hashdays 2011: Mikko Hypponen - Keynote

0 likes532 views

Mikko Hypponen gave a keynote on cybersecurity threats from organized online criminals, hacktivists, and nation-states. He discussed topics like Duqu malware and its discovery in Iran and Syria. Hypponen is the CRO of F-Secure Corp and emphasized the importance of protecting digital assets that are irreplaceable.

Technology Business

KEYNOTE
Mikko Hypponen
CRO, F-Secure Corp

twitter.com/mikko
Protecting the irreplaceable | f-secure.com

Domain Name............: mikkohypponen-suc.kz
Name...................: Danch Danchev
Organization Name......:
Street Address.........: 5 Gaynezville
City...................: Amsterdam
State..................:
Postal Code............:
Country................: NL
Primary server.........: ns1.skilltex.kz
Primary ip address.....: 92.46.53.180
Last modified : 2011-03-09 11:55:26.0
Domain status : ok - Normal state.
Registar created: SKILLTEX

Part I: Organized Online Criminals

Protecting the irreplaceable | f-secure.com

Part II: Hactivists

Protecting the irreplaceable | f-secure.com

Part III: Nation-states

Protecting the irreplaceable | f-secure.com

Protecting the irreplaceable | f-secure.com

The document discusses various techniques in exploiting vulnerabilities in file formats such as ZIP, PDF, and BMP through manipulation of their structures for fun and evasion of security measures. It emphasizes how specific files can exhibit different behaviors based on how they are parsed or opened, leading to potential security risks. The presentation is a blend of reverse engineering and security research insights shared by experts in the field.

Marc Ruef: Adventures in a Decade of Tracking and Consolidating Security Vuln...Area41

��

The document discusses the maintenance and design of vulnerability databases, with a particular focus on SCIP's vulnerability database, presenting various aspects such as data sources, evaluation ratings, and the challenges of handling vulnerabilities. It outlines the goals of such databases, the importance of thorough data entry, and the variety of sources available for maintaining up-to-date information. Additionally, it covers the advantages and disadvantages of several vulnerability databases and vendors, as well as strategies for analyzing and interpreting data.

Halvar Flake: Why Johnny can’t tell if he is compromisedArea41

��

This document discusses the difficulty of determining if a computer system is compromised. It outlines several checks that could be done to verify control, such as verifying signatures on software binaries, firmware, and scripts. However, it finds that all of these checks ultimately fail due to issues like a lack of transparency, lack of standardization, and the potential for signing keys to be stolen without detection. It argues that fundamental changes are needed to infrastructure and practices to enable determining control, such as reducing the number of trusted code signing authorities, increasing transparency in software updates and signing processes, and reducing opacity in firmware and coprocessors.

Juriaan Bremer und Marion Marschalek: Curing A 15 Year Old DiseaseArea41

��

This document discusses analyzing Visual Basic 6 programs. It begins by providing background on VB6 and transitions to discussing challenges with classical analysis approaches. It then outlines approaches for dynamic analysis using instrumentation of the VB6 virtual machine to monitor execution and APIs called. This includes patching jump tables and implementing custom instruction handlers. The goal is to generate tailored reporting and analyze obfuscation techniques in VB6 programs.

hashdays 2011: Tobias Ospelt - Reversing Android Apps - Hacking and cracking ...Area41

��

The document discusses the vulnerabilities and security issues related to Android app development, primarily focusing on reverse engineering techniques for pentesters. It highlights past issues with lock screen circumvention, malware presence in the Google Market, and the ease of decompiling Android applications. Additionally, it provides an overview of techniques for downloading, disassembling, and analyzing Android apps, as well as recommendations for improving security practices.

hashdays 2011: Felix 'FX' Lindner - Targeted Industrial Control System Attack...Area41

��

The document discusses targeted industrial control system (ICS) attacks, focusing on the Stuxnet malware and its attack methodologies. It outlines the goals behind ICS attacks, such as industrial espionage and blackmail, as well as the security challenges in ICS environments. The document also reviews the technical intricacies of Stuxnet, its various exploits, and the ongoing issues and future strategies for defense against such threats.

