Norsk Informasjonssikkerhetsforum (ISF) har gleden av å invitere til årets sommermøte i Oslo. Tema for dette medlemsmøtet er offensive security.
Deltakere av ISF deltar kostnadsfritt på medlemsmøtet. Over to deltakere per medlemsorganisasjon som skal delta på middagen blir fakturert kostpris på 1000kr.
For spørsmål om arrangementet, vennligst kontakt sekretariatet på service@isf.no.
Program
15:30 – 16:00 Registrering
16:00 – 16:15 Velkommen
16:15 – 17:00 The modern attack surface in Azure and Entra, Cody Burkland
17:00 – 17:15 Pause
17:15 – 18:00 You can’t touch this: Secure Enclaves for Offensive Operations, Cedric Van Bockhaven og Matteo Malvica
18:00 – 18:15 Pause
18:15 – 19:00 Penetrsjonstesting og Red Teaming, Anders Lund
19:00 – Middag og nettverksbygging
Foredrag
The modern attack surface in Azure and Entra
Cody Burkland
In a cloud-first world, our notion of attack surface has to evolve with the technology we rely on.
This talk will introduce a hot take on how the concept of an attack surface needs to change for organizations that utilize cloud technologies. We will review the traditional view of an attack surface, present some modern threat actor activity that challenges that view, and make the case for an expanded view of an external attack surface.
This talk will use Microsoft Azure and Entra technologies as examples, but will be relevant to any cloud setup.
You can’t touch this: Secure Enclaves for Offensive Operations
Cedric Van Bockhaven, Matteo Malvica
Virtualization-Based Security (VBS) enclaves provide isolated environments for handling sensitive data on Windows systems.
In this talk we will discuss the architecture of VBS enclaves, demonstrate how to create your own enclave, and explore practical exploitation techniques for existing vulnerable enclave DLLs. We will turn a read-write primitive into code execution within the enclave, show how to securely seal a c2 beacon in an enclave during sleep and make it untouchable.
Penetrsjonstesting og Red Teaming
Anders Lund
TBA
*Ingen av foredragene som holdes under møtet vil streames