Program Overview

Plenary Sessions

• Building blocks of a cyber resilience program

  Monika JOSI (Consultant and former Microsoft Chief Security Advisor for EMEA)

  October 26, 2015 14:30-15:00

  monika-josi.pdf

  MD5: 4612fd01bbcb1ca157e87c3b13809e61

  Format: application/pdf

  Last Update: June 7th, 2024

  Size: 1.13 Mb

• Critical Information Infrastructure (CIIP) and Public Private Partnership

  Besnik LIMAJ (Team Leader, EU Funded Project Enhancing Cyber Security (ENCYSEC))

  With much of a Critical Infrastructure in the hands of the private sector, it seems a natural solution for industry and government to work together in ensuring it is both secure and resilient. A public–private partnership (PPP) establishes a common scope and objectives and uses defined roles and work methodology to achieve shared goals in addressing Critical Information Infrastructure Protection (CIIP). Using a real-life example, this session will demonstrate real cases of Critical Information Infrastructure incidents and how to deal with information sharing in Public Private Partnerships. Besnik is a Team Leader of the EU funded trans-regional Project “Enhancing Cyber Security”. He has an extensive background as a Team Leader and Chief Executive Officer. Leading large International funded (EU Commission, NATO, World Bank, DFID, Austrian Dev. Agency, CIDA, OSCE, IRC etc) projects, Besnik is also a lead architect of various software solutions and certified trainer for Information Systems Management. Besnik has over 25 years of experience in software engineering and has strong knowledge of programming languages, information security systems and technologies: Ethical Hacking, Metasploit - Penetration Testing Software, CISSP, NetFlow Analysis, Forensics, SQL Server 2000-2014, MySQL, ASP.NET,VB.NET, C#, XML, DML, Java, PHP, Apache, HTML and middle tier design. Besnik has traveled the world and came across at various people and cultures from Hong Kong in the East, to US in the West. He holds an MBA degree from the University of Sheffield and Level 7 Diploma in Strategic Management and Leadership from Chartered Management Institute in London. In addition he is a DGQ (Deutsche Gesellschaft fur Qualitat) Internal Auditor, Quality Manager and Quality Systems Manager from the European Organization for Quality.

  October 27, 2015 13:30-14:15

•  EU

  Cybercrime, cyber-espionage, information warfare and “cyber war”: the fil rouge which connects the dots

  Raoul “Nobody” CHIESA (APWG, EU) (EU)

  October 26, 2015 13:30-14:30

  raoul-chiesa.pdf

  MD5: 4ff57ee8b1dcc3f33ccf61c574149d40

  Format: application/pdf

  Last Update: June 7th, 2024

  Size: 2.14 Mb

• FIRST and Fellowship Program

  Margrete RAAUM (President of FIRST & Team leader of the Norwegian Energy Sector CERT (KraftCERT))

  Margrete Raaum has experience from the academic sector, the ISP community as well as for the National CERT, NorCERT and the energy sector (the transmission/grid operator). She has many years of experience in building and strengthening incident response capabilities in the different sectors, and she is currently leading the newly started Norwegian Energy Sector CERT, working on strengthening the readiness and resilience of energy sector companies and other process control industries in critical infrastructure. She has been active in several communities as FIRST (Forum of Incident Response and Security Teams) and TF-CSIRT for almost 10 years, and she is the current president of FIRST. Her background is from computer science and electronics, network architecture and security, and she has worked on a range of security related issues.

