Schedule

Dr. Bernhard Tellenbach President, Swiss Cyber Storm

Troy Hunt Microsoft MVP, Pluralsight author

Troy Hunt is a Pluralsight author, Microsoft MVP and world-renowned internet security specialist. He spend his time teaching developers how to break into their own systems before helping to piece them back together to be secure against today’s online threats. He’s also the creator of “Have I been pwned?”, the free online service for breach monitoring and notifications. Troy regularly blogs at troyhunt.com from his home in Australia.

• www

Herbert Bos , Professor and leader of the VUSec Systems Security research group

Herbert Bos is a professor of Systems and Network Security at Vrije Universiteit Amsterdam in the Netherlands. He obtained his Ph.D. from Cambridge University Computer Laboratory (UK). Coming from a systems background, he drifted into security a few years ago and never left. He is very proud of his (former) students, three of whom have won the Roger Needham Ph.D. Award for best Ph.D. thesis in systems in Europe.

• www

Mazin Ahmed , Information Security Specialist / Penetration Tester

Mazin Ahmed is an Information Security Specialist and a Penetration Tester. Computers and its security is his passion for years, and every day he gets attached more into this field. Information Security is not just his career focus, but it's his hobby. Mazin has worked for a variety of companies, universities, banks, providing the best security solutions, and ensuring that the maximum security possible. Currently, he is running a few community projects, to help raising better awareness regarding Information Security. He is also a bug bounty programs participant in his spare time. He has reported valid vulnerabilities to numerous top-profile companies, such as Facebook, Twitter, LinkedIn, Bugcrowd, Oracle, Ebay to name a few. He has also been one of the top 3 researchers for PureVPN, one of the top 5 researchers for Tagged, and he was three times in the Bugcrowd top 10 researchers of the month. He is currently among the 15 top researchers (out of 20,000+) on Bugcrowd.

• www

Raoul Chiesa Founding Partner, President @ Security Brokers Società Cooperativa per Azioni, Joint Stock Cooperative Company

Raoul "Nobody" Chiesa was born in Torino, Italy. After being among the first Italian hackers back in the 80’s and 90's (1986-1995), Raoul decided to move to professional InfoSec, establishing back in 1997 the very first vendor-neutral Italian security advisory company; he then left it in 2012, and established along with former and new partners “The Security Brokers”, a visionary joined stock company providing niche, cutting-edge security consulting services and solutions.

Raoul is among the founder members of CLUSIT (Italian Information Security Association, est. 2000) and he is a Board of Directors member at ISECOM, OWASP Italian Chapter, and at the Italian Privacy Observatory (AIP/OPSI); he has been one of the coordinators of the Working Group "Cyber World" at the Center for Defence Higher Studies (CASD) between 2010 and 2013 at the National Security Observatory (OSN) at Italy's MoD.

He is a former member of the ENISA Permanent Stakeholders Group (2010-2012 and 2013-2015), a independent “Special Advisor on Cybercrime and Hacker’s Profiling” at the UN agency UNICRI, and a Member of the Coordination Group and Scientific Committee of APWG European chapter, the Anti-Phishing Working Group, acting like a “Cultural Attachè” for Italy, and a contributing author and Advisor at GCSEC.org.

Since July 2015 he’s a Board Member at AIIC, Italian Experts Association on Critical Infrastructures, a Subject Matter Expert for ADETEF (different French ministries) at ENCYSEC (Enhancing Cyber Security), a project funded by the European Union, and a member of the ITU (UN-Geneva) Roster of Experts on Cybersecurity.

Raoul publishes books, white papers and articles worldwide, which are often translated in different languages (English, French, Italian, Romanian, Spanish, Chinese) as main author or contributor, while being since more than 20 years a worldwide known and appreciated Key Noter and Speaker; giving all of the above, Raoul is a regular contact for worldwide medias (newspapers, TV, radio, podcasts and bloggers) when dealing with Information Security issues, ICT security incidents and IT trends.

Robert Randall IT-Security Engineer & Consultant, terreActive

Robert Randall is a Senior IT-Security Engineer & Consultant at terreActive AG. Currently he is focused on log management, security monitoring and security metrics. Robert is highly opinionated when it comes to usable security and he prefers to blame manufacturers and companies for security lapses rather than employees or consumers. He holds an engineering degree in Information Technology with a focus on IT-Security.

