Welcome & Introduction to Black Hat Asia 2017

Overview: Jeff Moss, founder of Black Hat and DEF CON, opens Black Hat Asia 2017 in Singapore alongside Doug Brown, Managing Director for Asia-Pacific at Qualys. Celebrating the rapid expansion of the cybersecurity ecosystem across Southeast Asia, Moss reviews the global growth of the conference, community investments including student scholarships, and the broadening international representation of attendees. The opening remarks examine the shifting digital landscape—where rapid digital transformation, cloud migrations, and Internet of Things (IoT) adoption converge with geopolitical conflicts and national policy scrutiny—placing cybersecurity professionals at a pivotal historical crossroads.

Key Topics: - Growth and community impact of Black Hat Asia: 8th Singapore event and addition of a fourth track - Fostering the next generation: 31 student academic scholarships awarded across Singapore universities - Global delegate diversity: Attendees from 61 countries and international threat intelligence exchange - The convergence of technical infosec, corporate digital transformation, and national public policy

Technical Details: Black Hat Asia 2017 marked the eighth overall Black Hat conference held in Singapore, following the initial international event launched in 2000. Jeff Moss reflects on the rapid maturity of the information security discipline in Southeast Asia, noting that the 2017 event expanded attendance by nearly 20% compared to previous years, necessitating the addition of a fourth technical briefing track. Emphasizing community stewardship, the conference awarded 31 full academic scholarships to Singapore university students who submitted competitive technical research papers on IT and cybersecurity topics. The conference achieved record global diversity, convening delegates from 61 different countries, including single-representative delegations from 21 nations such as Algeria, American Samoa, Bahrain, Cambodia, Cameroon, Cyprus, Iceland, Malta, Papua New Guinea, Qatar, Romania, Sudan, Tanzania, and Tunisia.

Following Moss's remarks, Doug Brown of Qualys contextualized modern enterprise security through the lens of Sun Tzu's The Art of War: "Know thy enemy, know thyself." While cybersecurity practitioners excel at analyzing external threats—including malware campaigns, zero-day vulnerabilities, ransomware families, and exploit feeds—the modern corporate paradigm of "knowing oneself" has grown exponentially complex. Organizations are aggressively undergoing digital transformation, deploying critical workflows across multi-cloud environments, modern web APIs, and Internet of Things (IoT) infrastructure accessible from mobile endpoints globally. This operational decentralization dramatically expands enterprise attack surfaces, requiring continuous automated asset discovery and vulnerability intelligence.

Jeff Moss returned to highlight a macro tipping point facing the global security community. For over two decades, the software engineering sector operated under an economically rewarding "race to the bottom" characterized by a "just ship it" mentality that prioritized speed-to-market and feature velocity over software security. Moss argues this paradigm is now directly colliding with public policy and governmental awareness. Driven by prominent nation-state cyber operations—such as foreign interference in the United States presidential election—policymakers, regulatory bodies, and corporate boards are scrutinizing the systemic societal impacts of insecure software. Consequently, cybersecurity practitioners have transitioned from isolated technical roles into essential advisors shaping corporate governance and international policy.

Key Takeaways: Digital transformation and multi-cloud adoption have decentralized corporate infrastructure, making internal asset visibility and continuous exposure management as vital as tracking external adversaries. The historic technology culture of releasing unhardened software to meet market deadlines is facing unprecedented regulatory and geopolitical scrutiny. Cybersecurity practitioners must step beyond technical silos, actively participating in public policy, educational mentorship, and inter-organizational collaboration to address the societal risks of digital connectivity.

(AI summary — Gemini Flash)