Keynote Speech: General Tan Sri Dato’ Seri Panglima Mohd Azumi Mohamed (Retired), Permanent Secretariat, Organization of Islamic Cooperation – Computer Emergency Response Team / Chairman Board of Directors, CyberSecurity Malaysia
BruCERT (ITPSS) - CEO of BruCERT/ ITPSS
Chief Forensic Analyst, Duzon Bizon
Mr. Joseph Kim is the Chief Forensic Analyst of Duzon Bizon, a total IT service provider representing South Korea delivering cutting-edge digital forensic services, solutions, consulting and training to government agencies in Korea and abroad. He is the Head of the Digital Forensic division where he plans and oversees developing new digital forensic solutions or improving existing ones tailored to the clients’ needs.
Mr. Kim also has work experience in providing training to Interpol’s trainees, digital forensic investigators & analysts, ICT students abroad, industrial organizations handling confidential information and the general public. He is a designated instructor of Choongang University, teaching digital forensics to graduate schools. He is also registered senior mentor of digital forensics by Ministry of Science, ICT and Future Planning.
He also holds professional certifications such as ACI (AccessData Certified Instructor), ACE (AccessData Certified Examiner), Certified Encase Enterprise Implementation Specialist & EnCE (EnCase Certified Examiner) of Guidance Software. In year 2016, he was awarded with Republic of Korea’s Ministry of Trade, Industry & Energy’s Prize for preventing IP thefts and data breaches.
Manager, Systems Engineering at FireEye
Economic Impact of Cyber Breaches
Yazan Hammoudah is currently managing the systems engineering team in KSA & GCC at FireEye, the leader in stopping advanced malware and targeted advanced persistent threats (APT) . Prior to that, Yazan worked in different positions in different companies including Ruckus Wireless, Saudi Aramco, and Ebttikar after he graduated from KFUPM. Yazan holds multiple certificates such as: CCIE-Security, CWSP, and many others.
In the last three years within FireEye, his main focus was to position the right security solution against APTs to the GCC organizations in different industries and verticals. In his presentation, Yazan will talk about the economic impact of the recent cyber breaches and how the adaptive defense concept consisting of Technology, Expertise & Intelligence can play a major role in eliminating this key threat
Head of Azerbaijan Government CERT (CERT.GOV.AZ) under Special State Protection Service of Azerbaijan.
Manager GRC Services with Innovative Solutions and currently representing PISA, Pakistan
Syed Talha Habib is working as Manager GRC Services with Innovative Solutions and currently representing PISA, Pakistan. He has done his MS in Computer and Communication Security from NUST, Pakistan and also has a couple of industry certifications. Mr. Syed was awarded by (ISC)2 under Asia-Pacific Information Security Leadership Achievements (ISLA) Program.
Deputy Director of the Global Coodination Division at JPCERT/CC
Koichiro Komiyama, CISSP, is the Deputy Director of the Global Coodination Division at JPCERT/CC, the Japanese Computer Emergency Response Team. He has worked as a security analyst and led the gathering of security information and publishing multiple security alerts and advisories. His current focus is related to resea(rch on phishing, insider threats, and sophisticated attacks.
Since 2014, He is a member of board of director of FIRST.Org, which is the premier organization and recognized global leader in incident response. As a Ph.D student of Keio University Graduate School of Media and Governance(Japan), his interest expands to confidence building in cyber space or development assistance in ICT field.
- Professor in Information Security , Faculty of Information Communication Technology , Universiti Teknikal Malaysia Melaka.
- Deputy Director Research and Innovation Center Universiti Teknikal Malaysia Melaka.
Rabiah Ahmad is appointed as Professor in Information Security in 2015 form Universiti Teknikal Malaysia Melaka. She actively involved in teaching information security and related area prestige University such as Universiti Teknologi Malaysia, and International Technology Institute. Rabiah Ahmad was appointed as academic advisor for Malaysia German Institute and be responsible to develop Diploma Program in Network Security. She then was also appointed for the same post at KPJ Nursing College to develop Diploma in IT. Her research interests include Information Security Management, Security Architecture, Healthcare system security, Cyber Physical System Security and Insider Threats. Rabiah was a project leader for many projects in security which cost more than RM2 Million.