• www

Mazin Ahmed , Information Security Specialist / Penetration Tester

Mazin Ahmed is an Information Security Specialist and a Penetration Tester. Computers and its security is his passion for years, and every day he gets attached more into this field. Information Security is not just his career focus, but it's his hobby. Mazin has worked for a variety of companies, universities, banks, providing the best security solutions, and ensuring that the maximum security possible. Currently, he is running a few community projects, to help raising better awareness regarding Information Security. He is also a bug bounty programs participant in his spare time. He has reported valid vulnerabilities to numerous top-profile companies, such as Facebook, Twitter, LinkedIn, Bugcrowd, Oracle, Ebay to name a few. He has also been one of the top 3 researchers for PureVPN, one of the top 5 researchers for Tagged, and he was three times in the Bugcrowd top 10 researchers of the month. He is currently among the 15 top researchers (out of 20,000+) on Bugcrowd.

• www

John Matherly Founder of Shodan, Shodan

John Matherly is the founder and CEO of Shodan, the first comprehensive search engine of devices connected to the Internet. John, born in Switzerland, graduated from University of California, San Diego, with a bachelors degree in bioinformatics, with research done in the field of hydrogen-deuterium exchange mass spectrometry . Prior to creating Shodan, John worked at the San Diego Supercomputer Center as a programmer/ analyst on the Protein Data Bank project. The idea of Shodan was born in 2003, and it has evolved into a tool that searches for and catalogs every IP address on the Internet, ranging from individual home desktops to industrial automation systems. Shodan also performs automatic Internet-wide surveys, analyzes large amounts of data and makes security tools more accessible to the community.

• www

Prof. Dr. Endre Bangerter , Bern University of Applied Sciences

Endre Bangerter is professor of computer science at the Bern University of Applied Sciences, and a lecturer at the Forensic Science Institute of the University of Lausanne.
In earlier jobs, Endre has worked as a software developer, technical consultant, and researcher at IBM Global Services, IBM Research, and Accenture. He has a PhD in computer science from in the field of cryptography from the Horst Görtz Institute For II-security at the University of Bochum in Germany.

• www

Nick Galbreath CTO and Founder of Signal Sciences, Signal Sciences

Nick Galbreath is CTO and Founder of Signal Sciences, a new company focusing on web application defense and security monitoring. Over the last 20 years, Nick has held leadership positions in number of e-commerce and social media companies, including IPONWEB, Etsy, Right Media, UPromise, Friendster, and Open Market, and has consulted for many more. He is the author of "Cryptography for Internet and Database Applications" (Wiley), and was awarded a number of patents in the area of social networking. He holds a master's degree in mathematics from Boston University and currently resides in Tokyo, Japan.

• www
• www

Scott Helme Information Security Consultant, blogger, builder of things,

Scott Helme is a security researcher, international speaker and author of the scotthelme.co.uk blog. He is also the founder of securityheaders.io an online assessment tool which checks the correct deployment of HTTP Security headers on web servers. His site report-uri.io is a welcome support for organisations trying out Content Security Policy. Scott handles over 100M reports on report-uri.io per week.

• www
• www

Marc Ruef , Member of the Board, scip AG

Marc Ruef is a Pioneer and Enterpreneur. Almost twenty years ago, he launched an online site which would later become computec.ch, the GO-TO place for IT security related information in German. Forward a few years, he founded scip AG, an information security consulting company. Unlike other pen-testers and researchers, scip is known to go the extra mile. It must be Marc's special talent, that gives scip reports an artistic touch making them special among their peers. Marc is known to be a very active author with hundreds of articles and several books published on a wide range of cyber security topics. His persistence and experience gave Marc access to contracts and research, other security experts can only dream of. He attends Swiss Cyberstorm to talk about this work.

• www
• www

Andrea Klaes , Chief Information Security Officer at Sulzer Management AG

Andrea has been responsible for global IT security at Sulzer since October 2013. During the last 15 years Andrea’s main focus was on Security, holding various positions at different companies, e.g. Network Associates, Swiss Re or Raiffeisen.

