Are We Too Early for the Party?: The Perils of Early Cyber Engineering
Presented by Lillian Baker, Product Security Engineer & Steve Bichler, Senior Cybersecurity Test Engineer

The authors had the rare opportunity bringing into the building of a cybersecurity solution at the very beginning of a program. This is a rundown of their experiences, and both the difficulties and positive aspects of building security in from the beginning of a program. The speakers will outline the issues such as: 1) How to build security requirements when there are no system requirements; 2) Threat Modeling a system that does not exist; 3) Project Management Issues: evolving timelines, lack of processes, and changing organizational dynamics; 4) dealing with partners/suppliers; 5) Planning for items in the architecture that won’t be ready for years. Additionally, they will talk through the benefits: 1) Adding requirements early, 2) Having a marker in place, 3) Compliance defined early. Finally, they will provide their recommendations on how best to handle being brought in early

Gone Vishing: A DEFCON31 Social Engineering Story
Presented by Jeff Tomkiewicz, Penetration Tester

Beyond PayPal and Venmo - What is Money in the Digital Era?
Presented by Adrian Cercenia

Geolocation Tracking Using Open-Source Mapping Databases
Presented by Anna Quinn, Penetration Tester and Security researcher

Through use of online Open-Source Databases, it has become alarmingly easy to discover the precise geographical location of a photo. After being inspired by others in the field, I have performed research on using OpenStreetMaps to associate a photo with its proper location. In this talk I will walk attendees through usage of Overpass-Turbo and guide them through the methodology required to discover identifying features in a photo which might disclose its location. I have multiple examples listed in this talk as well as a live demo towards the end, allowing for exposure to differing methods and techniques. These techniques could help in investigations across multiple disciplines within cybersecurity, whether it is for determining whether an atypical travel alert might be benign, finding information on a phishing target, or even aiding in missing persons investigations.

Teaching Information Warfare: Strategies in Academic and Government Institutions
Presented by Dr. Gregory Carpenter, CSO at KnowledgeBridge Internaional

This presentation provides a concise overview of the teaching strategies employed in academic and government institutions to educate individuals on information warfare. Academic institutions integrate these disciplines into their curricula, while government institutions, and academies, also emphasize specialized training programs. The multidisciplinary nature of information warfare actively encompasses cybersecurity, psychological operations, Operations Security, electronic warfare, deception techniques, and associated intelligence support. Curriculum integration involves adapting existing programs to address emerging information warfare threats. Specialized training initiatives, such as workshops and simulations, enhance preparedness and response capabilities in government institutions. This presentation emphasizes the role of academic and government institutions in equipping individuals with the knowledge and skills required to navigate the complexities of information warfare. To highlight the foundational differences in approach, we investigate similarities and differences in policy and lexicons unique to distinct cultures. By adopting interdisciplinary approaches, adapting curricula, providing specialized training, and considering cultural nuances, these institutions contribute to developing competent professionals capable of safeguarding national security in the digital age.