|
|
(30 intermediate revisions by 2 users not shown) |
Line 1: |
Line 1: |
| {{Chapter Template|chaptername=Cambridge|extra=The chapter leaders are [mailto: [email protected] Adrian Winckles ] and [mailto: [email protected] Steven van der Baan].|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-Cambridge|emailarchives=http://lists.owasp.org/pipermail/owasp-Cambridge}} | | {{Chapter Template|chaptername=Cambridge|extra=The chapter leaders are [mailto: [email protected] Adrian Winckles ] and [mailto: [email protected] Steven van der Baan].|mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-Cambridge|emailarchives=http://lists.owasp.org/pipermail/owasp-Cambridge}} |
| | | |
− | <!-- first tab --> | + | <b>Join our [https://www.meetup.com/OWASP-Cambridge-Meetup/ MeetUp]!<br> |
− | = Local News =
| |
− | =='''Local News'''==
| |
| | | |
− | == ARU CSNRG, OWASP Cambridge, BCS Cybercrime “IoT & ICS/SCADA Forensics Workshop” 2018 ==
| + | Follow us on [http://twitter.com/#!/owaspcambs Twitter]<br> |
− | Wednesday 10<sup>th</sup> January 2018 09:30– 14:00, Lord Ashcroft Building (LAB002), Anglia Ruskin University, Cambridge.
| |
| | | |
− | Hosted by the Cyber Security & Networking Research Group, Anglia Ruskin University, British Computer Society (BCS) Cybercrime Forensics Special Internet Group’s and OWASP (Open Web Application Security Project) Cambridge Chapter.
| + | Talk to us on [https://owasp.slack.com/app_redirect?channel=chapter-cambridge Slack]<br> |
| | | |
− | Industry pundits have predicted that we are about to experience the fourth industrial revolution (Industry 4.0), which is the future of industrial production based on the “Internet of Things” (IoT). As with all previous industrial major transitions, this leads to exciting opportunities but also great challenges. The “perfect world” is that IoT, is expected to offer advanced connectivity of devices, systems, and services that goes beyond machine-to-machine (M2M) communications. The interconnection of these embedded devices will potentially usher in automation in nearly all fields, resulting in improved efficiency, accuracy and economic benefit in addition to reduced human intervention. However, integrating IoT technologies within an organization means loosening access to the IT infrastructure, thus making it more susceptible to errors and vulnerable to attack. This is a scary proposition as intruders will not stop trying to find new ways of infiltrating business networks.
| + | </b> |
| | | |
− | To better understand these infiltrations a cyber forensics program is necessary but this can be a challenging task when being applied to nontraditional environments, such as IoT and industrial control systems. Modern IT networks, through data exchange mechanisms, data storage devices and general computing components provide a good foundation for creating a landscape used to support effective cyber forensics. However, modern control systems environments are not easily configurable to accommodate forensics programs. Nonstandard protocols, legacy architectures that can be several decades old, and irregular or extinct proprietary technologies can all combine to make the creation and operation of a cyber forensics program anything but a smooth and easy process.
| + | For updates, events, membership; please visit our meet up page: http://www.meetup.com/OWASP-Cambridge-Meetup/<br> |
| | | |
− | '''Background'''
| + | <meetup group="OWASP-Cambridge-Meetup" /> |
| | | |
− | The British Computer Society (BCS) Cybercrime Forensics Special Interest Group (SIG) promotes Cybercrime Forensics and the use of Cybercrime Forensics; of relevance to computing professionals, lawyers, law enforcement officers, academics and those interested in the use of Cybercrime Forensics and the need to address cybercrime for the benefit of those groups and of the wider public.
| |
| | | |
− | OWASP (Open Web Application Security Project is a 501(c)(3) not-for-profit worldwide charitable organization focused on improving the security of application software. Their mission is to make application security visible, so that people and organizations can make informed decisions about true application security risks.
