Keynotes
![Picture of Coline Chavane](https://2024.cesar-conference.org/images/coline-sekoia.jpg)
Strategic cyber threat analyst, Coline Chavane is part of the Threat Detection & Research Team of Sekoia.io. She focuses on state-sponsored threats and geopolitical analysis. She had previous experiences working at the French National Cybersecurity Agency and at Thales.
![Picture of Amaury-Jacques Garçon](https://2024.cesar-conference.org/images/amaury-garcon.jpg)
Amaury-Jacques Garçon is a cybersecurity engineer working as technical Threat Intelligence analyst and focusing on the investigation of state-sponsored threats, currently at Sekoia.io . With professional experience in open source investigation, he has worked for the French Ministry of Armed Forces.
2024 Elections in the Crosshairs: Cyber Threats and Influence Operations
2024 is election year for a number of countries including the US, the EU, Moldova and India. This presentation will provide an analysis and feedback on the cyber threats targeting this year's electoral processes, based on the report "Guarding Democracy: Assessing Cyber Threats to 2024 Worldwide Elections" from Sekoia Threat Intelligence & Research (TDR). We will focus in particular on influence campaigns affecting elections, and deep-dive with our investigation on the DoppelGänger group.
![Picture of Elisa Chiapponi](https://2024.cesar-conference.org/images/elisa-chiapponi.jpg)
Elisa Chiapponi is a Security Researcher in the Global Security Operations of Amadeus (France). In 2023, she obtained her Ph.D degree in Cryptography and Security from Sorbonne Université (France) with a thesis titled "Detecting and Mitigating the New Generation of Scraping Bots" working on her research project in the Digital Security Department of EURECOM (France). In the spring of 2022 and 2023, she was a visiting researcher at the Resilient Computing and Cybersecurity Center (RC3) of King Abdullah University of Science and Technology (Saudi Arabia). In 2024, she was awarded Microsoft Partners Woman Role Model in the category Young Talent. In 2023, she obtained the second place at the Cyber Woman Researcher European Award by CEFCYS. Her domains of interest and expertise are Network and Application Security, Internet Measurements, Bot Mitigation and Proxy Identification.
Countering Residential IP Proxies: Detection Techniques and Strategic Insights
Residential IP Proxies (RESIPs) enable proxying requests through large networks of residential devices used concurrently by genuine users. These proxies are attractive to malicious actors because of their advantages in automated campaigns, including access to reputable residential IPs and integrated services like automated CAPTCHA solving. In this talk, we will showcase various types of attacks that exploit these proxies and introduce new methods to detect and prevent their activity on the server side. We will present successful results from applying these techniques in both semi-controlled and real-world environments. Additionally, we will offer new insights into the inner working and modus operandi of RESIPs, derived from our data collections.
![Picture of Mike Eftimakis](https://2024.cesar-conference.org/images/mike-eftimakis.jpg)
Mike Eftimakis has an extensive background in the electronics industry with 30 years in senior technical and business roles. He has been innovating with companies like VLSI Technology, NewLogic or Arm. He is now VP Strategy and Ecosystem at Codasip, where he drives the long-term vision and its day-to-day implementation. In parallel, he is a Founding Director of the CHERI Alliance.
The CHERI Alliance
The worldwide cost of cyberattacks now reaches an estimated $10 trillion per year. Memory safety issues continue to be the main source of cyber security problems and have consistently represented ~70% of vulnerabilities over the past 20 years. Therefore, there is a strong and increasing interest in CHERI (Capability Hardware Enhanced RISC Instructions), a technology that mitigates memory safety vulnerabilities by design. It provides security features at the hardware level that can be leveraged by the software to provide more robust security. It has been developed by University of Cambridge and other research labs, and after 14 years of improvement and tuning, it is now ready to go into products. However, getting the industry to adopt a new security technology requiring new hardware, is not something that will happen without a proactive and coordinated effort. This is the goal of the CHERI Alliance, a non-profit organisation created to accelerate the adoption of the technology. This talk provides an overview of the CHERI technology: the benefits it provide, an overview of how it works, and the constraints associated with its integration. It also introduces the CHERI Alliance: its objectives, its means and its roadmap.