In this talk, we discuss several strategies to make machine learning models more robust to such attacks. We'll discuss research that shows how singular models are susceptible to tampering, and some techniques, like stacked ensemble models, can be used to make them more resilient. We also talk about the importance of diversity in base ML models and technical details on how they can be optimized to handle different threat scenarios. Lastly, we'll describe suspected tampering activity we've witnessed using protection telemetry from over half a billion computers, and whether our mitigations worked.

User Agents are for the birds! Learn one easy to implement way to detect SSL MITM, curl, wget, and other unfavorable traffic interacting with your Command and Control server.

This talk draws from over four years of Incident Response experience to lay out a technical buffet of in-the-wild malicious PowerShell payloads and techniques. In addition to diving deep into the mechanics of each malicious example, this presentation will highlight forensic artifacts, detection approaches and the deep visibility that the latest versions of PowerShell provides security practitioners to defend their organizations against the latest attacks that utilize PowerShell.

The story of Walmart's Purple Team, what they learned throughout their engagements, and some of their successes and failures over the years.

MITRE ATT&CK™ has become widely adopted in the community as a way to frame adversary behaviors and improve defenses. But how can you use it for your team with what you have, where you are? Katie Nickels will break down the ATT&CK knowledge base so you understand how you can put it into action. She will explain the philosophy and approach behind ATT&CK, then dive into how you can use it, whether you’re a one-person shop or an advanced security operations center. Katie will cover how you can use ATT&CK for detection, threat intelligence, assessments, and red teaming, with a focus on actionable takeaways to help your team move toward a threat-informed defense.

Today we have more information on security flaws than any human can process. This talk will focus on practical ways to translate data into action. What are the key principles to drive action? How do security professionals use the abundance of data to prioritize and resolve issues?

Ben Miller tests Sp4rkCon 2019 speakers' knowledge in a round of Hacker Jeopardy.

Jerry Geisler and Adam Ely share their perspectives and experiences on career journeys and their insight in the industry.

An overview of discovery strategies and process.

This session will introduce you to Walmart’s Bug Bounty adventure – take the journey with us as we talk pain points and what areas we focused on maturing.

There are powerful malicious document generation techniques that are effective at bypassing anti-virus detection. A technique which we call “VBA stomping” refers to destroying the VBA source code in a Microsoft Office document, leaving only a compiled version of the macro code known as p-code in the document file. Maldoc detection based only on the VBA source code fails in this scenario. Reverse engineering these documents presents significant challenges as well. Come find out what is new with VBA Stomping since our presentation on the topic last year.

Walmart presents a donation to Hackers for Charity.