BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2024//speaker//EZTTJY
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20231023T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20231029T030000
RDATE:20241027T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20240331T030000
RDATE:20250330T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Nothing to see here! On the awareness of and preparedness and defe
 nses against cloaking malicious web content delivery - Jeroen Pinoy
DTSTART;TZID=Europe/Luxembourg:20241022T140000
DTEND;TZID=Europe/Luxembourg:20241022T143000
DTSTAMP:20261012T130447Z
UID:pretalx-hack-lu-2024-VKE3K8@pretalx.com
DESCRIPTION:Website cloaking is a technique that enables websites to deliv
 er different content to\ndifferent clients\, with the goal of hiding parti
 cular content from certain clients. Website cloaking is based on client de
 tection\, which is achieved via browser fingerprinting. In an\nattempt to 
 hide their malicious web pages from detection\, cyber criminals (can) use 
 cloaking.\nThey use vulnerability detection to only target clients that se
 em vulnerable. On top\nof that\, they (can) also provide benign content in
  case they suspect someone or something is\ntrying to detect them.\n\nIn t
 his work\, we investigated to what extent security web crawlers can be det
 ected\nby browser fingerprinting techniques\, and provided some suggestion
 s for how to improve them\nto be able to bypass those techniques. We surve
 yed security analysts and analyzed a set of\nthreat intelligence sharing c
 ommunities\, to gauge awareness of cloaking as an available\ndetection eva
 sion method for cybercriminals. Finally\, we investigated one final techni
 que\,\nthe use of Cache-Control: no-store\, which an attacker can use to t
 hwart\nforensic analysis.
LOCATION:Europe - Main Room
URL:https://pretalx.com/hack-lu-2024/talk/VKE3K8/
END:VEVENT
END:VCALENDAR