Christien Rioux to Talk About Finding New Types of Vulnerabilities Via Binary Analysis

Christien Rioux from Veracode will talk about finding new types of vulnerabilities via binary analysis - with discussion of identification, exploitation and remediation. Christien has long history with security industry spawning e.g @stake, L0pht Heavy Industries.

Please see the schedule for details.

Mark Debenham to talk about Virtualization

Mark Debenham from Microsoft will take the audience through some of the risks associated with the reliance on virtualization from a security perspective with a demo or two along the way.

T2 staff thinks that this talk will be an important lesson for those of you dealing with virtualization. Don't miss the demo train!

Please see the schedule for details.

Jarno Niemelä to talk about Spying via Bluetooth

Jarno Niemelä from F-Secure will explain us why all those people who think that their mobile phone is being spied on are not necessary crazy. This presentation gives an overview of just what is possible do over Bluetooth once the attacking device is trusted, what spy can do over Bluetooth and what can be done to prevent it.

T2 staff thinks that this talk defines quite well what "trust" really means.

Please see the schedule for details.

Rafael Dominguez Vega to talk about USB Attacks

Rafael Dominguez Vega from MWR InfoSecurity will go through the dangers of USB devices. The presentation will cover a wide range of security considerations for USB devices. However, it will specifically focus on the evolution of an attack that can be delivered through a malicious USB device. The talk will also include discussion about the methods that can be used to identify and exploit vulnerabilities in USB drivers and their advantages and disadvantages.

T2 staff thinks that you should think twice before you use a USB stick from a security conference ... :)

Please see the schedule for details.

Juhani Eronen to talk about Real World Incidents

Juhani Eronen from CERT-FI will present post-mortem studies on incident and vulnerability coordination projects he has been involved with, including recent CERT-FI disclosures.

T2 staff thinks that this talk will be an important lesson for everybody, especially those working for product development. If you or your organization would like to avoid some of the pitfalls — this talk is for you!

Please see the schedule for details.