Cybersquad 2023

Last year OpenKAT was made available. Meanwhile it has been used in practice, expanded and new subprojects have been added while preserving our feline elements. Also the focus isn’t just technical compliance alone, but also compliance with standards based on technical facts and corresponding documents. In this talk Brenno touches on the technology and show how the approach of OpenKAT supports many aspects of your security (and compliance) need just by selecting sensible open source tools. Ultimately for security it is key how we deal with getting the PDCA-cycle effectively in use. Brenno will also talk about what the projects delivers for security, transparency, community-driven development, and access to experts. The presentation will end with the lessons learned and security observations and the way in which those have been put into source code.

In today’s rapidly evolving cyber landscape, where new vulnerabilities are exploited at an alarming rate, it is crucial to establish a culture of cyber resilience. With the constant influx of devices connecting to networks worldwide, the need to anticipate, respond to, adapt to, and recover from adverse events is more important than ever. Join Melissa Bischoping as she delves into the process of building a resilient technology ecosystem and fostering a business culture that prioritizes cyber resilience. Gain valuable insights into immediate steps that can enhance your organization’s cyber maturity and discover how to leverage multiple disciplines to develop a comprehensive strategy.

For the past decade, the Dutch National Cyber Security Centre (NCSC-NL) has served as the primary reporting point for vulnerabilities discovered within Dutch government infrastructure. The issuance of a seemingly modest reward when the report was legit, has impact and is fixed – a t-shirt with the known phrase, “I hacked the Dutch Government and all I got was this lousy t-shirt” – has sparked an average of 3,500 vulnerability reports annually. In this presentation, Sanne unravels the magic behind this famous black t-shirt and delves into the attempts of reporters in their pursuit of this esteemed collector’s item.

Effective network defense requires visibility into its real-time communication—whether that’s at home or in a massive corporate environment. In this talk, we will look at Zeek, a popular open source platform for network security monitoring that is today helping protect some of the largest, and most critical, networks in the world. Zeek is an extensible framework that creates comprehensive network visibility by turning raw packets into rich streams of actionable logs. We will examine what has made Zeek popular among incident responders in many SOCs. Install Zeek yourself from https://zeek.org!

Nation states have long since discovered the value of internet technology when applied to achieving political objectives. This ranges from stealing technology through hacking, to sabotaging electrical grids, to influencing people’s opinions through information operations. We can now safely make the statement: Digital Geopolitics is a real and very relevant field. Don will dive deeper into this subject and show you things that have a considerable impact on your daily life, but that you’ve probably never heard of before.