Milan Singh Thakur , OWASP Foundation

Milan is very passionate about Information Security and an International Speaker. He is leading OWASP Mobile Security Project Globally and is also AppSec INDIA Leader. He also works as Information Security Consultant at Aujas Network in India. His primary focus is Mobile Security. He has helped to secure mobile apps for various well known clients in banking, insurance, health, e-commerce and other sectors.
He has expertise in fields like secure code review, NFC Pentesting, Web Appsec, VAPT activities, Wireless Pentesting, Payment Gateway Security Assessments and lot more. His scope of exploration is not limited to these technologies. He is strong supporter of “Open-Source” terminology and has been promoting it since 2010.

• www

Mark Barwinski PwC, Director Cybersecurity

As the Director for Cybersecurity, Mark is responsible for leading Threat Intelligence, Incident Response, Cyber Forensics, and SOC consulting services in Switzerland. He joined PwC following 13 years of cyber related experience attained at the Naval Postgraduate School and Sandia National Laboratories as a spyware researcher in his early years, and at the U.S. Department of Defense where he played a variety of hands-on and leadership roles in the Washington D.C / Baltimore area, Germany, Afghanistan, and Canada. In these various roles, Mark supported military operations and the safety of high government ranking individuals, and helped protect the Global Information Grid (GiG) through the development of analyst tools and the leading of an intelligence analysis and reporting cell. He also closely collaborated with partner nation states promoting joint discovery and response efforts. Mark is currently focused on leveraging actionable information acquired from intelligence and incident response activities, and further building key capabilities in country.

Ivan Bütler Board Member Swiss Cyber Storm, CEO Compass Security AG

• www

Dr. Bernhard Tellenbach President, Swiss Cyber Storm

Prof. Dr. Marc Rennhard Head of Information Security Research Group, ZHAW School of Engineering

Marc Rennhard is professor for computer science at the ZHAW (Zürcher Hochschule für Angewandte Wissenschaften, Zurich University of Applied Sciences), focusing on information security.
Before joining the ZHAW, I graduated as Dipl. El.-Ing. ETH (M.Sc.) from ETH Zürich in 1998, specialising in the areas communication systems, information theory and information security. I then joined the company Solution Providers AG as an IT consultant before I returned to ETH Zürich as a research assistant, where I completed my dissertation about anonymous Internet communication in 2004. I hold the CISSP security professional certification since 2004 and the ETH teaching diploma for higher education since 2003. Occasionally, I'm also doing some work as an IT security and strategy consultant at Consecom AG.

• www

Riccardo Sibillia ,

Riccardo Sibilia is physicist by training and in Cyber-Security since 25 years. He is since 2007 head of the Cyber Threat Analysis of the Swiss Armed Forces. Along his career, he worked on the strategic, doctrinal and technological bases for Cyber Defense both on the military and the national level.

David Rosenthal Counsel, Co-head IT practice, Homburger AG

David Rosenthal is counsel and co-head of the IT practice at Homburger, a leading Swiss law business firm in Zürich, which he joined in April 2001. Before that, he headed his own legal consulting firm in Basel.

• www

David Caissy Security Consultant, Albero Solutions Inc.

David Caissy , OSCP, GWAPT, GPEN, GSEC, CISSP, CEH has 16 years of experience as a security consultant and a web application architect. He has performed security audits, vulnerability assessments, web application penetration tests and has designed several secure systems. He has worked for banks, the Department of National Defense, various government agencies and private companies. He has been teaching information security in colleges and in many departments over the last 10 years.

Walter Belgers President of TOOOL, Owner and COO Madison Gurkha

Walter Belgers is busy in the security and computing science field since age 8. He has experience in setting up security systems, international roll-out, education, auditing you name it. He is owner and COO of Madison Gurkha, a Dutsch security company with a name that sticks. The last 15+ years he was also involved in giving lectures and organising conferences (boardmember of EuroBSDCon 2004, chair or member of the program committee for many others; probably a reason he has sympathy for Swiss Cyber Storm). Walter's specialties include Security (computers and other), UNIX, computer science in general (operating systems, computer languages, hardware), teaching, explaining, social engineering, organising, giving lectures. AND: Lockpicking! Walter is multiple winner of Dutch lockpicking championships and the president of TOOOL (The Open Organisation of Lockpickers).

• www