Rob "Mubix" Fuller: Attacker Ghost StoriesArea41

��

The document discusses various cybersecurity strategies and tools, particularly focusing on memory protection with Microsoft's Enhanced Mitigation Experience Toolkit (EMET) and methods to mitigate Java-related vulnerabilities. It emphasizes the importance of logging, vulnerability scanning, and internal measures like bug bounty programs to enhance security awareness among employees. Additionally, it covers tactics such as blocking Java user agents, monitoring authentication, and using honeypots to detect and analyze attacks on networks.

hashdays 2011: Sniping Slowloris - Taking out DDoS attackers with minimal har...Area41

��

The document details a conference presentation by Dr. Christian Folini on defending against Slowloris-type DDoS attacks. It outlines the chaotic nature of such attacks, defense strategies, and introduces a monitoring tool named 'flying-frog.rb' to track and mitigate harmful traffic. The speaker emphasizes the importance of understanding network architecture and monitoring tools to effectively respond to attacks.

The Future of Data, AI, and AR: Innovation Inspired by You.pdfSafe Software

��

Securing AI - There Is No Try, Only Do!.pdfPriyanka Aash

��

OWASP Barcelona 2025 Threat Model LibraryPetraVukmirovic

��

Security Tips for Enterprise Azure SolutionsMichele Leroux Bustamante

��

Delivering solutions to Azure may involve a variety of architecture patterns involving your applications, APIs data and associated Azure resources that comprise the solution. This session will use reference architectures to illustrate the security considerations to protect your Azure resources and data, how to achieve Zero Trust, and why it matters. Topics covered will include specific security recommendations for types Azure resources and related network security practices. The goal is to give you a breadth of understanding as to typical security requirements to meet compliance and security controls in an enterprise solution.

10 Key Challenges for AI within the EU Data Protection Framework.pdfPriyanka Aash

��

ReSTIR [DI]: Spatiotemporal reservoir resampling for real-time ray tracing ...revolcs10

��

Securing Account Lifecycles in the Age of Deepfakes.pptxFIDO Alliance

��

FIDO Seminar: Authentication for a Billion Consumers - Amazon.pptxFIDO Alliance

��

AI VIDEO MAGAZINE - June 2025 - r/aivideo1pcity Studios, Inc

��

FIDO Seminar: Targeting Trust: The Future of Identity in the Workforce.pptxFIDO Alliance

��

OpenACC and Open Hackathons Monthly Highlights June 2025OpenACC

��

The OpenACC organization focuses on enhancing parallel computing skills and advancing interoperability in scientific applications through hackathons and training. The upcoming 2025 Open Accelerated Computing Summit (OACS) aims to explore the convergence of AI and HPC in scientific computing and foster knowledge sharing. This year's OACS welcomes talk submissions from a variety of topics, from Using Standard Language Parallelism to Computer Vision Applications. The document also highlights several open hackathons, a call to apply for NVIDIA Academic Grant Program and resources for optimizing scientific applications using OpenACC directives.

Wenn alles versagt - IBM Tape schützt, was zählt! Und besonders mit dem neust...Josef Weingand

��

Enhance GitHub Copilot using MCP - Enterprise version.pdfNilesh Gule

��

Coordinated Disclosure for ML - What's Different and What's the Same.pdfPriyanka Aash

��

Crypto Super 500 - 14th Report - June2025.pdfStephen Perrenod

��

This OrionX's 14th semi-annual report on the state of the cryptocurrency mining market. The report focuses on Proof-of-Work cryptocurrencies since those use substantial supercomputer power to mint new coins and encode transactions on their blockchains. Only two make the cut this time, Bitcoin with $18 billion of annual economic value produced and Dogecoin with $1 billion. Bitcoin has now reached the Zettascale with typical hash rates of 0.9 Zettahashes per second. Bitcoin is powered by the world's largest decentralized supercomputer in a continuous winner take all lottery incentive network.

