DefCamp 2023 Schedule

Worldwide recognized speakers will showcase the naked truth about sensitive topics like red & blue teaming, incident management, infrastructure (in)security, GDPR, cyber warfare, ransomware, malware, social engineering, artificial intelligence, offensive & defensive security measures and more!

Save the Date! Official event date: to be announced!

Subscribe to our newsletter to be the first who receives news about the upcoming edition and follow our Facebook, LinkedIn and Twitter pages to stay updated with latest announcements!

More than

55

speakers will be live on stage this year sharing their research & engaging into panels on different topics related to cyber security.

Track #1

Thursday, 23rd November

09:00 - 10:00

Registration

Track Moderator: Andra Zaharia
This track is powered by BIT SENTINEL.

10:00 - 10:15

Opening Speech

Julien Ducarroz / Chief Executive Officer Orange Romania

10:20 - 10:50

The JARM’ing Adventures of a Weaponized Security Tool

Chris Kubecka / Hacktress HypaSec

10:55 - 11:25

Hardware Backdooring an e-Scooter

Arun Mane / Founder and CEO Amynasec Labs

11:25 - 11:45

Coffee Break

11:45 - 12:15

Kittens falling from the skies (OpRomania)

Adrian Furtuna / Founder & CEO Pentest-Tools.com

12:20 - 12:50

Hacking a magnetic lock; successes and failures

Walter Belgers / CTO Security Officer Philips Research

12:55 - 13:25

Party Time: Building a Private Game Server by Reverse Engineering

Joey Geralnik / Software Security Consultant Hypr

13:30 - 14:30

Lunch break

14:30 - 15:00

Have you heard about DNS DR? How this can shift your security from responsive to proactive!

Jan Rynes / Solutions Architect Infoblox

15:05 - 15:35

Cloud-squatting: the never-ending misery of deleted and forgotten cloud assets

Abdullah Al-Sultani / Product Security Engineer TikTok

15:40 - 16:10

The Open Source Fortress: Finding Vulnerabilities in Your Codebase Using Open Source Tools

George-Andrei Iosif / Software Security Engineer Canonical

16:15 - 16:45

Supply Chain Shenanigans: Evil npm & Shady NuGet

Todor Todorov / Senior Software Engineer Payhawk

16:50 - 17:20

I Still See Your AppSec Contractual Sins

Sebastian Avarvarei / EMEA Security Manager Canon EMEA

17:25 - 17:55

Sherlock - an OpenSource configurable platform for applying LLMs to security use-cases

Octavian Purcaru / Security Engineer Adobe

Radu Chivereanu / Machine Learning Engineer Intern Adobe

18:00 - 18:30

Canceled

Track #1

Friday, 24th November

09:00 - 10:00

Registration

Track Moderator: Andra Zaharia
This track is powered by BIT SENTINEL.

10:00 - 10:30

Architectural challenges and solutions involved in creating a dynamic cyber range solution

Razvan Chitu / DevOps Engineer Keysight Technologies Romania

Bogdan Stefan / DevSecOps Software Architect Keysight Technologies Romania

10:35 - 11:05

Attacking Vehicle Fleet Management Systems

Yashin Mehaboobe / Security Consultant Xebia

11:10 - 11:40

Wheels of Wonder: Unveiling Car Hacking Poetry at DefCamp

Hrishikesh Somchatwar / Masters Student Eurecom, Sophia Antipolis

11:40 - 12:00

Coffee Break

12:00 - 12:30

Backdooring an entire country's 4 million modems with 6 bugs in a week

Ta-Lun Yen / Senior Vulnerability Researcher TXOne Networks

12:35 - 13:05

A deep-dive Into DLL Hijacking - Discovery, Automation and Impact

Matei Josephs / Senior Penetration Tester KPMG

13:10 - 13:40

Security on the Edge - Safeguarding Smart Homes

Alexandru Persunaru / Product Manager Bitdefender

Ionut Leonte / Lead Software Engineer Bitdefender

13:45 - 14:15

MITM on PSTN -- novel methods for intercepting phone calls

Kirils Solovjovs / Owner -

14:15 - 15:15

Lunch Break

15:15 - 15:45

Moving Target Defense

Simona David / Security Engineer Orange Services

15:50 - 16:20

The best of both worlds: privacy and security

Mihail-Iulian Plesa / Security Researcher Orange Services

16:25 - 16:55

Nothing To Hide: Privacy-Preserving Cryptographic Authentication In Practice

Abdullah Joseph / Senior Security Researcher Appsflyer

17:00 - 17:30

Attacking Developer Environment Through Drive-by Localhost Attacks

Joe Beeton / Senior Application Security Researcher Contrast Security

17:35 - 17:55

Award Ceremony

Track #2

Thursday, 23rd November

09:00 - 10:00

Registration

Track Moderator: Andreea Iacob
This track is powered by Booking Holdings.

10:00 - 10:15

Hunting / Scraping with Favicons

Mihai Vasilescu / Security Research Engineer Keysight Technologies Romania

Andrei Niculae / Student Faculty of Automatic Control and Computer Science from Politehnica University of Bucharest

10:15 - 10:45

Monitoring malware behavior through kernel syscall tracing

Mihai Vasilescu / Security Research Engineer Keysight Technologies Romania

Cristian Done / Security Researcher Keysight Technologies Romania

10:55 - 11:25

No Code Malware: Windows 11 At Your Service

Inbar Raz / VP of Research Zenity

11:25 - 11:45

Coffee Break

11:45 - 12:15

macOS Red Teaming in 2023 [0-day edition]

Wojciech Reguła / Principal Security Consultant SecuRing

12:20 - 12:50

Weaponized AI for cyber attacks

Muhammad Mudassar Yamin / Associate Professor Norwegian University of Science and Technology

12:55 - 13:25

Conceal, Don’t Feel, Don’t Let Them Know

Nir Chervoni / Senior Manager - Data Security Booking.com

13:30 - 14:30

Lunch break

14:30 - 15:00

AI Powered Security Operation Center – SOC. Myth or reality?

