As Chief Information Security Officer (CISO), Flavio Aggio is responsible for Information Security and Cybersecurity at the World Health Organization (WHO). Additionally, he represents WHO in key forums focused on Information Security and Cybersecurity. With more than 30 years of experience in specialized chemical manufacturing, semiconductor, consumer product, government, and international organization industries, Flavio brings tremendous technical leadership and operational expertise to WHO.

Prior to joining WHO, Flavio was the Chief Technology Officer at the City and County of San Francisco, where he developed technology solutions to modernize and protect the city. Before that, he held technical leadership positions in Enterprise Architecture, Project Management, Telecommunications, and IT operations with Unisys, ASML, Dow Chemical, and Rohm & Haas. In 2014, Flavio enabled the interconnection of the San Francisco and San Jose WiFi networks. The two cities were using a new technology (Hotspot 2.0) allowing smartphones to automatically connect and roam between their two networks as well as provide a layer of security on what would not normally be available in wide-open public hotspots.

Flavio holds a Bachelor of Science in Physics from Sao Paulo University in Brazil and an Executive MBA from Temple University in the USA.

As credit card fraud becomes less challenging to detect in part because of advancements in fraud prevention technology, fraudsters have turned to creative forms of fraud to steal merchandise from online companies. In this session, e-commerce fraud consultant Karisse Hendrick will speak with Dajana Gajic-Fasic, the Head of e-commerce fraud and risk management for Finishline and JD Sports. Dajana will share war stories of cybercriminals creatively gaming the system, often without using a stolen credit card. And more importantly, how she is making it virtually impossible for them to succeed. 

Dajana Gajic-Fisic is a Head of ecommerce Risk Operations for JD Sports US/ The Finish Line and has been in the fraud industry for over 18 years. Currently Dajana is in charge of risk operations and oversees payment security, transactional fraud screening, ATO, policy abuse, loyalty program abuse and any additional post fulfilment risks to which merchants may be exposed.

During her career, Dajana had the opportunity to work with many known retail brands, as well as with financial institutions. As the result of her experience Dajana has created and adopted a unique approach to risk mitigation operations. This 360 approach focuses on segmenting fraud/risk operations into four components: prevention, investigation, reporting and analytics, and strategy. Each component feeds into the next one, creating a holistic picture of the fraud and risk, helping organizations learn from the historical data and be proactive. In addition, to identify key players within an organization and make them part of the process. The goal is to increase cross department collaboration as well as collaboration with third party vendors for most successful risk management. This helps ensure that all internal and external key players are operating in the way that feeds into the larger enterprise’s target: to increase revenue at minimal risk, with minimal friction.

For this unique approach and successes that followed, Dajana was named by a Retail Info Systems, a 2019 Industry Pacesetter: Fast Rising Retail Executive. 

Beau Woods is a Senior Advisor with CISA, Cyber Safety Innovation Fellow with the Atlantic Council, a leader with the I Am The Cavalry grassroots initiative, Founder/CEO of Stratigos Security, and sits on the board of several non-profits.

His work bridges the gap between the security research and public policy communities, to ensure connected technology that can impact life and safety is worthy of our trust. He formerly served as Entrepreneur in Residence with the US FDA, and Managing Principal Consultant at Dell SecureWorks. Over the past several years in this capacity, he has consulted with the energy, healthcare, automotive, aviation, rail, and IoT industries, as well as cyber security researchers, US and international policy makers, and the White House.

Beau is a published author, frequent public speaker, often quoted in media, and is often engaged for public or private speaking venues.

As digital transformation continues to accelerate amidst the evolving COVID pandemic status, adversaries have been customizing advanced digital fraud operations to automate and scale the process of stealing and using digital credentials, leading to unprecedented peaks in identity theft and financial fraud.

In one of our recent war stories, our researchers uncovered and analyzed the kill chain of a sophisticated reverse proxy man-in-the-middle phishing automation framework that is used in the hands of fraudsters to compromise digital accounts, bypass MFA methods, and take accounts over swiftly and at scale. The session will include a reconstruction of the attack crafted in our research labs.

Open to all audiences, this session will focus on the newest and most advanced fraud techniques, automation frameworks, and account take over operations, devised by cybercriminals to address the ever growing digital footprint of users across the globe, and the staggering volume of compromised user credentials that fuel the cybercrime economy

Danna Pelleg heads the Cybersecurity Research Group at IBM Trusteer Labs. In her role, she oversees the analysis and reverse-engineering of advanced threats in mobile and desktop domains. Pelleg also leads a cybersecurity web research lab to combat fraud. Moreover, she is responsible for threat intel research across different industries. She previously worked at RSA Security, where she examined threats in the banking industry. Pelleg holds a BA in behavioral science.

Dr Abed is a medical doctor and healthcare cybersecurity/national security expert. His primary fields of specialisation are cyber-warfare and crime targeting hospitals and safety critical infrastructure. Based in London, Dr Abed is a Partner and Director of Cybersecurity Services at the clinical security advisory and technology services organisation, The AbedGraham Group, and holds additional independent expert roles and accreditations for the European Commission, World Health Organisation and UK Infrastructure and Projects Authority. Academically, he holds degrees in Medicine (St.George’s Hospital Medical School, University of London), Management (U. of Cambridge) and Software and Systems Security (U. of Oxford).

Several short descriptions of real-world failures of advanced AI fraud detection. What went wrong, why, and what it cost.
 

Ted Crooks was in AI before AI was in fraud management. Ted was the original product manager for Fal- con, the first commercial machine-learning success and a pioneer of AI-based fraud detection. Later, he was FICO’s VP Global Fraud Solutions; co-founder of AI and risk-management startups; inventor of 12 patents; author of three technical books; and today, he consults for payment networks, processors, banks and fraud-system vendors.

Stephen Kavanagh joined the Metropolitan Police in 1985 where he served in the Homicide Command, Anti-Corruption Command and later as the Staff Officer to London Gold for the 7/7 bombings and the attempted bombings in 2005.

Mr Kavanagh has held a number of senior roles including Commander Counter Terrorism (SO15), Deputy Assistant Commissioner for Territorial Policing, where he was responsible for over 20,000 uniformed personnel and staff. He was selected for the role of Deputy Assistant Com-missioner for Specialist Operations, New Scotland Yard, where he worked closely with the UK Home Office and other security partner bodies to transform the delivery of the ‘Protect and Prepare’ counter terrorism strands for London.

In 2013, Mr Kavanagh was appointed as the Chief Constable of his home county, Essex. There, he guided his Force through a period of austerity with a focus on unlocking workforce potential and transforming the operating culture and organizational IT infrastructure. His emphasis on collaborative partnerships across Essex County

Josephine Wolff is an assistant professor of cybersecurity policy at the Tufts Fletcher School of Law and Diplomacy. Her book "You'll See This Message When It Is Too Late: The Legal and Economic Aftermath of Cybersecurity Breaches" was published by MIT Press in 2018. Her writing on cybersecurity has also appeared in Slate, The New York Times, The Washington Post, The Atlantic, and Wired.

Prior to joining Fletcher, she was an assistant professor of public policy at the Rochester Institute of Technology and a fellow at the New America Cybersecurity Initiative and Harvard's Berkman Klein Center for Internet & Society.