Jason Jordaan

principal forensic analyst, DFIR Labs

Jason Jordaan’s forensic career began in 1991. He is considered a leading authority in the field of digital forensics and cyber crime investigation and prevention by his peers, both in South Africa and internationally. As the principal forensic analyst of DFIRLABS, a specialist digital forensics and incident response service provider, he is responsible for the leadership of the practice, digital forensics quality assurance, complex digital forensics engagements, research and development, and digital forensic practitioner training and proficiency, and regularly testifies as an expert witness. Prior to this, he was the national head of the Cyber Forensic Laboratory of the Special Investigating Unit, South Africa’s national public sector anti-corruption agency.

Jordaan is also an internationally respected researcher and trainer in the field of digital forensics, where he is the first African to have been admitted into the DFIR faculty of the prestigious SANS Institute, as well as the first African to become a certified instructor for the International Association of Computer Investigative Specialists. He regularly teaches digital forensics to both law enforcement and the private sector in the US, Europe and the Middle East. He has an MSc (computer science) Cum Laude, an MTech (forensics investigation), a BComHons (information systems), BSc (criminal justice computer science) Summa Cum Laude, and a BTech (policing). He is a certified forensic computer examiner, a certified fraud examiner, a professional member of the Institute of Information Technology Professionals of South Africa, a professional member of the Chartered Society of Forensic Science, a GIAC Computer Forensic Examiner, a GIAC

computer forensic analyst, and a GIAC certified incident handler. He teaches digital forensics and incident response at Rhodes University for the MSc degree in information security and serves on the advisory boards of the Department of Computer Science and the University of Pretoria. He serves on the assessment board of the Netherlands Register for Court Experts, where he is responsible for assessing the competency of expert witnesses in the field of digital forensics in Dutch courts.

Jason Jordaan will be speaking on the following topics:

Best practice in threat intelligence collaboration and sharing

When one looks at critical attacks in the physical world, such as the Japanese attack on Pearl Harbour in World War II, or the 9/11 attacks against the World Trade Centre and the Pentagon, intelligence failures were identified that could have mitigated the impact of the attacks, if not stopping them altogether. We see the same thing happening in the cyber world, where intelligence efforts are fragmented, not only within government, but also in the private sector. If you look at the South African situation, our cyber threat intelligence environment is segmented and fractured, and there is significant distrust. We are not alone in this. So how do we try and improve the situation? How do we improve our ability to share threat intelligence to protect us all, and to collaborate on common threats? This presentation will explore some of the mechanisms and frameworks currently in operation around the globe aimed at improving our ability to share cyber threat intelligence that is meaningful, as well as how we can better collaborate against a common enemy, the cyber threat actors:

• Identifying the common problems in threat intelligence collaboration and sharing

• What do we actually mean by threat intelligence?

• Uniting against a common threat

• Building networks of trust

• Intelligence frameworks and platforms

Panel Discussion What is needed to encourage more local collaboration in threat intelligence?

Gold Sponsor

Silver Sponsors

Bronze Sponsors

Display Sponsors