IEEE UAE CYBER INTELLIGENCE SUMMIT

Evolution of Security Operations
MO CASHMAN

Abstract
The recent 2018 Ponemon Report found that establishing effective security operations is one of the key capabilities an organization needs to reduce the cost of a data breach. However as the enterprise’s digital footprint continually expands to include IT, OT and Cloud environments and the average time to respond to an security incident is anywhere from 3 to 15 months, it’s an increasingly more challenging task. This talk will explore a sec ops platform reference architecture and best practices in security automation and threat intelligence, some of the key capabilities needed to reduce mean time to detect and respond.

Bio
Mo Cashman is one of McAfee’s passionate leaders in cyber security. As an Enterprise Security Architect and Principal Engineer at McAfee, Mo inspires our next generation security professionals and advises our largest global customers on how to make security an enabler for their business. Mo’s passion is to change the way we think about, measure and operate security systems. With that passion and over 20 years experience, Mo currently leads our solution architect team, and integrated security system design for Sec Ops, Threat Management, Data Protection and Cloud. In previous roles at McAfee, Mo was the Chief Security Officer for the Global Public Sector and just prior to joining McAfee, lead a large Computer Security Incident Response Team investigating sophisticated cyber threats for the US Defense Department in Europe.

A First Empirical Look on Cyber Security Threats Targeting CPS Systems: A Honeypot Approach
DR. SAMEERA ALMULLA

Abstract
Supervisory Control and Data Acquisition (SCADA) systems are quite prominent for use in industrial, utility, and facility-based processes. While such technology continues to evolve in the context of Cyber-Physical Systems (CPS), and new paradigms such as the Internet-of-Things (IoT) arise, the threat posture of such systems remains relatively obscure, especially from the operational cyber security perspective. Various obstacles hinder the cyber security analysis of such systems, including, the lack of (malicious) empirical data in addition to numerous logistic, privacy and reputation concerns. In this paper, we draw upon large-scale empirical data that was uniquely captured and analyzed from a recently deployed, Internet-scale CPS-specific honeynet. The aim is to shed the light on misdemeanours and malicious activities targeting such CPS honeypots for threat inference, characterization and attribution. Auxiliary, this aims at (1) collecting rare empirical data targeting such systems for further forensic investigations and sharing with the research community and (2) contributing to generating CPS-tailored empirical attack models to aid in effective CPS resiliency. The results identify and attribute the top sources of such suspicious and unauthorized SCADA activities and highlight a number of targeted threats. Furthermore, we uncover undocumented abuse against CPS services operating in building automation systems as well as factory environments.

Bio
Dr. Sameera Almulla earned her B. Sc. degree in 2006, from University of Sharjah as a Computer Engineer. In 2006, she joined Dubai Health Authority as a System Administrator and later as a Deputy of Health Informatics Unit in Rashid Hospital. Also, she was awarded as the best employee for accomplishing several projects that serve both the administration and health providers sectors.
In 2009, Dr. Almulla earned her M. Sc. degree in Digital forensics from Khalifa University of Science and Technology with distinction. In 2017, she received her Ph. D. in Engineering for her research in “Digital forensics of Cloud Computing.” During her study, she joined Centre for Doctoral Training in Cyber Security at the Royal Holloway University of London.
Dr. Almulla research interests lie in the area of digital forensics, information security, lawful interception, IoT security, and cloud security. She published her scientific research findings in both national and international conferences. Dr. Almulla has participated in non-academic activities such as organizing workshops, being a member of program committees, and hackathons.
Currently, Dr. Almulla working as a research fellow at the University of Dubai. Her main responsibilities to conduct research in the field of network and cyber-physical systems security. Also, Dr. Almulla playing a vital role in the Institute of Electrical and Electronics Engineers (IEEE) as a vice chair for both the UAE Signal Processing Society and UAE Women in Engineering Society.

