BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.hackfest.ca//hf2022//speaker//XZTDEB
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-hf2022-GWWJGZ@cfp.hackfest.ca
DTSTART;TZID=EST:20221029T173000
DTEND;TZID=EST:20221029T175000
DESCRIPTION:Attributing a new campaign or malware to a known group is not a
 n exact science. The skills it requires and the considerations surrounding
  it aren't given nearly as much importance as the technical aspects of mal
 ware analysis in training and discussions. Yet\, it is often the part that
  will garner the most attention from journalists and the general public. P
 roper attribution can add great value to a report\; helping organizations 
 relate new activity to their threat model and providing researchers and la
 w enforcement with the means to link clusters of activity. When done wrong
 \, however\, it can undermine the credibility of the field and generate un
 due alarm. Since researchers base their attribution on available material\
 , incorrect links can lead future efforts astray and create lasting confus
 ion.
DTSTAMP:20260909T153047Z
LOCATION:Track 1
SUMMARY:Clustering Malware Activity: How We Do Attribution - Alexandre Côt
 é Cyr
URL:https://cfp.hackfest.ca/hf2022/talk/GWWJGZ/
END:VEVENT
END:VCALENDAR