2024 Sponsorship Team

FIRST gratefully acknowledges its conference sponsors & supporters for their contributions to the security community:

Local Host

• 

  JPCERTCC

  www.jpcert.or.jp/

Diamond

• 

  CyCraft

  CyCraft Technology, established in 2017 and headquartered in Taiwan, stands as a pioneering force in AI plus cybersecurity, bolstered by the support of leading venture capitalists. CyCraft has developed the world’s first autonomous AI platform called XCockpit focusing on scalable identity threat management in AD/Entra ID and fast Incident Response (IR) forensics. This innovative platform is specifically designed to cater to the needs of red-teaming and cyber insurance scenarios. CyCraft’s solutions are particularly vital for organizations, including government agencies, major banks, the defense industry, leading semiconductor foundries and IC design houses. These entities often face the daunting challenge of defending against state-sponsored attacks and notorious ransomware, all while managing limited manpower resources. Furthermore, hundreds of small and medium businesses in Japan are using CyCraft AI to automate endpoint detection and response. CyCraft proudly holds membership in FIRST, the Nippon CSIRT Association, and is an active committee member of the SEMI Cybersecurity Working Group. Please visit CyCraft at https://cycraft.com/.

• 

  LAC

  Founded in 1986 as an IT Systems Development business, LAC has a proven track record in the development of financial platform systems and other social infrastructure systems. In 1995, we pioneered the Japan's very first Information Security Service and we are currently the leader in the Cyber Security field in Japan. Utilizing advanced IT Total Solution Services, we offer cutting-edge security technology for our customers including government offices, private companies and organizations. LAC is one of the most experienced managed security service providers in Japan, whose security services are gaining increasing popularity among local businesses due to the evolution of sophisticated cyber-attacks. LAC is a member of FIRST and the Nippon CSIRT Association and is actively involved in various security industry organizations. Since April 2003, LAC, as Team JSOC and later Team LACERT, became the third Japanese member of FIRST, contributing significantly to the community with cyber security awareness in events. Through workshops and active involvement in SIGs, program committees, and FIRST Cyber Threat Intelligence events, LAC has been supportive to enhance community knowledge and engagement. For detailed information on LAC's corporate initiatives, visit www.lac.co.jp/english.

• 

  NISC

  The National center of Incident readiness and Strategy for Cybersecurity (NISC) was established on the Basic Act on Cybersecurity in 2015. As the Japanese national cybersecurity center, NISC plays a leading role in the cybersecurity policy in Japan. NISC has a role as the secretariat of the Cybersecurity Strategic Headquarters of Japan as well.
  NISC is also the operational body, the Computer Emergency Response Team of the Government of Japan.
  As the part of its mandate, NISC monitors and analyzes governmental information systems, provides necessary advice or information and other assistance in ensuring cybersecurity.
  NISC also hosts the large-scale cyber exercise called “Cross-Sectoral Exercise” that involves critical infrastructure operators, responsible ministries, and other stakeholder organizations. Moreover, NISC runs the Cybersecurity Council and the Japan cyber-security Information Sharing Partnership (JISP) for enhancing the Japanese public and private partnership in the cybersecurity field.
  In December 2022, Japan adopted the National Security Strategy (the NSS), which indicates that it will seamlessly protect its national interests by promoting cross-governmental policies in diverse fields, including the cyber domain.
  The NSS states that to ensure secure and stable use of cyberspace, especially the security of the nation and critical infrastructures, the response capabilities in the field of cybersecurity should be strengthened equal to or surpassing the level of leading Western countries.
  In order to realize and promote these efforts, the NISC will be constructively restructured to establish a new organization which will comprehensively coordinate policies in the field of cybersecurity, in a centralized manner.
  www.nisc.go.jp

Platinum

• 

  Amazon

  At Amazon, security is job zero. The Amazon Security organization is central to maintaining customer trust and delivering delightful customer experiences. Our mission is to maintain a high bar for security across all of Amazon’s products and services. Our teams lead in protecting company and customer data by continuously assessing our systems, identifying and evaluating risks, and driving mitigations. www.amazon.com/