| |
| | | |
− | The '''Cyber Security and Networking''' ('''CSN''') Research Group at Anglia Ruskin University has close working strategic relationships with industry, professional bodies, law enforcement, government agencies and academia in the delivery of operationally focused applied information and application security research. We have strong international links with professional organisations such as OWASP, BCS, ISC2, IISP & the UK Cyber Security Forum amongst others. The primary aims of CSNRG are to help the UK and partner nations to tackle cybercrime, be more resilient to cyber attacks and educate its users for a more secure cyberspace and operational business environment. These will be achieved through the investigation of threats posed to information systems and understanding the impact of attacks and creation of cyber-based warning systems which gathering threat intelligence, automate threat detection, alert users and neutralising attacks. For network security we are researching securing the next generation of software defined infrastructures from the application API and control/data plane attacks. Other key work includes Computer forensic analysis, digital evidence crime scenes and evidence visualisation as well as Cyber educational approaches such as developing Capture the Flag (CTF) resources and application security programs.
| + | = Past Events = |
− | | + | {| class="wikitable" style="text-align:center;" border="1" | |
− | '''Speaker Biographies'''
| + | ! width="300" | Date |
− | | + | ! width="350" | Name / Title |
− | '''Ken Munro, Pen Test Partners'''
| + | ! width="300" | Link |
− | | + | |- |
− | Ken is a regular speaker at events such as the ISSA Dragon’s Den, (ISC)2 Chapter events and CREST (Council of Registered Ethical Security Testers), where he sits on the board. He’s also an Executive Member of the“Internet of Things Security Forum”, a body that aims to promote best security practice and the application of controls in smart device manufacturing, and spoke out on IoT security design flaws at the forum’s inaugural event. He’s also not averse to getting deeply techie, regularly participating in hacking challenges and demos at Black Hat, 44CON, DefCon and Bsides.
| + | |5 November 2019 |
− | | + | |Andrea Scaduto |
− | Ken has a wealth of experience in penetration testing but its the systems and objects we come into contact with on an everyday basis that really pique his interest. This has seen him hack everything from keyless cars and a range of Internet of Things (IoT) devices, from wearable tech to children’s toys and smart home control systems. This has gained him notoriety among the national press, leading to regular appearances on BBC TV and BBC News online as well as the broadsheet press. He’s also a familiar contributor to industry magazines, penning articles for the legal, security, insurance, oil and gas, and manufacturing press.
| + | |[[Media:RTF-OWASP-Cambridge.pdf|presentation]] |
− | | + | | |
− | '''Aleksander Gorkowienko, Principal Cyber Security Consultant and Penetration Tester at PA Consulting/7Safe Ltd. (UK): “Securing sub-sea control systems from cyber-attack: vulnerabilities found by an experienced penetration tester”'''
| + | |- |
− | | + | |8 October 2019 |
− | In the IT industry since 1997, always being happy to play with various high-tech toys. With wide area of interests and rich business experience (development, design and maintenance of software, dealing with various IT systems) now deeply involved into IT Security area. For everyday helping to strengthen the security of business applications and corporate infrastructure for enterprises across the UK: banks, e-commerce, production, public sector, etc. Specially interested in databases and applications security (web applications and windows apps). Also responsible for preparing and delivering training courses (i.e. Certified Application Security Tester -CAST or Secure Coding for Web Developers) and creating a variety of hacking challenges.
| + | |Dinis Cruz - Revolut |
− | | + | |[https://www.slideshare.net/DinisCruz/using-owasp-security-bot-osbot-to-make-fact-based-security-decisions Presentation] |
− | '''Abstract: “Securing sub-sea control systems from cyber-attack: vulnerabilities found by an experienced penetration tester”'''
| + | | |
− | | + | |- |
− | 7Safe has recently helped to remediate serious security vulnerabilities in a sub-sea control system for a global provider of industrial solutions of oil and gas that will be deployed on a Floating, Production, Storage and Offloading vessel (FPSO).