FIDO Seminar: Evolving Landscape of Post-Quantum Cryptography.pptxFIDO Alliance

��

AI vs Human Writing: Can You Tell the Difference?Shashi Sathyanarayana, Ph.D

��

Connecting Data and Intelligence: The Role of FME in Machine LearningSafe Software

��

In this presentation, we want to explore powerful data integration and preparation for Machine Learning. FME is known for its ability to manipulate and transform geospatial data, connecting diverse data sources into efficient and automated workflows. By integrating FME with Machine Learning techniques, it is possible to transform raw data into valuable insights faster and more accurately, enabling intelligent analysis and data-driven decision making.

“Key Requirements to Successfully Implement Generative AI in Edge Devices—Opt...Edge AI and Vision Alliance

��

For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2025/06/key-requirements-to-successfully-implement-generative-ai-in-edge-devices-optimized-mapping-to-the-enhanced-npx6-neural-processing-unit-ip-a-presentation-from-synopsys/ Gordon Cooper, Principal Product Manager at Synopsys, presents the “Key Requirements to Successfully Implement Generative AI in Edge Devices—Optimized Mapping to the Enhanced NPX6 Neural Processing Unit IP” tutorial at the May 2025 Embedded Vision Summit. In this talk, Cooper discusses emerging trends in generative AI for edge devices and the key role of transformer-based neural networks. He reviews the distinct attributes of transformers, their advantages over conventional convolutional neural networks and how they enable generative AI. Cooper then covers key requirements that must be met for neural processing units (NPU) to support transformers and generative AI in edge device applications. He uses transformer-based generative AI examples to illustrate the efficient mapping of these workloads onto the enhanced Synopsys ARC NPX NPU IP family.

You are not excused! How to avoid security blind spots on the way to productionMichele Leroux Bustamante

��

We live in an ever evolving landscape for cyber threats creating security risk for your production systems. Mitigating these risks requires participation throughout all stages from development through production delivery - and by every role including architects, developers QA and DevOps engineers, product owners and leadership. No one is excused! This session will cover examples of common mistakes or missed opportunities that can lead to vulnerabilities in production - and ways to do better throughout the development lifecycle.

2024 Trend Updates: What Really Works In SEO & Content MarketingSearch Engine Journal

��

The document outlines key SEO and content marketing trends for 2024, emphasizing the impact of AI, the importance of E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness), and a shift towards user-centric content strategies. It advises against focusing on outdated trends like voice search and stresses the need for creating value-driven, authoritative content. Additionally, it highlights the need to leverage AI as a supportive tool rather than relying solely on it for content creation.

Storytelling For The Web: Integrate Storytelling in your Design ProcessChiara Aliotta

��

The document outlines a livestream presentation by Chiara Aliotta on integrating storytelling into web design to enhance user experiences. It covers the storytelling process for designers, emphasizing aspects such as understanding the audience, structuring narratives, and creating emotional connections. The presentation also includes case studies and practical examples to demonstrate effective storytelling in UX/UI design.

More Related Content

Recently uploaded (20)

The Future of Data, AI, and AR: Innovation Inspired by You.pdfSafe Software

��

Securing AI - There Is No Try, Only Do!.pdfPriyanka Aash

��

OWASP Barcelona 2025 Threat Model LibraryPetraVukmirovic

��

Security Tips for Enterprise Azure SolutionsMichele Leroux Bustamante

��

10 Key Challenges for AI within the EU Data Protection Framework.pdfPriyanka Aash

��

ReSTIR [DI]: Spatiotemporal reservoir resampling for real-time ray tracing ...revolcs10

��

Securing Account Lifecycles in the Age of Deepfakes.pptxFIDO Alliance

��

FIDO Seminar: Authentication for a Billion Consumers - Amazon.pptxFIDO Alliance

��

AI VIDEO MAGAZINE - June 2025 - r/aivideo1pcity Studios, Inc

��

FIDO Seminar: Targeting Trust: The Future of Identity in the Workforce.pptxFIDO Alliance

