Division Zero (Div0) – Singapore Cybersecurity Community

⚠️⚠️ To attend, please also fill up this registration form: [https://forms.gle/NAY2Ju1EsGNaqDo79] ⚠️⚠️
*Please keep a look out for our email on the outcome of your registration that will be sent to you at 1-2 day(s) before the session. If you did not receive any updates, please drop us an email at community@div0.sg*

Career Series: Talk & Tackle is a dynamic initiative designed to elevate the professional development of cybersecurity practitioners. This series will feature a combination of hands-on workshops and interactive Q&A sessions, providing an engaging platform for experienced professionals to tackle pressing technical challenges in real-time.
Each quarter, Talk & Tackle will focus on four distinct themes:

1. Red Team: Participants will explore offensive security tactics, learning how to think like an attacker. Workshops will cover topics such as penetration testing methodologies, social engineering techniques, and the latest tools used in red teaming, equipping attendees with the skills to anticipate and counteract threats.
2. Blue Team: This theme will delve into defensive strategies, emphasizing threat detection, incident response, and risk management. Attendees will engage in simulations and case studies that allow them to practice and refine their skills in protecting networks and systems against various cyber threats.
3. White/Yellow/Green Team: These sessions will foster collaboration between offensive and defensive teams. We’ll address best practices in threat intelligence sharing, security policy development, and compliance measures. This integrated approach will highlight the importance of a cohesive cybersecurity strategy across different teams.
4. Emerging Technologies: As technology rapidly evolves, this theme will focus on the latest advancements in cybersecurity, including artificial intelligence, machine learning, and blockchain security. Participants will gain insights into how these technologies are reshaping the cybersecurity landscape and explore practical applications to enhance their own security practices.

ABOUT THE WORKSHOP
Read more here

AGENDA

• 6.30pm: Registration
• 7.00pm - 10.00pm: Talk & Tackle — Secure Software Dev
• Till Late: Networking

SPONSORS

• MEETUP VENUE SPONSOR: CyberSG TIG Collaboration Centre

SPEAKER'S BIO
Terry Chia | Terry is the application security engineering lead at FNZ, a global financial services company providing wealth management platforms to financial institutions. With his team, he is driving improvements to the application security and DevSecOps program within the company. He has prior experience as a security consultant delivering penetration testing services to banks, government agencies and other critical organisations in Singapore.

IMPORTANT NOTICES

• Code of Conduct: [https://www.div0.sg/code-of-conduct]
• Terms of Use & Disclaimer Notice: [https://www.div0.sg/terms-of-use-disclaimer-notice]

Submit the form and be part of the journey ➡️ https://forms.gle/C6rQP7nh2Tp1P5C38

*Note that this event has limited capacity, so be sure to sign up fast!

AGENDA

• 9.30am: Registration & Networking (30mins)
• 10.00am: Introduction & Announcement (10mins)
• 10.10am-2.00pm: Hands-on workshop by Christina Oh and Ng Wei Ting covering basic vulnerabilities and exploiting them (there will be a break for lunch in between)
• 2.00pm-2.30pm: Wrap up, final Q&A

SET UP INSTRUCTIONS FOR PARTICIPANTS

• Laptop should be installed with Community Edition of Burp Suite
• Set up an account on Portswigger Academy

SPONSORS

• MEETUP VENUE SPONSOR: CyberSG TIG Collaboration Centre
• FOOD SPONSOR: REVERSEC

SPEAKERS' BIOS
Christina Oh | Christina is a pentester and white hat hacker with six years of experience, focusing on web and mobile applications. She is currently a Security Consultant at Reversec.

Ng Wei Ting | Wei Ting is a cybersecurity consultant with experience in web and mobile application testing, as well as infrastructure penetration testing across different industries. She is passionate about the field of cybersecurity and continues to grow her skills through hands-on testing and real-world projects. She also enjoys sharing her knowledge with others and hopes to encourage more people to discover and enjoy the field as much as she does.

IMPORTANT NOTICES
Code of Conduct: https://www.div0.sg/code-of-conduct
Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice

See you all there!👋🏽

⚠️ REGISTRATION IS REQUIRED VIA THIS SIGN UP FORM ⚠️

ABSTRACT
ShellGym is the regular cybersecurity workout you have been looking for! Whether you're just starting out and need some exercises, studying for a cert (hint: OSCP), looking at CTF challenges, or developing something cybersecurity-related (maybe your own automated tools?), ShellGym aims to help you progress in picking up practical cybersecurity knowledge and skills. Come and go as you please, work on your own stuff with like-minded individuals, or just have fun during the workout!