Throughout her career, she has published various articles in the area of information security and cyber physical at national and international journal, conferences and public media. Her latest publication is titled Cyber Terrorism: Policy and Technical Perspective. Rabiah Ahmad registered as professional membership to OIC-CERT since 2015 and her involvement as expert in this orgat the workshop in combating cyber violent extremism in the same Year. Her latest prestige involvement at the international level is as Head of the Professional Examination Committee in setting up Global Ace Scheme which is going to be the First Cyber Security Professional Certification Program in the Worlds.
Insider threat is a significant security risk for organizations, and detection of insider threat is of paramount concern to organizations. The emergence of latest insider threats such as P2P botnets causes data damage and its hard to detect nowadays. Typically, organizations are reluctant to state their experience and difficulties dealing with issues related to the insider threats. It was probably due to adverse reputation and fear if revealing the fact that trusted people within their organization who commits wrong doings or fraud will further contribute undesirable impact to the company’s operations and customers’ perception. Such incidents (insider attacks) could result in reputation loss to the affected organization. Information security devices intentionally installed to deter and detect security breaches that primarily focus on the external breaches and not the internal breaches from employees, contractors and business partners. In that sense, framework to detect and deter the insider threats is paramount where CNII organizations are struggling to manage the threats. It can happen in stealth progression particularly by a fraudster who is very familiar to his / her workplace and internal processes. Furthermore, the CISCO Global Security Study found that 11 per cent (11%) of employees had reported that they or fellow employees accessed unauthorized information and sold it for profit, or stole computers while sixty percent (60%) of employees intentionally keeping their corporate devices when leaving a job. With this note, it is extremely important for us to explore further on the latest threats trend originate from an insider.
BAE Systems Applied Intelligence; Country Manager KSA
Now leading BAE Systems Applied Intelligence’s Cyber business in Saudi Arabia, Mike Small is responsible for delivering Cyber Defence capabilities in support of BAE’s clients in KSA and the Gulf region. With Masters Degrees in both Systems Engineering and Business Management, he has a strong background in how advanced technology is developed and deployed to support government and business systems, and the trade-offs which are encountered in terms of enabling the business. Now based in KSA, Mike has worked for Systems integrators in KSA and the Gulf, and Africa region for the last 10 years.
Chief Officer of Network Security and Enforcement Sector, Malaysian Communications and Multimedia Commission (MCMC)
Zulkarnain Mohd Yasin is currently the Chief Officer of Network Security and Enforcement Sector (NSES) in the Malaysian Communications and Multimedia Commission (MCMC).
He is in charge of the overall planning and management of the activities in the NSES, comprising three (3) Divisions, namely:
• Enforcement and Investigation Division;
• Monitoring and Compliance Division; and
• Digital Surveillance Division.
He started his career as an Advocate and Solicitor for six years upon graduating from the University of Malaya with an honours degree in law.
He then worked in a Futures Broking Company as a Compliance Manager for two years before joining the licensing department of the MCMC's Regulatory Division in 1999. Since then, he handled variety of portfolios in MCMC prior to his appointment in his current position. He regularly featured in television talk shows and speaks at regional and international forum on the subject of social media and convergence regulatory framework.
The internet is an electronic highway connecting thousands of computers and devices all over the world and the use of smart devices and broadband penetration is growing rapidly. However, we also know that the consumer’s security concerns around personal data are rising due to the evolving technology which has cause part of our data is being compromised. Some people may agree that in order to be convenience, one might need to sacrifice the privacy and security of their data. However, until what extend will people willing to compromise and who is responsible in ensuring the balance between convenience and security? Mr. Zulkarnain will address this issue from Malaysia’s point of view and discuss on the way forward in finding the equilibrium between security and convenience in a current world.