��

OpenACC and Open Hackathons Monthly Highlights June 2025OpenACC

��

Wenn alles versagt - IBM Tape schützt, was zählt! Und besonders mit dem neust...Josef Weingand

��

Enhance GitHub Copilot using MCP - Enterprise version.pdfNilesh Gule

��

Coordinated Disclosure for ML - What's Different and What's the Same.pdfPriyanka Aash

��

Crypto Super 500 - 14th Report - June2025.pdfStephen Perrenod

��

FIDO Seminar: Evolving Landscape of Post-Quantum Cryptography.pptxFIDO Alliance

��

AI vs Human Writing: Can You Tell the Difference?Shashi Sathyanarayana, Ph.D

��

Connecting Data and Intelligence: The Role of FME in Machine LearningSafe Software

��

“Key Requirements to Successfully Implement Generative AI in Edge Devices—Opt...Edge AI and Vision Alliance

��

You are not excused! How to avoid security blind spots on the way to productionMichele Leroux Bustamante

��

The Future of Data, AI, and AR: Innovation Inspired by You.pdfSafe Software

��

Securing AI - There Is No Try, Only Do!.pdfPriyanka Aash

��

OWASP Barcelona 2025 Threat Model LibraryPetraVukmirovic

��

Security Tips for Enterprise Azure SolutionsMichele Leroux Bustamante

��

10 Key Challenges for AI within the EU Data Protection Framework.pdfPriyanka Aash

��

ReSTIR [DI]: Spatiotemporal reservoir resampling for real-time ray tracing ...revolcs10

��

Securing Account Lifecycles in the Age of Deepfakes.pptxFIDO Alliance

��

FIDO Seminar: Authentication for a Billion Consumers - Amazon.pptxFIDO Alliance

��

AI VIDEO MAGAZINE - June 2025 - r/aivideo1pcity Studios, Inc

��

FIDO Seminar: Targeting Trust: The Future of Identity in the Workforce.pptxFIDO Alliance

��

OpenACC and Open Hackathons Monthly Highlights June 2025OpenACC

��

Wenn alles versagt - IBM Tape schützt, was zählt! Und besonders mit dem neust...Josef Weingand

��

Enhance GitHub Copilot using MCP - Enterprise version.pdfNilesh Gule

��

Coordinated Disclosure for ML - What's Different and What's the Same.pdfPriyanka Aash

��

Crypto Super 500 - 14th Report - June2025.pdfStephen Perrenod

��

FIDO Seminar: Evolving Landscape of Post-Quantum Cryptography.pptxFIDO Alliance

��

AI vs Human Writing: Can You Tell the Difference?Shashi Sathyanarayana, Ph.D

��

Connecting Data and Intelligence: The Role of FME in Machine LearningSafe Software

��

“Key Requirements to Successfully Implement Generative AI in Edge Devices—Opt...Edge AI and Vision Alliance

��

You are not excused! How to avoid security blind spots on the way to productionMichele Leroux Bustamante

��

Featured (20)

2024 Trend Updates: What Really Works In SEO & Content MarketingSearch Engine Journal

��

Storytelling For The Web: Integrate Storytelling in your Design ProcessChiara Aliotta

��

Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...OECD Directorate for Financial and Enterprise Affairs

��

This presentation by Thibault Schrepel, Associate Professor of Law at Vrije Universiteit Amsterdam University, was made during the discussion “Artificial Intelligence, Data and Competition” held at the 143rd meeting of the OECD Competition Committee on 12 June 2024. More papers and presentations on the topic can be found at oe.cd/aicomp. This presentation was uploaded with the author’s consent.

