PacSec 2017 Security Conference

Tokyo, November 1-2 Event Overview & Introduction

secwest technical security seminarshosted by dragostech.com inc.

SECWEST : Specialized Educational Conference on World Emerging Security Technology

For Non Japan Based Corporations

Ver.8-15-201717

PacSec 2017 about this security conference

• "PacSec conference" is an international security conference hosted by dragostech.com inc. based in Canada, the organizer of well known CanSecWest conference and Pwn2Own contest.

• "PacSec conference" selected Tokyo as designated host location, thus good opportunity for sponsors who consider Japanese security market entry.

• "PacSec conference" is provided for world class information security specialists to present and discuss about the latest research findings, and aimed to be a place to provide progressive security technology education for growing security human resource needs in Japan and abroad.

• "PacSec conference" gathers selected cutting edge research on information security and presents topics on the latest security trends, analysis of vulnerabilities, and practical defense measures.

• The event aims to be a place for exchanging information and discussion on new and emerging threats, defenses and countermeasures in information security, by and for security specialists from abroad and from Japan.

Ver.8-15-2017

18

PacSec 2017 about this security conference

• "PacSec security conference" has been regularly held in Japan since 2003 as one of the series of "SecWest" brand security conferences hosted by dragostech.com inc. based in Edmonton, Canada.

• PacSec in Tokyo is regarded by SecWest as being one of important international hub in information security field, as well as other SecWest conferences such as "CanSecWest" in Vancouver, "EU-SecWest" in London, UK or Amsterdam, Netherlands, and "BA-Con" in Buenos Aires, Argentine.

Ver.8-15-2017

19

PacSec 2017 about Pwn2Own

• "Pwn2Own" is a vulnerability finding contest began in 2007 at CanSecWest conference in coordination with HP's Zero Day Initiative (ZDI), then grown bigger, and held first time in Europe at EUSecWest 2012, and in Japan at PacSec 2013.

• The contests since 2012 outside of CanSecWest are aimed as "Mobile Pwn2Own" specialized to mobile devices. HP, Google, and BlackBerry provided prize money which total sum was over US$425,000 for 2014.

• Pwn2Own attracts top level vulnerability bounty hunters from around the world, and such outcome also attracts major international technology media, which gives good opportunity for sponsors to gain visibility.

• Pwn2Own during PacSec 2016 is also in planning.

Ver.8-15-2017

20

PacSec 2017 about the host: dragostech.com inc.

dragostech.com inc. based in Edmonton and Vancouver, Canada, is a company specialized in information security consulting and education. The company has been hosting an international security conference series with "SecWest" brand. "CanSecWest" held in Vancouver, Canada started in 2000, "PacSec" held in Tokyo, Japan started in 2003, "EU-SecWest" held in London, UK or Amsterdam, Netherlands started in 2005, and "BA-Con" held in Buenos Aires, Argentine started 2008.

dragostech.com inc. is established by Dragos Ruiu (CEO) in 1997. The company has been offering wide variety of services such as implementation support of mission critical systems, inspection of system design and network security testings, served various projects from small scale as designing e-commerce systems to large scale as security audit of transaction system at major telecom companies such as Telus, as well as consulting and training for the Ministry of Defense in UK, the US Navy, and other US government agencies. This keeps the company always positioned at the front line of information security.

dragostech.com inc. 10966 84th Avenue, Edmonton, Alberta T6G0V4, Canada pacsec.info@gmail.com , Phone: +1-778-882-8441, Fax: +1-604-873-2502

Ver.8-15-2017

21

PacSec 2017 event characteristics

• PacSec is a security conference with highly technical educational content, thus its characteristics is different from ordinary IT products exhibitions. PacSec attendees mostly already have specialized knowledge about information security and are aiming to learn latest topics.

• Attendees to PacSec conference are mostly consist of information security related specialists, management of technical divisions, IT engineers and IT integration consulting and sales personnels. Japanese government agencies and defense agency staff also attend the conference as well.

• International and Japanese mixed attendees: More than half of attendees come to PacSec are American, European, and other Asia Pacific nationals.

• Number of attendees: 60 for the 1st year in 2003, 80 for 2004, 100 for 2005, 110 for 2006, 120 for 2007, however, 90 for 2008 and 2009, 70 for 2010, 2011 and 2012 reflecting the situation of global financial crisis and economic downturn in Japan, but it's back over 100 for 2013 ~ 2016.

• PacSec 2017 conference sets the aim toward better turn out than low key attendee numbers between 2008~2012, hopefully closer to 150, aims to take a leverage from increasing interests on cyber security in Japan.

