Final Program

Preliminary Program

October 19-20, 2010

First Day - October 19 2010:

Malware 2010
08:00 – 09:00AM	Registration & Breakfast
09:00 – 09:15 AM	Welcome Remarks by General Program Chair	Dr. Fernando C. Colon Osorio
09:15 – 10:15 AM	Keynote: Waking Up Vulnerable Open up any newspaper or magazine today and there is a high probability that you’ll find a story or two on Cyber-crime or hacking. Take these same publications from a decade ago and these topics will be mysteriously absent. Something significant changed in the last few years that energized the cybercriminal to be more sophisticated in both their attack methods and toolsets. Did we suddenly become more vulnerable to attack or is something else going on? How will this trend impact the buzz technologies of today over the next 5, 10 or even 20 years? This presentation will explore these topics from the point of view of someone who leads a global team of security experts that respond to hundreds of incidents and tests thousands of environments on an annual basis.	Nicholas J. Percoco Senior Vice President and Head of SpiderLabs at Trustwave Corporation
10:15 - 10:30 AM	Coffee Break

Malware 2010
10:30 – 12:00 PM Session # 1 - Emerging threat and Malware classification Session Chair: Dr. Colon Osorio	# 1569336982 GPU-Assisted Malware	Giorgos Vasiliadis,Institute of Computer Science, Foundation for Research and Technology – Hellas, Greece Michalis Polychronakis, Columbia University, USA Sotiris Ioannidis, University of Crete, Greece
	#1569335314 Exploiting an I/OMMU Vulnerability	Fernand Lone Sang, Éric Lacombe, Vincent Nicomette, Yves Deswarte LAAS-CNRS, France
	#1569349571 Header Information in Malware Families and Impact on Automated Classifiers	Andrew Walenstein University of Louisiana at Lafayette, USA
12:00 – 13:30	Lunch
13:30 – 15:00 PM Session # 2 - Malware Classification & Detection Session chair: Prof. Jean-Yves Marion	#1569337168 Differentiating Malware from Cleanware Using Behavioral Analysis	Rafiqul Islam, Ronghua Tian, Prof. Lynn M Batten,- Deakin University, Australia Steve Versteeg - CA Labs, Melbourne, Australia
	#1569337262 Evaluating Detection and Treatment Effectiveness of Commercial Anti-Malware Programs	Jose A Morales, Ravi Sandhu, Shouhuai Xu University of Texas at San Antonio, USA
	#1569337218 Architecture for Automation of Malware Analysis	Rodrigo Branco - Vulnerability Discovery Team Instituto Tecnologico da Aeronautica Brazil Udi Shamir - Check Point Software Technologies Israel
15:00 – 15:30	Coffee Break
15:30 - 17:00	Panel # 1: Anti-Malware Products Testing - do their measured performance "measure" to its hype?	Panelist: Ferenc Leitold – CheckVir, Hungary Simon Edwards – Dennis Technology Labs, UK José Fernandez – École Polytechnique de Montréal, Canada Moderator: Anthony Arrot, Trend Micro, Inc.
17:00 – 18:30	Walking Tour of the Old City of Nancy - RSVP required at the registration Desk - Kindly arranged by High Security Lab, LORIA
19:00 – 20:30	Best Paper Award Reception

Second Day - October 20, 2010:

Malware 2010
08:00 – 09:00	Registration & Breakfast
09:00 - 10:30 Session # 3 - Malware code analysis: Session Chair: Prof Jose Fernandez	# 1569340849 Memory Behavior-Based Automatic Malware Unpacking in Stealth Debugging Environment	Yuhei Kawakoya, Makoto Iwamura, Mitsutaka Itoh NTT Information Sharing Platform Laboratories. Japan
	#1569341202 Unconditional self-modifying code elimination with dynamic compiler optimizations	Gnaedig Isabelle, Daniel Reynaud - INRIA, France Matthieu Kaczmarek, Stephane Wloka - Nancy Universite - LORIA - ENSIMAG, France
	#1569342554 An Android Application Sandbox System for Suspicious Software Detection	Thomas Bläsing, Aubrey-Derrick Schmidt, Leonid Batyuk, Seyit A. Camtepe, Sahin Albayrak DAI-Labor - Competence Center Security Technische Universität Berlin, Germany
10:30 – 11:00	Coffee Break
10:45 – 12:00	Panel # 2: Cloud Computing Security - New Paradigm Topic: What do the United States Secret Service and Secure Cloud Computing (SCC) have in common? The answer, they both lack a defined perimeter to protect. Early on in the history of the US Secret Service it was determined that protecting a physical perimeter, such as the White House or Air Force One, was a necessary but not sufficient condition to guarantee the safety of the President. This lesson was painfully learned by a grieving nation after the 1963 Kennedy assassination. The key to their problem was the mobility of the President, and as such, the only solution that made any sense was a mobile shield. In this panel the parallels between Cloud Computing Security and protecting the President of the US will be explored leading to a new model of protection in the Cloud.	Panelist: Kurt Thomas - University of California, Berkeley, USA Nicholas J. Percoco Senior Vice President and Head of SpiderLabs at Trustwave Corporation Collin Mulliner - Security in Telecommunications TU-Berlin and Deutsche Telekom Laboratories Germany Prof. Jean-Yves Marion, Ecole Nat Polytechnique de Lorraine, France Moderator: Dr. Colon Osorio
12:00- 13:00	Lunch
13:00 - 14:30 Session # 4 - Botnets Session Chairs: Dr. Matthieu Kaczmarek	#1569336964 The Koobface Botnet and the Rise of Social Malware	Kurt Thomas - University of California, Berkeley, USA David Nicol - University of Illinois, Champaign-Urbana, USA
	#1569341014 Rise of the iBots: 0wning a Telco network	Collin Mulliner - Security in Telecommunications TU-Berlin and Deutsche Telekom Laboratories Germany Jean-Pierre Seifert - Technical University, Berlin Germany
	#1569341054 Overcoming the limitations in Computer Worm Models	Fernando C. Colon Osorio Wireless Systems Security Research Lab (WSSRL), USA
14:30 - 15:00	Coffee Break
15:00 - 16:30 "Birds of a Feather session" Session Chairs: Prof. José M. Fernandez	# 1569332090 Multi-Stage Delivery of Malware	Marco Ramilli - Universita' di Bologna, Italy Matt Bishop - Computer Science, University of California, Davis, USA
	#1569341136 Generic Unpacking using Entropy Analysis	Guhyeon Jeong, Ju-suk Lee, Munkhbayar MB Bat-Erdene, Heejo Lee - Korea University Korea Euijin Choo - North Carolina State University, USA
16:30 - Concluding Remarks		Dr. Fernando C. Colon Osorio