DNA binary data storage, meeting Digital Immune Ecosystem
DR. ROCKY TERMANINI

Abstract
Thanks to an innovative technology for encoding data in DNA strands, two items of world heritage – songs recorded at the Montreux Jazz Festival and digitized by (École Polytechnique Fédérale de Lausanne), EPFL – have been safeguarded for eternity. This marks the first time that cultural artifacts have been saved in such a manner, ensuring they are preserved for thousands of years.
To help demonstrate the feasibility of this new method, EPFL provided recordings of two famous songs played at the Montreux Jazz Festival: “Tutu” by Miles Davis, and “Smoke on the Water” by Deep Purple. The recording of the two songs encoded the recordings, transformed them into DNA strands and then sequenced and decoded them and played them again – without any reduction in quality.
DNA will be able to store “encrypted” medical records, videos, movies, and historic meetings, for thousands of years, is a revolutionary breakthrough that can completely change our relationship with data, memory and time.

Bio
Dr. Rocky Termanini, PhD, CISSP, EE, EO of MERIT Cyber Security Consulting, Dr. Termanini brings 47 years of Operation Research, AI nanotechnology experience to his clients. He is an international technologist, futurist, researcher, professional engineer, member of IEEE, and academician.  Dr. Termanini is a Global Speaker in Cyber Security domain.  Speaking and drawing on extensive expertise in cybercrime in training assignment in the US and the Middle East. He is senior advisor to Federal Law Enforcement on cyber security. Dr Termanini is a senior advisor in Strategic Planning to secure the Critical Infrastructures in Smart Cities. Dr. Termanini authored two books on how to protect Smart Cities from cyber-attacks using AI and Nano Smart Grids. Dr. Termanini is the system architect and designer of “Cognitive Early-Warning Predictive System & The Smart Vaccine” which replicates the human immune system and creates the digital immune Ecosystem to protect the critical infrastructures against future cyber wars. I am also writing a book on how to store digital Data into DNA coding. This technology will be an integral part of the Digital Immune Ecosystem.  He taught at several universities in the USA and the Middle East.

Adversarial Attacks on Autonomous cars: The missed gap
DR. HODA ALKHZAIMI

Abstract
One of the most critical application to the current evolution of smart city and intelligent transportation systems is the rise of motivation to develop autonomous vehicles. This automation has been viewed as a futuristic projection that is not ready for immediate applications. However, car manufacturers and technology providers are taking strides to make this a deployable reality by 2020. This talk will focus on exploring the potential cyber vulnerabilities and attacks specific to automated vehicles. This analysis explores the adversarial models that can be constructed to induce a potential risk of compromising the system.

Bio
Hoda A.Alkhzaimi is currently a research assistant professor in New York University and the Director of Center of Cyber Security in New York University AD. She served in different posts for research and development in Cyber Security and Cryptology for the past years. She headed the Department of Research and Development for Cyber Security and Cryptology in different national initiatives in the United Arab Emirates along with her associations to different security initiatives nationally and internationally.
Alkhzaimi has a specific expertise in cryptology; cryptanalysis, constructing and validating security hardware and software components, constructing trusted security architectures for different environments in different products for the respective industries. Hoda Alkhzaimi obtained her PhD in Cryptanalysis from Denmark Technical University. Her current research interests include Space, Aerospace, and UAV security, constructing and analyzing cryptographic primitives, validating and investigating links between different cryptanalytic approaches and utilizing cryptographic primitives in different cybersecurity architectures as in Internet of Things and big data analysis among others.

Day C
VICTOR IVANOVSKY

Abstract
Every single day we face the Day C, where “C” stands for the cyber crime. Our daily routine, our sacred thoughts or health and wealth of our families are in the scope of anonymous cyber criminals. And you need three vital components to build an ultimate cyber defense.
The first one, the technology is the cornerstone of every cyber fortress. Data analytics, artificial intelligence, detection of vulnerabilities, cyber forensics – it’s an “armor”, that any cyber special forces team need nowadays. People make the second element. A human can be both the weakest point of defense and a Spartan, who will not give an enemy any chance to win. Knowledge. It’s impossible to start a way to Cyber Secure Future without it. And we all are here to get one step forward to the moment, when letter «C» in Day C will stand not for the cyber crime, but for the Cyber Safety and Cyber Education.

