CSA HKM Knowledge Sharing Event – February 2024

CSA Knowledge Sharing Event provides an excellent opportunity for cybersecurity professionals to discuss the latest trends and developments in IT and in the process build a close-knitted cybersecurity community in Hong Kong and Macau.

This month we have invited Mr Louis Cheung, Senior Regional Systems Engineer from Illumio, to deliver a talk on “Extend the Zero Trust Segmentation to the Cloud environment”.

Modern organizations rely on the cloud to run their critical systems and store their most valuable data. Despite this, it’s evident that today’s cloud security solutions are continuing to fail when it comes to safeguarding companies against breaches.  This session will covers key findings from the Cloud Security Index 2023 and the issues plaguing cloud deployments today.

Please do not miss this opportunity to learn from the expert and connect with your peers. Participants may claim 1.5 CPE.

DETAILS:

DATE: February 7, 2024 (Wednesday)

TIME: 12:30 – 1:30 pm

FORMAT: Webinar
TOPIC: Extend the Zero Trust Segmentation to the Cloud environment
LANGUAGE: Cantonese
SPEAKER: Louis Cheung, Sr. Regional Systems Engineer, Illumio

VIEW THE PRESENTATION: https://youtu.be/ucY27sn2VkM

THE SPEAKER:

Louis Cheung has over 20 years’ experience in security industry helping enterprise customer in consultation, solution design and security best practice across Asia Pacific. He helps prospects and customers understand micro-segmentation in all its forms and how Illumio solve problems for organizations across different industries.

Louis Cheung is specializebd in multiple security domains across Zero Trust Architecture, Micro-Segmentation, Intrusion Prevention, Public Cloud Application and Workload protection, Data Protection, Advanced Threat Prevention & Next Generation Firewall Technologies.

Before joining Illumio, Louis served regional and global enterprise customers across the globe by working with world-leading IT security firms including McAfee & Check Point. Louis Cheung also hold the following security industry certifications: Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA) and Certified Kubernetes Administrator (CKA).

Cyber Security Professional Awards (CSPA) 2023


The Cyber Security and Technology Crime Bureau of Hong Kong Police Force, the Government Computer Emergency Response Team Hong Kong and the Hong Kong Computer Emergency Response Team Coordination Centre are going to co-organise the Cyber Security Professional Awards (CSPA) 2023. 

The CSPA 2023 aims to foster collaboration and exchange of cyber security expertise and best practices among various prominent sectors in Hong Kong.  This unique platform allows cyber security personnel to showcase their achievement, while also recognising their remarkable contributions to the field.

This year, the CSPA 2023 extends its invitation to all personnel working in organisation belonging to the designated sectors listed below in Hong Kong:

1. Internet & Cloud Services
2. Telecommunication Services
3. Government Departments & Public Bodies
4. Transportation & Public Utilities
5. Banking & Finance
6. Cyber Security Audit & Consulting
7. Cyber Security Education & Training
8. Cyber Security Startups & SMEs

The judging panel, hailing from diverse prominent sectors, will evaluate and select the best participants for the gold, silver, bronze and merit awards for each of the eight designated sectors. 

For further details of the CSPA 2023, please visit https://cyberdefender.hk/en-us/cspa2023/.  Should you have any queries, please feel free to contact 3660 4367 or email to cspa@police.gov.hk.

CSA HKM Supports the Cybersecurity Symposium 2023

The Cybersecurity Symposium 2023 aims to unite quangos, enterprises and other local organisations in Hong Kong to address the cybersecurity challenge in the digital era and explore how the industry can collaborate to enhance the overall cybersecurity resilience of Hong Kong. The symposium features keynote presentations, panel discussions, solution showcases, and a networking reception, presenting opportunities for participants to network with peers and exchange insights on strategies for mitigating cyber threats.

Cloud Security Alliance Hong Kong & Macau Chapter is a proud supporter of the event.

DATE: December 14, 2023, Thursday
TIME: 2:30 – 7:00 pm
VENUE: Convention Hall, Hong Kong Convention and Exhibition Centre
LANGUAGE: Cantonese and Putonghua
DETAILS: https://www.cybersechub.hk/en/eventDetail/cybersecurity-symposium-2023
REGISTRATION: https://forms.office.com/Pages/ResponsePage.aspx?id=cotCu30YH0CsJCiWwGVGR7kFoIkWelVKthyaiJE1VBxURFlXRDM2MlBWUENIWTNYNU5PT0xKR0QzNiQlQCN0PWcu

CSA HKM Knowledge Sharing Event – December 2023


In the last CSA HKM Knowledge Sharing Event of the year, our expert speaker will share his experience on how to infiltrate US DoD.