How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...SocialHRCamp

��

The document discusses leveraging AI to enhance employee wellness through data analytics, automating tasks, and personalized wellness apps, emphasizing the shared responsibility of employee well-being between leaders and organizations. It outlines best practices for using AI in wellness strategies, including ensuring data privacy and security, understanding employee needs, and promoting inclusivity. Lydia Di Francesco, a wellness specialist, shares insights to optimize workplace wellness strategy using AI-driven data analytics and encourages collaboration and transparency.

2024 State of Marketing Report – by HubspotMarius Sescu

��

The State of Marketing 2024 report highlights the transformative impact of AI and automation, emphasizing the importance of personalization and engagement to drive growth in a competitive landscape. Marketers are focusing on optimizing budgets, leveraging social media for brand awareness, and utilizing AI tools to enhance efficiency across tasks. Key trends for 2024 include the rise of experiential marketing, content creation that meets user needs, and strengthened connections through personalized customer experiences.

Everything You Need To Know About ChatGPTExpeed Software

��

ChatGPT is an AI chatbot developed by OpenAI, built on advanced language models to facilitate human-like conversational interactions. Launched in November 2022, it utilizes a transformer architecture to understand and generate text, with applications ranging from content creation to customer service. Despite its capabilities, there are concerns about potential misuse and biases in its responses, which OpenAI aims to mitigate through moderation and user feedback.

Product Design Trends in 2024 | Teenage EngineeringsPixeldarts

��

How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow

��

The November 2023 mental health report indicates that 70% of respondents rate their mental health as 'good' or 'excellent,' with higher diagnoses reported among African Americans and non-Hispanic whites compared to Hispanics and Asians. Younger generations, particularly Gen Z and millennials, are more likely to experience mental health challenges, seek information online, and report that their mental health impacts their work and relationships. Half of the respondents feel comfortable discussing their mental health with professionals, although Gen Z shows the least comfort in this area.

AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork

��

Creative operations teams expect increased AI use in 2024. Currently, over half of tasks are not AI-enabled, but this is expected to decrease in the coming year. ChatGPT is the most popular AI tool currently. Business leaders are more actively exploring AI benefits than individual contributors. Most respondents do not believe AI will impact workforce size in 2024. However, some inhibitions still exist around AI accuracy and lack of understanding. Creatives primarily want to use AI to save time on mundane tasks and boost productivity.

Skeleton Culture CodeSkeleton Technologies

��

Organizational culture includes values, norms, systems, symbols, language, assumptions, beliefs, and habits that influence employee behaviors and how people interpret those behaviors. It is important because culture can help or hinder a company's success. Some key aspects of Netflix's culture that help it achieve results include hiring smartly so every position has stars, focusing on attitude over just aptitude, and having a strict policy against peacocks, whiners, and jerks.

PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley

��

PepsiCo provided a safe harbor statement noting that any forward-looking statements are based on currently available information and are subject to risks and uncertainties. It also provided information on non-GAAP measures and directing readers to its website for disclosure and reconciliation. The document then discussed PepsiCo's business overview, including that it is a global beverage and convenient food company with iconic brands, $91 billion in net revenue in 2023, and nearly $14 billion in core operating profit. It operates through a divisional structure with a focus on local consumers.

Content Methodology: A Best Practices Report (Webinar)contently

��

This document provides an overview of content methodology best practices. It defines content methodology as establishing objectives, KPIs, and a culture of continuous learning and iteration. An effective methodology focuses on connecting with audiences, creating optimal content, and optimizing processes. It also discusses why a methodology is needed due to the competitive landscape, proliferation of channels, and opportunities for improvement. Components of an effective methodology include defining objectives and KPIs, audience analysis, identifying opportunities, and evaluating resources. The document concludes with recommendations around creating a content plan, testing and optimizing content over 90 days.

How to Prepare For a Successful Job Search for 2024Albert Qian

��

The document provides guidance on preparing a job search for 2024. It discusses the state of the job market, focusing on growth in AI and healthcare but also continued layoffs. It recommends figuring out what you want to do by researching interests and skills, then conducting informational interviews. The job search should involve building a personal brand on LinkedIn, actively applying to jobs, tailoring resumes and interviews, maintaining job hunting as a habit, and continuing self-improvement. Once hired, the document advises setting new goals and keeping skills and networking active in case of future opportunities.

Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)

��

The 2024 social media marketing trends report highlights significant shifts influenced by generative AI, including the emergence of personalized content, the rise of virtual influencers, and a stronger focus on user-generated content. Insights were gathered from 33 experts across 23 leading independent agencies, providing a perspective that emphasizes creativity and authenticity in marketing strategies. Key trends also include the blending of B2B and B2C approaches, reflecting changes in consumer behavior and the evolving landscape of social media engagement.

Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal

��

The document discusses trends in paid search for 2024, highlighting changes in user behavior, the implications for financial services, and privacy challenges. It emphasizes the importance of adapting search strategies, utilizing AI-driven tools like performance max and smart bidding, and leveraging first-party data for better marketing efficacy. Key takeaways include holistic SEO and SEM approaches, monitoring shifting user intents, and the need for continuous performance evaluation.

5 Public speaking tips from TED - Visualized summarySpeakerHub

��

The document outlines five public speaking tips from Chris Anderson, TED Talks curator, emphasizing the importance of eye contact, vulnerability, humor, humility, and storytelling. These skills are presented as essential for engaging audiences effectively and are increasingly valuable in today's economy. The article posits that mastering these techniques can enhance speakers' ability to communicate ideas powerfully.

ChatGPT and the Future of Work - Clark Boyd Clark Boyd

��

The document provides an overview of generative AI, particularly focusing on ChatGPT and its implications for business and the job market. It discusses the rapid growth of generative AI, its applications in marketing, and the skills needed for the AI era while addressing potential job displacement and the need for adaptation. The agenda includes a Q&A session and emphasizes rethinking work in collaboration with AI technology.

Getting into the tech field. what next Tessa Mero

��

The document provides career advice for getting into the tech field, including: - Doing projects and internships in college to build a portfolio. - Learning about different roles and technologies through industry research. - Contributing to open source projects to build experience and network. - Developing a personal brand through a website and social media presence. - Networking through events, communities, and finding a mentor. - Practicing interviews through mock interviews and whiteboarding coding questions.

Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray

��

1. Core updates from Google periodically change how its algorithms assess and rank websites and pages. This can impact rankings through shifts in user intent, site quality issues being caught up to, world events influencing queries, and overhauls to search like the E-A-T framework. 2. There are many possible user intents beyond just transactional, navigational and informational. Identifying intent shifts is important during core updates. Sites may need to optimize for new intents through different content types and sections. 3. Responding effectively to core updates requires analyzing "before and after" data to understand changes, identifying new intents or page types, and ensuring content matches appropriate intents across video, images, knowledge graphs and more.

How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC

��

2024 Trend Updates: What Really Works In SEO & Content MarketingSearch Engine Journal

��

Storytelling For The Web: Integrate Storytelling in your Design ProcessChiara Aliotta

��

Artificial Intelligence, Data and Competition – SCHREPEL – June 2024 OECD dis...OECD Directorate for Financial and Enterprise Affairs

��

How to Leverage AI to Boost Employee Wellness - Lydia Di Francesco - SocialHR...SocialHRCamp

��

2024 State of Marketing Report – by HubspotMarius Sescu

��

Everything You Need To Know About ChatGPTExpeed Software

��

Product Design Trends in 2024 | Teenage EngineeringsPixeldarts

��

How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow

��

AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork

��

Skeleton Culture CodeSkeleton Technologies

��

PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley

��

Content Methodology: A Best Practices Report (Webinar)contently

��

How to Prepare For a Successful Job Search for 2024Albert Qian

��

Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)

��

Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal

��

5 Public speaking tips from TED - Visualized summarySpeakerHub

��

ChatGPT and the Future of Work - Clark Boyd Clark Boyd

��

Getting into the tech field. what next Tessa Mero

��

Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray

��

How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC

��