AGENDA
Thematic activities for this session

• 2:00 pm - recap of the previous session (RE without tools, covered on 22 Aug)
• 2.30 pm - RE with basic free tools
• 5:00 pm - RE of exploit and payload code

⚠️ NOTE
Participants should have both linux and windows VMs. The arch used should be intel or AMD (ie not ARM, eg macbooks)

TRAINER
KK Tan — Founder, counterShell
As a mid-careerist convert to cybersecurity, Tan KK picked up his practical skills through getting OSCP certified and by participating in a variety of CTFs. In his career at CSIT, he performed a variety of red-teaming and vulnerability research roles and established the Cyber Training School at CSIT as the Lead Instructor. Besides the OSCP certification, KK is also OSCE and OSEE certified, and has a Bachelor's degree in Social Science (Psychology). He now sees psychology as a field of study where you fuzz humans until they produce unexpected behaviour.

IMPORTANT NOTICES

• Code of Conduct: https://www.div0.sg/code-of-conduct
• Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice

⚠️⚠️ To attend, please also fill up this registration form: [https://forms.gle/NAY2Ju1EsGNaqDo79] ⚠️⚠️
*Please keep a look out for our email on the outcome of your registration that will be sent to you at 1-2 day(s) before the session. If you did not receive any updates, please drop us an email at community@div0.sg*

Career Series: Talk & Tackle is a dynamic initiative designed to elevate the professional development of cybersecurity practitioners. This series will feature a combination of hands-on workshops and interactive Q&A sessions, providing an engaging platform for experienced professionals to tackle pressing technical challenges in real-time.
Each quarter, Talk & Tackle will focus on four distinct themes:

1. Red Team: Participants will explore offensive security tactics, learning how to think like an attacker. Workshops will cover topics such as penetration testing methodologies, social engineering techniques, and the latest tools used in red teaming, equipping attendees with the skills to anticipate and counteract threats.
2. Blue Team: This theme will delve into defensive strategies, emphasizing threat detection, incident response, and risk management. Attendees will engage in simulations and case studies that allow them to practice and refine their skills in protecting networks and systems against various cyber threats.
3. White/Yellow/Green Team: These sessions will foster collaboration between offensive and defensive teams. We’ll address best practices in threat intelligence sharing, security policy development, and compliance measures. This integrated approach will highlight the importance of a cohesive cybersecurity strategy across different teams.
4. Emerging Technologies: As technology rapidly evolves, this theme will focus on the latest advancements in cybersecurity, including artificial intelligence, machine learning, and blockchain security. Participants will gain insights into how these technologies are reshaping the cybersecurity landscape and explore practical applications to enhance their own security practices.

ABOUT THE WORKSHOP
Quantum safe technologies such as Quantum Key Distribution (QKD), are essential for long term security and guard against future quantum threats. Unlike classical encryption methods, which can be vulnerable to attacks from quantum computers, QKD distributes keys securely using the principles of laws of physics and is resilient against quantum attacks. By integrating quantum safe technologies such as QKD, businesses can enhance their cybersecurity infrastructure to withstand emerging threats, maintaining trust and confidence in their data protection measures.

What's covered during the workshop

1. Overview of quantum computing and quantum communications
2. Quantum threats
3. Overview of QKD and PQC in modern cryptography
4. Introduction to the QKD protocol
5. Integrating QKD to existing classical infrastructure

AGENDA

• 6.30pm: Registration
• 7.00pm - 10.00pm: Talk & Tackle — Quantum Security
• Till Late: Networking

SPONSORS

• MEETUP VENUE SPONSOR: CyberSG TIG Collaboration Centre

SPEAKER'S BIO
Cyril Su | Quantum Security Architect, SpeQtral
Cyril is a 22 year old cybersecurity professional. He is a certified CISO (C|CISO) and currently holds a CISSP, CSSLP, CEH, ITIL and certified Blackblot Product Professional. He is currently a quantum security architect with SpeQtral, a local quantum communications company, which specialises in Space Quantum Key Distribution (QKD) technologies. He is the leading architect for Singapore’s first quantum network, also called NQSN+. In a current evolving space of quantum, besides QKD, Cyril is also exploring in the space of quantum computing, learning different Quantum modalities, and post quantum cryptography.

In the area of cybersecurity, Cyril had deeply worked on technologies (in the R&D space) that include steganography, cryptography design, smart cards, cloud security, IoT security, OT security, product security, wireless pen testing and most recently, quantum key distribution technologies. He enjoys cybersecurity innovation, has 2 cybersecurity patents and a few cybersecurity product innovation awards (CES and Singapore Good Design).

Cyril is also an active cybersecurity EXCO member with the ISC2 Singapore Chapter, co-opt member of Cybersecurity Chapter as well as exco of Quantum Special Interest Group under Singapore Computer Society.

IMPORTANT NOTICES

• Code of Conduct: [https://www.div0.sg/code-of-conduct]
• Terms of Use & Disclaimer Notice: [https://www.div0.sg/terms-of-use-disclaimer-notice]