After months of work and planning, HITBSecConf2007 - Dubai has ended. Our first deep-knowledge security conference in the UAE went off with a huge bang and was a resounding success! The HITB Team would like to extend an especially warm thank you to His Excellency Mr. Mohamed Nasser Al Ghanim, Director General of the Telecommunications Regulatory Authority of UAE (TRA) for his support and endorsement of our event! We would also like to thank our keynote speakers Mikko Hypponen and Lance Spiztner for their excellent presentations and warm, friendly company.

Much love also to the guys from Scanit Middle East (David, Sheran, Sonali, Ronald, Sam, Andreas) who were absolutely brilliant in their on-the-ground support and immense help in ensuring the event went off without a hitch! You guys rock! Once again on behalf of The HITB Team we wish to thank all conference speakers and delegates who came from every corner of the globe to join us for our first ever outing in UAE.

See you guys at HITBSecConf2008 - Dubai!

Presentation Slides

The presentation materials in PDF format from the 2-day conference can be downloaded from here:
http://conference.hitb.org/hitbsecconf2007dubai/materials/

Photos

Photos from the event are available at http://photos.hackinthebox.org

Post Conference Press Coverage

Xakep (Russian) - HITB 2007 started
Technet - VBootkit vs. Bitlocker in TPM mode

Blog Posts

geek00l
xwings
Prabu
aphesz
samsoomempire
hackathology

We are honoured to announce that the UAE Telecommunications Regulatory Authority, TRA has agreed to support and endorse HITBSecConf2007 - Dubai. In addition, the Director General of TRA, HE. Mr. Mohamed Nasser Al Ghanim has agreed to present the Welcome Address on Wednesday April 4th 2007 at 8:50am. Please take a look at the conference agenda for the full programme details.

Mohamed Nasser Al Ghanim is one of the few telecom engineers in the United Arab Emirates who, in a short period of time, achieved great accomplishments both on the academic and the career sides. Currently, Mohamed Al Ghanim is the Director General of Telecommunications Regulatory Authority (TRA) which is entrusted with regulating all of the Telecom sectors in UAE; a vital sector, which comes second only to Oil and Gas.

Under Al Ghanim’s tenure, TRA has succeeded in implementing the regulatory framework for the sector, including the necessary policies, such as Interconnection Agreements and Pricing Policies, for the creation of a healthy and a competitive environment. During the initial six months of operation, TRA has launched Spectrum National Plan and Spectrum Frequency Chart map. Although United Arab Emirates was the last country in the region to regulate the telecom sector, the national spectrum plan and the chart were the first of their kind in the region. Among other TRA achievements is the licensing of a second operator: Emirates Integrated Telecommunications Company (DU), in addition to the existing operator Emirates Telecommunications Corporation (Etisalat).

Additionally, Mohamed Al Ghanim is the UAE executive in charge of UAE Telecom & E-Commerce chapter’s in the Free Trade Agreement negotiations, and the UAE free trade negotiations with the United States and Australia. Additionally, he is the Vice Chairman of UAE Information & Communication Development Fund (the ICT Fund), and Chairman of UAE Institute for advanced Science and Technology.

The United Arab Emirates is one of the most developed country in Telecom fields and it is considered the most active Arab country internationally in the workshops and conference organized by the International Telecommunications Union. In addition, United Arab Emirates occupies a unique position regionally and internationally in the field of Telecom and Information Technology, which is attributed to an outstanding generation of UAE telecom engineers, of which Al Ghanim is a very well known name.

After graduation from Etisalat college of Engineering in 1994, Al Ghanim joined Emirates Telecommunications Corporation (Etisalat) where he advanced gradually the ladder of management positions through his working career with Etisalat till he achieved the highest managerial post in GMPCS Department. In 1997, he was seconded by Etisalat to work for Thuraya Satellite Telecommunication Company since its inception and worked as Senior Manager Product.

During his working years in Etisalat and Al Thuraya, Al Ghanim represented United Arab Emirates in several regional and international telecom & IT related Forums and conferences. Currently, Al Ghanim manages a team of engineers and specialized consultants in the fields of telecom regulatory affairs. They are all working to implement licenses requirements, policies, procedures and instruction.

The CTF Reference Distribution has been announced along with some updated information on the game. The conference agenda for the 2-day dual-track security conference has been released. The following papers and presentations have been announced:

Keynotes:

Online Crime and Crime Online
Mikko Hypponen, Chief Research Officer, F-Secure Corp.

