Iftach Ian Amit

VP Consulting, Security Art

http://www.security-art.com/

Biography

With over a decade of experience in the information security industry, Iftach Ian Amit brings a mixture of software development, OS, network and Web security expertise as Vice President Consulting to the top-tier security consulting firm Security-Art. Prior to Security-Art, Ian was the Director of Security Research at Aladdin and Finjan, leading their security research while positioning them as leaders in the Web security market. Ian has also held leadership roles as founder and CTO of a security startup in the IDS/IPS arena, developing new techniques for attack interception, and a director at Datavantage, responsible for software development and information security, as well as designing and building a financial datacenter. Prior to Datavantage, he managed the Internet Applications as well as the UNIX departments at the security consulting firm Comsec. Ian is a frequent speaker at the leading industry conferences such as BlackHat, DefCon, Infosec, Hacker-Halted, FIRST, BruCon, SOURCE, ph-neutral, and many more. Ian holds a Bachelor's degree in Computer Science and Business Administration from the Interdisciplinary Center at Herzlya.

Presentation: Advanced data exfiltration ­the way Q would have done it

Data exfiltration has been a hot topic on the past year, in light of the "APT" attacks that took frontstage in the media. However, the attacks that we keep seeing are not even close to what really is going on behind the scenes, where sophisticated exfiltartion techniques are being used to grab data out of highly secure networks. This talk will cover both the infiltration techniques used in red-team engagements, and government related cyber-preparedness capability building, as well as the command & control mechanisms for such attack software. On top of that, the talk will show innovative exfiltration techniques that go much beyond the case-studies shown over the past year as "advanced" and will challenge the industry with how it perceives its data monitoring and security.