PRESENTATIONS

SamuraiSTFU (Security Testing Framework for Utilities)

Justin Searle

For years we've had pen test distributions like BackTrack and SamuraiWTF to help us perform penetration testing in most IT environments, however these distributions have been generic in nature to enable their use in a wide variety of different environments. One environment where these distributions have failed to meet the needs of their users is on SCADA, Smart Grid, and other industrial control systems. We have just fixed this problem. Taking our experience running SamuraiWTF over the last four years, UtiliSec, a leading provider of security consulting services in the energy sector, has created an open source linux distribution specifically for Electric Utility security teams. SamuraiSTFU takes the best in bread security tools for traditional network and web penetration testing, adds specialized tools for embedded and RF testing, and mixes in a healthy dose of energy sector context, documentation, and sample files. Oh, and I shouldn't forget the inclusion of emulators for SCADA, Smart Meters, and other types of energy sector systems to provide leverage a full test lab. So whether work for an electric utility, or are interested in gaining sufficient experience to start doing security work in these environments, checkout the project at SamuraiSTFU.org

Honeypots and Spidertraps: Tripping up Attackers

Jon Barclay

This presentation will focus on open source tools that lay traps that can actively block intruders, as well as alert defenders. It will use several of the tools in the Active Defense Harbinger Distribution (ADHD) in hands on labs.

Uncovering the Reptilian Agenda

Jason Tracy

UEN

Fun, Facts and Fiction of the Deep Net including a quick survey of the TOR network including .onion navigation, exit nodes, hidden service configuration, the literality of the "Primarch" system and more. Technical insight into the world beyond the surface web to include some cyber-crime underground and conspiracy theory.

The NSA, PRISM and why you should care?

Jason Reverri

This session will be a review of recent events regarding the NSA and the US government's spying program as revealed by Edward Snowden and provide a forum for discussion and debate.

The state of cloud security

Nate McConnell

This will be a general talk about security in the cloud. It will cover what as consumers of the cloud we can do to protect ourselves in either a public or private environment.

Threats and Information Sharing with the FBI

Michael A. Kennedy

The FBI and Salt Lake InfraGard will provide a threat briefing applicable to Utah risks and show benefits of information sharing with the FBI on matters related to counterterrorism, cyber crime, fraud, and other major crimes.

Defending your Future

Miles Johnson

The skills required to effectively defend are very different from the skills learned by attack.

Proactive Network Design and Tricks

Danny Howerton

Today's networks are purely reactive technologies in regards to security threats. Network and security admins are basically waiting for something to happen. I am going to talk about some easy, low cost ways that you can not only get more insight into your network but detect malicious activity before compromises happen.

Finding the theater in the mounds of best practices

Matt Lorimer

We will review industry security guidelines and practices and sort useful security practices from the security theater.

Hack yourself before someone else does

Mike Spicer

Expose dangerous threats in your system or network before someone else does. This presentation discusses the mindset, tools and techniques the adversary has in their arsenal. Tools demonstrated are Nmap, TCPDump, Wireshark, NetCat, Dig and more. Demonstration will be Windows/Mac/*Nix friendly. By using the tools and techniques in this presentation you will be able to protect yourself from threats in a new way and stay one step ahead of the enemy.

It will Never Happen to Me

Craig Curtis

Overview of fraud case and why having a plan is important. Will speak about issues and disconnects between departments.

Joomla Web Server Hack - Incident Response Timeline

Thomas Bailey

This presentation covers a real world web server hack. Details include a timeline of reported incidents and our responses. Postmortem analysis establishes the timing and nature of the attack, as well as potential exposure. The perspectives of both the attacker and defender will be discussed.

How Browsers Store Your Passwords (and Why You Shouldn't Let Them)

Derek Jones

I've always considered it best to not have browsers store passwords directly, but why? How easy can it be for malware to pull these passwords off of infected computers? Since sources are a bit tough to find in one place, I've decided to present the results here, as well as show some simple code to extract passwords from each browser's password manager.

Blackhat Tactics - How to hack and not get caught

Brady Bloxham

Threats, attacks, and hacks are becoming more targeted and advanced. Hackers are using more and more stealthy and covert techniques to not only hack into organizations, but also cover their tracks, transfer money, and maintain good operational security. This presentation will cover the latest tactics and techniques that sophisticated hackers are using to remain uncaught while conducting blackhat operations. Understanding how attackers gain access, expand presence, and exfiltrate sensitive data is the first step in defending against it.

Teaching Teens Offensive Security Through Games and Projects

Dan Daggett, Brian McManus, Ian Laird

This year SocialGeeks planned and executed a Capture the Flag event at a small Idaho high-school. The 13 hour event included 20 students and 13 mentors (teachers and industry professionals). Not knowing what to expect, the skill level was aimed over their teachers head. The day consisted of lectures and a lot of hacking. By the end of the day, the teens, mostly without programming/linux experience, were coding solutions on linux machines and solving challenges. We would like to share this inspirational story with you and ask for help in going forward targeting teens with project and game based learning.

Vendor Security or How to social engineer an email encryption vendor.

Spencer Warner

Your organization is only as secure as the sum of its parts including vendors and business partners. Information and suggestions on how to make sure that the companies you work with are as conscious about security as you are.

NetDASH v2

Jeremy Cox

NetDash is a network dashboard and intrusion detection system. The System captures all traffic passed over the network and stores that traffic in a PCAP file that can be downloaded and analyzed with other tools such as Wireshark. NetDash processes each PCAP file and stores relavent information about each packet captured in a MySQL database. Loaded NetDash plugins display statistical and intrusion detection information on the dashboard and provide email and system notification of identified events.

