2016 eFraud Global Forum AGENDA February 29, 2016 InterContinental Hotel, San Francisco, California 2016 eFraud Global Forum Topics (Listed in Alphabetical Order) NOTE: Subject to change 7:15am – Continental Breakfast 5:45pm – Closing Remarks & Cocktail Reception Series of Peer-to-Peer Sessions during Lunch A Dyre Deep Dive – Unfortunately, Not Just Another Zeus Making its debut in 2014, Dyre is proving to be a game changer. This case study will dive into what is new and unique, how criminals’ modus operandi has shifted, and the Global nature of the attacks. Leading organizations will present their experience with Dyre – showcasing the need for new antifraud strategies and how industry needs to operate to battle these attacks. Best Practices in Assessing Risk How strong is your fraud assessment process? Once you have identified all your enemies, what next? This discussion will help define the process and best practices in assessing risks. We will discuss the importance of coordinating market intelligence across your organization, the analysis process, and disciplines in evaluating risks and fraud trends. EMV Lessons Learned and the Post EMV Shift The international community has learned a lot from their EMV implementations. This session will share lessons learned, the changes in fraudster MO, and how the fraud scene has shifted to alternate fraud routes. Fraud and Abuse @ Uber This session will review the unique and complex challenges faced by the Fraud Operations team at Uber. New types of authentication, interesting investigation techniques and real case studies will be discussed. Hot Off the Press Attacks & Emerging Threats The landscape is constantly changing, as cyber criminals develop new, more profitable business models, new tools, new victims, and more sophisticated versions of proven malware. A panel of fraud prevention leaders will discuss the most recent set of attacks and how they prepared and responded. They will also share crystal ball predictions of what to expect next. eFraud Global Forum February 2016 Page 1 of 2 2016 eFraud Global Forum AGENDA February 29, 2016 InterContinental Hotel, San Francisco, California Identity Theft Next Generation – What Now? With the onslaught of data breaches (new and old), aggressive (successful) phishing and social engineering efforts, along with complex identity theft attacks, a staggering amount of personal information has already been collected by the underground. Patient fraudsters, armed with all the information they need, are developing more sophisticated and targeted attacks. This session will cover case studies of this next generation of targeted attacks including those on high value customers. Identity Theft through Internet of Things A detailed review of the data sets being collected through these vulnerable vectors, as well as the where, how and the privacy policies of many IoT devices. The goal of the presentation is to define the profiles that are being developed by fraudsters as they gather personal information well beyond standard “PII.” Law Enforcement Town Hall – Recent Case Studies & Open Discussion A review of recent creative and complex investigations by law enforcement. Presentations will be followed by an open forum for candid discussion. The Black Cloud: Highlighting the Peril of Password Reuse Criminals are harvesting usernames and passwords from cloud-based services in order to engage in "breach vectoring" - the reuse of credentials to access to other cloud-based services or to infiltrate corporate portals. Recent examples show that criminals have had surprising success at decrypting passwords that were believed to be securely encrypted. This presentation will examine how this activity is taking place and will discuss the threat it poses. The Fraud and Risk Implications of Block Chain for Next Generation Payment Systems The technology behind bitcoin is generating much interest for applications beyond cryptocurrency. This session will review the highlights and security benefits of this “open platform”, its potential applications, as well as its limitations and possible risks. USAA Biometric Authentication Journey This session will showcase USAAS’s journey to their successful biometrics implementation: the goals of deployment, roll-out/implementation, lessons learned, and best practices developed. Session will include a discussion on the legal considerations around biometrics and how it should work with other strategies such as strong analytics. eFraud Global Forum February 2016 Page 2 of 2