18ENISE - Programa

Within the framework of the 18ENISE 2024 event, a CTF (Capture The Flag) will be held. Aimed primarily at university students and technological high school students, this competition will take place at the ENISE event, at the Palacio de Congresos de León. Participants will have to solve technical challenges in an environment that simulates real cybersecurity challenges. It will be a unique opportunity to test themselves and develop their skills.
With these competitions we seek to promote learning and the development of key cybersecurity skills, contributing to the training of future professionals in this field.

Agenda
09:30 to 11:30 – CTF Beginner Level Course: An introduction to CTF challenges for those who are starting out in the world of cybersecurity.
12:00 to 14:00 – CTF Intermediate Level Course: Course aimed at participants with previous knowledge in cybersecurity who are looking for more advanced challenges.
16:00 – Reception of participants: Arrival of the teams and preparation for the competition.
16:15 – Start of the CTF Competition: Teams face a series of challenges in a collaborative and competitive environment.
20:00 – End of the competition: Closing of the event
20:15 – Awards ceremony: Awards ceremony for the top 3 participants.

What to expect from the competition?
Participants will have to solve technical challenges in key areas of cybersecurity such as:
•    Cryptography and stenography: Decipher hidden or encrypted messages.
•    Forensic analysis: Recover hidden information in memory images or hard drives.
•    Malware analysis: Understand and dismantle malicious software.
•    Traffic analysis: Investigate suspicious patterns in network traffic.
•    OSINT: Use publicly available information on the Internet to solve challenges.
•    Web security: Detect and exploit vulnerabilities in web applications.
•    Python: Solve challenges using code in this programming language.
•    Miscellaneous: Additional challenges covering different areas of cybersecurity.

Competition Format
•    15 challenges divided into three difficulty levels:
o    8 low-difficulty challenges (50 points each).
o    5 medium-difficulty challenges (100 points each).
o    2 high-difficulty challenges (200 points each).
During the event, participants will have clues that will help them solve the challenges. Each clue used will reduce the number of points accumulated.

Registration and Requirements
•    Participants must register before October 18 at 11:59 p.m. https://cyberworking.es/ctf-en-enise 
•    It is essential to bring your own laptop. It is recommended to have Kali Linux installed to access a range of useful tools. 

This event is a unique opportunity to learn, develop key cybersecurity skills and test your problem-solving skills in a challenging environment. Don’t miss out!

Restricted access

Talleres de acceso restringido

Guardia Civil

The participating Autonomous Communities of the RETECH Call (Territorial Networks of Technological Specialization) will briefly explain the importance of the program for cybersecurity and sectoral development, as well as its main lines of work and investments to be made in 2025.

Workshop open to the public.
 

Mark Ryland, Director, Oficina del CISO de Amazon Web Service (AWS)

José de la Peña, Director, Revista SIC
Interviewees:
-    Félix Barrio, General Director de INCIBE
-    Luis Jiménez, Deputy General Director of CCN
 

Ludovica Coletta, Advisor in the Industrial, technological and research programmes Unit, ACN

The use of AI is transforming the cybersecurity market and trends. In the Copilot for Security workshop, we will talk about SOC modernization, cognitive defense, how cybercriminals are using AI, and we will redefine a conventional SOC architecture by adding a layer of artificial intelligence on top and seeing its behavior live. We will also present real-life case studies of AI applied to cybersecurity.

•    Miguel Martín, Head of INCIBE-LAB 
•    Natalia Ares, Deputy Director of Government Relations & Public Affairs – Europe, Xiaomi Technology Spain S.L.
•    Vicente González, Chair of Group for Vulnerability Handling on Certified Solutions, ENISA

*Speakers to be confirmed

Its purpose is to coordinate the relationships and common objectives of the participants in the RETECH Call (Territorial Networks for Technological Specialization), in the field of Cybersecurity, of which INCIBE is a part. This Commission will be made up of a representative from each of the autonomous entities that make up Retech, and a representative from INCIBE.

Restricted access

Verónica de Mata, Head of Innovative Public Procurement at INCIBE 

•   André Luiz Bandeira Molina, Secretario de Seguridad de la Información y Cibernética, Gabinete de Seguridad Institucional de la Presidencia de la República de Brasil
•    Stephen Fallas, Strategic Architect Leader, Trellix
•    Sheila Casserly, Director of Digital Policy, Schneider Electric
•    Claudio Cortes, CEO, Grupo Radical
Modera Belisario Contreras, Senior Director Global Security and Technology Strategy, Venable LLP
 

•    Carlos Moreira, Founder & Managing Partner, 33N Ventures
•    Alicia Hanf, Head of Institutional Ecosystem Partnerships, LG NOVA, LG Electronics
•    Damien Henault, Managing Director, ForgePoint Capital
•    Cristobal Alonso, CEO, Startup Wise Guys 
Modera Victoria Valbuena, Responsable de Internacionalización, INCIBE 
 

Enrique López González, Full Professor of Financial Economics and Accounting at the University of León and Full Member of the Royal Academy of Economic and Financial Sciences of the Institute of Spain

The transition from Command and Control to Mission Command can be accelerated and optimized through the use of advanced technologies such as artificial intelligence (AI) and quantum computing. These tools enable more decentralized and autonomous decision-making, improve real-time information management, and strengthen cybersecurity and communications. They also optimize logistics and increase operational flexibility, allowing units on the ground to act more quickly and accurately, aligned with overall strategic intentions.