• 

  Cisco

  Cisco joined FIRST in 1991, recognizing early on that computer security is essential to business. As the worldwide leader in technology that powers the internet, Cisco is focused on security as a strategic enabler now more than ever. Cisco's solutions provide unmatched protection; from Secure Endpoint to Secure Network Analytics, from Duo to Umbrella, Cisco has you covered. As a Cisco customer, you also get SecureX, an unparalleled XDR solution, connecting your entire security portfolio visibility in one place, with automated workflows that maximize operational efficiency. The Cisco Secure Advantage encompasses: 6,500+ endpoint security customers | 15M+ protected endpoints | 70K AMP ecosystem customers | 100M DNS security customers | 200B DNS requests inspected daily | 500K+ authentications per month 6.8B threats blocked daily | 2.2 trillion artifacts analyzed daily – more than any vendor. cisco.com

• 

  IIJ (Internet Initiative Japan)

  Ever since its establishment in 1992 as the first Japanese Internet Service Provider, IIJ has been taken initiatives in the field of Internet technology. By leveraging the technological expertise gained through its Internet connectivity services, the company has expanded its business portfolio as a total solutions provider offering from highly reliable network services, various value-added outsourcing services, including cloud computing, WAN services to systems integration services. In this way, we have grown as a corporate group that responds to customers’ requests for every type of network application with one-stop services.
  The IIJ-SECT (IIJ group Security Coordination Team) was formed in 2001 to respond to incidents on the Internet, in particular those involving IIJ equipment or customers. Its chief missions are to identify and analyze incidents occurring on IIJ equipment and coordinate with related organizations. This team consists mainly of members from the Office of Emergency Response and Clearinghouse for Security Information, while also including members from a number of other IIJ organizations involved in areas such as equipment operation and integration.
  Since 2002 the team has forged international ties through participation in FIRST, an international group of CSIRTs. It also works on strengthening coordination with other organizations to improve mutual incident response capacity through activities such as participation in the establishment of the Nippon CSIRT Association in Japan. For more information, please visit IIJ at www.iij.ad.jp.

• 

  Stairwell

  Stairwell is next-generation threat detection and response. Instead of legacy log-based methods, we capture, store, and analyze and reanalyze every interesting file across an enterprise. Our platform uses tailored automation and homegrown AI to help you find what others have missed and instantly tells you if you're affected by the latest threats. This is STAIRWELL: Security operations, Threat Analysis, Incident Response, done WELL. For more information, visit stairwell.com.

Gold

• 

  Bitdefender

  Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit www.bitdefender.com.

Silver

• 

  Corelight

  Corelight transforms network and cloud activity into evidence that security teams use to proactively hunt for threats, accelerate response to incidents, gain complete network visibility and create powerful analytics. Corelight's global customers include Fortune 500 companies, major government agencies, and large research universities. Based in San Francisco, Corelight is an open-core security company founded by the creators of Zeek®, the widely-used network security technology. For more information, visit https://corelight.com or follow @corelight_inc.

• 

  Fortinet

  Fortinet® (NASDAQ: FTNT), is a global leader in broad, integrated and automated cyber security solutions to CSP's around the world. Fortinet’s security solutions and ecosystem delivers security that is tailored for and integrates with the current and evolving infrastructure and technologies of today’s Mobile Network Operators and Managed Service Providers. Please visit Fortinet at www.fortinet.com.

Bronze

• 

  Machina Record

  As cybercrime diversifies and becomes more organized, information exchange among criminals outpaces judicial responses. In this evolving landscape, proactive security is imperative. Machina Record provides tailored intelligence and security advisory for the Japanese market, aiming to enhance the overall safety of society, not just the internet. https://machinarecord.com/

• 

  NRD Cyber Security

  NRD Cyber Security offers cybersecurity solutions, consulting, and other services. The company specialises in the establishment and modernisation of CSIRTs and SOCs as well as centralised threat monitoring. https://www.nrdcs.eu/

• 

  NTT Data Group

  NTT Data Group is a trusted global innovator of IT and business services headquartered in Tokyo. We help clients transform through consulting, industry solutions, business process services, IT modernization and managed services. NTT Data Group provides services to realize global security that protects approximately 190,000 people in 56 countries around the world. Visit us at nttdata.com.