| + | |8 October 2019 |
− | | + | |Jeff Williams - Contrast Security |
− | Aleksander ‘Aleks’ Gorkowienko conducted simulated attacks - demonstrating that an attacker could connect to the network and carry out Man-In-The-Middle attacks, change time data coming from the ship GPS system and to intercept and modify network traffic whilst remaining virtually unnoticed. As a result, the client was satisfied that we had enabled them to significantly harden their system and in so doing protect their prestigious reputation in the Oil & Gas industry.
| + | |[https://contrastsecurity.app.box.com/s/w2pv7cb46r3guyob6i1xf0igne9g281g Presentation] |
− | | + | | |
− | Aleks will outline how he approached this task in collaboration with the development engineers and what lessons have been learned from penetration testing.
| + | |- |
− | | + | |14 May 2019 |
− | '''Karl Williams, Principal Consultant - PA Consulting, “ICS Demonstrator”'''
| + | |Aleksander Gorkowienko - ICS/SCADA Security |
− | | + | |[https://spirent1-my.sharepoint.com/:b:/g/personal/aleksander_gorkowienko_spirent_com/EfDeMof_rydPsGBCGioPuBAB-7VpkIB4jGVtNv2vm8uUhQ?e=dA7hha presentation] |
− | Karl Williams is a Principal Consultant with PA Consulting’s Energy & Utilities Cyber team and has extensive experience in conducting and delivering complex assignments on Industrial Control Systems (ICS) across energy and transport Critical National Infrastructure (CNI) clients.
| + | | |
− | | + | |- |
− | '''Abstract: ICS Demonstrator'''
| + | |14 May 2019 |
− | | + | |Andrew Baldwin - Cyber PREVENT |
− | The PA Consulting Energy & Utilities Cyber team developed the ICS Demonstrator to support industry operating with ICS in place. The tool uses real life ICS equipment and networks to provide demonstrations of potential cyber-attacks, security testing of ICS/OT devices and the integration and testing of security solutions. Currently the OT on the rig has been configured to simulate the cooling process found within a nuclear reactor but its flexible architecture means that it can be changed to simulate other industrial processes much like those found in gas and power generation plants. Combined with our test rig and our CREST approved cyber security arm 7safe we have the capability to carry out comprehensive testing on a range of products, devices and systems, highlight where vulnerabilities lie and recommend risk reducing controls. The demonstrator rig has already been In front of various multi-sector clients, government bodies and regulators and has been well received at many industry conferences and workshops this year.
| + | |[[Media:Cyber_Prevent_for_OWASP_May_2019.pdf|presentation]] |
− | | + | | |
− | '''Maxim Silin, Technical Architect , GSK - TBC'''
| + | |- |
− | | + | |10 April 2019 |
− | Maxim Silin is a CTO and Committee Member with International Operational Technology Security Association (IOTSA). Maxim has extensive experience in ICS Cyber Security consultancy and solutions in Automation Industry (Power, Nuclear, Utilities, Chemical, Oil& Gas and Pharma) across worldwide.
| + | |Matthew Lorentzen - Sheepl |
− | | + | |[[Media:OWASP-Sheepl_Presentation_April19.pdf|presentation]] |
− | Maxim is ENISA ICS CERT member focusing on red team scenarios and advising organizations how to protect their OT environment from attacks. He is visiting lecture within different r training organizations, including universities in Scotland and other countries focusing on network and security programmes for OT Environment and researcher with numbers of cyber security programmes like ENISA FP7 framework (Cockpit CI, Atena and more). He likes to cook and active outdoors activities: hiking and mountain climbing.
| + | | |
− | | + | |- |
− | The International Operational Technology Security Association (IOTSA) and like-minded partners from the public and private sectors are working together and collaborating to reduce the risk of a significant compromise of our Operational Technology, ICS, SCADA, IT and IoT environments.
