Dr. Gulshan Rai has over 25 years of experience in different areas of Information Technology which include Cyber Security, e-Governance, Legal Framework and the Information Technology Act for e-commerce, and several related fields. At present, he is Director General, CERT-In (Indian Computer Emergency Response Team) and Group Coordinator of E-Security and Cyber Law Division in the Ministry of Communications and Information Technology. Prior to this he was Executive Director, ERNET India for over 7 years and he was instrumental in setting up of the first large scale education and research network in close collaboration with the leading educational and research institutions in the country.

Dr. Rai has been working since 1998 in the area of evolving legal framework to address issues arising out of cyberspace. His sustained efforts in the area has resulted in second Technology Legislation in the History of India i.e. Information Technology Act and recent amendments in the Act.

Dr. Rai is particularly focused on developing security capabilities in the country through increased security education programs. He has initiated several programs in this area with industry and educational institutions. He has enhanced the security of government infrastructure through an effective security framework that prescribes standards, and audits by a panel of independent auditors.

Dr Rai holds a doctoral degree and M.Tech., and has published several papers, and reports on e-commerce, cyber security, cyber laws, education and networking and has presented the same in several national and international conferences.

Dr. Gulshan Rai
Director General,
CERT-In,
Government of India

Bessie Pang Ms. Pang is a Criminology Consultant. Ms. Pang moved to Canada from the United Kingdom after receiving her B.A. Hons. in Developmental Psychology with Cognitive Studies, which included Artificial Intelligence programming. After completing her M.A. Degree in Criminology in Vancouver, Ms. Pang worked in various fields of Criminology, including the British Columbia Forensics Psychiatric Commission, and the National Headquarters of Correctional Services Canada in Ottawa.

Ms. Pang was commissioned by the B.C. Forensic Psychiatric Commission to develop the first comprehensive, “Standards and Guidelines for the Assessment, Treatment and Management of Sex Offenders in British Columbia”. Ms. Pang also has extensive experience in statistical research and policy development, including in the areas of sex offenders, serious offenders, youth gangs and youth violence, female offenders, community policing, domestic violence, equity employment, offender reintegration, and community outreach.

Ms. Pang is one of the founders of The Society For The Policing Of Cyberspace (POLCYB). Based in Vancouver, Canada, POLCYB is an international society devoted to enhancing international collaboration and private-public partnerships to combat cybercrime. In addition to other consultation projects, Ms. Pang is also the Executive Director of POLCYB.

Ms. Pang was awarded the prestigious Queen’s Diamond Jubilee Medal in 2013. The medal was presented to Ms. Pang in recognition of her significant achievements and continuous contributions to the Canadian Association of Chiefs of Police (CACP) mandate of “leading progressive change in policing”.

Executive Director The Society for the Policing of Cyberspace (POLCYB)

As the Global Lead for the justice and public safety (JPS) market segment, Hong-Eng Koh leads Oracle’s global JPS strategy, initiatives, and activities. He serves as Oracle's JPS expert, offering thought leadership on global JPS trends and challenges, best practices, and technological implementations, and he facilitates the development and adoption of solutions for JPS customers, through Oracle's broad range of technology, applications, and hardware products, as well as third-party products. He also supports and enables field teams and partners, helping them serve their JPS customers more effectively and efficiently.

Mr. Koh spent more than nine years with Sun Microsystems before it was acquired by Oracle holding business development and sales leadership roles as well as acting as Global Lead for the JPS market. He was actively involved in many JPS projects globally, including citizens registry/ID; e-passport; border control system; advanced passenger information system; licensing system; command, control, and communications (C3) system; traffic incident management system; national disaster warning system; video surveillance system; electronics surveillance system; automated fingerprint identification system; criminal records system; investigation/case management system; court case management system; prisons management system; and e-police.

Mr. Koh started his career with the Singapore Police Force (SPF) after graduating under an SPF scholarship. He held various appointments including Senior Investigation Officer, Head of Crime Prevention and Community Policing, Police Spokesman, and Divisional Head of Operations and Training. His last appointment was as Head of the Computer Systems Division, where he led the technical implementation of various police operational and administrative systems including SPF's first internet project, one-stop change of address system, investigation management system, automated vehicle screening system, resource activation management system, casualty information system, C3 system, and criminal intelligence system. During his years of service in SPF, he received various awards including the Commissioner's Commendation and High Commendation, Good Service Medal, Long Service Medal, and Good Conduct Medal.

