1st ECA Cybersecurity Workshop

Welcome by the host
Guido Berghmans, General Manager Casino 2000

Goal of this workgroup: Promote the exchange of information by creating a relationship of trust between cyber security specialists from different casinos

Presentation of the agenda - short introductory round by all participants

Presentation by Samy Baiwir, Founder & Chief Hacking Officer at Cybernoob and Technical lead at F3C-Systems, Belgium

Bio: Samy BAIWIR is the founder of Cybernoob company. He has been working a wide range of networking, systems and security projects through multiple consultancy position. Samy has 2 visions of an ethical hacker (red) and a technical implementor (blue)

Teaser: In this engaging and eye-opening keynote, Samy Baiwir, founder of Cybernoob, will take the audience on a journey into the mind of an attacker.

With a focus on practical, real-world insights, the presentation will reveal how attackers operate, highlighting the often-overlooked vulnerabilities that can lead to a breach. Attendees will learn how to shift their perspective, focusing less on the abstract promises of technology and more on understanding the tangible threats targeting their infrastructure.

Member Presentations:
(Casino type – number of employees – IT department size - IT department missions – projects - challenges)

Azure Under Threat: Unpacking Initial Access Attack Techniques

Bio: Patrick MKHAEL is a Senior Offensive Security Engineer & Research and Development lead at Hacknowledge Luxembourg. He has a 10-year-background in IT Systems and has specialized for the last 5 years in Cybersecurity.

François-Jérôme DANIEL is leading the Hacknowledge offensive security team. For the past 8 years, he has been working on a variety of missions, including Red Team engagements, adversary simulation tests with creative phishing scenarios, as well as all sorts of penetration tests (web application, internal, external, physical, etc.).

Teaser: As organizations increasingly migrate to the cloud, leveraging the robust capabilities of platforms like Microsoft Azure, the importance of understanding and defending against initial access attacks cannot be overstated. These attacks represent the entry point for many cybercriminals, seeking to exploit vulnerabilities and establish a foothold within your systems.

Presentation Sebastien CHAUCHARD – CASINO 2OOO Luxembourg

Bio: Sebastien Chauchard is the CISO of CASINO 2OOO. After several position in different industry in system, network and security, Sebastien is passionate by security monitoring systems.

Teaser: Augmentation of security level with a strategic and pragmatic plan.

Group photo shoot

Discussion of Cybersecurity topics

Cloud posture:
Providers have changed their way to sell products since several years. Software previously installed “on premises” are now hosted in the cloud. What is your strategy about that and how to secure those applications?

AI :
Artificial intelligence is growing faster and faster. It helps a lot of company to be more productive. As AI is generally a black box, how to use it correctly without any security issue?

Supply chain :
How do you keep control of your cybersecurity and data at your suppliers? We see that we are depending heavily on gaming providers which are sometimes not really on par with the security standards. Can/should we make a branch statement for ISO27001/ ISAE3402 assurances?

Security audits:
Penetration testing (often called “pentest”) are a way to evaluate security issue. How do you organize them? What scope of information system do you target?

Cyber crisis:
Are you prepared for a cyber crisis? When an incident happens, it’s too late, but company need to be strong and organized to recover initial situation?

Employee awareness:
As social engineering is the easiest way for a hacker to penetrate a system. Employees are the first line of defence. How to educate them properly regarding those risks.

Security frameworks:
What framework of security do you use (ISO27001 / NIST / ANSSI / …)? Why?

Security tools:
What RETEX of security tools would you like to share with the ECA?

End of day one of the Cyber workshop
Get together and networking.

Dinner & networking at the Purple Lounge
Optional casino tour for first-time participants.

Discussion of Cyber topics (continued)

Roundup of the findings of the workshop

Closing Remarks
Summary of key points
Next steps and follow-up actions

Agreement on the 2024 workshop dates – closing of the workshop