| + | |12 March 2019 |
− | | + | |Jamie Roderick |
− | '''Provisional Agenda'''
| + | | |
− | | + | |- |
− | 09:30 – 10:00 Registration & Refreshments (LAB006)
| + | |12 March 2019 |
− | | + | |Nour Fateen |
− | 10:00 – 10:05 Welcome from the OWASP Cambridge Chapter Leader, Adrian Winckles, Director of Cyber Security & Networking Research Group, Anglia Ruskin University (LAB002)
| + | |[[Media:Nour_-_OWASP-3.pdf|presentation]] |
− | | + | | |
− | 10:05 – 11:00 Ken Munro, Pen Test Partners.
| |
− | | |
− | 11:00 – 11:30 Aleksander Gorkowienko, PA Consulting & 7Safe: “Securing sub-sea control systems from cyber-attack: vulnerabilities found by an experienced penetration tester”
| |
− | | |
− | 11:30 – 12:00 Karl Williams, PA Consulting “Live hacking Industrial Control Systems with the ICS Demonstrator”
| |
− | | |
− | 12:00 – 13:00 Maxim Silin, Technical Architect, GSK - TBC
| |
− | | |
− | 13:00 – 14:00 Lunch & Networking (LAB006)
| |
− | | |
− | '''Registration'''
| |
− | | |
− | To register for this free event, please register online at
| |
− | | |
− | https://www.eventbrite.com/e/aru-csnrg-owasp-cambridge-bcs-cybercrime-forensics-iot-icsscada-forensics-workshop-10th-january-2018-tickets-41515777809 | |
− | | |
− | The meeting will be held in the Lord Ashcroft Building, Room LAB002 (Breakout Room LAB006 for networking & refreshments).
| |
− | | |
− | Please enter through the Helmore Building and ask at reception.
| |
− | | |
− | Anglia Ruskin University
| |
− | | |
− | Cambridge Campus
| |
− | | |
− | East Road
| |
− | | |
− | Cambridge
| |
− | | |
− | CB1 1PT
| |
− | | |
− | Please note that there is no parking on campus.
Get further information on travelling to the university.
| |
− | | |
− | <nowiki>http://www.anglia.ac.uk/ruskin/en/home/your_university/anglia_ruskin_campuses/ca</nowiki> mbridge_campus/find_cambridge.html
| |
− | | |
− | == Joint OWASP Cambridge, BCS Cybercrime Forensics SIG UK Cyber Security Forum – Cambridge Cluster “Cyber Security & AI Day” 2018 ==
| |
− | Thursday 18<sup>th</sup> January 2018 9:30– 17:00, Lord Ashcroft Building (LAB002), Anglia Ruskin University, Cambridge.
| |
− | | |
− | Hosted by the Cyber Security & Networking Research Group, Anglia Ruskin University, British Computer Society (BCS) Cybercrime Forensics Special Internet Group’s, UK Cyber Security Forum Cambridge Cluster and OWASP (Open Web Application Security Project) Cambridge Chapter
| |
− | | |
− | Over the past couple of year’s 2016-17 significant advancements in artificial intelligence in self-driving cars, language translation, and big data have been observed. However, during the same time period, we have also witnessed the rise of ransomware, botnets, and attack vectors as popular forms of malware attack, with according to Malware Byte's State of Malware report, cybercriminals continually expanding their methods of attack (e.g., attached scripts to phishing emails and randomization), To complement the skills and capacities of human analysts, organizations are turning to machine learning (ML) in hopes of providing a more forceful deterrent. ABI Research forecasts that "machine learning in cybersecurity will boost big data, intelligence, and analytics spending to $96 billion by 2021."
| |
− | | |
− | '''Background'''
| |
− | | |
− | The British Computer Society (BCS) Cybercrime Forensics Special Interest Group (SIG) promotes Cybercrime Forensics and the use of Cybercrime Forensics; of relevance to computing professionals, lawyers, law enforcement officers, academics and those interested in the use of Cybercrime Forensics and the need to address cybercrime for the benefit of those groups and of the wider public.
| |
− | | |
− | OWASP (Open Web Application Security Project is a 501(c)(3) not-for-profit worldwide charitable organization focused on improving the security of application software. Their mission is to make application security visible, so that people and organizations can make informed decisions about true application security risks.