After leaving SPF and before joining Sun, Mr. Koh was in the systems integration business for a few years and was involved in various large government infrastructure and applications projects including government-wide networking and messaging projects and Singapore government projects.

Mr. Koh graduated from the National University of Singapore with an Upper Second-Class Honors degree in Mathematics. He obtained his MBA with Distinction from the University of Leeds (UK) and a Specialist Diploma in e-commerce from the Nanyang Polytechnic (Singapore). He is the Vice President (Corporate) of the Society for the Policing of Cyberspace (POLCYB), an international nonprofit society that promotes global partnerships with international criminal justice and corporate agencies to combat and prevent cyberspace crimes. Mr. Koh is also a member of the National Organ Transplant Ethics Committee, appointed by the Singapore Ministry of Health, and is a visiting researcher at the China Public Security University. He lives in Singapore with his wife and two children.

Senior Director (Global Lead), Justice and Public Safety
Oracle Public Sector

Mr. Ryota Komoto, Chief Inspector,
Section Chief, Cyber Security,
General Affairs Division,
National Police Agency of Japan

Lt Col Sazali bin Sukardi (Retired) is the Vice President of Strategic Policy Research, CyberSecurity Malaysia, an agency under the Ministry of Science, Technology and Innovation, Malaysia (MOSTI). He holds Master of Science in Information Security from Royal Holloway, University of London, Master of Arts in Defence Studies from King’s College, University of London, Post Graduate Diploma in System Analysis from Universiti Teknologi MARA (UiTM), and Bachelor of Science in Civil Engineering from University of Hartford, Connecticut, USA. He was also a staff college graduate from the Joint Services Command and Staff College, Shrivenham, United Kingdom.

He has served the Malaysian Armed Forces from 1987-2009 before he joined CyberSecurity Malaysia to become cyber security practitioner. He was the Leading Co-Chair of the Council for Security Cooperation in Asia Pacific Study Group on Cyber Security (2010-2012), and he has been representing Malaysia in several ASEAN Regional Forums , ASEAN Senior Official Roundtables, the United Nations’ Group of Government Experts in cyber security. He is also a part-time and visiting lecturer at several local university in Malaysia.

Lt Col Sazali bin Sukardi (Retired) ,
Vice President of Strategic Policy Research ,
CyberSecurity Malaysia

Donn Hoffman is a Deputy District Attorney for Los Angeles, California. He is an accomplished trial lawyer and a recognized authority on cybercrime. Donn is a graduate of Carnegie Mellon University and the University of Southern California School of Law. Before studying law, Donn worked as a research engineer and software developer. He entered public service and joined the Los Angeles District Attorney’s Office soon after earning his JD. After a decade prosecuting murder, gang, elder abuse, and other crimes, Donn joined the High Technology Crime Division. He is assigned to prosecute the most complex network intrusion, cyber harassment and identity theft cases, working closely with local, state and Federal agencies, and with private industry security personnel. Donn serves as legal counsel and special prosecutor for the Los Angeles CIRT. He is an adjunct professor teaching computer forensics law and a sought-after speaker on cybercrime, identity theft, and digital evidence.

Deputy District Attorney

Los Angeles, California

Raymond H. Velez is currently the Regional Manager, Asia Pacific, Global Product Protection, Eli Lilly And Company. In this role, he manages drug anti-counterfeiting investigations in the Asia Pacific Region. He is currently based in Bangkok, Thailand.

Some of the investigations under his direction and supervision have led to the dismantling of organizations responsible for the global distribution of counterfeit drugs. He has in-depth experience working internet-based wholesale and retail operations and is also well-versed in the global flow of counterfeit drugs from source country manufacturing to retail “brick and mortar” distribution.

Mr. Velez has also conducted and participated in training on several continents regarding the worldwide threat counterfeit medicines pose to patient safety.

By way of history, Mr. Velez entered on duty with the US Federal Bureau of Investigation (FBI) in 1980 in Seattle, Washington, USA. His career led to San Francisco, then to postings in Pakistan and India before he retired from the FBI in 2001 while assigned to the American Embassy in Bangkok, Thailand.

Mr. Velez has broad experience in various investigative fields ranging from terrorism to drug trafficking. He has also conducted training of police and other government officials throughout Asia and the United States.

From 2001 to 2004, Mr. Velez was the Senior Investigator for Microsoft Corporation, Law and Corporate Affairs, responsible for IPR investigations in South Asia Pacific.

Raymond H. Velez,
Regional Manager, Asia Pacific, Global Product Protection,
Eli Lilly And Company.