  October 26, 2015 10:15-10:35

• Incident Response and its role in protecting critical infrastructure

  Margrete RAAUM (FIRST Chair)

  Energy is one of the most critical and vulnerable parts of what we consider our critical infrastructure. It is the target of advanced attacks for both political and economic reasons from highly skilled and patient attackers. The attack rate is rising at an alarming rate, and the change in skill set in the organizations does not always keep up the pace. To complicate matters further, these critical services are run by legacy systems that were never designed to withstand cyber attacks. Preparing for attacks, and having sound procedures for incident response are key elements to avoid devastating results. We will discuss the elements that have to be in place, discuss the unique challenges in industrial control system environments and look at some ways of moving forward together with the global ICS community. President of FIRST (Forum of Incident Response and Security Teams) Team leader of the Norwegian Energy Sector CERT (KraftCERT) Margrete Raaum has experience from the academic sector, the ISP community as well as for the National CERT, NorCERT and the energy sector (the transmission/grid operator). She has many years of experience in building and strengthening incident response capabilities in the different sectors, and she is currently leading the newly started Norwegian Energy Sector CERT, working on strengthening the readiness and resilience of energy sector companies and other process control industries in critical infrastructure. She has been active in several communities as FIRST (Forum of Incident Response and Security Teams) and TF-CSIRT for almost 10 years, and she is the current president of FIRST. Her background is from computer science and electronics, network architecture and security, and she has worked on a range of security related issues.

  October 27, 2015 11:30-12:15

  critical-infrastructure-ir.pdf

  MD5: a007f3ba5e3a930d1ab011f93f4badb7

  Format: application/pdf

  Last Update: June 7th, 2024

  Size: 1.85 Mb

• Keynote: The European Union and its assistance in developing cybersecurity capacity

  Panagiota-Nayia BARMPALIOU (European Commission)

  Panagiota Nayia Barmpaliou is responsible for coordinating and managing a multi-million euro external assistance budget for capacity building actions in the areas of cybersecurity and organised crime at the European Commission's Directorate General for Development and Cooperation in the Unit Stability, Security, Development and Nuclear Safety. She covers a diverse thematic portfolio at the heart of the security/development nexus addressing global and emerging threats, involving trans-regional capacity building programmes in the field of cybercrime and cybersecurity, as well as trafficking in drugs and human beings. Nayia oversees the external cyber capacity building efforts from a strategic and operational perspective, while in her role as a thematic policy officer she provides advice in the design, quality control and implementation actions in these areas and coordinates with other EU services to ensure internal and external policy coherence. One of her main focus areas is to ensure and promote the incorporation of human rights safeguards in external cooperation actions addressing terrorism, organised crime and cybersecurity. She has worked extensively in the area of EU external relations from both a policy and an operational perspective, most notably on human rights and rule of law issues, while her geographic expertise covers Central Asia, South East Asia, Iraq and Iran. Prior to her current position, Nayia worked as a geographical coordinator for Iran, Iraq and North Korea at the same DG, while before joining the European Commission she served as a political advisor at the EU Delegation to the Philippines and as a human rights fellow at the European Parliament. She has a legal background and has practised law as a Barrister in Greece in criminal, asylum and anti-discrimination law cases.

  October 27, 2015 09:45-10:30

• Keynote: UNDP perspective in providing cybersecurity assistance to emerging countries

  Shirin HAMID (Chief Technology Officer and Director of OIST, UNDP)

  Shirin Hamid is the Chief Technology Officer and Director of the Office of Information Systems and Technology in UNDP’s Bureau of Management. Her focus is on Information and Communication Technology (ICT) governance, innovation, and expanding enterprise ICT systems and services to support UNDP’s programme delivery worldwide. Ms. Hamid was honored as a Computerworld Premier 100 ICT Leader for 2014. Ms. Hamid has been instrumental in driving ICT governance and business-IT alignment through a robust ICT governance structure, managing the largest inter-Agency Enterprise Resource Planning (ERP) system and delivering enterprise systems and services to optimize business productivity. She currently leads an inter-Agency cloud-computing project to deliver enterprise services to UNDP and other UN Agencies. Ms. Hamid has fifteen years of experience in strategic ICT governance, management, and consulting. She previously held the position of Deputy General Manager then was General Manager at Keppel Offshore & Marine in Singapore; was Chief Technology Officer at TradeOneAsia Pte Ltd. and a consultant for Deloitte and Accenture Consulting. Ms. Hamid is a national of Singapore, and holds a degree in Strategic Thinking and Management from Wharton Executive Education, an MSc in Business Systems Analysis and Design from City University (UK) and a BS in Computer Science from Coventry University.