| |
− | | |
− | The '''Cyber Security and Networking''' ('''CSN''') Research Group at Anglia Ruskin University has close working strategic relationships with industry, professional bodies, law enforcement, government agencies and academia in the delivery of operationally focused applied information and application security research. We have strong international links with professional organisations such as OWASP, BCS, ISC2, IISP & the UK Cyber Security Forum amongst others. The primary aims of CSNRG are to help the UK and partner nations to tackle cybercrime, be more resilient to cyber attacks and educate its users for a more secure cyberspace and operational business environment. These will be achieved through the investigation of threats posed to information systems and understanding the impact of attacks and creation of cyber-based warning systems which gathering threat intelligence, automate threat detection, alert users and neutralising attacks. For network security we are researching securing the next generation of software defined infrastructures from the application API and control/data plane attacks. Other key work includes Computer forensic analysis, digital evidence crime scenes and evidence visualisation as well as Cyber educational approaches such as developing Capture the Flag (CTF) resources and application security programs.
| |
− | | |
− | The '''Cambridge Cyber Security Cluster''' is an affiliate '''UK Cyber Security Forum''', a government and industry led partnership which will look at how the region can develop the skills and infrastructure to combat cyber security threats.
| |
− | | |
− | '''Speaker Biographies'''
| |
− | | |
− | '''Dave Palmer & Andrew Tsonchev, Director of Technology, Darktrace “How unsupervised machine learning can be used successfully to provide cyber defence to small or large organisations”'''
| |
− | | |
− | '''Dr Ali Dehghantanha Marie-Curie International Incoming Research Fellow in Cyber-Forensics Cyber Threat Hunting and Intelligence in IoT Environments'''
| |
− | | |
− | Dr. Ali has served for more than a decade in a variety of industrial and academic positions with leading players in Cyber-Security, Forensics and Threat Intelligence. He has long history of working in different areas of computer security as security researcher, malware analyzer, penetration tester, security consultant, professional trainer, and university lecturer. Ali is imminently qualified in the field of cyber security; he has an EU Marie Curie post-doctoral fellowship in cyber forensics, Ph.D in Security in Computing and a number of professional qualifications namely GXPN, GREM GCFA, CISM, CCFP and CISSP. Ali is a fellow of the UK Higher Education Academy (HEA) and a senior IEEE-UK member.
| |
− | | |
− | '''Abstract:'''
| |
− | | |
− | Cyber Threat Hunting and Cyber Threat Intelligence are growing fields of practice in cyber security. This presentation first looks at meaning of these terms and where and how relevant technologies should be utilised. Afterwards, suitability of using artificial intelligence techniques for threat hunting and intelligence in IoT environments is discussed through analysing several case studies of using machine learning classification and deep learning techniques in attack detection. The presentation is concluded by suggesting some future works and opportunities for further collaboration.
| |
− | | |
− | '''Nikola Milosevic''' ''',''' Research Associate University of Manchester, '''Machine learning aided Android malware classification'''
| |
− | | |
− | '''Nikola Milosevic''' is a research associate at the University of Manchester, Manchester Institute of Innovation Research, where his research topics focus around machine learning and natural language processing. Previously he was doing a PhD at the School of Computer Science, the University of Manchester. He is involved with OWASP (Open Web Application Security Project) as a founder of OWASP Serbia local chapter, OWASP Manchester local chapter leader and a project leader of OWASP Seraphimdroid mobile security project, as well as contributing to several other projects.
| |
− | | |
− | '''Abstract:'''
| |
− | | |
− | The widespread adoption of Android devices and their capability to access significant private and confidential information have resulted in these devices being targeted by malware developers. Existing Android malware analysis techniques can be broadly categorized into static and dynamic analysis. In this paper, we present two machine learning aided approaches for static analysis of Android malware. The first approach is based on permissions and the other is based on source code analysis utilizing a bag-of-words representation model. Our permission-based model is computationally inexpensive, and is implemented as the feature of OWASP Seraphimdroid Android app that can be obtained from Google Play Store. Our evaluations of both approaches indicate an F-score of 95.1% and F-measure of 89% for the source code-based classification and permission-based classification models, respectively.
