Pint of Science Germany e.V.
HOT-SHOT Schwabing/Brandstetter
Herzogstraße 29, 80803 München
TUESDAY 24th MAY 2016
DOORS OPEN 6PM, EVENT 6:30PM-10PM
Information Security
Dr. Morton Swimmer
Trend Micro
The Science of Malware
Most of the time, Malware is a threat to security and it needs to be eradicated as soon as possible and that is it. But Malware is scientifically fascinating in that it relates to many fundamental problems in Computer Science. In this talk, we’ll take a lighthearted whirlwind tour of the science of Malware from the mid 1980’s to now and examine how we approach these problems and what problems we think we’ll face in the future.
The talks will be in English, Q&A in English and German
IT Security and Critical Infrastructures
Modern life depends on Critical Infrastructures. What is Critical about Infrastructures? What are strategies, business models and technologies to protect Critical Infrastructures in a Smart City future scenario? The talk by Ulrike Lechner reviews the world of IT-Security of Critical Infrastructures with threats, threat actors, IT-security management and IT-Security Technology and two of the main current discussions on the „human factor of IT-Security“ and on „information sharing and big data for IT-Security”. IT-Security needs innovation and Ulrike Lechner will invite to discuss innovation strategies for IT-Security in a Smart City. She will explore the IT-Security game „IT-Security Matchplay “ of the research project VeSiKi.
Social Engineering - The easy way to break IT-Security (short talk and interactive game session)
Social engineering is the clever manipulation of the human basic tendency to trust other people. While technical security of most critical systems is high, the systems remain vulnerable to attacks from social engineers. Social engineering is a technique that: (i) does not require any (advanced) technical tools, (ii) can be used by anyone, (iii) is cheap.
We invented a card game HATCH: Hack And Trick Capricious Humans to raise awareness of social engineering threats, which people can play to understand how to recognise attacks and prevent them. In this evening for pint of science we will play the game with the audience after a short talk about the dangers of social engineering and how a game can help to improve the situation.
The game is based on a fictional company called ACME office. The players can attack employees of this company and learn how underlying principles of human behaviour can be exploited by social engineers. The game teaches about concrete attack patterns such as phishing, as well. Phishing refers to masquerading as a trustworthy entity and using this trust to acquire information or manipulating somebody to execute an action. The players can gain points for eliciting feasible attacks and the player who gathered the most points wins.