uCon Security Conference 2009

Schedule

February 28 - Recife, Brazil | see more in venue.

Conference

Note: This schedule is subject to change.

07:30 - 08:00	Registration
08:00 - 08:15	Welcome & opening ceremony
08:15 - 09:00	Keynote: Dispelling the myths and discussing the facts of global cyber-warfare
09:00 - 09:45	Advanced SQL Injection
09:45 - 10:00	Break
10:00 - 10:45	From theory to practice: Bringing down the house with extended DHCP exhausting attack
10:45 - 11:30	Practical (Introduction to) Reverse Engineering
11:30 - 12:15	Advanced Payload Strategies: What is new, what works and what is hoax?
12:15 - 13:30	Lunch break
13:30 - 14:15	GSM For Fun and Profit
14:15 - 15:00	Secure Log Centralization, Analysis & Security Visualization
15:00 - 15:45	Intro to Windows Kernel Security Development
15:45 - 16:00	Break
16:00 - 16:45	Exploiting PDF Readers
16:45 - 17:30	Ut cognitione visus: ut ipso intellecto - BinNavi v2
17:30 - 18:00	Closing ceremony & CTF results
21:00 - Ad infinitum	Aftercon party @ Jardins - Hackers from outer space

Capture the Flag

uCon CTF is a challenge composed of 10 vulnerable programs written in C with source code available. The goal is to read through the code, spot the bug and craft an exploit for some particular vulnerability a program may have in order to escalate privileges and write your name on the wall. Each successfully exploited code sums one point and a scoring bot computes the total of points for each participant.
The winner will gain fame and glory and receive the book "Shellcoder's Handbook 2" as prize. See CTF for more details.

Challenge

uCon is challenging security specialists and hackers to defeat the security of G-Buster, a banking protection software widely used in Brazil. The winner shall contact the vendor and will be rewarded either with an Asus Eeepc or R$ 1,000 in cash.

The challenge consists in finding high impact security vulnerabilities, such arbitrary code execution.
The winner shall inform the conference staff all details concerning the vulnerability and proof its exploitability.
The vulnerability must be presented on the conference following responsible disclosure rules. Complete details must be delivered to the vendor in order to work together to provide a fix.

Workshops

In our best do-it-yourself attitude, this year uCon will feature workshops on electronics and general stuff on hardware hacking. More to be announced soon.