Bugs, Bounties, and Disclosures

Robert Jorgensen

Several large organizations, including Facebook, Google, and Mozilla, have turned to crowd-sourcing to find security and privacy flaws. Bug bounty programs pay users between $500 and $60,000 for locating and reporting security defects. Rob Jorgensen discusses the history and current state of bug bounties, his discovery of a logic flaw in Facebook that resulted in users sharing more than they intended, and his experience reporting the bug and being awarded a bounty.

ELMA (Enterprise Log Management Appliance)

Tristan Rhodes

"ELMA is a easy-to-use appliance that leverages the power of opensource software to enable you to quickly search through enormous amounts of logs. ELMA also provides visualizations of event frequency and dashboards with real-time updates. Much of the work is done by Kibana, ElasticSearch, and Rsyslogd. ELMA can be considered in the same category as Splunk. https://code.google.com/p/enterprise-log-management-appliance/

Mobile Application and BYOD Security Implications to Your Business

Dmitry Dessiatnikov

Explosion of mobile application market coupled with acceptance of "bring your own device" (BYOD) to enterprise environments comes with it's unique security risks. While driven by rise in productivity, convenience and overall user satisfaction BYOD increases the attack surface that most businesses are not prepared for. We will discuss the OWASP top 10 mobile risks and why should your business care about them. Practical recommendations and examples of common attacks will be presented.

The UtahSAINT Organization and how to get involved

Troy Jessup

An overview of the UtahSAINT organization, its progress for the past year, and how you can get involved. We will discuss upcoming changes to the organization and give a general report of what we are doing as an organization.

Lockpicking Revealed (Repeat from last-year)

Troy Jessup

We will be re-covering the lock-picking concepts we covered last year. This is generally for those new to the conference and who want to learn more about how locks work. If you came last year, you might be bored this year unless you forgot everything.

Under the Hood of Hackers Challenge

Troy Jessup

For those of you who come to SAINTCON to play Hackers Challenge, you will not want to miss this. During this presentation we will cover each and every Hackers Challenge puzzle and how to solve them. Everyone keeps asking about how to learn the skills to do this, and this year we will go in-depth and show you the tools and methods for solving these challenges.

PWNing the world with Raspberry Pi

Kelly Genessy

In this presentation we will cover the cool things that you can do with a raspberry pi. We will specifically teach you how to use one for fun and pen-testing. and we JUST MIGHT GIVE ONE TO EVERYONE!

Hands-on Web Security Kung Fu

Seth Johnson

Websites are a part of our lives, and untold mountains of information and resources are currently available online. While this is a wonderful development for civilization, security professionals see the grim side effects: some studies suggest that more than 80% of websites have at least one *major* security vulnerability. Come participate in an interactive demonstration of common web security vulnerabilities, how to exploit them, and – most importantly – how to effectively secure them. Items on the agenda include: Injection, Authentication, Cross-Site Scripting, Object References, Security Configuration, Data Exposure, Access Control, Cross-Site Request Forgeries, Known Vulnerabilities, and Redirects/Forwards.

Becoming a HAM -- AFTERDARK

UtahSAINT HAM Radio Operators

In this AfterDark event, we will be teaching the things you need to know in order to test for your HAM Technician Class License. We highly recommend that you study before-hand. We will provide recommended reading materials prior to the conference.

HAM RADIO TESTING SESSION

Administered by the Ogden Amateur Radio Club

On Friday Afternoon, you will be given the opportunity to take the HAM Radio Exam. Anyone is welcome to take the test. Cost information will be posted as soon as we get it.

Raspberry Pi Extended Session -- AFTERDARK

Kelly Genessy and Others from DC801

This session will offset the HAM Radio Class for those not interested in that, you can spend extra time playing around with your Raspberry Pi.

SANS 20 Critical Security Controls

Corey Roach

In this presentation we will discuss the use of the SANS 20 Critical Security Controls as a baseline security methodology for your organization. We will cover its purpose, and how to begin to adapt this methodology into your environment.

Hackerspaces and how to get involved

d3c4f

Hackerspaces are a great way to learn new things and share your existing knowledge with others. Join us to learn how you can help out.

Will you please Pass the Hash

Josh Dustin

"Pass-the-hash. The dreaded technique used to go from having access on a single machine to owning every machine in your environment. This presentation will show you multiple tools and techniques used by pentesters and our adversaries. By the end, beginners and experts alike will have a solid understanding of everything needed to pass-the-hash."

WiFi Pineapple

Kevin Howard / Troy Jessup

One of the latest products produced by Hak5, the Wifi Pineapple is an amazing tool that is relatively easy to deploy and can have devastating consequences within your organization. This device allows you to perform Man-In-The-Middle attacks to wireless devices of all kinds. Nearly all cell phones, laptops and tablets are vulnerable to the attack.

IRC Bots

Lance Buttars

IRC is a great way to communicate with people. It is also a great way to communicate with computer systems. In this presentation you will be shown the basics of creating your own IRC bot using python and be provided a primer of the basics of IRC boting for error reporting and notification along with command and control.

Making Attacks go Backwards

Josh Schwartz

In this talk we will cover how attacker tactics can leave behind obvious evidence, how their tools and can be identified and analyzed quickly, and how the human side of every attacker can lead to some great lulz. Attendees should leave armed with a variety of examples from the trenches of incident response and malware analysis that will give them an edge against the less advanced of advanced attackers. Key takeaways will include tips and tricks for identifying and reverse engineering malware and utilities used in targeted attacks as well as the forensic evidence they leave behind.

Scripting Fundamentals

Scotty Nielsen, Chuck Kimber, TJ Hilton

A Better description is coming soon, as soon as Chuck gets it to us..

Hacking Web Filters

Wes Furgason, Mat Murdock

The process and technology of hacking Web Filters

UNCONFIRMED TOPICS

HyperV and Security

TBA