大會專題主講人
Maarten Van Horenbeeck

Maarten Van Horenbeeck is Director of Security at Fastly, a Content Distribution Network that speeds up web properties around the world. He is also a Board member, and former Chairman, of the Forum of Incident Response and Security Teams (FIRST), the largest association of security teams, counting 300 members in over 70 countries. Prior to his work at Fastly, Maarten managed the Threat Intelligence team at Amazon, and helped coordinate security issues on the security teams at Google and Microsoft. Maarten has a master's degree in Information Security from Edith Cowan University, and is currently pursuing a passion in public policy through a Masters degree in International Relations. When not working, he enjoys backpacking, sailing and collecting first edition travel literature. You can follow him on Twitter @maartenvhb.

特別邀請
George Hotz (Geohot)

George previously worked for SpaceX, Google, and Facebook. He was the first person to unlock the iPhone, and discovered a way to access to the PS3 hypervisor by shorting a memory chip to ground. Recently, he won Google's pwnium competition by achieving persistent root on the Chromebook and has been part of the winning team at DEFCON for two years running. In his spare time, George raps and plays capture the flag competitions under the name tomcr00se.

Anonymous

特別邀請

John Bambenek

John Bambenek is a Senior Threat Analyst on the Threat Research Team for Fidelis Cybersecurity. He is also an adjunct faculty member in the Department of Computer Science at the University of Illinois at Urbana-Champaign where he teaches courses and runs a research lab focused on computer security for the last 3 years.

He has over 16 years experience in information security focusing on threat research, cybercriminal investigations, and tracking of malicious attacks. He has conducted investigations and research for major incidents all over the world. He graduated from the University of Illinois with a Bachelor’s degree in theoretical astrophysics with a specialization in extragalactic astronomy.

He began his career working at Ernst & Young consulting with major US-based Fortune 50 firms on cyber security issues. He later spent 6 years as a researcher at the University of Illinois conducting research on emerging threats and botnets. He owned his own firm, Bambenek Consulting, which specialized in threat research, forensics and cybercriminal investigations.

He has published two books, several information security certification courses and many articles highlighting his research in the field. He has spoken at conferences around the world on cyber security issues and on cybercrime and once appeared on the Daily Show with Jon Stewart.

He currently specialized in tracking infrastructure of criminal networks and published several threat feeds tracking over 2 dozen threats in near time monitoring over 750,000 different domains. He runs over a half-dozen private security working groups dedicated to investigating emerging and significant criminal threats attacks institutions around the world. He was part of the successful Operation Tovar that took down Gameover Zeus and Cryptolocker leading to the indictment of the individual behind that threat. The working group consisted in over 14 different global law enforcement agencies and 150 private sector partners.

趙雙

Shuang Zhao(DFlower) is a member of Insight-Labs Team. He has many years of experiences in network security, including vulnerability mining, malware detection, mobile security, etc. He has developed two malware analysis sandboxes for Windows and Android. He is one of the authors of the book “0day Security:The Techniques of Software Vulnerability Analysis(2nd Edition)”. He gave speeches on OWASP China 2010 and XCon 2011.

羅夏樸(Xiapu Luo)

Xiapu Luo is a research assistant professor in the Department of Computing, the Hong Kong Polytechnic University. He has been working on information security for more than 10 years and published a number of papers in top security conferences. His current research interests include Android security and privacy, Network and System Security, Internet Measurement, and Mobile Networks.

宋凱(exp-sky)

就職於 Tencent Xuanwu 實驗室，擁有5年的安全研究經驗。

主要關注流覽器安全、漏洞挖掘相關技術的研究，獨自發現多個流覽器漏洞並報告廠商。

先進的 Exploit 技術的研究。APT 相關的攻擊與防禦技術的研究。

演講經歷：HIT0CON 2014 講師、中國互聯網安全大會 2014 講師、 XKungFoo 2013 演講人。

Michael Smith

Michael Smith serves as Akamai’s APJ Chief Technology Officer for Security and is responsible for supporting sales, professional services, operations, product management, and marketing across all of the Akamai security solutions portfolio.

Previously, Mr. Smith was the Founder and Director of Akamai’s Customer Security Incident Response Team, responsible for leading a team of web security incident responders and researchers that study the tactics, techniques, and procedures of web attackers and apply that knowledge to help protect Akamai customers during events such as site defacements, data breaches, and distributed denial of service.

Prior to CSIRT, Mr. Smith served as Akamai's Security Evangelist and as the customer-facing ambassador for the Information Security Team, helping customers to understand both the internal security program and the unique security features and capabilities of the Akamai product portfolio and cloud-based solutions.

Alfred Lee, VP of Product Management

Alfred has been at Palo Alto Networks for over 8 years and brings a strong track record in network security product management. Alfred is currently responsible for the entire hardware product line, threat prevention, and content filtering. Before Palo Alto Networks, Alfred was a Senior Global Product Manager at Trend Micro, where he was responsible for the Network VirusWall product line and all hardware products. Prior to Trend Micro, he was one of the first Product Managers at Fortinet.

