Presentation:

In a time where bureaucracy can hold you back against a foe that is agile, fast, and definitely doesn't care about the laws they break, a new method of forensics is being developed. Proprietary counter-intelligence techniques have been used against phishers, malware authors, and distributors as well as "black hat" hackers to gain intelligence on them in a passive, yet active, manner. These techniques do not break the law, but they will bend them and test the law's resilience. Techniques include tracking attackers behind proxies, breaking encryption algorithms to unmask IP addresses, stealing data back from the phishers in real time, and using cross-site attacks to track malware authors.

This talk will open your eyes about intelligence gathering and counterespionage against relentless entities dedicated to causing havoc and profiting from it.

Presenter: Lance James, Author of Phishing Exposed, Co-Author of Emerging Threat Analysis (Syngress Publishing)

Lance James has been heavily involved with the information security community for the past 10 years. With over a decade of experience with programming, network security, reverse engineering, cryptography design & cryptanalysis, attacking protocols and a detailed expertise in information security, Lance provides consultation to numerous businesses ranging from small start-ups, governments, both national and international, as well as Fortune 500's and America's top financial institutions.

He has spent the last three years devising techniques to prevent, track, and detect phishing and online fraud. He is a lead scientist with Dachboden Laboratories, a well-known Southern California "hacker" think-tank, creator of InvisibleNet, a prominent member of the local 2600 chapter, and the Chief Scientist with Secure Science Corporation, a security software company that is busy tracking over 55 phishing groups.

As a regular speaker at numerous security conferences and being a consistent source of information by various news organizations, Lance James is recognized as a major asset in the information security community.