Chris is a Detective in the Child Victim Identification & Special Projects Unit at Task Force Argos, Queensland Police Service (QPS). Chris joined the QPS in 2001 before commencing work in the Child Protection and Investigation field in 2005. To develop his investigative skills Chris transferred to Task Force Argos in 2010, where he has, over the last four years worked in the Internet Response, Online Investigations and now the Child Victim Identification teams. Chris actively leads and participates in the investigation of offenders committing internet facilitated crimes against children. Chris facilitates training in this crime type for other investigators working in Child Protection and Investigation Units from across Queensland and elsewhere in Australia.

Christopher Creedon,
Detective in the Child Victim Identification & Special Projects Unit at Task Force Argos,
Queensland Police Service (QPS)

Ahmed Shifau, Head-Cyber Policing, Maldives Police Service

Colonel Jairo Gordillo Rojas is an official of the Colombia, National Police. Currently serves as Chief of the Office of Telematics, leading technology processfor the development´s country. He has over 20 years experiencein the area of telecommunications and technologies of information.

In his institutional career, he has been the architect of outstanding technological developments in terms of technology and the implementation of a backbone (microwave network), digital radio communications networks, and CCTV systems in some cities of the country. He also advises the implementation and insertion of projects in unified communications and computing cloud for the Colombia National Police.

Col. Jairo GORDILLO ROJAS,
Chief of the Office of Telematics,
Colombia National Police

Markko KÜNNAPU is currently the member of the Bureau of the Convention Committee on Cybercrime (T-CY), which is supervising the implementation of the Convention on Cybercrime. In 2010-2014 he was the Chair of the Committee.

He works as adviser in the Ministry of Justice of Estonia. He graduated the Law Faculty of Tartu University in 2001. After that he worked in Tallinn Police Prefecture as criminal investigator and in Legal Department of the Ministry of Interior as a lawyer. Since 2005 he is working in Ministry of Justice of Estonia. He has been involved in drafting several legislative proposals, including legislation concerning cybersecurity, cybercrime, identity theft and different aspects of criminal procedure.

He has participated in drafting the Estonian Governmental Cybersecurity Strategy and is also a member of the Cybersecurity Commission of the Estonian Academy of Sciences.

He has been a speaker at different international workshops and conferences on cybercrime and cybersecurity.

Markko KÜNNAPU, Member of Council of Europe Cybercrime Convention Committee (Past Chair)
Legal Advisor to Estonia Justice, ESTONIA

Dr. Chaichana Mitrpant is the Deputy Director of ETDA – Electronic Transactions Development Agency (Public Organization), the Ministry of Information and Communication Technology, Thailand.

Dr. Chaichana Mitrpant, Deputy Director, Electronic Transactions Development Agency or EDTA,
Ministry of Information and Communication Technology, Thailand, THAILAND

Mohammed Ukashatu, Assistant Director/Head of ICT Department of State Services,
National Headquarters

DAVID Baptiste works for the CVO laboratory since many years. His researches domain areas are on operational and offensive computer security and in protection of critical system. He is specialized on reverse engineering, kernel development and malware analysis. He made numerous conferences in India (Malcon, Clubhack, and Ground Zero Summit) and he still likes to come back in India in order to expose his work. He although likes good food and good vine.

Mr. Krishna Sastry Pendyala is the Head, Fraud Management & Digital Forensics, Enterprise Security & Risk Management group of Tata Consultancy Services. Mr. Sastry has over 23 years of experience with Ministry of Home Affairs, Govt. of India as Digital Forensic investigator, and handled a large number of Cyber Security attacks & Crime Investigations of national and international importance. Sastry examined more than 1400 cases involving digital evidence referred by various state & central Law-enforcement agencies and deposed evidence in various Courts of Law. His core area of expertise includes Cyber attack investigation, Insider threat Management, Incident response Management, and off-line & online Cyber Forensic investigations. Sastry is a guest/visiting faculty at various Police & Judicial academies, Universities, Management Academies and professional bodies. Through INTERPOL General Secretariat, Lyons & INTERPOL, India Unit, Sastry trained Law Enforcement officials from more than 60 countries in Asia, Africa and Pacific regions in Cyber Security, Electronic investigations, Cyber Forensics etc.,

Sastry is an M.Tech from Banaras Hindu University, did his Post Graduate Program (PGP) in Public Policy Management from Indian Institute of Management, Bangalore and “Computer Forensics Incident Response Team" Professional Development Programme at Wright State University, USA. Sastry is a certified ISO 27001 Lead Auditor, CISCO Certified Network Associate (CCNA), and a DNV Certified Vulnerability Assessor. He is the INTERPOL certified “Train the Trainer” in India in the field of Computer Forensics and member of Indo-USA (FBI) forensic exchange team.

