7th - 8th December 2018
Hong Kong SAR China

Call for Paper and Workshop

Conference Ticket: HKD $1,200 (HKD $1,000 for Early Bird until 8 Nov 2018)

Following a successful event in 2017, Hong Kong’s premier security research group Dragon Threat Labs is hosting DragonCon, possibly the most technically-intensive security conference borne out of Hong Kong.

Come join us, make friends and see the cyber city!

Vincent Yiu
CEO, Founder of SYON Security

  • Lead attack simulation projects for many companies ranging from Fortune 10 to Fortune 500, and SMEs. Experiences focused on financial, manufacturing, retail, and aviation industries.
  • World recognized in the offensive cyber security space for advanced adversary simulation services and operating on production infrastructure.
  • Known for spreading offensive cybersecurity experience through the “Red Team Tips” series.
  • Speaker at various security conferences, such as HITB GSEC 2017 and 2018, SSC 2018, JD.com 2017, Steelcon 2017, BSides Manchester 2017, Snoopcon 2017 and 2016.
  • Regular blogger: www.vincentyiu.co.uk
  • On-going development of innovative tools to automate large-scale offensive cyber security simulations: MaiInt, LinkedInt, DomLink, CACTUSTORCH, RDPInception, ANGRYPUPPY, morphHTA, genHTA, and more.
  • Past: Accenture FusionX UK Lead, MDSec ActiveBreach CHECK Team Leader, MWR InfoSecurity.
  • Certifications: OSCP, OSCE, CCT INF.
  • UK National Cybersecurity Challenge Finalist in 2015 (3-day competition).
  • Researching topics:
    • Zero-day vulnerabilities in SOC stack such as ELK, and Splunk.
    • Extensions of Domain Fronting and covert Command and Control.
    • Large-scale cloud security research in significant providers such as Amazon, Azure, and Alibaba.
    • Domain and resource hijacking.
    • EDR bypasses and limitations.
    • Developing practical, relevant, and easy to use tooling.
    • Weaponizing 1-day vulnerabilities.

DragonCon invites proposals for half-day or full-day workshops to be held in December 2018. Workshops are expected to focus on Threat Intelligence, Hardware Hacking, Hardware Forensics, Hardware Attacks, Reverse Engineering, Exploitation, Vulnerabilty Research and any other subject that will make our nerd-o-meter hit the red line!

Speaker perks:
1. Complimentary ticket to the conference
2. Invitation to the VIP party
3. Remuneration for international speakers

Program Schedule

Main Conference 8th December 2018

Venue: HKU SPACE Admiralty Centre, 18 Harcourt Road, Hong Kong

Workshops 7th December 2018

         HKU School of Professional and Continuing Education

Workshop Schedule

December 2018

Venue: The Hong Kong University - Cyber Security Lab, Haking Wong Building 3/F Room 310A

TBC Dec 2018
09:00am - 18:00pm

A hands-on perspective of modern attacker techniques
Vincent Yiu, SYON Security

Course Length: Full-day training

Fees: HKD 12,000
(DTL Members HKD 7,000 - Please enter the promotion code before checkout)

What You Will Get
  • USBNinja with the specific connector of your choice
  • Ubuntu Virtual Machine you will work with to perform the preparation and actual attack
  • Training Materials
What You Will Learn

This course provides students with a solid foundational knowledge about modern attackers, their techniques, and how to perform them. The student will be able to practically execute a basic, modern attack. This hands-on course aims to educate and fast-track train penetration testers with the necessary skills necessary to simulate a modern attacker.
We will utilize the cloud to spin up a real command and control server and simulate an actual attack against TeaLab Corporation.

Introduction to Modern

  • Cyberattacks
  • Attack lifecycles
  • A brief look at Advanced Persistent Threats
  • War-stories
  • Viable techniques from experience

TBC Dec 2018
09:00am - 18:00pm

Security Monitoring Practical Workshop
Dragon Advance Tech Co. Ltd.

Course Length: Full-day training

Fees: HKD 10,000 (DTL Member HKD 5,000 - Please enter the promotion code before checkout)

What You Will Learn

This course provides students with the knowledge and tools to fully leverage security analyst duties, ensures that you can use the functions and features of tools used in a SOC to detect and respond to security incidents and determine the extent of a compromise.

  • Preparation: Know Your Environment
  • Tuning your SIEM
  • Threat Intelligence: Detect and Research Threats / Attack Methods
  • Detection: Evaluate Alarms and Events
  • Containment and Response: Minimizing Impact and Automating Response
  • Root Cause Analysis: Trace Security Incident Timelines


         Dragon Advance Tech Consulting Co. Ltd.
         Cyber Security Lab
Department of Computer Science
Hong Kong University

We are seeking sponsors. If you are interested in sponsoring, please contact the following at Dragon Threat Labs.

For the donation, you can donate through the eventbrite donation ticket at here ! For further donation options, please contact the following at Dragon Threat Labs.

Media and Public Inquiries

Please contact Roland Cheung and/or Dan Kelly.


if you wish to sponsor DragonCon please contact Frankie Li.


Copyright © 2018 Dragon Threat Labs