Ver.8-15-2017

22

PacSec 2017 position in security conference market

Marketing SalesProduct PR

ManagementGovernance

IT Operation System Admin

System DevIoT Hardware

Forensic Code Analysis

Technicality Edge(High)

Technicality(Low)

Content Variation

RSA Conference Asia

SANS Japan

PacSec

Ver.8-15-2017

Black Hat, CodeBlue

23

PacSec conference example of talk topics Ver.8-15-2017

Last year's agenda (this year's selected speakers to be announced after summer)

Day1

Day2

09:30 - 10:00 Registration

10:00 - 10:00 Introduction

10:00 - 11:00 Akila Srinivasan "The inner workings of the Microsoft Bounty Program"

11:00 - 12:00 Mickey Shkatov + Jesse Michael "Science Fiction Becomes Reality: Emerging Threats in our Connected World"

12:00 - 12:10 Break

12:10 - 13:10 Jonathan Andersson "Attacking DSMx Spread Spectrum Frequency Hopping Drone Remote Control with SDR"

13:10 - 14:10 Lunch (let’s go outside!)

14:10 - 15:10 Anthony Kasza "Smashing the Jars"

15:10 - 16:10 Kyoung-Ju Kwak "New wave of Cyber terror in the Korea Financial Sector"

16:10 - 16:20 Coffee Break

16:20 - 17:20 Olga Kochetova + Alexey Osipov "ATM. How to make the fraud."

17:20 - 18:20 Executive Press Briefing (for Press)

18:30 - 20:30 Reception Dinner at "Smoke bar and grill" Gyre 4F in Omotesando

08:50 - 09:00 Registration

09:00 - 09:00 Introduction

09:00 - 10:00 Angel Villegas "How FIRST will save you time reverse engineering"

10:00 - 11:00 Mathew Solnik "Windows Kernel Graphics Driver Attack Surface"

11:00 - 12:00 Break

12:00 - 12:10 Tyler Bohan "In the Zone: OSX Heap Exploitation"

12:10 - 13:10 Moony Li "Active fuzzing as complementary for passive fuzzing"

13:10 - 14:10 Lunch (let’s go outside!)

14:10 - 15:10 Muneaki Nishimura "Finding Vulnerabilities in Firefox for iOS"

15:10 - 16:10 Wenyuan Xu + MinRui Yan "Can You Trust Autonomous Vehicles: Contactless Attacks against Sensors of Self-Driving Vehicles"

16:10 - 16:20 Coffee Break

16:20 - 17:20 Mateusz Jurczyk "Windows Metafiles: an analysis of the EMF attack surface and recent vulnerabilities."

17:20 - 17:30 Closing Remarks, Pwn2Own Result24

PacSec conference sponsors in previous years

• Microsoft

• Google Chrome

• Trend Micro

• HP

• Vupen

• BlackBerry

• Facebook

• Beyond Security

• Rakuten Inc.

• Hitachi Cable

• Verisign

• Cyber Agent Inc.

• GREE Inc.

• KPMG FAS

• SCSK

• Cybozu

• Aruba Networks

• MCIB Partners

• Core Security Technologies

• OpenBSD Support Japan Inc.

• Security Objectives

• Mail Channels

• Web Hat Communications

• Japan Intelligence

• Marubeni Solutions

• Splunk

• NPO Japan Network Security Association

• Internet Association Japan

• Web Applicaton Security Forum

• Japan Internet Providers Association

• OWASP Japan

• CodeBlue

• (ISC)2 Japan

• ISSA Tokyo Branch

• Japan Open Source Promotion Agency

• Yokosuka Telecom Research Park

• Ministry of Internal Affairs & Communication in Japan

Ver.8-15-2017

25

PacSec 2017 sponsor merits of participation (1)

✴For the companies & organizations in security business: ✴ Opportunity for who seeks Japanese security market entry✴ To improve international visibility as a security business ✴ To improve visibility in the market as active & progressive security business✴ Education for IT security technical staff on the latest technology trends ✴ To recruit IT security technical staff✴ To aid building strategy for new products & services with the latest trends ✴ To aid building strategy for sales & business developments✴ Opportunity for business development networking ✴ Direct communication with the users of security products & services✴ To get feedbacks from field engineers for security products & services

Ver.8-15-2017

26

PacSec 2017 sponsor merits of participation (2)

