# This is where fairy tales intertwine with technology

In the field of cybersecurity, it is not only important to have a good theoretical base and practical experience, but also to be able to quickly make the right decisions in unpredictable situations. 

The Digital Forest is a place where favorite fairy tales intertwine with modern technologies, where you will have to show your wits at every step. Hack the navigator stone, hug the cyberbear to absorb cyber wisdom, narrow the gap in knowledge of technology and slang between parents and children, and be sure to help Koschei. 

# Location:

- from Sportivnaya metro station - 5-15 min.
- from Vorobyovy Gory metro station - 5-10 min.
- from Cyberarena - 5-10 min.
- from Cyberhub - 7-15 min.
- from Hack-fest - 2-10 lomin.
- from Standoff - 5-10 min.
- from Cybercity - 7-15 min.
- from Pier - 5-10 min.

Cybercity

Digital forest

Квест для детей. Регистрация

# Immerse yourself in the real cosmos of the digital world

During all the days of the cyber festival on the Sputnik stage we will reveal the topic of digital senses in simple and understandable language: what does a person feel when he/she finds himself/herself in the world of technology? How does cyber weight affect his/her perception? How and how is he/she seen and heard by others in the digital space? 

During the day you will be treated to an informative program that will increase cyber literacy and expand your knowledge of IT and digital art, and in the evenings you can enjoy a diverse cultural program: standup comic performances, film screenings, a music concert, the last cyber call and much more. 

# Location:

- from Sportivnaya metro station - 15 min.
- from Vorobyovy Gory metro station - 10 min.
- from Cyber Arena - 2 min.
- from Cyber Hub - 5-10 min.
- from ISA Standoff - 7 min.
- from Cybercity - 2-10 min.
- from Pier - 2 min.

Hack-fest

Honest interviews on technology with cybersecurity and IT experts

How girls can succeed in IT and cybersecurity

Scooters or flying saucers—what will transportation be like in the future?

Cyberbullying

Burn IT out: why IT professionals burn out so fast

Online piracy: is there a solution?

How to protect your personal data without becoming paranoid

What it costs to build a chip: what are modern microelectronics and nanometers, and why do we need them?

What need would a hacker have for the Mona Lisa?

Phishing: the art of deception in the digital world

Reverse engineering as a profession: why we need it

Deepfakes as a new way to engage with an audience and monetize content

The bottleneck problem: why the idea of resurrecting your career by entering IT is no longer viable

How to use AI-generated videos in marketing and other creative industries?

Stand-up comedy on how tricky life can be in the digital age

Ditch the romantic stereotypes: why cybersecurity is not just about hackers

"It’s not your problem." How banks protect your money

What is a cyberrange, or where do hackers train?

The invisible ransomware virus epidemic

Will AI replace programmers

How joint development, open source, and professional communities have revolutionized digitalization

It’s not your imagination: they are watching you. How to find out everything about a person using OSINT

Don’t get caught: a blacklist of the top 10 fraud schemes in the digital space

Positive Hack Media as a guide to the digitalization of everything

Most common scams on social media

Phygital world and its mindset transformation tools

Artificial intelligence in film production

"Bank security" scammers, Black Friday, and deepfakes: how we’re tricked in our daily life

Positive Hack Days festival. Opening

DJ Adisson. Cybercity. Live stream: Standoff 13. Cyberarena. Hackfest

Assembly Model. Literary and music performance

Daily wrap-up

DJ Adisson

Lectures on technology and life in the digital world

Bringing space closer: a poetry concert

“Moth. Light. Flame. Dust.” Movie show

Moth. Light. Flame. Dust. Film screening

End-of-school festivities

Closing

Security: what’s the purpose?

Accessible cybersecurity: how to land an internship

Cyberquest for kids. Awards ceremony

DJ Adisson. Cybercity. Live stream

Cybercity. Live stream

Youth day opening

Signing an agreement between Positive Technologies and ITMO University

Guess what, I did it voluntarily! or how I got into secure development

The path of an ethical hacker: hack it if you can

All-Russian cyberbattle for university students. Awards ceremony

Standoff 13. Live

Working in a SOC: myths and reality

From development on a push-button phone to CPO in cybersecurity

Hunters in the digital forest: who’s hunting for your data and who’s guarding itHunters in the digital forest: who’s hunting for your data and who’s guarding it

Zoomer’s career: a helicopter view

From burnout to inspiration: how not to give up in the long run

Who are you, Mr. CISO?

Threat exploration to spark innovation

DJ Adisson

Popular science. Lectures on technology and life in the digital world

Cybersecurity ambassadors. Positive Education Awards

The Podari Zhizn charity foundation

Positive Hack Days festival. About dreams, gratitude, and the future

Cyberfestival wrap-up

How to hack a neural network in five minutes

Lectures on technology and life in the digital world.