Head, Fraud Management & Digital Forensics,
Enterprise Security & Risk Management, Tata Consultancy Services (TCS)

Prasanna Kanagasabai works as an Application Pentester for close to 8 years. Speaker @ nullcon-Delhi, Clubhack, IIT Guwahati and various null meetups. Enjoy solving new challenges. Creator of IronSAP a module over IronWASP. Present interest is in Fuzzing and UAF bugs discovery.

Jovin works as a Consultant in the Application Security domain and has an experience of about 2yrs. He also is an active member of null - The Open Security community and is one of the chapter leads for the null Pune Chapter. He is also the author of game|0ver - an opensource Linux distribution built as a platform for learning Web Application Pen testing.

Anant Shrivastava is a Security Researcher. He holds a GWAPT, CEH, CSTP and RHCE. He has been speaker at various conferences like Nullcon, c0c0n, Clubhack, his talks are focused on android. He is the creator of Android Tamer – VM for android security professionals. Active member of Null, Garage4Hackers. His expertise remains in Linux, Web Applications (Dev and security testing) and Mobile devices (OS and Application) Security.

Security Researcher

Ajit Hatti is a Co-founder of "null -Open security community" the largest community of Hackers in India. Apart form securing technologies and products, he loves to design puzzles, CTFs and JailBreak at nullcon and other conferences.

Currently working with Symantec Corporation, he has worked as an Engineer and Researcher with many security companies like IBM-ISS, Bulelane, Zscaler in past.

Also he has presented his security research at BlackHat, NullCon and many other security initiatives like OWASP, ClubHack and various other security symposiums.

Co-founder,
Null - Open security Community

Francis Alexander is an Information Security Researcher. He has a strong vision of Free & Open Information Security Education for all. His areas of interest includes web app & standalone app security, DBMS security, coding tools and fuzzing. He has spoke at multiple conferences such as HiTB AMS 2014,Hack in Paris 2014,Derbycon USA 2013, Defcon Kerala and Defcon Bangalore.

Information Security Researcher

Tamaghna Basu, OSCP, GCIH, RHCE, CEH, ECSA, co-founder of www.weekendsecurity.org, is a security researcher at heart and has been his main areas of research include Web app security and network pen‐testing, exploit development, incident handling and cyber forensic. Being a software developer earlier, he worked in java, .net, ruby etc. and various domains like finance, insurance, gaming etc. He was the winner of NULLCON 2010's hacking challenge.

He is a SANS certified mentor for the course – “Sec 504: Hacker Techniques, Exploits and Incident Handling”. He also presented in other security conferences like NULLCON, C0C0N, OWASP, ISACA etc. Tamaghna is one of the core members of NULL security community, he facilitates Chennai/Bangalore NULL Chapter, a frequent speaker of NULL and OWASP meets, conducted multiple hacking workshops in NULL HUMLA, Bangalore. He is an active member of security communities like honeynet, NAISG, DSCI, Clubhack etc. He also contributed to security magazines like Clubhack and ISACA journal. He has achieved various other certifications like Cyber Crime Investigation, Diploma in Cyber Law etc.

co-founder of www.weekendsecurity.org

Talks by Tamaghna:

• “Network Forensic” at Ground Zero Summit, 2013 (www.g0s.org)
• “Web Application Security” at ISACA Bangalore 2013
• “Public Exploit Held in Private” at OWASP Conference Delhi 2012 (www.2012.owasp.in)
• “Client Side Exploits using PDF” at C0C0N Cochin 2010 (http://is-ra.org/c0c0n/)
• “JSON Fuzzing” at NULLCON Goa 2011(www.nullcon.net)
• “Practical Exploitation” at ISACA Bangalore Chapter 2011
• Information Security, Past, Present and Future” at Amrita College Cochin 2012

Trainings/workshops by Tamaghna:

• Network Forensics : 1 day workshop at Ground Zero Summit, 2013 (www.g0s.org)
• Network Forensics : 1 day workshop at C0C0N Trivandrum September 2013 (http://is-ra.org/c0c0n/)
• Hackers Versus Developers: 1 day workshop at Clubhack Pune December 2012 (http://www.clubhack.com/)
• Basics of Web Security: 1 day workshop at Payatu/TestYantra Bangalore November 2012
• Basics of Web Hacking: 1 day workshop at Amrita College Cochin September 2012
• Network Forensic: 1 day workshop at C0C0N Trivandrum September 2013 (http://is-ra.org/c0c0n/)
• Cyber Crime Investigation and Information Warfare : Multiple workshops for govt. agencies and defense organizations
• Cyber Security Awareness: 1 day workshop in BVB Eng. College, Hubli, 2014
• Ethical Hacking: at Corporates Bangalore 2010-11