  October 26, 2015 09:45-10:15

• Panel: Building an effective National CERT team

  Besnik LIMAJ (Moderator)

  Moderator: Besnik Limaj 1. Natalia Spinu, Head Cyber Security Center, Moldova 2. Ms. Sharifah Roziah Mohd Kassim, CERT, Malaysia

  October 26, 2015 15:15-16:45

  natalia-spinu.pdf

  MD5: 41627d2483af5774318d216a28fcb91d

  Format: application/pdf

  Last Update: June 7th, 2024

  Size: 2.83 Mb

  sharifah-roziah-mycert.pdf

  MD5: 64c53363b5b39481b96d3cb6c3b50b54

  Format: application/pdf

  Last Update: June 7th, 2024

  Size: 8.06 Mb

• Panel: Challenges for developing nations in cybersecurity and resilience

  Besnik LIMAJ (Moderator)

  Moderators: Paul Raines and Besnik Limaj Participants: 1. Natalia Spinu, Head Cyber Security Center, Moldova 2. Clay Lin, CISO World Bank 3. Melanie Riebeck, FIRST

  October 27, 2015 14:15-15:45

• Panel: Challenges of Cybercrime

  Paul RAINES (Moderator, UNDP)

  Moderator: Besnik Limaj 1. Visar Pacolli, Cybercrime unit, Kosovo 2. Artur Degteariov, Cybercrime unit, Moldova

  October 27, 2015 10:30-11:15

  artur-degteariov.pdf

  MD5: c59c2a747f11ff4df4df0b8eb0fd36ce

  Format: application/pdf

  Last Update: June 7th, 2024

  Size: 3.53 Mb

  visar-pacolli.pdf

  MD5: 68e8408c04e4f2333a06304fd1b95722

  Format: application/pdf

  Last Update: June 7th, 2024

  Size: 3.08 Mb

• Panel: Developmental assistance in cybersecurity and resiliency for developing nations

  Paul RAINES (Moderator, UNDP)

  Moderator: Paul Raines Panelists: 1. Shirin Hamid, UNDP 2. Ms. Panagiota-Nayia BARMPALIOU, European Union 3. Margrete Raaum, FIRST 4. Clay Lin, CISO, World Bank

  October 26, 2015 10:45-11:15

• The Naked Hacker: Bringing Radical Transparency into Pentesting

  Melanie RIEBECK (Radically Open Security)

  Over the last 1.5 years, our geographically distributed pentest team has been taking "crystal box" to another level. We open-source our internal SW and documents, and using tools like IRC/RocketChat and Gitlab, customer "volunteers" on our pentests see all, hear all.. and can actively hack along. The result is interesting: close-knit collaboration, mid-pentest scope changes, weird/funny situations, and Security ChatOps. This talk will discuss our experiences bringing Radical Transparency into the pentesting proces s. Biography: Melanie Rieback is the CEO/Co-founder of Radically Open Security. She is also a former Asst. Prof. of Computer Science at the Vrije Universiteit Amsterdam who performed RFID security research (RFID Virus and RFID Guardian), that got worldwide press coverage, and won several awards (VU Mediakomeet, ISOC Award finalist, NWO I/O award, IEEE Percom Best Paper, USENIX Lisa Best Paper). Melanie also worked as a Sr. Engineering Manager on XenClient at Citrix, where she led the Citrix Vancouver office. She was also a Sr. Managing Consultant in the Cyber Crime Expertise and Response Team (CCERT) at ING Bank, where she set up the CCERT Analysis Lab and was the lead technical project manager of the ING Core Threat Intelligence Systems. For fun, she founded the Dutch Girl Geek Dinner in 2008. Melanie was also named 2010 ICT Professional of the Year (Finalist) by WomeninIT, and one of the “400 most successful women in the Netherlands” by Viva Magazine (Viva400) in 2010.

  October 26, 2015 11:30-12:30

• Istanbul TC/TRANSITS Training
  • Program Overview
  • Hotel Information