✴For the companies & organizations use Internet as business backbone: ✴ To improve your international visibility on the media and in the market as serious & progressive in deploying information security✴ To present your organization's Corporate Social Responsibility for "building safer networked society" as a participant of the event✴ Education for IT security technical staff on the latest technology trends ✴ To recruit IT security technical staff ✴ Opportunity for business development networking

Ver.8-15-2017

27

PacSec 2017 event details (1)

✴Place: Aoyama St. Grace Cathedral, Tokyo, Japan (Subway Omotesando Stn. Exit A1)✴Event Composition: Conference: Single track 2 full days, 10~12 speaker slots Reception Dinner socializing party: on the night of first day Training: 1 day (under planning)✴Dates: Conference: November 1 & 2 Reception Dinner: night of Day1 Training: (under planning)✴Host: dragostech.com inc. 10966 84th Avenue, Edmonton, Alberta T6G0V4, Canada　✴Supporting Organizations (tentative list):

Japan Network Security Association, WebAppSecurity Forum, Codeblue, AVTokyo, Internet Association Japan, Japan Internet Provider Association, OWASP Japan

✴Attendee Estimates: 200 (aimed number, includes Japan & foreign attendees)✴Who to attend:

Security Researchers, CISO, CTO, IT Managers, Network Admins, Software Engineers & Developers, System Integrators, IT Consultants, Financial Institutions, Internet Providers,Telecom Providers, Internet Commerce Providers, Digital Device Manufacturers, Government Agency Staff, Municipal Government Staff

Ver.8-15-2017

subjects may change without notice 28

PacSec 2017 event details (2)

• Attendee Registration: starting from late July (status at https://pacsec.jp/register.html) All prices in Canadian Dollars (Registration through website with credit cards)

•Attendance Fee (Reception Dinner entry excluded): Conference Early 2Day Pass: Can$ 550 Conference Early 1Day Pass: Can$ 350

register by Sep 30Conference Regular 2Day Pass: Can$ 650 Conference Regular 1Day Pass: Can$ 400

register by Oct 26Conference Onsite 2Day Pass: Can$ 750 Conference Onsite 1Day Pass: Can$ 450

register after Oct 26~• Reception Dinner party (optional) Can$ 85

Ver.8-15-2017

subjects may change without notice 29

PacSec 2017 Sponsorship Details

• PacSec Conference offers variety of Sponsorship selection from 6 classes which starts from reasonable Supporter class with Can$5,000, then Bronze with Can$7,500, Silver with Can$10,000, Gold with Can$14,000, and Platinum with Can$19,000. Drink Sponsor class for reception is added this year with Can$3,500. Please see comparison chart for details of offerings.

• Platinum, Gold, Silver, and Bronze sponsorship classes will be offered display table(s), option for prize draw for attendees, as well as option of opportunity to participate "Executive Press Briefing" for representing your company with a short introduction in front of press delegates.

• Every sponsorship class come with conference pass and reception entry registrations for staffers included in the cost of sponsorship. Number of passes offered are regarding to class status. Please see comparison chart.

• Platinum sponsor will be offered an opportunity to make a short speech to introduce Keynote Speakers as option, and 14 conference passes for staffers.

• Gold sponsor will be offered 10 conference passes for staffers.

• Silver sponsor will be offered 7 conference passes for staffers.

• Bronze sponsor will be offered 5 conference passes for staffers.

• Supporter sponsor will be offered 3 conference passes for staffers.

• Drink sponsor will be offered 1 conference pass for staffers.

Ver.8-15-2017

subjects may change without notice 30

PacSec 2017 Sponsorship Details Comparison Chart

Sponsorship Classes Drink Supporter Bronze Silver Gold Platinum

Investment (Canadian$) 3,500 5,000 7,500 10,000 14,000 19,000

Display Table Y Y Y Y

Option for literature kit distributed to attendees at registration Y Y Y

Option for prize draw for attendees Y Y Y Y

# of Conference Pass registrations offered for staffers 1 3 5 7 10 14

Sponsor Logo on badges, banners at the conference Y Y 4th Place 3rd Place 2nd Place 1st Place

Sponsor Logo/link on PacSec website main page (1 year) Y Y 4th Place 3rd Place 2nd Place 1st Place

Participation to Executive Press Briefing Y Y Y Y

Listing in press releases & conference marketing material Y Y Y Y Y Y

Option for Short Speech / Address Keynote Intro

Discount from full price for additional registrations 10% N/A 5% 10% 15% 20%

Ver.8-15-2017

subjects may change without notice 31

PacSec Conference sponsors of last year

http://pacsec.jp/ , Twitter: @PacSecjp , inquiry: pacsec.info@gmail.comsubjects may change without notice 32