Ron Williams

Sr. Technical Staff Member

IBM Master Inventor

Chief Architect, Infrastructure Security, IBM Security

As a subject matter expert in application and network security, Ron has designed and developed application & network security products and global web security architecture for the Global 100. Ron holds and has patents pending that address authentication, authorization, audit, web application security, and network intrusion detection and protection.

With over 25 years experience in information technology, software development, and security architecture, Ron has focused on identifying optimal solutions to system problems, both human and digital. He has a track record of providing innovative products and solutions in healthcare, finance, and retail market segments by focusing on the achievement of defined objectives in the simplest way possible.

Achievements :

- Successful development and market launch of security focused software products.

- Solution and deployment architectures for global enterprises in Finance, Healthcare, Retail, and the Military.

- Fast assessment of organization effectiveness against defined organizational and/or project objectives.

Ron is currently the Chief Architect, Infrastructure Security, IBM Security, and Principal Architect of the X-Force Exchange, A Network Threat Intelligence Portal and Sharing Platform. Ron leads a global engineering team to deliver customer focused value through innovative implementation and agile development practice.

Chenta Lee

Chenta is a Lead security engineer with IBM Security Systems. Chenta has designed and developed the leading network security solution in IBM. His expertise includes emerging cloud technologies, with 7 years of experience in cloud security products, as well as software-defined networking, virtualization and advanced threat protection. He also has several patents filed in those areas. Chenta is now the working on IBM Security Network Protection and he currently focuses on the network security in the cloud.

Sean Park

He is a senior malware scientist at Trend Micro, researching various one-to-many detection methodologies such as autonomous malware campaign analysis system using machine learning. He previously worked for Kaspersky, FireEye, Symantec, and Sophos. He also created a critical security system for banking malware at one of the top Australian banks while battling with many core banking threats.

PeiKan Tsung

台灣威瑞特系統科技研究長，曾經服務公職於刑事警察局科技犯罪防制中心、警政署資訊室及中央研究院計算中心等。專長為惡意程式分析、軟體逆向工程、漏洞分析、程式開發與資安鑑識調查。

UNARY Yeh

學生時期曾對研究惡意程式很有興趣，畢業後先選擇了系統廠認識韌體開發，最後又回到原先的興趣方面繼續研究。目前在台灣威瑞特系統修行，負責惡意程式分析和程式開發，喜歡以 C++ 與 Python 來解決問題。

Shin Adachi

Shin Adachi has been working on information system security, design, and administration globally including in the United States, Japan, and Europe. He currently chairs Education Committee and is a program Committee Member of FIRST, or Forum of Incident Response and Security Teams, a global consortium for computer security incident responders. He represents NTT-CERT in the Americas. He is a member of Threat Landscape Stakeholders Group and CERT Expert Group for ENISA, or European Union Agency for Network and Information Security. He has contributed to globally recognized initiatives including NIST SP500-291, NIST SP 500-293, Asia PKI Innovation Award as the chief reviewer, Liberty Alliance Project, Kantara Initiative, ITU-T (Security and IdM for Next Generation Network), and APEC TEL eSecurity. He is a Certified Information Systems Security Professional (CISSP), a Certified Information Security Manager (CISM), a Certified Information Systems Auditor (CISA), and a Certified Project Management Professional (PMP).

Philippe Lin

Philippe Lin is a staff engineer in Trend Micro. He works in data analysis, machine learning, fast prototyping and threat research. He was a BIOS engineer in Open Computing Project. Active in open source communities, he is a hobbyist of Raspberry Pi / Arduino projects and the author of Moedict-Amis, an open source dictionary of an Austronesian language.

Philippe Lin 服務於趨勢科技，工作範圍包括資料分析、機器學習、未來威脅研究等，也參加過 Open Computing Project 的 BIOS 開發。業餘喜歡玩電路、養貓。目前是阿美語萌典的維護人員。

Stephen Hilt

Stephen Hilt has been in Information Security and Industrial Control Systems (ICS) Security for around 10 years. With a Bachelor’s Degree from Southern Illinois University, he started working for a large power utility in the South East of the United States. There Stephen gained an extensive background in Security Network Engineering, Incident Response, Forensics, Assessments and Penetration Testing. That is where Stephen started focusing on ICS Assessments, then moved to working as an ICS Security Consultant and Researcher for one of the most foremost ICS Security Consulting groups in the world. In 2014, Stephen was named as having one of the coolest hacks by dark reading for his PLCPwn, a weaponized PLC. As well, he has published numerous ICS Specific Nmap Scripts to Identify ICS protocols via native commands. Stephen now is at Trend Micro as a Sr. Threat Researcher, continuing ICS research, and diving into other areas of research. Over the past 10 years, Stephen has learned how to build, defend and attack ICS networks.

童御修

台灣大學電機所碩士班在學中，研究主題為密碼系統硬體實作的安全性分析。

JPChen

台大電信所博士畢業，對於設計無線通訊被動元件、微波與硬體量測分析有興趣。

張躍騫

Research assistant in the Department of Computing at the Hong Kong Polytechnic University. His research focuses on Android security including both the underlying system and apps. He has 6-year experiences of reverse-engineering and system security.