• 

  OTRS

  OTRS Group is the manufacturer and the world’s largest provider of the enterprise service management suite OTRS. It offers companies industry-independent software solutions for structured communication in customer service, IT service management and security management. In addition to the core product OTRS, the security solution STORM ensures efficient cybersecurity incident management and transparent documentation in accordance with standards such as ISO 27001. For more information, see www.otrs.com.

• 

  Prelude Detect

  Prelude Detect is the production-scale detection and response testing platform that transforms threat intelligence into validated protections so organizations can know with certainty that they are protected against the latest threats. Immediately. www.preludesecurity.com/

• 

  SentinelOne

  SentinelOne started with an idea: to protect the things that matter most to our customers by pushing the boundaries of cybersecurity. Over the decades, we’ve hustled and innovated, we’ve grown and transformed, to create the world’s most advanced cybersecurity platform. Valuing trust, accountability, ingenuity, and unstoppable drive above all else, our teams are inspired to challenge the status quo and build lasting partnerships with every customer. www.sentinelone.com/

• 

  Sygnia

  www.sygnia.co

• 

  Team T5

  TeamT5 is a leading brand in delivering Asia Pacific intelligence. We are established in Taiwan and harness our geographical & cultural strengths to assist enterprises and organizations in fortifying their cybersecurity defenses through our intelligence-focused offerings. This allows analysts to foresee potential threats & incidents and deliver action items for decision-makers to make accurate decisions and mitigate risks. https://teamt5.org/

Reception and Social Event Sponsors

Welcome Reception

• 

  Adobe

  Adobe is changing the world through digital experiences. Great experiences have the power to inspire, transform, and move the world forward. And every great experience starts with creativity. Creativity is in our DNA. Our game-changing innovations are redefining the possibilities of digital experiences. We connect content and data and introduce new technologies that democratize creativity, shape the next generation of storytelling, and inspire entirely new categories of business. www.adobe.com/

Monday Sponsor Showcase

• 

  Silent Push

  Silent Push reveals adversary infrastructure, campaigns, and security problems by searching across the most timely, accurate and complete Proactive Threat Intelligence dataset. Defenders can focus on stopping threats before they cause a problem and significantly improving their security operations across the entire attack chain whilst simultaneously reducing operational complexity. silentpush.com

Capture the Flag Support

• 

  Shield eXtreme

  Shield eXtreme are comprised with cyber security professionals that has both long standing experience in the industry as well as deep involvements on global cyber security communities as well.
  Aimed and focused on becoming the leading cyber security exercising range that are both practical and enriched by the latest in attack threat intels and patterns, Shield eXtreme’s view from both state and global level of defensive protection and offensive prevention, it’s unique set of blue team tactics, as well as malicious activity prevention and research not only is high in standard, but has protected the cyberspace for years within Taiwan. www.shieldx.io

Conference Network Sponsor

• 

  QTnet

  QTnet is a telecommunications operator based in Kyushu, Japan.
  QTnet is dedicated to ensuring a prosperous and bright future for everyone by providing a wide range of communication services and solutions tailored to individual needs. www.qtnet.co.jp/

Champions, Partners & Supporting Sponsors

• FIRST Partner

  • 

    OASIS

    OASIS is a nonprofit consortium that advances open standards and open source development on a global scale. We're the home of KMIP, STIX, TAXII, OpenC2, PKCS#11, SAML and CACAO course-of-action playbooks. Among many open source projects is our Open Cybersecurity Alliance (OCA). OCA is building an open ecosystem where cybersecurity products interoperate without the need for customized integrations. Any initiative for developing code, APIs, specifications, or reference implementations can find a home at OASIS. Each project operates independently under industry-approved process and IPR policies. New work is encouraged, and all are welcome to participate. OASIS members can be found in 100+ countries on virtually every continent. Major multinational companies, SMEs, government agencies, universities, research institutions, consulting groups, and individuals are represented. www.oasis-open.org

• Challenge Coin

  • 

    Hitachi

    Hitachi proceeds with the development of new technologies and products that respond to the increasing demand for safety and security in the Social Innovation Business. www.hitachi.com.

