Time Table Day1 Nov. 8th
Track1(the AIR)

09:00

405

Track2(401)
08:00- Door Open08:45-09:00 Opening

09:00-09:45

KeynoteKeynote:If It's Smart, It's Vulnerable

TechnicalMikko Hypponen［En］

General
10:00

10:00 - 10:30

10:00 - 10:40

The Renaissance ofCyber Physical Oﬀensive Capabilities
Daniel Kapellmann Zafra［En］

A 3-Year Tale of Hacking a Pwn2Own
Target: The Attacks, Vendor Evolution,and Lesson Learneds

Orange Tsai［En］

11:40-12:20

12:00

Cyber Crime

Unveiling Identity Bad Practices
Through AI-driven Identity Attack Surface Visibility

Law & Policy

10:40 - 11:10[Flatt Security Inc.]［Ja］

10:50 - 11:30

11:00[CyCraft Japan Corporation]［En］＋［Ja］

Bypassing macOS Security
and Privacy Mechanisms: From Gatekeeper
to System Integrity Protection

Learning from case studies in the Linux kernel:
Vulnerabilities human should discover

Under 25 yoBlueboxCommunity

11:20 - 11:50[MS&AD InterRisk Research & Consulting, Inc./Kovrr Inc.]［En］＋［Ja］

CRQ-based Cyber Security
Risk Management

The notation following each speaker's
name (company name) indicates thelanguage of the presentation.

Koh Nakagawa［Ja］

12:20 - 13:35
Lunch Break13:00

13:35 - 14:20

13:35 - 14:15[PwC Consulting LLC]［Ja］

Hi! My Name Is [What?]:Abusing DHCP To Spoof DNS Records
14:00

Product security testing ﬂow andimplementation points provided by PwC

Ori David［En］
14:25 - 15:05

Endpoint Security or
End of Security?
Exploiting Trend Micro Apex One
Shih-Fong Peng /Ling Wu［En］

15:00

14:30 - 15:15[GMO Cybersecurity by Ierae, Inc.]［En］

Escaping from WebApp Sandbox
in Microsoft Azure

13:30 - 14:10

Power Automate C2:
Stealth Living-Oﬀ-the-Cloud
C2 Framework
Hiroki Hada / Tomoaki Tani / Rintaro Fujita［Ja］

14:30 - 15:10

stelftools: cross-architecture
static library detector
for IoT malware
Shu Akabane /Takeshi Okamoto ／ Yuhei Kawakoya［Ja］

15:15 - 15:55

Modems (and telecoms) are also not
as secure - 6 0-days to 4 million modems
within a week

15:30 - 16:10

OSBT:
OpenID Connect
Scenario-Based Tester

Ta-Lun Yen［En］

16:00

Junki Yuasa［En］
16:25 - 17:10

16:25 - 17:05

17:00

Enhanced Vulnerability Hunting
in WDM Drivers with Symbolic Execution
and Taint Analysis

Zeze Lin［En］[Panasonic Holdings Corporation]［Ja］IoT Threat Intelligence at Panasonic〜 Journey to protect home electronics 〜

16:30 - 17:10

Windows Event Log Internals:
Understanding the Core
Mechanisms for Enhanced Security
Shusei Tomonaga［Ja］

17:15 - 17:55

Open Sesame!
The full story behind opening a smart lockThomas Bygodt

18:00

https://codeblue.jp/2023/en/time̲table/cb23̲timetable̲en.pdf

Time Table Day2 Nov. 9th
Track1(the AIR)

405

Track2(401)
08:00- Door Open

09:00

09:00 - 09:40

09:00 - 09:40

Echoes of Ransomware:
Uncovering a Cyber Blast Radius"ﬁlename" in Content-Disposition
is a landmine - vulnerability
caused by ambiguous requirements
Motoyasu Saburi［Ja］

Jeﬀrey Tully / Christian Dameﬀ［En］
09:50 - 10:30

10:00

The Dark Side of Cloud Computing:
How Threat Actors Abuse Millions ofDollars of Cloud Compute
Daniel Davrayev / Yossi Weizman［En］

10:50 - 11:30

11:00[Hitachi Systems, Ltd.]［Ja］

Connecting, Expanding and Deepening
the Security Community

10:55 - 11:25

Unlocking the Drive:
Exploiting Tesla Model 3
Vincent Dehors / David Berard［En］
11:40-12:20

12:00

10:00 - 10:45[NEC Corporation]［Ja］

Leverage of Malware Analysis
in Fast Forensics
11:35 - 12:05[NTT DATA INTELLILINK Corporation]［Ja］

Pennywise- Invisible privacy risk in the new AI er

Introduction of "Textbook for SOC and CSIRT, Version 3.0"- Building a common understanding
between security engineers, managements, and supply chains using Recommendation ITU-T X.1060

Vic Huang / Joy Ho［En］

12:20 - 13:35
Lunch Break
13:00

13:35 - 14:15

14:00

Money Making or Camouﬂaging?
Dissecting APT41's Ransomware
Activities
No photo slides

13:30 - 14:10

13:35 - 14:05[Mitsui Bussan Secure Directions, Inc.]［Ja］

Security Risks of Generative AI

Behind the Scenes:
Building CTF
canceledfrom Scratch
Tomer Zait［En］

Che Chang / Charles Li［En］
14:15 - 14:45[VeriServe Corporation]［Ja］

14:25 - 15:05

Winning from Within: Chinese InfoOp
Targeting Overseas Diaspora
15:00

No photo slides

Chih-yun Huang / Che Chang［En］

14:55 - 15:25[SSD Labs Japan]［En］＋［Ja］

An announcement ofthe launching of "SSD Labs Japan"

15:15 - 16:15

International Panel Discussion
on 'A Comprehensive Study ofActive Cyber Defence'
16:00"Rise of new security market"
in the manufacturing industry

Ikuo Takahashi / Nick Wobma / Talita Dias
Masahiro Sogabe / Yoshiaki Nishigai［En］＋［Ja］

15:50 - 16:30

Deep-Kernel Treasure Hunt:
Finding exploitable structuresin the Linux kernel
Yudai Fujiwara［En］
16:40 - 17:20

16:40 - 17:20

17:00

Digital sovereignty- shaping regulatory responses totechnological dominancePrzemysław Roguski［En］

Pwning Electron Application :Analysis and Defense ofVulnerabilities in Electron Applications
Inseo An / Jemin Min［En］

17:30 - 18:15

18:00

Closing Keynote :Cyber and Security in Times of War
Sergiy Korsunsky［En］

18:20 ｰ 18:45 Closing
19:00 ｰ 20:30 Networking Party

14:30 - 15:10

BSides Tokyo 2024
Soya Aoyama ／ Tetsuya Takaoka［Ja］