Aseem Jakhar is the Director, research at Payatu Technologies Pvt Ltd a boutique security testing company. He has extensive experience in system programming, security research, consulting and managing security software development projects. He has worked on various security software including IBM ISS Proventia UTM appliance, Mirapoint messaging/security appliance, anti-spam engine, anti-virus software, multicast packet reflector, Transparent HTTPS proxy with captive portal, bayesian spam filter to name a few. He is an active speaker at security and open source conferences; some of the conferences he has spoken at include AusCERT, Defcon, Hack.lu, Blackhat, Xcon, Cyber security summit, Cocon, OSI Days, Clubhack, Gnunify. His research includes Linux remote thread injection, automated web application detection and dynamic web filter. He is the author of open source Linux thread injection kit - Jugaad and Indroid which demonstrate a stealthy malware infection technique. He is well known in the hacking and security community as the founder of null - The open security community, registered not-for-profit organization http://null.co.in , the largest security community in India and the founder of nullcon security conference http://nullcon.net.

Payatu Labs

AMol_NAik is a web application pentester working with Mercedes-Benz Research & Development India. He has more than 8 years of experience in Application Security, Ethical Hacking and Network security. He is listed in Google Security Hall of Fame, Facebook WhiteHat and Twitter Security page for reporting various vulnerabilities in their web applications. He won ClubHack preCON CTF 2011. His web hacking technique "Exploitation of Self-Only XSS in Google Code" qualified for “Top 10 web hacking techniques in 2011” contest run by Jeremiah Grossman.

Amol Naik,
Web Application Pentester,
Mercedes-Benz Research & Development, India

Rahul Sasi (fb1h2s) is working as a Security Researcher for a Global Research firm. He has authored multiple security tools, advisories and articles. He has been invited to speak at various security conferences like HITB [KL], BlackHat [US Arsenal], Cocon (2011, 2012), Nullcon (2011, 2012,2013), HITB (AMS 2012,2013), BlackHat (EU 2012), EKoparty (Argentina), CanSecwest(Canada 2013). His work could be found at Garage4Hackers.

Security Researcher

Aditya Gupta is the founder and trainer of Attify, a mobile security firm based in Bangalore, India. He is also the author of the recently published book “Learning Pentesting for Android Devices”, which has sold over 1800+ within 3 months of its launch. Apart from being the lead developer and co-creator of Android Framework for Exploitation (AFE), he has done a lot of in-depth research on the security of mobile devices, including Android and iOS, as well as BYOD Enterprise Security.

He has also discovered serious web application security flaws in websites such as Google, Facebook, PayPal, Apple, Microsoft, Adobe, Skype, and many more.

In his previous work at Rediff.com, his main responsibilities were to look after web application security and lead security automation. He also developed several internal security tools for the organization to handle the security issues.

He is also a member of Null — an open security community in India, and an active member and contributor to the regular meetups and Humla sessions at the Bangalore and Mumbai Chapter.

He also gives frequent talks and trainings at various security conferences from time to time, such as BlackHat, Syscan, Toorcon, PhDays, OWASP AppSec, ClubHack, Nullcon, and ISACA.

Yashin Mehaboobe is an SDR engineer at Bastille Networks. His areas of interest in this field span hardware security,network security, malware analysis and reverse engineering. He had discovered a denial of service vulnerability in Android. His work includes creating a secure file sharing service, automated malware detection system for the Raspberry Pi and a malware analysis framework in Python. He's been also invited to speak at HITB Amsterdam, Defcon Bangalore,Nullcon, c0c0n and Toorcon San Diego.

SDR engineer
Bastille Networks

Mrityunjay is a pass-out from the IIT, Kanpur with a Bachelors and Masters degree in Computer Science and Engineering. He has an overall 10 years experience in Information security and is currently serving as Security Manager for an MNC.

Security Researcher
Computer Security and Privacy Foundation

Akib works as a Telecom Security Consultant at Payatu technologies Pvt. Ltd. a boutique security testing company. His hobbies and interests are reading, learning and hacking Radio and SDR. He presented a paper on hacking GSM at nullcon Goa 2012 and speaks at null Meets.