• Lanyard

  • 

    CIRCL

    The Computer Incident Response Center Luxembourg (CIRCL) is a government-led initiative aimed at collecting, analyzing, reporting, and addressing computer security threats and incidents. CIRCL serves as the host for several open-source software projects, including MISP and AIL, which play critical roles in facilitating information sharing and enhancing threat intelligence capabilities. circl.lu

• Champion

  • 

    Apura

    Apura Cyber Corp is a company with high technical qualification and extensive experience in threat intelligence, digital forensics, incident response and anti-fraud. Our main product is BTTng, an Osint and CTI tool, that allows broad and dynamic visibility of possible threats present on the most comprehensive list of sources in the market. apura.com.br

OUR EXHIBITORS

• 

  Adobe

  Adobe is changing the world through digital experiences. Great experiences have the power to inspire, transform, and move the world forward. And every great experience starts with creativity. Creativity is in our DNA. Our game-changing innovations are redefining the possibilities of digital experiences. We connect content and data and introduce new technologies that democratize creativity, shape the next generation of storytelling, and inspire entirely new categories of business. www.adobe.com/

• 

  Arctic Security

  Cyber attacks are not victimless crimes. Arctic Security helps CERT’s and National Cyber Security Centers automate victim notification at scale to their constituents. Automated victim notification is now easy to set up and to operate. Please contact us to learn how you can start helping organizations in your country. https://www.arcticsecurity.com/

• 

  Bitdefender

  Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit www.bitdefender.com.

• 

  Cisco

  Cisco joined FIRST in 1991, recognizing early on that computer security is essential to business. As the worldwide leader in technology that powers the internet, Cisco is focused on security as a strategic enabler now more than ever. Cisco's solutions provide unmatched protection; from Secure Endpoint to Secure Network Analytics, from Duo to Umbrella, Cisco has you covered. As a Cisco customer, you also get SecureX, an unparalleled XDR solution, connecting your entire security portfolio visibility in one place, with automated workflows that maximize operational efficiency. The Cisco Secure Advantage encompasses: 6,500+ endpoint security customers | 15M+ protected endpoints | 70K AMP ecosystem customers | 100M DNS security customers | 200B DNS requests inspected daily | 500K+ authentications per month 6.8B threats blocked daily | 2.2 trillion artifacts analyzed daily – more than any vendor. cisco.com

• 

  CTM360

  Enabling organizations to protect themselves and their supply chain against external risks and threats.
  CTM360 provides a consolidated platform that includes External Attack Surface Management, Digital Risk Protection (Brand Protection & Anti-Phishing, Data Leakage Protection, and Unlimited Managed Takedowns), Security Ratings, Third Party Risk Management, and Cyber Threat Intelligence. ctm360.com

• 

  Cycraft

  yCraft Technology, established in 2017 and headquartered in Taiwan, stands as a pioneering force in AI plus cybersecurity, bolstered by the support of leading venture capitalists. CyCraft has developed the world’s first autonomous AI platform called XCockpit focusing on scalable identity threat management in AD/Entra ID and fast Incident Response (IR) forensics. This innovative platform is specifically designed to cater to the needs of red-teaming and cyber insurance scenarios. CyCraft’s solutions are particularly vital for organizations, including government agencies, major banks, the defense industry, leading semiconductor foundries and IC design houses. These entities often face the daunting challenge of defending against state-sponsored attacks and notorious ransomware, all while managing limited manpower resources. Furthermore, hundreds of small and medium businesses in Japan are using CyCraft AI to automate endpoint detection and response. CyCraft proudly holds membership in FIRST, the Nippon CSIRT Association, and is an active committee member of the SEMI Cybersecurity Working Group. Please visit CyCraft at https://cycraft.com/.