New trends in deception

Children's CyberQuest. Rewarding

Sputnik stage

# In memory of PHDays Fest 2

Especially for the cyberfest we released a limited collection of merch. All items are traditionally made in the format of cozy oversize, combining your favorite classics and bright gradients, which will warm you up with warm memories of the event in any season. Stop by the store to purchase your piece of PHDays Fest 2. 

# Location

- from Sportivnaya metro station - 15 min.
- from Vorobyovy Gory metro station - 10 min.
- from Cyberarena - 2 min.
- from Cyber-hub - 5-10 min.
- from ISA Standoff - 7 min.
- from Cybercity - 2-10 min.
- from Pier - 2 min. # In memory of PHDays Fest 2

Especially for the cyberfest we released a limited collection of merch. All items are traditionally made in the format of cozy oversize, combining your favorite classics and bright gradients, which will warm you up with warm memories of the event in any season. Stop by the store to purchase your piece of PHDays Fest 2. 

# Location

- from Sportivnaya metro station - 15 min.
- from Vorobyovy Gory metro station - 10 min.
- from Cyberarena - 2 min.
- from Cyber-hub - 5-10 min.
- from ISA Standoff - 7 min.
- from Cybercity - 2-10 min.
- from Pier - 2 min.

Merch

# Through sport to knowledge

On the smart court you can test your knowledge of cybersecurity by solving tasks and throwing a ball into a basketball hoop. There will be two levels of difficulty: separate tasks for adults and special questions for children. 

# Location

- from Sportivnaya metro station - 5-15 min.
- from Vorobyovy Gory metro station - 5-10 min.
- from Cyberarena - 5-10 min.
- from Cyberhub - 7-15 min.
- from Hack-fest - 2-10 lomin.
- from ISA Standoff - 5-10 min.
- from Cybercity - 7-15 min.
- from Pier - 5-10 min.

Basketball

Workshops

Chess / Zone of Threats board game tournament

# All about investing in cybersecurity

In this zone we will tell you all about Positive Technologies, why the company is interesting for investment, our history on the stock market and development plans.

Location:

- from Sportivnaya metro station - 15 min.
- from Vorobyovy Gory metro station - 10 min.
- from Cyberarena - 2 min.
- from Cyber-hub - 5-10 min.
- from ISA Standoff - 7 min.
- from Cybercity - 2-10 min.
- from Pier - 2 min.

Posi

# Are hackers really a threat?

In the infofield, hackers are often the villains who wreak havoc on citizens, companies, and the goals of nations. But do hackers always only do harm? And who even hides behind the word “hacker”? 

In Hacker HQ you will dive into the history of the emergence of hacking, you can get acquainted with different hacking devices and even perform a few hacking tasks to answer the main question: who are hackers?

# Location:

- from m. Sportivnaya metro station - 5-15 min.
- from Vorobyovy Gory metro station - 5-10 min.
- from Cyberarena - 5-10 min.
- from Cyberhub - 7-15 min.
- from Hack-fest - 2-10 lomin.
- from ISA Standoff - 5-10 min.
- from Cybercity - 7-15 min.
- from Pier - 5-10 min.

Hacker HQ

# Your journey into the digital world begins here

The station is the starting location where you will immerse yourself in the atmosphere of the disappearing cyber city and find out what lies ahead. You can explore all the interesting objects and interactive installations on your own, or take part in a fascinating cyber quest. 

# Location:

- from Sportivnaya metro station - 5-15 min.
- from Vorobyovy Gory metro station - 5-10 min.
- from Cyberarena - 5-10 min.
- from Cyberhub - 7-15 min.
- from Hack-fest - 2-10 min.
- from ISA Standoff - 5-10 min.
- from Cybercity - 7-15 min.
- from Pier - 5-10 min.

Railway station

Positive football

# Find out what cyber threats have infiltrated our households

Panelka is an apartment building whose residents have encountered suspicious behavior of home appliances and devices. Intercom, meters, Wi-fi router, toaster, robot vacuum cleaner, laptop, smart speaker and even the doorknob - these and other everyday items have been hacked by hackers. 

Here, you'll learn what cyber threats you can face on a household level, and you can help the residents of your home figure out the strange behavior of devices to increase their security in real life. 

# Location:

- from Sportivnaya metro station - 5-15 min.
- from Vorobyovy Gory metro station - 5-10 min.
- from Cyberarena - 5-10 min.
- from Cyberhub - 7-15 min.
- from Hack-fest - 2-10 lomin.
- from ISA Standoff - 5-10 min.
- from Cybercity - 7-15 min.
- from Pier - 5-10 min.

Panel house

# Are you sure you cleaned your laptop before you sold it?

Cyberthreats can lurk not only in existing devices, but also in those that have long since been scrapped. 

You'll learn how to properly clean your device before recycling or selling it, and you can help cyberstalker James, a programmer who accidentally threw away a hard drive containing 7,500 bitcoins and made it his life's work to find it. 