Vice Chairman of Indonesia Security Incident Response Team On Internet Infrastructure/Coordination Center (ID-SIRTII/CC)
Muhammad Salman is the Vice Chairman of ID-SIRTII (Indonesia Security Incident Response Team on Internet Infrastructure). Currently, ID-SIRTII serves as the national CSIRT/CC of Indonesia which providing assistance to improve the safety and security system for national strategic institutions and critical infrastructures; coordinating the incident response and handling; conducting research and development in security related field; building cyber security awareness amongst stake holders and communities; supporting role in law enforcement against the cybercrime; establishing collaboration and partnership in improving secure and clean cyberspace.
Salman has been working for more than ten years in the field of network and information security. He is also representing ID-SIRTII/CC by being a member of different regional and international forums and committees including APCERT, ANSAC, FIRST and recently is also member of the steering committee of OIC-CERT. He has been also actively involving and participating in several information and network security working groups, focus group discussion, conferences, workshops, trainings in the area of cyber security collaboration, capacity building, critical information infrastructure protection, information security standard and compliance, incident handling and CSIRT establishment & management.
He holds a Master degree from Monash University and Doctoral degree from University of Indonesia in information network security field. Currently, he is also still actively delivering a number of lectures and doing research in the area of cybersecurity related field. He also holds many IT professional certifications from HP, Cisco, CompTIA, SANS, ISACA, Panduit and Microsoft. He is a member of IEEE, Computer Society, ACM, ISACA, Internet Society, Cloud Security Alliance, and many professional associations.
Professor in Knowledge Technology, IIUM
Mohamad Fauzan Noordin received his Ph.D. from the University of Wales, U.K.1997; MBA from the Central Missouri State University, U.S.A. 1991; and B.Sc. (Computer Science) from the University of Missouri Kansas City, USA 1989. He is Professor in Knowledge Technology at Kulliyah of Information and Communication Technology, International Islamic University Malaysia. Within just over a decade, his career has spanned far and wide. He was the Dean of Center for Postgraduate Studies, International Islamic University Malaysia (2012-2013). In 2004, he was Visiting Scholar at University of Bahrain (2004-2005) and Jazan University, Kingdom of Saudi Arabia (2010-2011). Besides these, he is an appointed and has been a member of the research panel for the Research Grant at the Ministry of Science Technology and Innovation since 2005, a Panel Thinker for National Dakwah Policy of Malaysia and Senior Fellow of International Institute of Islamic Thought (IIIT). Another testimony of his capability is his appointment as the first Dean of ICT at the Al-Madinah International University Malaysia (2007-2008). Certified Lead Auditor Training ISO 9001:2008 Quality Management System, 2012, Lead IT Auditor at Obeikan Investment Group, Riyadh, KSA, April 2013. He was Principal Consultant for UMP ICT Strategic Planning, 2011-2013. Member of Board the Advisor for K-Perak, State of Perak 2013.
Director Brisbane, CERT Australia
Ewan Ward is the Director of the CERT Australia Brisbane Office, a position he has held since January 2012. Part of the Australian Government’s Attorney-General’s Department, CERT Australia is the national computer emergency response team for Australia and is also currently the Chair of the Steering Committee of the Asia Pacific CERT (APCERT).
- Security Specialist, Asia Pacific Network Information Center (APNIC)
- Board of Director, Forum of Incident Response and Security Teams (FIRST)
Adli Wahid is currently a Security Specialist at APNIC. He has been actively involved in various national and global cyber security initiatives particularly in the areas such as incident response management, security exercises and user awareness. He is a regular speaker at security events and had conducted trainings for national computer security incidents response teams (CSIRTs). Prior to joining APNIC, he had served Bank of Tokyo-Mitsubishi UFJ, CyberSecurity Malaysia and Malaysia Computer Emergency Response Team (MYCERT).