| |
− | | |
− | '''Richard Dennis, Security Researcher, Nettitude, “Machine Learning for the Bad Guys – Attack on Bitcoin”'''
| |
− | | |
− | Richard obtained a Masters in Computer information security, with a grade of distinction from the university of Portsmouth in 2013 and is currently at the writing stage of his PhD examining scalability solution to blockchain networks. Richard taught as a lecturer of Cryptography at the school of computing at Portsmouth University from 2017, being the youngest cryptographer lecturer in the United Kingdom. Currently Richard is undertaking research within Nettitude on vulnerabilities in public / private key generation in cryptocurrencies as well looking at use cases of blockchain technology.
| |
− | | |
− | '''Deepinder Singh – Principal Consultant at Verizon Consulting and Advisory Services, AI Challenges of Cyber Big Data'''
| |
− | | |
− | Deepinder (Deep) works as a Principal Consultant at Verizon Consulting and Advisory Services. He challenges, educates and engages with his audiences on many keys issues of cybersecurity and digital transformation. He encourages innovative thinking to generate actionable strategies that help business thrive in a VUCA world. He believes that poor quality decision-making skills significantly contribute towards insecure systems resulting in security breaches and compromises. He has worked with many of the worlds’ largest organisations across numerous industries. In his twenty-year business career, he has held senior leadership positions in large and medium-sized organisations.
| |
− | | |
− | He has addressed several conferences and events on the wide-ranging topics of Cybersecurity, GRC, GDPR, Big Data Analytics and Artificial Intelligence.
| |
− | | |
− | Deep has attended Harvard Business School and holds a Post Graduate Diploma in Business Management along with various industry qualifications including ISO/IEC 27001 Lead Auditor, CISSP, CISM, CRISC and CGEIT. He is currently pursuing Professional Doctorate at the University of East London.
| |
− | | |
− | Deep actively engages in voluntary work. He is the Vice-President of ISACA London Chapter and Secretary of Verizon Reading Toastmasters Club. In the past, he has served as Secretary for BCS-IRMA Specialist Group and a judge for SC Magazine (Europe) Awards.
| |
− | | |
− | '''Abstract: AI Challenges of Cyber Big Data'''
| |
− | | |
− | '''Nathan Benaich, LondonAI, “Using Machine Learning to reduce reduce cyber data analysis” - TBC'''
| |
− | | |
− | '''Chris Woods, Founder & CEO CyberSparta, Neil Passingham (CISO) & Kari Lawler'''
| |
− | | |
− | '''“Machine Learning in the Security Operations Centre, SOCaaS” –'''
| |
− | | |
− | '''Biography: Chris Woods Founder & CEO CyberSparta'''
| |
− | | |
− | An experienced leader within the cyber security realm, Chris Woods is also the founder and director of CyberSparta – an award winning cyber security startup in the UK. Having previously managed elite security teams at the European Space Agency, HP and Fujitsu, Chris brings over 20 years of pure cyber Security experience developed within the EU and MENA regions.
| |
− | | |
− | Whilst at HP, Chris developed and led a cyber security practice, culminating in the acquisition of ArcSight for $1.5b. With the creation of CyberSparta, Chris is now leading a passionate team of cyber and business professionals, developing the next generation of security solutions within the Big Data and Machine Learning realms.
| |
− | | |
− | Chris is a committed Information Security Champion and frequent speaker at international conferences and events.
| |
− | | |
− | '''Biography:''' '''Neil''' '''Passingham
Chief''' '''Information''' '''Security''' '''Officer''' '''[CISO]'''
| |
− | | |
− | Neil is a highly-experienced technical and business consultant, solutions architect, client adviser and innovator with 32 years’ IT experience (17 focused on security). Neil is a former CLAS consultant and has worked on securing accreditation for major government clients whilst leading the government accreditation department at HP.