• 

  IIJ (Internet Initiative Japan)

  Ever since its establishment in 1992 as the first Japanese Internet Service Provider, IIJ has been taken initiatives in the field of Internet technology. By leveraging the technological expertise gained through its Internet connectivity services, the company has expanded its business portfolio as a total solutions provider offering from highly reliable network services, various value-added outsourcing services, including cloud computing, WAN services to systems integration services. In this way, we have grown as a corporate group that responds to customers’ requests for every type of network application with one-stop services.
  The IIJ-SECT (IIJ group Security Coordination Team) was formed in 2001 to respond to incidents on the Internet, in particular those involving IIJ equipment or customers. Its chief missions are to identify and analyze incidents occurring on IIJ equipment and coordinate with related organizations. This team consists mainly of members from the Office of Emergency Response and Clearinghouse for Security Information, while also including members from a number of other IIJ organizations involved in areas such as equipment operation and integration.
  Since 2002 the team has forged international ties through participation in FIRST, an international group of CSIRTs. It also works on strengthening coordination with other organizations to improve mutual incident response capacity through activities such as participation in the establishment of the Nippon CSIRT Association in Japan. For more information, please visit IIJ at www.iij.ad.jp.

• 

  LAC

  Founded in 1986 as an IT Systems Development business, LAC has a proven track record in the development of financial platform systems and other social infrastructure systems. In 1995, we pioneered the Japan's very first Information Security Service and we are currently the leader in the Cyber Security field in Japan. Utilizing advanced IT Total Solution Services, we offer cutting-edge security technology for our customers including government offices, private companies and organizations. LAC is one of the most experienced managed security service providers in Japan, whose security services are gaining increasing popularity among local businesses due to the evolution of sophisticated cyber-attacks. LAC is a member of FIRST and the Nippon CSIRT Association and is actively involved in various security industry organizations. Since April 2003, LAC, as Team JSOC and later Team LACERT, became the third Japanese member of FIRST, contributing significantly to the community with cyber security awareness in events. Through workshops and active involvement in SIGs, program committees, and FIRST Cyber Threat Intelligence events, LAC has been supportive to enhance community knowledge and engagement. For detailed information on LAC's corporate initiatives, visit www.lac.co.jp/english.

• 

  Machina Record

  As cybercrime diversifies and becomes more organized, information exchange among criminals outpaces judicial responses. In this evolving landscape, proactive security is imperative. Machina Record provides tailored intelligence and security advisory for the Japanese market, aiming to enhance the overall safety of society, not just the internet. https://machinarecord.com/

• 

  NISC

  The National center of Incident readiness and Strategy for Cybersecurity (NISC) was established on the Basic Act on Cybersecurity in 2015. As the Japanese national cybersecurity center, NISC plays a leading role in the cybersecurity policy in Japan. NISC has a role as the secretariat of the Cybersecurity Strategic Headquarters of Japan as well.
  NISC is also the operational body, the Computer Emergency Response Team of the Government of Japan.
  As the part of its mandate, NISC monitors and analyzes governmental information systems, provides necessary advice or information and other assistance in ensuring cybersecurity.
  NISC also hosts the large-scale cyber exercise called “Cross-Sectoral Exercise” that involves critical infrastructure operators, responsible ministries, and other stakeholder organizations. Moreover, NISC runs the Cybersecurity Council and the Japan cyber-security Information Sharing Partnership (JISP) for enhancing the Japanese public and private partnership in the cybersecurity field.
  In December 2022, Japan adopted the National Security Strategy (the NSS), which indicates that it will seamlessly protect its national interests by promoting cross-governmental policies in diverse fields, including the cyber domain.
  The NSS states that to ensure secure and stable use of cyberspace, especially the security of the nation and critical infrastructures, the response capabilities in the field of cybersecurity should be strengthened equal to or surpassing the level of leading Western countries.
  In order to realize and promote these efforts, the NISC will be constructively restructured to establish a new organization which will comprehensively coordinate policies in the field of cybersecurity, in a centralized manner.
  https://www.nisc.go.jp/eng/index.html

