Yul Bahat

A presentation full of true stories and live demonstrations of how attackers can steal sensitive information, whether from your home, office or mobile device.

Looking at popular fiction in books and cinema, we’ve all been expecting that by the 21st century AI will have advanced to the point of fully functioning self-aware machines. Reality, however, shows a different picture. For every amazing Boston Dynamics robots video published, there are numerous videos and news articles showing epic failures of robots, image recognition algorithms and other AI based systems. In this presentation, we will survey the development of AI across multiple fields, see the progresses made, but more importantly, the problems scientists and engineers are still facing today, and how they are planning to solve them (if they can at all).

All so-called "next generation" solutions suffer from the same inherent weakness – they are mostly based on detection. Antimalware, sandboxes, IDS, and web filters, all claim to be able to understand, in real-time, if a certain piece of code is malicious or not. This is just not working anymore, if it ever did. We have to shift the focus from "detection", into something that will allow organisations to take back control of the narrative. This can be achieved with Deception. This is not a new concept, but in the last couple of years there has been amazing advancements in the field, forcing the bad actors to expose themselves instead of trying (and failing) to hunt them down. This talk will explore the evolution of Deception based solutions since the 1970s, review different Deception based tactics, and present real-world cases both from my own experience and from the news.