AusCERT Online Crime Symposium 2012

9:10 - 9:25
15 minutes

Introduction
Graham Ingram
General Manager, AusCERT

9:25 - 10:40
75 minutes

Legal Aspects of US Cybercrime
Robert Clark
US Army Cyber Command

The presentation is a review of important legal issues involving cybercrime and cybersecurity. As always the agenda is driven by current up-to-the-minute releases of hot issues and judicial opinions. Currently that means precedents on decrypting hard drives and judicial limitations on searching computers. We next look at the legal aspects of computer network security and defense and finish with a proposed model that creates an organization of cybersecurity defenders from the federal, state and local level. Along the way we will discuss what is personally identifiable information (and what is not) as well as other topics. Each legal area will contain a brief overview of the legal standards involved and then an analysis on how the recent court cases have interpreted these standards and what the future effects may be.

Attendees will get an understanding of the hot legal topics in computer network security. Past presentations have shown, much of what is taken away is audience driven in response to their questions and the subsequent discussion. And, as always, I try to impress upon computer security professionals the importance of working closely with their legal counsel early and often, and explaining the technical aspects of computer security to their attorneys at a third grade level so my profession can understand it and then turn around and explain it to a judge or jury at a first grade level.

11:00 - 11:40
40 minutes

Lessons Learned From Working 65 APT Incidents
Name withheld

This presentation will cover methods used to identify new controllers and related exfil victims and insights gained from reaching out to victims across many sectors and geographies

11:40 - 12:20
40 minutes

Development of some Cybercrime business models
Stas Filshtinksiy
Stratsec

13:30 - 14:10
40 minutes

Medical identity theft, fraud, forgery & ‘Doctor Shoppers’ – This is why & how they do it
Name withheld

14:10 - 14:50
40 minutes

Investigating a Child
Ajoy Ghosh
Alcheme

Using three case studies (two real and one composite), this presentation introduces the sometimes awkward, sometimes illegal and usually costly positions that well meaning system administrators, IT security and computer forensic practictioners can find themselves when they investigate children in the same way they would investigate adults.

15:10 - 15:50
40 minutes

The evolution of cybercrime and modern prevention strategies: Do our banks have the winning strategy
Jake Lambert
Vasco

With Identity fraud and cybercrime constantly on the rise, the need to protect our sensitive information is more important than ever. Cybercrime is the choice for modern criminals. Why would you want to walk into a bank with a gun when you could steal much greater sums of money from the safety of your own home? With the increase in popularity of this type of crime comes an increased in awareness around these types of attacks and how we can protect ourselves. Many corporate and government organisations are constantly seeking new strategy’s to stay ahead of this new breed of criminals. This presentation will explore these emerging trends and which prevention methods are proving affective in combating online application fraud. It will also focus on some of the successful strategy’s implemented in the banking industry and how they can also be utilised effectively in other industries.

15:50 - 16:30
40 minutes

Banking Malware Mitigation
Shaun Vlassis
Commonwealth Bank

This presentation aims to leave little doubt about the ongoing challenges faced by Financial Institutions when combating online crime perpetrated against its customers. The criminal groups, their tactics and tools will be explained, alongside the countermeasures against these groups that can effectively mitigate these threats. This presentation will offer the unique view of the people that are on the receiving end of these attacks, what is considered ‘effective’ and more importantly, what countermeasures are feasible given the limitations of resources, legalities and most importantly, customer experience.

Closing remarks
Graham Ingram
General Manager, AusCERT