Vladimir Ghita / CEO Fort

15:05 - 15:35

Using RPA for a fast, reliable and repeatable Incident Response process

Andrei Cotaie / Technical Lead, Security Operations UiPath

Cristian Miron / Security Engineer UiPath

15:40 - 16:10

ChatNMI & Beyond: Pushing the 'Easy Button' in Home-based AI Deployment - A Comparative Review of Leading Software Solutions

Konrad Jedrzejczyk / Senior security engineer -

Marek Zmysłowski / Senior Security Engineer Azure DevOps

16:15 - 16:45

Unveiling Digital Secrets: Investigating Identity Documents through Digital Forensics

Radu Boncea / Head of Department for "Software Engineering and Complex Systems" The National Institute for Research & Development in Informatics

16:50 - 17:20

Building a Resilient Red Team Infrastructure

Andrei Grigoras / Senior Penetration Tester TwelveSec

17:25 - 17:55

What are BadUSB attacks and how can you implement them?

Cristian Pop / Cyber Security Engineer Garmin

18:00 - 18:30

Bringing Kids to CyberSec in a CoderDojo Setting

Radu Ticiu / Co-founder CoderDojo

Track #2

Friday, 24th November

09:00 - 10:00

Registration

Track Moderator: Andreea Iacob
This track is powered by Booking Holdings.

10:00 - 10:30

The NIS2 Directive: Europe's Response to Cyber Shenanigans

Tudor Damian / Cybersecurity & Cloud Advisor D3 Cyber

10:35 - 11:05

Rough seas & ships in storms – A retrospective of 2023 from an MSSP perspective

Ioan Constantin / Cyber Security Expert Orange

11:10 - 11:40

How to build a Successful Security Team

Eva Telecka / Executive Director IT Risk Management and Security MSD

Anca Coltescu / Associate Director for IT Security Operations MSD Romania

11:40 - 12:00

Coffee Break

12:00 - 12:30

Abusing GCPW for lateral movement from local to cloud

Radu Tudorica / Security Researcher Bitdefender

12:35 - 13:05

AWS & GCP services vulnerabilities

Carina Deaconu / Software Engineer Pentest-Tools.com

Ioana Stancioiu / Software Engineer Pentest-Tools.com

13:10 - 13:40

Cloudy with a Chance of Exposures: Dissecting Web Server Risks Across Top Cloud Providers

Nenad Zaric / CEO & Co-Founder Trickest

13:45 - 14:15

Graph-oriented approach for SSTI payload optimization: Usecase of jinja2

Remi Gascou / Senior Security Researcher Podalirius Labs

14:15 - 15:15

Lunch Break

15:15 - 15:45

Cybersecurity in the Quantum Era

Radu Ionicioiu / Senior Researcher in Quantum Technologies IFIN-HH

15:50 - 16:20

Verkle based Post-quantum digital signature with lattices

Maksim Iavich / President of SCSA, Professor Caucasus University

16:25 - 16:55

The C2 tool no one talks about: AWS SSM - Run Command

Eduard Agavriloae / Senior Consultant KPMG

17:00 - 17:30

5.0 Shades of Java Exploitation

Matei Badanoiu / Hacker Deloitte

17:35 - 17:55

Canceled

Hacking Village

Nov 10th - Nov 11th

Nov 23rd

DefCamp Capture the Flag Final A/D

10:00 - 19:00

Nov 23rd 10:00 - Nov 24th 14:00

Hacking Village Competitions

- Network forensics adventures, organised by Keysight
- Corporate Espionage CTF Camp, by Keysight
- Live Hacking Event, organised by Superbet
- Untangle the spectrum, organised by Electron
- Memory Leak, organised by Electron
- Bitstream breakout, organised by Electron
- CyberDojoTM CTF, organised by CyberDojoTM
- Null your Warranty Village, organised by Bit Sentinel
- Reverse Engineering Kindergarten, organised by Bit Sentinel
- Hack the eBank, organised by Hackout
- DevOps Ninja, organised by Bit Sentinel
- Lock Picking Village
- Target John, organised by Bit Sentinel

After 14:00 (Nov 24th), some of the activities will remain available for fun until the end of the event or even more. Please consult with the organisers.

Notes:

  • Presentation submitted via Call for Papers are marked with Presentation submitted via Call for Papers
  • Presentation submitted by the Conference Sponsors are marked with Presentation submitted by the Conference Sponsors

Schedule last-minute changes:

  • Nov 20: WeiMin Cheng canceled talk (Track #1, Day 2)
  • Nov 20: Architectural challenges and solutions involved in creating a dynamic cyber range solution is now on Track #1, Day 2 (10:00) instead of Track #2, Day 1

The schedule is work in progress.

You can check the speaker line-up or simply jump on the fast train and book your seat by now to get ahead of the competition and also catch an Early Bird.

23-24
NOV 2023
Bucharest
Romania