Division Zero (Div0) – Singapore Cybersecurity Community

⚠️ REGISTRATION IS REQUIRED VIA THIS SIGN UP FORM ⚠️

—
​TMC SG and Div0 TMQ is proud to bring you yet another fulfiling threat modeling event! 🥳🥳

​First, we will feature an introductory talk. Dr. Timothy Teoh, expert in automotive cybersecurity, will explore how the LINDDUN framework identifies and mitigates privacy threats in connected vehicles, using an In-Vehicle Infotainment system to highlight the growing need for privacy-by-design amid advancements like AI-driven smart cockpits. Learn simple ways to integrate privacy threat modeling with cybersecurity standards like ISO/SAE 21434, empowering teams to address risks without deep technical expertise.

​Following that, we will dissect key insights following the inaugurual "State of Threat Modeling" (SOTM) survey conducted by Threat Modeling Connect last year. Following on the good work done by Grant Ongers and Dave Soldera, TMC SG is delighted to present to you key findings of the SOTM survey. These findings include how the industry understands threat modeling, how the industry identifies the value proposition behind threat modeling, and the challenges that face threat modeling practitioners as a whole.

​*We will run a "Bring Your Own Dinner" (BYOD) concept for this meet-up! Participants are encouraged to bring their own dinner and munch alongside the talks!

AGENDA

• 6.30 pm: Registration & Networking (30 mins)
• ​​7.00 pm: Introduction & Announcement (15 mins)
• ​​7.15 pm: Opening Addresses by Donavan Cheah and Ng Yoon Yik, Co-Founders of TMC Singapore Chapter/Div0 TMQ (10 mins)
• ​​7.25 pm: Application of LINDDUN for Privacy Threat Modeling in Automotive Data Security (60 minutes)
• ​​8.25 pm: SOTM Brief (30 mins)
• ​​Till Late: Networking

SPONSORS

• VENUE SPONSOR: CyberSG TIG Collaboration Centre

SPEAKER BIO
Dr. Timothy Teoh | Dr. Timothy Teoh is a Principal Engineer at Desay SV Automotive (Singapore). He builds AI-assisted engineering workflows that unite LINDDUN privacy, ISO/SAE 21434 cybersecurity, UNECE R155 compliance, and ISO 26262 functional safety for connected vehicles. A former safety engineer for remote vehicle assistance in AV operations, he holds a Ph.D. in Mathematics (NTU) and an automotive systems-engineering background, with a focus on practical, audit-ready threat and risk analysis.

IMPORTANT NOTICES

• Code of Conduct: https://www.div0.sg/code-of-conduct
• Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice

⚠️ REGISTRATION IS REQUIRED VIA THIS SIGN UP FORM ⚠️

—
ABOUT THE RANGE VILLAGE
​The Range Village is a community driven cyber range interest group aimed to provide community curated Cyber Range content for people who are interested in practicing their cyber skills such as active directory testing, lateral movements, defence evasion, and provisioning of an attack infrastructure. We live in a world where cybersecurity education is within a Google search or a GenAI prompt, but the access to a certain range or resource to practice those skills can be costly to individuals who are not in the position to self-fund a paid cyber range or premium access range.

ABSTRACT
Participants will expect open ranges for them to participate in person. There will be two ranges.

1. Beginner-friendly Active Directory Range
2. Cloud Security (Beta Test)

SET UP INSTRUCTIONS FOR PARTICIPANTS
Participants will need to bring their own laptop with a Kali Linux virtual machine

AGENDA

• 1.30pm: Registration & Networking (30 mins)
• ​​2.00pm: Introduction & Announcement (15 mins)
• ​​2.15pm: Range starts

SPONSORS

• VENUE SPONSOR: CyberSG TIG Collaboration Centre
• SNACKS & SWAGS: The Range Village

LEAD FACILITATOR
Sim Cher Boon | Cher Boon is a Security Engineer at Grab and the Co-Founder of the Range Village community group. He has competed in multiple CTFs, both locally and overseas, spoken at local and overseas conferences on security topics, and now focuses on developing the next generation of cyber talents through guidance and meetups.

IMPORTANT NOTICES

• Code of Conduct: https://www.div0.sg/code-of-conduct
• Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice

Check out this year's Trainings here

P.S. Keep up with the latest announcements at https://t.me/div0scc_plus

For accepted students only, walk-ins strictly prohibited.

—

IMPORTANT NOTICES

• Code of Conduct: https://www.div0.sg/code-of-conduct
• Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice

⚠️⚠️ To attend, please also fill up this registration form: [https://forms.gle/NAY2Ju1EsGNaqDo79] ⚠️⚠️
*Please keep a look out for our email on the outcome of your registration that will be sent to you at 1-2 day(s) before the session. If you did not receive any updates, please drop us an email at community@div0.sg*

Career Series: Talk & Tackle is a dynamic initiative designed to elevate the professional development of cybersecurity practitioners. This series will feature a combination of hands-on workshops and interactive Q&A sessions, providing an engaging platform for experienced professionals to tackle pressing technical challenges in real-time.
Each quarter, Talk & Tackle will focus on four distinct themes:

1. Red Team: Participants will explore offensive security tactics, learning how to think like an attacker. Workshops will cover topics such as penetration testing methodologies, social engineering techniques, and the latest tools used in red teaming, equipping attendees with the skills to anticipate and counteract threats.
2. Blue Team: This theme will delve into defensive strategies, emphasizing threat detection, incident response, and risk management. Attendees will engage in simulations and case studies that allow them to practice and refine their skills in protecting networks and systems against various cyber threats.
3. White/Yellow/Green Team: These sessions will foster collaboration between offensive and defensive teams. We’ll address best practices in threat intelligence sharing, security policy development, and compliance measures. This integrated approach will highlight the importance of a cohesive cybersecurity strategy across different teams.
4. Emerging Technologies: As technology rapidly evolves, this theme will focus on the latest advancements in cybersecurity, including artificial intelligence, machine learning, and blockchain security. Participants will gain insights into how these technologies are reshaping the cybersecurity landscape and explore practical applications to enhance their own security practices.

ABOUT THE WORKSHOP
Read more here

AGENDA

• 6.30pm: Registration
• 7.00pm - 10.00pm: Talk & Tackle — Secure Software Dev
• Till Late: Networking

SPONSORS

• MEETUP VENUE SPONSOR: CyberSG TIG Collaboration Centre

SPEAKER'S BIO
Terry Chia | Terry is the application security engineering lead at FNZ, a global financial services company providing wealth management platforms to financial institutions. With his team, he is driving improvements to the application security and DevSecOps program within the company. He has prior experience as a security consultant delivering penetration testing services to banks, government agencies and other critical organisations in Singapore.

IMPORTANT NOTICES

• Code of Conduct: [https://www.div0.sg/code-of-conduct]
• Terms of Use & Disclaimer Notice: [https://www.div0.sg/terms-of-use-disclaimer-notice]