Honeypots: Today and Tomorrow
Lance Spitzner, Founder Honeynet Project

Cryptographic Applications in the 21st Century
Dino Covotsos, Managing Director, Telspace Systems

Telecom Fraud
David Michaux, Chief Executive Officer, Scanit

Securing Your Mobile Data
Ahmad Elkhatib, Security Consultant, Pointsec

Spam goes VOIP – Number Harvesting for Fun and Profit
Hendrik Scholz, Lead VoIP Developer, Freenet Cityline Gmbh

A Middle Eastern Perspective of the Malware Landscape
Tareq Saade, Program Manager, Microsoft Security Research & Response (MSRR), Microsoft Corporation

WEB 2.0 Hacking – Defending Ajax and Web Services
Shreeraj Shah, Director, Net-Square

Robbing Banks: Easier Done Than Said
Fabrice Marie, Founder, FMA-RMS Singapore & Malaysia

Kernel Hacking: If I really know I can hack
Rodrigo Rubira Branco, Software Engineer, IBM and member of the Advanced Linux Response Team (ALRT) and
Domingo Montanaro (Information Security Specialist)

X.25 Networks in the Arab World
Raoul Chiesa, Board of Directors member @Mediaservice.net ISECOM Group & Telecom Security Task Force (TSTF)

Opened in Ten Seconds: The Insecurity of Mechanical Locks
Marc Weber Tobias, Investigative Attorney and Security Specialist

Ravage Unleashed: The Tactical VoIP Toolkit
The Grugq, Independent Network Security Consultant

Vboot Kit: Compromising Windows Vista Security
Vipin Kumar & Nitin Kumar, Independent Network Security Consultants/Researchers

NGN Security – Next Generation Nightmare
Emmanuel Gadaix, Founder, Telecom Security Task Force, TSTF

Open Source Open Security
Window Snyder, Chief Security Something or Other, Mozilla Corporation

Digging into SNMP 2007 - An Exercise on Breaking Networks
Enno Rey, ERNW Gmbh

In addition we have also updated the conference kit. We are also happy to announce that Scan Associates Sdn. Bhd. have agreed to come on board as a sponsor for the CTF competition as well as the CTF prizes!

1st Place - USD3,000 CASH!!!
2nd Place - USD2,000 CASH!!!
3rd Place - USD1,000 CASH!!!

For further details and to register for the CTF competition (we only have space for 10 teams), please take a look here.

The Call for Papers for HITBSecConf2007 - Dubai is now closed - Thank you to everyone who took the time to submit their presentation proposals. The CFP committee will be going through the submissions and making the final selection in the coming days. The full speaker list and conference agenda will be announced on the 7th of February!

Registration for HITBSecConf2007 - Dubai is now open! As seats are limited, attendees are advised to reserve their seats early to avoid disappointment.

Welcome to the official homepage of HITBSecConf2007 - Dubai. The main aim of the HITBSecConf conference series is to enable the dissemination, discussion and sharing of deep knowledge network security information. Featuring presentations by respected members of both the mainstream network security arena as well as the underground or black hat community, HITBSecConf2007 - Dubai will see over 15 of the world’s leading network security specialists down to present their research and findings.

Event Details

Venue: Sheraton by the Creek,
Dubai, UAE.

Date: 2nd April
Time: 0900 - 1800
Item: 4-tracks Hands-On Technical Training (Day 1)

Date: 3rd April
Time: 0900 - 1800
Item: 4-tracks Hands-On Technical Training (Day 2)

Date: 4th April
Time: 0800 - 1600
Item: Dual Track Security Conference & Capture The Flag ‘Live Hacking’ Competition (Day 1)

Date: 5th April
Time: 0800 - 1600
Item: Dual Track Security Conference & Capture The Flag ‘Live Hacking’ Competition (Day 2)

Hands-On Technical Training

TECH TRAINING 1 - Advanced Web Application & Services Hacking
Trainer: Shreeraj Shah (Director, Net-Square)

TECH TRAINING 2 - Tactical VoIP : Applied VoIPhreaking
Trainer: The Grugq (Independent Network Security Researcher)

TECH TRAINING 3 -Structured Network Threat Analysis and Forensics
Trainer: Meling Mudin (spoonfork) and Lee Chin Shing (geek00l)

TECH TRAINING 4 - Packetmastering the Monkey Way
Trainers: Dr. Jose Nazario (Senior Software Engineer, Arbor Networks)

HITBSecConf2007 - Dubai - Keynote Speakers

1.) Mikko Hypponen (Chief Research Officer, F-Secure Corp)
2.) Lance Spitzner (Founder, Honeynet Project.)

HITBSecConf2007 - Dubai - Invited Speakers (alphabetical order)

1.) Ahmad Elkhatib (Security Consultant, Pointsec)
2.) Emmanuel Gadaix (Founder, Telecom Security Task Force, TSTF)
3.) Enno Rey (ERNW, GmbH)
4.) Fabrice Marie (Manager, FMA-RMS Singapore/Malaysia)
5.) Hendrik Scholz (Lead VoIP Developer, Freenet Cityline GmbH)
6.) Marc Weber Tobias (Investigative Attorney and Security Specialist)
7.) Nitin Kumar (Independent Security Engineer / Researcher)
8.) Raoul Chiesa (Board of Directors Member@ Mediaservice.net ISECOM Group & TSTF)
9.) Rodrigo Rubira Branco (Software Engineer, IBM)
10.) Shreeraj Shah (Director, Net-Square)
11.) Tareq Saade (Program Manager, MSRR, Microsoft Corporation)
12.) The Grugq (Independent Network Security Researcher)
13.) Vipin Kumar (Independent Network Security Consultant/Analyst)
14.) Window Snyder (Chief Security Something-or-Other, Mozilla Foundation)