During the Covid-19 pandemic meant that most of us were confined indoors. During the lockdown period, our speaker Sheikh Rizan had a brief stint with Bug Bounties. He started hacking for hackerone, bugcrowd and yeswehack. One of his targets was the US Department of Defense public Cloud hosted servers & NASA VPNs.

In the session he will tell his story of how he found several critical vulnerabilities that allowed him to exfiltrate PII (personal identifiable information) data belonging to new army recruits, reset accounts belonging to US Military personnels. All his findings were responsibly disclosed via their respective BBP and VDP programmes back in 2020. The reports had been made public at his hackerone profile.

Participants will claim 1 CPE.

DATE: December 15, 2023 (Friday)
TIME: 12:30 – 01:30 pm
FORMAT: Webinar
TOPIC: Infiltrating US DoD – The Journey & Experience
LANGUAGE: English
SPEAKER: Sheikh Rizan, Security Researcher

THE SPEAKER:
Rizan is a passionate Cybersecurity professional with more than 20 years of experience. He holds several industry relevant certifications including CISSP, CISA, OSCP, OSCE & OSWE. He had published 9 public CVEs and had reported security bugs to various Bug Bounty and VDP programmes. Rizan was also part of a Cyber security surveillance group supporting law enforcement agencies globally in lawful interception. He is currently leading a group of talented security testers for consulting firm based out of Kuala Lumpur, Malaysia. He is also a certified Trainer and had presented technical talks at several Cyber Security conferences in the region.

VIEW THE PRESENTATION: https://youtu.be/CeQXGBget2o

CSA HKM Supports the ICT Conference 2023

The Cloud Security Alliance Hong Kong & Macau Chapter is pleased to support the ICT Conference 2023, with a theme of “Embrace AI for your Digital Life”.

In order to converge the emerging technologies and create platforms integrating these edge technologies for ICT professionals, ICT conference provides a forum for the government officials, key industry professionals, and university researchers to share on the government policy, the opportunities and threats in the ICT era, as well as the latest development and applications which will help Hong Kong be constructed as a competitive smart city.

Event: ICT Conference 2023
Date: November 3, 2023  (Friday)
Time: 09:45 to 17:00
Venue: Louis Koo Cinema @ The Hong Kong Arts Centre (located at 2 Harbour Road, Wan Chai, HK)
Platform: Physical
Website: https://ictconference.hk/

CSA HKM Supports Hong Kong Cyber Security New Generation Capture the Flag Challenge 2023

The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) and the Hong Kong Productivity Council (HKPC) will jointly organise the “Hong Kong Cyber Security New Generation Capture the Flag (CTF) Challenge 2023” (The Contest) to strengthen the cyber security skills and awareness of the industry and students and encourage problem solving through teamwork, creative thinking and cyber security skills.

The Cloud Security Alliance Hong Kong & Macau Chapter is a proud supporter of the event.

The Award Presentation Ceremony will be held on December 19, 2023. Apart from presenting the awards to the winners, cyber security experts will also be on hand to share their views on cyber security and how to leverage vulnerability management solutions to improve security and security risk management. Besides, there will be two panel discussions on attack and defense techniques.​

Date:19 December 2023 (Tuesday)
Time:AM Session: 09:15 – 12:35 (Registration will start at 09:00)
PM Session: 14:30 – 17:00 (Registration will start at 14:00)
Venue:Conference Hall, 4/F, HKPC Building, 78 Tat Chee Avenue, Kowloon Tong, Kowloon
Audience:General Public, Education Sectors and SMEs
Language:Cantonese
Fee:Free (Pre-registration is required)
Event Link:https://www.hkcert.org/event_en_20231219
Online Registration:https://alt.jotfor.ms/hkcert/capture-the-flag-2023-seminar231219

CSA HKM Supports CS Summit 2023

The Cloud Security Alliance Hong Kong & Macau Chapter continues to collaborate with the Hong Kong Productivity Council and other prominent information security organizations in Hong Kong to organize the Cyber Security Summit Hong Kong 2023, which is one of the largest local cybersecurity events in the region. Previously known as the IS Summit, the event has been renamed the CS Summit to reflect a sharper focus on cyber security.

The summit’s main goal remains unchanged: to provide participants with the latest insights into information security trends and developments. Theme of this year is “Securing Enterprises to Prepare for the Pos Quantum & AI World“.

Attendees can expect a more concentrated program that delves deeper into various aspects of cyber security, addressing emerging threats, industry best practices, and innovative solutions especially related to Post Quantum and AI related topics.

