OWASP Monthly Meeting - September 28 2016

Speaker: Eric Chien

Bio: Eric Chien serves as Technical Director of Symantec’s Security Technology and Response division. In this role, Chien leads a deep analysis team of engineers that investigate and reverse-engineer the latest high-impact Internet security attacks – those that might hold clues to bigger trends developing or are otherwise of particular interest.

Abstract: Project Sauron - Yet Another APT

Reports of 'advanced persistent threats' are now a regularly occurrence in the media. While many of these are more sophisticated than cybercrime and often come with motivations beyond direct monetary gain, within the APT landscape two tiers of sophistication exist -- those that are just not cybercrime and those that are truly sophisticated. Attacks such as Regin, Duqu, Stuxnet, and Equation are in a league of their own within the APT landscape and Symantec has now discovered another -- Project Sauron. We will discuss this latest attack, including the attacker's method of operations and their motivations and receive a glimpse of the latest advancements in cyber offensive technology.