This course offers specialized training in Artificial Intelligence (AI), designed not only to understand the technical aspects, but also to address security and compliance challenges in today's business environment. Participants will learn to identify key risks in AI systems, including machine learning (ML) models and large language models (LLMs), and will acquire skills to implement effective protection, governance and risk mitigation strategies. 

In addition, this training provides a deep understanding of regulatory compliance, with special emphasis on the European Regulation on AI (RIA). Attendees will gain knowledge about the main regulatory obligations and strategies to adapt to a constantly changing environment. This course is key for any professional who wants to be at the forefront of AI, improve their decision-making capabilities, and ensure security and legality in the implementation of artificial intelligence systems in their organizations.
 

Registration needed: https://master.ismsforum.es/curso-ia-enise/ 
 

Joanna Świątkowska, Deputy Secretary, European CyberSecurity Organisation (ECSO)
 

Presents Carla Redondo, General Secretary, INCIBE
 

•    Stéphan L. Maisons, CEO, Sherpa Tribe
•    Agustina Milanini, Innovation Manager, Tetuan Valley
•    Jaime Cavero, President Mentor Day
•    Enrique Jáimez, General Director, Cluster TIC Asturias
 

Moderates Efrén Miranda, CEO, El Club del Emprendimiento
 

Recoge Almirante Aniceto Rosique Nieto, Director General, DGAM

Restricted access

Ian Deason, IT Specialist, Office of Vulnerability Management, CISA

•    Erkuden Rios, Investigador de TECNALIA
•    Juan Salom Clotet, Jefe de la Unidad de Coordinación de Ciberseguridad de la Guardia Civil
•    Patricia Alonso, Gerente de INCIBE-CERT
•    Santiago González González, jefe de la Oficina Técnica del Centro de Procesamiento de Datos la Policía Nacional

 

•    Gonzalo Erro Iribarren, Customer Security Manager, Nokia
•    Beatriz Martínez Candano, Customer Security Director Iberia & Latam North, Ericsson
•    Kevin Wang Ke, Head of European Cyber Security & Privacy Protection Officer, Huawei Technologies España, SL
 

Moderates Andres Jesús Ruiz Vazquez, Subdirector General de Integridad de las Telecomunicaciones, S.E. de Telecomunicaciones e Infraestructuras Digitales
 

This workshop will present the R&D&I capabilities map in Cybersecurity, to later address and discuss projects related to the challenges of developing secure and reliable SW, privacy, Cloud Continuum, Quantum, AI and tools to facilitate cybersecurity regulatory compliance.
 

Participants will work on a practical case through which they will improve their understanding of the main cybersecurity threats affecting property management firms, risk assessment and the implementation of prevention and response measures to ensure business continuity.

Restricted access

The workshop will focus on OSINT and the importance of digital investments through the Internet. OSINT concepts will be defined, commenting on the importance of digital investigation as a complement to other types of investigations (financial investigation, physical investigation, etc.) when it comes to clarifying crimes and unmasking their perpetrators.
Civil Guard teams and professionals dedicated to carrying out digital investigations will be presented, in the field of Judicial Police, Information and Intelligence, and other specialties (Ucoma-Seprona, etc.). A real case will also be presented, of the procedure carried out to unmask an important hacker, thanks to OSINT techniques.
 

José Ramón Coz Fernández, Chief Cybersecurity Auditor, European Space Agency

•    Eduvigis Ortiz, Experiences and challenges in attracting and retaining cybersecurity talent
•    Patricia Tejado, Director of Public Digital Services, GMV
•    Mar López, Vicepresident, Clúster de Ciberseguridad de Andalucía
•    Damián Ruiz Soriano, CISO Singular Bank Presidente CyberMadrid
 

Modera Xabier Mitxelena, President AEI Ciberseguridad
 

An interactive dynamic designed so that managers and entrepreneurs of SME companies can experience first-hand decision-making in cybercrisis situations. In this practical exercise, participants will meet at tables where, through a real-time simulation projected on the screen, they will face four cyber incident situations. The workshop will conclude with a discussion focused on the cyber incident notification flow and lessons learned, addressing key aspects such as cybersecurity training, staff awareness and endpoint protection.