| |
− | | |
− | His experience is wide and deep including business development, pre-sales, solution architecture, application development, testing (including ethical hacking), implementation, security assessment/accreditations, metrics/KPIs and often acting as “trusted advisor” for clients.
| |
− | | |
− | '''Provisional Agenda'''
| |
− | | |
− | 09:30 – 10:00 Registration & Refreshments (LAB006)
| |
− | | |
− | 10:00 – 10:15 Welcome from the OWASP Cambridge Chapter Leader, Adrian Winckles, Director of Cyber Security & Networking Research Group, Anglia Ruskin University, (LAB002)
| |
− | | |
− | 10:15 – 11:00 “How unsupervised machine learning can be used successfully to provide cyber defence to small or large organisations” - Dave Palmer & Andrew Tsonchev, Director of Technology, Darktrace
| |
− | | |
− | 11:00 – 11:45 “Cyber Threat Hunting and Intelligence in IoT Environments” Dr Ali Dehghantanha Marie-Curie International Incoming Research Fellow in Cyber-Forensics
| |
− | | |
− | 11:45 – 12:30 “Machine learning aided Android malware classification”, Nikola Milosevic , Research Associate University of Manchester,
| |
− | | |
− | 12:30 – 13:15 Lunch & Networking (LAB006)
| |
− | | |
− | 13:15 – 14:00 “AI Challenges of Cyber Big Data”, Deepinder Singh – Principal Consultant at Verizon Consulting and Advisory Services
| |
− | | |
− | 14:00 – 14:45 “Machine Learning for the Bad Guys – Attack on Bitcoin”, Richard Dennis, Security Researcher, Nettitude,
| |
− | | |
− | 14:45 – 15:15 Refreshments (LAB006)
| |
− | | |
− | 15:15 – 16:00 “Using Machine Learning to reduce reduce cyber data analysis”, Nathan Benaich, LondonAI, - TBC
| |
− | | |
− | 16:00 – 16:45 “Machine Learning in the Security Operations Centre”, Chris Wood, CEO Cyber Sparta, Neil Passingham [CISO] & Kari Lawler
| |
− | | |
− | 16:45 - 17:00 Session Wrap Up & Close
| |
− | | |
− | '''Registration'''
| |
− | | |
− | To register for this free event, please register online at
| |
− | | |
− | http://ow.ly/ca8Z30hoaPU
| |
− | | |
− | The meeting will be held in the Lord Ashcroft Building, Room LAB002 (Breakout Room LAB006 for networking & refreshments).
| |
− | | |
− | Please enter through the Helmore Building and ask at reception.
| |
− | | |
− | Anglia Ruskin University
| |
− | | |
− | Cambridge Campus
| |
− | | |
− | East Road
| |
− | | |
− | Cambridge
| |
− | | |
− | CB1 1PT
| |
− | | |
− | Please note that there is no parking on campus.
Get further information on travelling to the university.