Bio
Victor Ivanovsky is an experienced cyber security professional and is responsible for Cloud Security Business of Rostelecom-Solar cyber security company. His expertise in practical security and product management gives an ability to deliver the right solutions to solve companies’ both actual and upcoming cyber security pains and issues. He has over 10 years’ experience in cyber security, a rich track of successful projects and a strong passion to help companies fight cyber criminals in a most effective way.

Cyber Analytics – Next Generation of monitoring
CLINTON FIRTH

Abstract
Cyber Analytics is a broad topic and for a while has been seen as a panacea solution to detecting cyber attacks. Cyber Analytics generally comprise of a big data lake to consume large amounts of data, with an artificial intelligence layer to optimize or remove the layer 1 and 2 analysts from a traditional SIEM powered SOC. In the presentation, we will explore the various architecture/solution options and proprietary and open source solutions that are leading the charge towards nirvana, the promise, and the reality of production operations.

Bio
—

Security needs to evolve
HAMAD MUSABEH

Abstract
The session will walk through security controls, and their implementation and operational aspects in different environments. What are the security shortcomings signs, and signs of evolution.

Bio
Hamad Musabeh is the director of information security in SDG, overseeing security design, compliance, and security operation center. His 19 years of experience involves working in industrial networks, datacenters, and telecom security.

Digital Transformation: Cure-all, Placebo or Poison Pill?
KALLE BJORN

Abstract
Each of the technologies used in a DX effort are designed to add value, without understanding and dealing with the security implications of those technologies, any one of those technologies can inadvertently become an open door to the hacker or cybercriminals
What value can Security Transformation add when we have a different technologies?
Providing Visibility, and protection across the entire digital attack surface with multiple technologies working together to be integrated, leading the automation response and action to be achieved.

Bio
Kalle Bjorn is the Director of Systems Engineering for Middle East with Fortinet, a global leader and innovator in Network Security. “He started his career in Helsinki, Finland with Stonesoft Corp. where he held several positions from 2000 to 2005 including Network Security Specialist in Finland and China, Presales Consultant in Switzerland and the Middle East region.
Bjorn has acquired significant international experience in networking security and has vast knowledge of technical requirements for security products for enterprise and TELCO customers”

A reality check on Blockchain
DR. KHALED SALAH

Abstract
Blockchain has been emerging as a strong, disruptive, and transformational technology, with great potential, benefits, and impact. Blockchain is now foreseen as a panacea for many challenging problems across many businesses, industries, and domains. Many businesses and governments had been moving aggressively in adopting blockchain, with $2.1 billion spent globally on blockchain during 2018. Moreover, LinkedIn is reporting a 3x rise in the number of blockchain job offers. According to Gartner, blockchain will have another 5 to 10 years to reach a state of maturity and become mainstream. In this talk, we take a reality check on blockchain. We will highlight some of today’s security challenges, risks, and open issues for the existing blockchain platforms including Ethereum smart contracts.

Bio
Prof. Khaled Salah is a full professor at the Department of Electrical and Computer Engineering, Khalifa University, UAE. He received the B.S. degree in Computer Engineering with a minor in Computer Science from Iowa State University, USA, in 1990, the M.S. degree in Computer Systems Engineering from Illinois Institute of Technology, USA, in 1994, and the Ph.D. degree in Computer Science from the same institution in 2000. He joined Khalifa University in August 2010, and is teaching graduate and undergraduate courses in the areas of cloud computing, computer and network security, computer networks, operating systems, and performance modeling and analysis. Khaled has over 185 publications and 3 US patents, has been giving a number of international keynote speeches, invited talks, tutorials, and research seminars on the subjects of Blockchain, IoT, Fog and Cloud Computing, and Cyber security. Khaled was the recipient of Khalifa University Outstanding Research Award 2014/2015, KFUPM University Excellence in Research Award of 2008/09, and KFUPM Best Research Project Award of 2009/10, and also the recipient of the departmental awards for Distinguished Research and Teaching in prior years. Khaled is the chair of the Track Chair of IEEE Globecom 2018 on Cloud Computing.