• 

  NRD Cyber Security

  NRD Cyber Security offers cybersecurity solutions, consulting, and other services. The company specialises in the establishment and modernisation of CSIRTs and SOCs as well as centralised threat monitoring. https://www.nrdcs.eu/

• 

  NTT Data Group

  NTT Data Group is a trusted global innovator of IT and business services headquartered in Tokyo. We help clients transform through consulting, industry solutions, business process services, IT modernization and managed services. NTT Data Group provides services to realize global security that protects approximately 190,000 people in 56 countries around the world. Visit us at nttdata.com.

• 

  OTRS

  OTRS Group is the manufacturer and the world’s largest provider of the enterprise service management suite OTRS. It offers companies industry-independent solutions for structured communication in customer service, IT service management and security management. In addition to the core product OTRS, the security solutions STORM and CONTROL ensure efficient cybersecurity incident management and transparent documentation in accordance with standards such as ISO 27001. For more information, see www.otrs.com.

• 

  Prelude Detect

  Prelude Detect is the production-scale detection and response testing platform that transforms threat intelligence into validated protections so organizations can know with certainty that they are protected against the latest threats. Immediately. www.preludesecurity.com/

• 

  SANS

  SANS is the most trusted source for information security training, certification & research. Launched in 1989 as a cooperative for information security thought leadership, SANS Institute helps organizations mitigate cyber risk by empowering cyber security practitioners and teams with training, certifications, and degrees needed to safeguard organizations and advance careers. https://www.sans.org/

• 

  SentinelOne

  SentinelOne started with an idea: to protect the things that matter most to our customers by pushing the boundaries of cybersecurity. Over the decades, we’ve hustled and innovated, we’ve grown and transformed, to create the world’s most advanced cybersecurity platform. Valuing trust, accountability, ingenuity, and unstoppable drive above all else, our teams are inspired to challenge the status quo and build lasting partnerships with every customer. www.sentinelone.com/

• 

  Silent Push

  Silent Push reveals adversary infrastructure, campaigns, and security problems by searching across the most timely, accurate and complete Proactive Threat Intelligence dataset. Defenders can focus on stopping threats before they cause a problem and significantly improving their security operations across the entire attack chain whilst simultaneously reducing operational complexity. silentpush.com

• 

  Stairwell

  Stairwell is next-generation threat detection and response. Instead of legacy log-based methods, we capture, store, and analyze and reanalyze every interesting file across an enterprise. Our platform uses tailored automation and homegrown AI to help you find what others have missed and instantly tells you if you're affected by the latest threats. This is STAIRWELL: Security operations, Threat Analysis, Incident Response, done WELL. For more information, visit stairwell.com.

• 

  Team T5

  TeamT5 is a leading brand in delivering Asia Pacific intelligence. We are established in Taiwan and harness our geographical & cultural strengths to assist enterprises and organizations in fortifying their cybersecurity defenses through our intelligence-focused offerings. This allows analysts to foresee potential threats & incidents and deliver action items for decision-makers to make accurate decisions and mitigate risks. https://teamt5.org/

• 

  Thinkst

  Most Companies find out way too late that they’ve been breached. Thinkst Canary changes this. Deploy Canaries in minutes. With 0 admin overhead and almost no false-positives, Canaries are deployed (& loved) on all 7 continents. Check out what people are saying at canary.love

• 

  Threatray

  Threatray is a malware defense platform specializing in malware identification, attribution and intelligence analysis. Our capabilities make security analysts more effective in terms of depth and speed across key malware defense use cases. Under the hood, our platform is driven by unique search algorithms that find relations between malware threats that are invisible to existing technologies. www.threatray.com