Details:

Date:11 – 12 September 2023
Time:09:00 – 18:00
Venue:Room N201-N212, 2/F, New Wing, HKCEC, 1 Expo Drive, Wanchai, Hong Kong
Fee:Free (Registration is required)
Registration: https://www.cssummit.hk/registration/
Details:https://www.cssummit.hk/
Home

CSA HKM Supports the Hong Kong International Computer Conference 2023

The Hong Kong International Computer Conference (HKICC) is an annual flagship event organised by the Hong Kong Computer Society (HKCS) since 1978 and is one of the best and most popular ICT conferences in Hong Kong. It brings together ICT professionals and experts, government leaders and business executives from local and abroad to share and discuss the latest trends of ICT innovations and developments in enhancing business opportunities and productivity.

Cloud Security Alliance Hong Kong & Macau Chapter is pleases to support the event again this year.

Date:                     27.9.2023 (Wednesday) & 28.9.2023 (Thursday)
Time:                    9:30am – 5:40pm
Format:               Physical Conference
Venue:                 Room S421, Hong Kong Convention & Exhibition Centre
Website:             https://hkicc.hkcs.org.hk/
Registration:    https://www.eventbrite.hk/e/hong-kong-international-computer-conference-2023-tickets-695765843367?aff=oddtdtcreator

CSA HKM Supports “Protect Your Online Identity” Seminar & Speech Contest Award

The Office of the Government Chief Information Officer, the Hong Kong Police Force and the Hong Kong Computer Emergency Response Team Coordination Centre has jointly hosted the Speech Contest to remind the general public to safeguard their digital identities when using the Internet, and to protect personal and sensitive information to prevent exploitation by fraudsters.   Cloud Security Alliance Hong Kong & Macau Chapter is a supporting organisation of the activity.

The award presentation ceremony will be held on 22 September 2023. Apart from presenting the awards to the winners, cyber security experts will give useful tips and advice on the protection of digital identities in order to mitigate the damage caused by identity theft.

DATE:22 September 2023 (Friday) 
TIME:AM Session: 09:30 – 12:15 (Registration will start at 09:00) PM Session: 14:30 – 17:00 (Registration will start at 14:00)
VENUE:Quarry Bay Community Hall (G/F Quarry Bay Community Complex, 1 Greig Road, Hong Kong)
AUDIENCE:Members of the public, including SME staff, IT professionals, Teachers and Students
LANGUAGE:Cantonese
FEE:Free (Pre-registration is required)
REGISTRATION:https://www.hkcert.org/event_en_20230922

Efficient Cyber Threat Investigation and Response with CyberSecurity Platform Survey

Most organization has deployed multiple security products against sophisticated cyber threats such as ransomware attacks. They need to spend more than 45 mins to collect and analyzing the information from multiple security products when a cyber threat happens in their environment. The entire project idea is captured as below research question.

One of previous guest speaker – Ricky Mok, who is also a MSc research student in University of Portsmouth would like conduct a survey research in the CyberThreat Investigation and Response with CyberSecurity Platform in both on premises and Cloud Computing environment.

The research study involves completing a questionnaire that will cover a range of topics related to efficient cyber threat investigation and response with a cybersecurity platform. The questionnaire is designed to be user-friendly and should take approximately 15 mins to complete. Your responses will be treated with the utmost confidentiality, and any identifiable information will be anonymized and kept strictly confidential in accordance with applicable data protection laws.

Your participation in this study is completely voluntary. There are no anticipated risks associated with participating in this research study, and your participation will not have any impact on your current position or affiliation.

To participate, please follow the instructions below:

Subject: Invitation to Participate in a Research Study Questionnaire

I hope this letter finds you well. I am writing to invite you to participate in an important research study that aims to determine the efficient cyber threat investigation and response with a cybersecurity platform

As an esteemed member of the Cloud Security Alliance HK Chapter, your valuable insights and expertise would greatly contribute to the success of this study. Your participation will help us gather comprehensive data and insights that will advance knowledge and contribute to the development of cyber threat detection and response.

The research study involves completing a questionnaire that will cover a range of topics related to efficient cyber threat investigation and response with a cybersecurity platform. The questionnaire is designed to be user-friendly and should take approximately 15 mins to complete. Your responses will be treated with the utmost confidentiality, and any identifiable information will be anonymized and kept strictly confidential in accordance with applicable data protection laws.

Your participation in this study is completely voluntary, and you have the right to withdraw at any time without penalty. There are no anticipated risks associated with participating in this research study, and your participation will not have any impact on your current position or affiliation.

To participate, please follow the instructions below:

  1. Access the online questionnaire using the following link: https://docs.google.com/forms/d/1AXmlvmoGk0inSjNRIcVo8xuOmucBlhMJV8fi2EinIjM/edit
  2. Answer each question to the best of your knowledge and provide any additional information as requested.
  3. Should you have any questions or concerns about the research study or questionnaire, please do not hesitate to contact Ricky Mok at up2086702@myport.ac.uk. Your feedback and input are highly valued, and we are available to address any queries you may have.