Building upon the success and excellence of

SHIELDCON ASIA TOUR

Singapore

IDENTITY FEST 2024

25 Oct ● SMU, School of Computing & Information Systems 2

Event Details:

Date: 25 Oct 2024, Friday
Time: 9:00 am – 4:30 pm
Venue: School of Computing & Information Systems 2, Singapore Management University
90 Stamford Road, Singapore 178903
Basement 1, Seminar Room B1-2

Event Details:

Date: 25 Oct 2024, Friday
Time: 9:00 am – 3:00 pm
Venue: Singapore Management University, School of Computing & Information Systems 2 (SCIS2), Seminar Room B1-2
Address: 90 Stamford Rd, Level 4, Singapore 178903

Agenda Highlights

Active Security Protection using Threat Intelligence and AI

09:00am - 09:30am Registration & Breakfast

09:45am – 10:15am Defend Mobile Threat by Dual Intelligence

By Chase Li – Co-founder, SecAI

10:15am – 10:45am Virtualization-Based Security Analysis of Mobile Banking App Attacks in Asia

By Dr. Shar Lwin Khin – Associate Professor, Singapore Management University

The presenter will discuss FjordPhantom, a virtualization-based malware that targets banking apps, along with key findings from joint research conducted by Promon, i-Sprint, and Singapore Management University (SMU). This research focuses on virtualization-based attacks that exploit Accessibility Services in banking apps. Through penetration testing across multiple banking apps in Asia, vulnerabilities exposed by FjordPhantom were identified. The research also evaluated the effectiveness of hardening measures and protection solutions. Findings revealed that over 225 million Android users are vulnerable to FjordPhantom.

10:45am – 11:00am Tea Break & Networking Session

11:00am – 11:30am Mobile Security Trend in Asia

By Jan Bosveld, Managing Director, Promon Asia Pacific Limited

11:30am – 12:00pm Enhancing Mobile and Web App Security with Device Fingerprinting, CTI, and Behavioral Risk Scoring

By Tencent

12:15pm – 01:30pm Lunch & Networking Session

01:30pm - 02:00pm Leveraging Mobile Threat Intelligence (MTI) to Strengthen Mobile App Security Posture

By Albert Ching, CTO, i-Sprint Innovations

This presentation will cover industry trends and the evolving technology landscape for using Mobile Threat Intelligence (MTI) to strengthen mobile app security. It will focus on proactive protection measures that can be implemented before attacks occur.

The speaker will also discuss key Threat Intelligence data, including IP reputation, network IP, device ROM, device tampering, black and grey market equipment, and abnormal behaviour lists, all of which help enhance early detection and prevention capabilities.

02:00pm – 02:30pm Embracing Tomorrow: Post-Quantum & FIDO2 in IAM

By Chin Phek (Senior Product Engineering Manager) and Zhong Hao, i-Sprint Innovations

Explore the inevitable technological shifts in Identity and Access Management (IAM) with a focus on post-quantum cryptography and FIDO2. Discover why these advancements are crucial for future-proofing your organization’s security infrastructure.

02:30pm – 03:00pm Selecting a Resource-Efficient Open-Source LLM for On-Premises Deployment + Harmony Next App Use Case

By Ong Chin Phek, Senior Product Engineering Manager, i-Sprint Innovations

Learn from firsthand experience on selecting and deploying an open-source, resource-efficient Large Language Model (LLM) for on-premises use. See practical demonstrations of its capabilities in real-world applications.

03:00pm – 03:15pm Tea Break & Networking Session

03:15pm - 03:45pm Live Hack Demo & Holistic Approach to App Protection

By Phong Phan, Technical Leader & Product Manager, i-Sprint Innovations

This session will feature a live demonstration of the latest mobile attacks, such as Deep Fake attacks, IP reputation risks, network vulnerabilities, and dark web tools on Android. It will also present a multi-layered approach to mobile app protection, showcasing advanced techniques for comprehensive security.

03:45pm – 04:15pm Panel Discussion

Panelists: Ong Chin Phek, Chase Li, Jan Bosveld, Industry Expert, Guest Panelist

Moderator: Dr. Shar Lwin Khin

Join a dynamic panel of industry experts and banking professionals as they share their insights and experiences in Identity and Access Management (IAM) and mobile app security.

Speakers

Jan Bosveld

Managing Director, Promon Asia Pacific Limited

Jan Bosveld

Jan has over 25 years of IT industry experience and has expert knowledge of Authentication, DLP, HSM, IAM, PKI, and Mobile App Security, Currently, he is the Managing Director at Promon Asia Pacific, which has its HQ in Norway. Promon has been a pioneer in app security and delivered world-leading in-depth software to many of the largest banks around the globe. Their RASP Mobile App security solution has been deployed globally to serve more than 1 billion users across many different industries.

Dr. Shar Lwin Khin

Associate Professor, Singapore Management University

Dr. Shar Lwin Khin

An associate professor at Singapore Management University. He has worked on European and industrial research projects in collaboration with industrial partners and European universities. His current research focuses on scalable and effective analysis of security and privacy issues in web and mobile apps using program analysis, constraint solving, search-based testing, and machine learning techniques.

Ong Chin Phek

Senior Product Engineering Manager, i-Sprint Innovations

Ong Chin Phek

Chin Phek is a Senior Manager in Product Engineering at i-Sprint Innovations, leading the development of AccessMatrix, an identity and access management product used by over 150 banks across Asia. A passionate software engineer since graduating from the National University of Singapore in 2004, he has over two decades of experience. His career includes nine years in R&D for image, video, and camera algorithm design, two years in 24/7 coastal surveillance systems, and the past decade focused on identity and access management. Chin Phek’s expertise drives i-Sprint’s innovations, including Post-Quantum Cryptography.

Phong Phan

Technical Leader & Product Manager, i-Sprint Innovations

Phong Phan

Phong is a Technical Expert and Product Manager with a track record of delivering innovative solutions and enhancing security for mobile banking apps.

Chase Li

Co-founder, SecAI

Chase Li

Chase Lee is the Co-founder of SecAI. Previously worked at Alipay, Alibaba Group, and Amazon China. He was one of the founding members of the payment risk management team at Alipay, Senior information security program manager of Amazon China, led the domestic and cross-border payment security programs.

Gregory Guo

Product Manager, Tencent Cloud

Gregory Guo

Gregory is a Product Manager and boasts a wealth of expertise in reinforcing mobile banking security through measures in account protection, trusted identity validation, and device security. Supported the construction of account risk control systems for top-tier banks, internet companies, and retail businesses in China.

Zhong Hao

Senior Software Engineer, i-Sprint Innovations

Zhong Hao

Zhong Hao is a Product Architect at i-Sprint, with over 10 years of experience in driving innovative solutions within cybersecurity and identity management. He holds an M.Phil. in Information Technology from the University of Sydney.

Albert Ching

CTO, i-Sprint Innovations

Albert Ching

The CTO of i-Sprint Innovations, a global IAM and Mobile App Security software company. Their security solutions are designed to help clients address digital identity and mobile app protection challenges. Their solutions have been successfully deployed in many organizations with complex operations, such as Citibank, UOB, OCBC, Bank of China, Bank of America, Bank of Communications, IRAS, GovTech, and other financial services institutions, government agencies, and large corporations.