| Tuesday, 16 September | ||||
| 08.00 - 09.00 | Reception & Registration | |||
| 09.00 - 09.15 | Opening (including video message from the State Secretary) Elly van den Heuvel GOVCERT.NL Welcome Nicholas Witchell Conference Chairman | |||
| 09.15 - 09.45 | The Real Cost of Insecure Software David Rice The Monterey Group | |||
| 09.45 - 10.15 | Security from the Supply Chain Perspective Marchus Sachs Verizon | |||
| 10.15 - 10.35 | Short Networking Break | |||
| INCIDENT RESPONSE | MONITORING | CRITICAL INFRASTRUCTURE | SOCIETY & SUSTAINABILITY | |
| 10.35 - 11.20 | Help, I'm a CERT! Don Stikvoort S-CURE Jacques Schuurman SURFnet-CERT | The State of Honeypots Lance Spitzner The Honeynet Project | SCADA Security – Who Is Really In Control of Our Control Systems? Peter Allor IBM Internet Security Systems | Revocable privacy: achieving security _and_ privacy Jaap-Henk Hoepman TNO / Radboud Universiteit Nijmegen |
| 11.30 - 12.15 | Logging for Incident Response and Forensics: Key Issues Anton Chuvakin LogLogic | Client side honeypots David Watson The Honeynet Project | Critical Infrastructure Dependencies hurt, don’t they? Eric Luiijf TNO Defence, Security and Safety | Smart Cards in Public Transport: the Mifare Classic Case Bart Jacobs Radboud University Nijmegen |
| 12.15 - 13.45 | Networking Break (lunch is served) | |||
| 13.45 - 14.30 | Ask the Xpert Scott McIntyre XS4All Internet B.V. | HoneySpider Network: Fighting client-side threats Carol Overes GOVCERT.NL | Ask the Xpert Marcus Sachs Verizon | Biometrics - are they ready for use in Banking and Payments? Colin Whittaker APACS Pending Confirmation |
| 14.40 - 15.25 | Streamlining the vulnerability management process Martijn de Hamer GOVCERT.NL | Intrusion Signature Generation Tillmann Werner CERT-Bund | Maeslantkering: defending Holland from the sea Jos Kuijpers Rijkswaterstaat | Broad-based cyber exercises: a US Perspective Brett Lambo National Cyber Security Division, U.S. Department of Homeland Security |
| 15.25 - 15.45 | Short Networking Break | |||
| 15.45 - 16.30 | US-CERT: current initiatives Randal Vickers US-CERT | Efficiently Spying on Botnets with botsnoopd Georg Wicherski RWTH Aachen University | You _are_ the weakest link... goodbye! Dave Woutersen GOVCERT.NL no press | Security issues in an advanced internet voting system Mark Koek Fox-IT |
| 16.40 - 17.10 | Rethinking passwords William Cheswick AT&T Labs - Research | |||
| 17.10 - 17.15 | Closing Nicholas Witchell Conference Chairman | |||
| 18.00 - 22.30 | Social Event | |||
| Wednesday, 17 September | ||||
| 08.30 - 09.00 | Reception & Registration | |||
| 09.00 - 09.30 | How Sustainable are you? An Interview with Elly van den Heuvel by Nicholas Witchell GOVCERT.NL | |||
| 09.30 - 10.00 | A new approach to botnet operations Dutch National High Tech Crime Unit & FBI No Press | |||
| 10.00 - 10.20 | Short Networking Break | |||
| PRACTICAL SECURITY | ATTACK TRENDS | LAW ENFORCEMENT | SOCIETY & SUSTAINABILITY | |
| 10.20 - 11.05 | Cryptography: Academic Analysis and Practical Use Carlos Cid Royal Holloway, University of London | Hijacking Malware: A Bot By Any Other Name Bell Aliant No Press | The strange case of Julie Amero Alex Shipp MessageLabs | Security Economics and European Policy Rainer Böhme TU Dresden |
| 11.15 - 12.00 | Physical and Logical convergence, fresh from the trenches Boris Goranov Siemens Nederland N.V. | The Operational Methodology and Process of Malware Collection and Analysis Richard Perlotto The Shadowserver Foundation | Network Forensics – How much evidence are you ignoring? Rémon Verkerk Hoffmann Investigations | ISP Liability: The new assault on Internet intermediaries and what it might mean for security Milton Mueller Syracuse University |
| 12.00 - 13.00 | Networking Break (lunch is served) | |||
| 13.00 - 13.30 | Stand-up Security | |||
| 13.40 - 14.25 | Finding Rootkits in Memory Dumps Pär Österberg Medina SITIC - Swedish IT-Incident Centre | Visualizing badness Marcel van den Berg Team Cymru No Press | Ask the Xpert Bob Burls London Metropolitan Police Computer Crime Unit No Press | Ask the Xpert David Rice The Monterey Group |
| 14.35 - 15.20 | Drinking from the Firehose David De Coster University of Wisconsin - Madison | Protecting 21 million internet banking customers: anecdotes and action plans Jan Joris Vereijken INGDirect No Press | Information exchange - Why are the LE so d*rn difficult? Sari Kajantie NBI Finland / IT Crime Unit No Press | We don’t trust voting computers Maurice Wessling |
| 15.20 - 15.40 | Short Networking Break | |||
| 15.40 - 16.20 | Parliament, policing and personal protection in the 21st century Lord Erroll House of Lords (UK), Parliamentary Information Technology Committee | |||
| 16.20 - 17.00 | Which "talent" for security: the lesson of JPGR Gigi Tagliapietra Clusit | |||
| 17.00 - 17.10 | Closing Elly van den Heuvel GOVCERT.NL | |||