| |
− | | |
− | <nowiki>http://www.anglia.ac.uk/ruskin/en/home/your_university/anglia_ruskin_campuses/ca</nowiki> mbridge_campus/find_cambridge.html
| |
− | | |
− | ----
| |
− | '''Planned dates for upcoming events'''
| |
− | {| class="wikitable"
| |
− | |Cambridge_OWASP Event 20170927 - Secure Coding Challenge
| |
− | |11/09/2017 | |
| |- | | |- |
− | |Cambridge_OWASP/BCS Cybercrime Forensics & Social Media Forensics Day Event | + | |12 March 2019 |
− | |11/10/2017 | + | |Matthew Whitcombe |
| + | |[[Media:MWR_-_OWASP_v6.pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP & BCS East Anglia Event - GDPR Evening | + | |24 January 2019 |
− | |07/11/2017 | + | |Adrian Winckles |
| + | |[[Media:Botprobe_-_Reducing_Network_Threat_Intelligence_Big_Data_v0-1_.pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP & UK Cyber Security Forum GDPR Event 20171115 | + | |24 January 2019 |
− | |15/11/2017 | + | |Simon Newman |
| + | |[[Media:Cyber_Threat_Intelligence_Day_(Anglia_Ruskin_University).pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP Event 20171205 | + | |4 December 2018 |
− | |05/12/2017 | + | |Matthew Lorentzen |
| + | |[[Media:From_battlefield_to_bunker_v1-0.pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP & BCS Cybercrime Forensics/IoT Forensics Security Day | + | |4 December 2018 |
− | |10/01/2018 | + | |Etienne Greeff |
| + | |[[Media:Seconds_out_2018_AI_&_ML_40_min_version.pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP & UK Cyber Security Forum Cyber Machine Learning Day | + | |6 November 2018 |
− | |18/01/2018, | + | |Adrian Winckles |
| + | |[[Media:OWASP_Cambridge_Talk_-_Application_Honeypot_Threat_Intelligence_v1-0.pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP Event | + | |6 November 2018 |
− | |13/02/2018 | + | |Dr Grigorios Fragkos |
| + | |[[Media:OWASP_Cambridge_-_6Nov2018_-_G.Fragkos.pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP Event | + | |17 May 2018 |
− | |13/03/2018 | + | |Goher Mohammad |
| + | |[https://www.slideshare.net/GoherMohammad/joint-owasp-cambridge-bcs-cybercrime-forensics-sig-uk-cyber-security-forum-cambridge-cluster Presentation] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP Event | + | |13 March 2018 |
− | |17/04/2018 | + | |David Johannson |
| + | |[[Media:Cambridge 13-Mar-2018 OWASP Top 10 2017.pdf|presentation]] |
| + | | |
| |- | | |- |
− | |Cambridge_OWASP Event | + | |13 March 2018 |
− | |08/05/2018
| + | |Rish Auckburally |
− | |} | + | |[[Media:Intro to 3B RA V1.pdf|presentation]] |
− | | + | | |
− | = Past Events =
| |
− | {| class="wikitable" style="text-align:center;" border="1" |
| |
− | ! width="300" | Date
| |
− | ! width="350" | Name / Title
| |
− | ! width="300" | Link
| |
| |- | | |- |
| |18 January 2018 | | |18 January 2018 |
− | Deepinder Singh | + | |Deepinder Singh |
− | |[[Media:OWASP-AI-Cybersecurity_Cambridge-Deep-180118.pdf|presentation]] | + | |[[Media:OWASP-AI-Cybersecurity Cambridge-Deep-180118.pdf|presentation]] |
| | | | | |
| |- | | |- |
| |18 January 2018 | | |18 January 2018 |
| |Chris Woods | | |Chris Woods |
− | |[[Media:Deck_OWASP_event_17-01.pptx|presentation]] | + | |[[Media:Deck OWASP event 17-01.pptx|presentation]] |
| | | | | |
| |- | | |- |
Line 281: |
Line 127: |
| |18 January 2018 | | |18 January 2018 |
| |Dr Ali Dehghantanha | | |Dr Ali Dehghantanha |
− | |[[Media:OWASP_Cambridge_Myths_and_Truths_Cyber_Threat_Hunting_and_Intelligence_in_IoT_Environments.pptx|presentation]] | + | |[[Media:OWASP Cambridge Myths and Truths Cyber Threat Hunting and Intelligence in IoT Environments.pptx|presentation]] |
| | | | | |
| |- | | |- |
| |10 January 2018 | | |10 January 2018 |
| |Aleksander Gorkowienko | | |Aleksander Gorkowienko |
− | |[[Media:A.Gorkowienko-Securing_Oil_and_Gas_Systems_From_Cyber-attack_v1.1.pdf|presentation]] | + | |[[Media:A.Gorkowienko-Securing Oil and Gas Systems From Cyber-attack v1.1.pdf|presentation]] |
| | | | | |
| |- | | |- |
| |5 December 2017 | | |5 December 2017 |
| |Deepinder Singh | | |Deepinder Singh |
− | |
| |
| | | | | |
| |- | | |- |
No events are scheduled at the moment.