Recent Trends in Digital Forensics and Incident Response
JENNIFER LYNN

Abstract
Rapid evolution of technology and the complexity of data collection provides constant challenges to digital forensic examiners and incident responders. Although security procedures generally stay the same, the basics are frequently ignored in order to keep up with operation tempos and to justify new solutions employed. This session will explore recent trends in DFIR and current topics and discuss case studies from the region and beyond.

Bio
Jennifer Lynn is a Director in Kroll’s Cyber Security and Investigations practice, based in the Dubai office. She has nearly 20 years of experience leading technical investigations within law enforcement, military, banking, intelligence, and BIG4 organizations. Jennifer has deep technical knowledge and extensive experience in digital forensics collection and analysis as well as being a skilled instructor. She has served in multiple leadership roles in professional organizations and gives back to the community as a mentor to rising cybersecurity professionals.

Overcoming cyber security challenges at mega-events – Expo 2020 Dubai
EMAN ALAWADHI

Abstract
As large-scale events become increasingly digitised, the question of cyber security has never been more important. With threats ranging from ticket fraud and data leaks to cyber attacks on both digital and physical infrastructure, event organisers are having to think proactively to stay ahead of the curve. In this session, Eman Al Awadhi, Director of Cyber Security and Resilience at Expo 2020 Dubai, will outline how she and her team are working to ensure effective cyber security at the next World Expo, while anticipating challenges that may arise on the journey to 2020 and beyond.

Bio
As Director of Cyber Security and Resilience at Expo 2020 Dubai, Eman Al Awadhi is responsible for defining and implementing the most advanced cyber security strategy ever seen at a World Expo. In today’s digital era, Eman has the significant task of ensuring the security of Expo 2020 technology infrastructure and data, as well as the privacy of visitor, participant and volunteer data.
Eman has 10 years of professional experience, beginning as a Network Security Engineer in the Telecommunication Regulatory Authority’s UAE Computer Emergency Response Team (aeCERT).
After being awarded the Prime Minister Medal by the Sheikh Khalifa Government Excellence Program, Eman was promoted to aeCERT Team Leader. She went on to become Manager of Security Compliance for UAE telecom company du, before joining Expo 2020 Dubai in 2016.
Eman is a Member of the National Advisory Council for the College of Technological Innovation at Zayed University, and is a graduate of the Sheikh Mohammed bin Rashid Program for Leadership Development. She holds a Bachelor of Science in Computer Engineering from the American University of Sharjah, and a Master of Science in Information Security from the Khalifa University of Science, Technology and Research.

Next Generation Cyber Innovation Powering Business Modernization
MARK FERNANDES

Abstract
How does cyber relate to Industry Modernization, Digital and mapping to what a Cyber organization can do? What complexities are introduced with the use of exponential technologies and how do we get ahead of it? What are the global mega-trends driving cyber innovation? This discussion covers key global mega trends (geo-political, trade, environment) that is driving Cyber Innovation and the need to tie cyber to National prosperity, cyber defense, protection of national interests etc.

Bio
Mark Fernandes is the Global Leader for Cyber Innovation and Strategy at Deloitte. Mr. Fernandes has over 29 years of experience in Cyber Security with over 22 years in running some of the most sophisticated Security Operations Centers globally. His team helps organizations combat advanced adversaries with a focus around sustainability, modernization, and business alignment.
Mr. Fernandes also specializes in the deployment of industry aligned Next Generation Security Operations, with 20 years in helping Global Fortune 500 organizations plan, design, implement and operate Security Operations Centers. He led the development of the first major Civil Defense Security Operations Center for the US Government in 1999.
Mr. Fernandes’ team leads the Deloitte Strategy Center for Advanced Cyber Solutions in Threat Management, Kill Chain Attribution, Outcome Based Analytics, Threat Actor Attribution, Resilient Threat Defenses and Hunting. His department, The Global Center for Cyber Innovation, works with some of the most sophisticated clients to develop pragmatic and progressive cyber solutions to provide Advanced Cyber Solutions that are designed to reduce exposure time, increase depth of capability, better situational awareness, and consistent Advanced Threat Analysis (known as Deloitte Capsule Hunting).