羅夏樸(Xiapu Luo)

Xiapu Luo is a research assistant professor in the Department of Computing, the Hong Kong Polytechnic University. He has been working on information security for more than 10 years and published a number of papers in top security conferences. His current research interests include Android security and privacy, Network and System Security, Internet Measurement, and Mobile Networks.

殷浩洋(Y.H Yang, seventyfour)

Currently a Master of Science in Department of Computing in the Hong Kong Polytechnic University. His research is mainly on Android application security.

AIDO & Manaka

Financial IT and IT Risk Management Expert, working at a Major Bank (10 years),

Research work at the institute of financial information systems (2 years),

Author of a Security Guideline, and APT Report,

IT development work at property and casualty insurance(6 years),

Freelance lector and writer since 2000,

AVTOKYO Speaker (2009, 2010, 2011, 2013.5),

HITCON Speaker (2012, 2013),

Author of "Introductionof Information Security";

textbook for colleges/universities (27,000 copies so far),

Regular writer for "Hacker Japan Magazine " (4 years),

Regular writer for Web Magazine "Scan NetSecurity"

沈祈恩

Chi En Shen (Ashley) is a security researcher at Team T5 inc. They monitor, analyze, and track cyber threats throughout the Asia Pacific region. Her major areas of research include malicious document, malware analysis and Advance Persistence Threat (APT). During her MSc, she design and implement a flexible framework for malicious open XML document detection against APT attacks. She is also a core member and speaker of HITCON GIRLS - the first security community for gilrs in Taiwan.

賴婕芳

Security Engineer, assist Organizations handling information security incidents . My daily job is analyzing malware and trying to find out who they are.Work in information security industry for 2 years, also a member in HITCON GIRLS (The Hacks in Taiwan Conference for GIRLS).

Jack Lin

Cyber Migrant

Anna Chung

Undercover Economist

Ikuo Takahashi

Lawyer in private practice and researcher of information security,Lecturer of Utsunomiya Univ. Faculty of Engineering,President of KK IT Research Art, Specialise in law of information security and e-commerse.

邱銘彰 (Birdman)

HITCON顧問，臺灣威瑞特技術長，超過15年的資安技術研究專家，從台灣HITCON到美國Black Hat，常在國內外重要駭客大會發表研究，擅長透過詼諧生動的演講，傳授資安知識。同時也是台灣資安界著名的創業家，從2005年開始兩次創業都幸運的被國外企業直接併購，並 於2011年創立了台灣第一家專門研發APT防禦產品的Xecure Lab，技術好到在2012年就不斷有國際大廠想買下，更於2014年被美國上市科技公司併購後，專注於分析駭客活動及開發自動化分析系統。

鄭文彬(MJ0011)

MJ0011是Windows內核、安全性漏洞領域有十年經驗的資深安全研究人員，曾在XCON/HITCON/PoC等安全會議上發表演講。在奇虎360公司負責核心安全技術部門和360Vulcan Team安全團隊。 360Vulcan Team是360內部進行高級漏洞攻擊與防禦研究的安全團隊，在今年CanSecWest上的Pwn2Own2015比賽上成功攻破IE挑戰項目。

邱鵬(pgboy)

pgboy是Windows內核和漏洞領域的資深安全研究人員，Qihoo 360Vulcan Team的成員。他在Pwn2Own2015比賽中負責沙箱繞過技術的研究

Antonio Bianchi

He is a PhD student at UCSB (University of California, Santa Barbara), working, under the supervision of professors Christopher Kruegel and Giovanni Vigna, in the Computer Security Group (seclab).

He earned a Bachelor and a Master degree in Computer Engineering at Politecnico di Milano, and a Master Degree in Computer Science at the University of Illinois at Chicago.

He worked on different projects about mobile security and he is also very interested in anything related to reverse engineering and low-level binary analysis.

He played many different CTF security competitions as a member of the Shellphish hacking group, qualifying multiple times for the DEFCON CTF and, recently, for the DARPA Cyber Grand Challenge.

Brandon Dixon

Brandon Dixon is the lead developer and co-founder of PassiveTotal. His primary research involves data analysis, tool development and devising strategies to counter threats earlier in their decision cycle. Throughout the years, Brandon has developed several public tools, most notably PassiveTotal, PDF X-Ray and HyperTotal. His research and development on various security topics has gained accolades from many major security vendors and peers in the industry.

Steve Ginty

Steve Ginty is co-founder of PassiveTotal, an analyst focused threat infrastructure analysis platform, and has over 9 years of experience in the IT Security Industry. Steve has spent the past 5 years researching targeted intrusions, most recently leading a team of researches implementing proactive methodologies to track malware and threat infrastructure associated with attack activity. Steve’s primary areas of research include threat infrastructure analysis and threat data visualization.

林鵬

CCIE （Security） CISSP，現任萬達電商安全主任工程師，曾任網信金融安全專家，當當網安全經理，6年以上安全/運維工作經驗，長期參與一線的攻防對抗。現主要關注於入侵防禦，大資料安全分析，行為建模，以及安全體系建設。擅長網路安全，日誌分析。烏雲峰會，WOT2015，SACC2013 演講嘉賓。