-machine-with-can-utils

Laptop Requirements:

• Windows 7 and above or native Linux
• (For Windows) Kali VM or Ubuntu VM
• Administrative Privileges
• At least one USB A port

VirtualBox Exploitation

TBC

Atlanta AIxCC challenge

TBC

Boring Cloud Security (and Resilience)

We will explore fundamental yet often overlooked aspects of cloud security and resilience that every organization should address. Drawing from real-world consulting experiences in Taiwan, let’s discuss why many organizations struggle with cloud security, particularly in shared responsibility, security governance, and incident response readiness. This session will provide actionable insights for organizations at any stage of their cloud journey, helping them build a secure and resilient foundation aligned with industry best practices. Outline Introduction Session overview Why cloud security is “boring” Shared Responsibility Model Deep Dive Shared responsibility model explained Customer responsibilities in detail Common misunderstandings and pitfalls Governance at Scale Current state of ISMS in Taiwan Gaps between certification and actual security needs Building an effective cloud security baseline Beyond Tick-Box Security Why compliance != security Common tick-box symptoms Moving beyond compliance Incident Response Readiness Common DFIR challenges in the cloud Critical logging requirements Automation in incident response Cloud Resilience Essentials Prepare, event, and response Disaster recovery strategies in the cloud Conclusion and Next Steps Key takeaways Action items Q&A Why it is interesting and important Through practical examples and lessons learned, attendees will learn how to move beyond compliance tick-box exercises to establish adequate cloud security controls. What did audience can take from the talk Target Audience: Security professionals Cloud architects IT managers Compliance officers Anyone responsible for cloud security decisions Expected Outcomes: Understanding of shared responsibility model implementation Knowledge to develop an effective security baseline Ability to plan for security costs and automation Improved incident response preparedness Actionable steps for security and resilience improvement

Fuzzer

TBC

Fuzzer

TBC

Secret Track

TBC