# Location:

- from Sportivnaya metro station - 5-15 min.
- from Vorobyovy Gory metro station - 5-10 min.
- from Cyberarena - 5-10 min.
- from Cyberhub - 7-15 min.
- from Hack-fest - 2-10 min.
- from ISA Standoff - 5-10 min.
- from Cybercity - 7-15 min.
- from Pier - 5-10 min.

Junkyard

# Entrance to PHDays Fest 2

Cyberfest has additional entrances through which you can enter the event. 

Be sure to read [the rules of attendance and behavior at the event,](/policies/pravila-poseshheniya-festivalya/) to make all 4 days of the event comfortable for you and others.

# Сyberfestival opening hours:

- May 23 - from 10:00 to 20:00
- May 24 - from 10:00 to 20:00
- May 25 - from 10:00 to 22:00
- May 26 - from 10:00 to 18:00

Welcome

Entrance

 # Food not just for the mind

There are cafes and restaurants in different parts of the cyberfest, as well as outlets with street food: donuts, burgers, doners, cotton candy and more. Stop by to refresh yourself and build up your energy for further immersion in the digital world. 

# Location:

- from Sportivnaya metro station - 15 min.
- from Vorobyovy Gory metro station - 10 min.
- from Cyberarena - 2 min.
- from Cyber-hub - 5-10 min.
- from ISA Standoff - 7 min.
- from Cybercity - 2-10 min.
- from Pier - 2 min.

Food court

 # This is where PHDays Fest 2 begins

The main entrance to the cyberfest, where your journey into the digital world begins. 

Be sure to read [the rules of attendance and behavior at the event,](/policies/pravila-poseshheniya-festivalya/) to make all 4 days of the event comfortable for you and others.

# Сyberfestival opening hours:

- May 23 - from 10:00 to 20:00
- May 24 - from 10:00 to 20:00
- May 25 - from 10:00 to 22:00
- May 26 - from 10:00 to 18:00

Entrance Central

# The last stage of the cyber quest

City Hall is the last location where Softy's assistant will be waiting for all participants of the cyber quest. Here you will be able to put together all the knowledge gained in the cyber city and realize how important cyber security really is for each of us. 

# Location:

- from m. Sportivnaya metro station - 5-15 min.
- from Vorobyovy Gory metro station - 5-10 min.
- from Cyberarena - 5-10 min.
- from Cyberhub - 7-15 min.
- from Hack-fest - 2-10 lomin.
- from Standoff - 5-10 min.
- from Cybercity - 7-15 min.
- from Pier - 5-10 min.

City Hall

 # Сyberfestival opening hours:

- May 23 - from 10:00 to 20:00
- May 24 - from 10:00 to 20:00
- May 25 - from 10:00 to 22:00
- May 26 - from 10:00 to 18:00

Discovering Russia with the Russian Geographical Society

# How to become a CISO, define an IS architecture and build monitoring and response centers

Three tracks that will be of interest to IS managers and businesses that are interested in maximizing the security of their systems:

- **CISO School.** A track where you will get answers to many “how to's” from the IS sphere: how to become a CISO, what difficulties IS managers have in different companies and how they overcome them, how to communicate with top management, IT and risks, how to build a team in conditions of uncertainty and lack of budget, what IS solutions give maximum benefit.

- **Security Architecture.** Here we will answer the questions of what the cloud security architecture should be, how to build the protection of ACS, how to create an architecture for remote access and projects based on artificial intelligence and how to architecturally separate DevOps and productive network in the organization.

- **SOC of the Future.** In this track we will look at the current state of the Security Operations Center (SOC) and its future: how does cloud migration affect monitoring and response tasks? Will SIEM and first line analysts still be alive? Will EDR agents completely supplant network sensors? How should the SOC team structure change and will robots replace humans in the SOC? 

We will try to find answers to these and many other questions to understand where the SOC is evolving and what's next for it.

# Location:

- from Sportivnaya metro station - 15 min.
- from Vorobyovy Gory metro station - 10 min.
- from Cyberhub - 5-10 min.
- from Hack-fest - 2

Cyber ​​Arena

From disaster to recovery: how we restored our wiped confluence database

Band-aid fixes or long-term excellence: navigating the old dilemma

Linux Endpoint Security Framework

Analyzing client-side JavaScript to detect HTTP endpoints: two years later

AAA frontend: from out-of-the-box to enterprise excellence

IDE as a web application component

Digital archaeology: restoring machine learning model training pipelines

Reliability of ATM processing system

Navigating the CISO Lifecycle

Staying relevant: key business insights from Russia’s largest private bank

Life after the incident

How much does secure development cost. An approach to calculating the cost-effectiveness of AppSec

What is the outcome of a CISO’s efforts: an increase in business performance or a decrease in the number of incidents?

Fast track to CISO: six years from intern to leader in a large company

Career path of a CISO: from dawn to dusk

Should CISOs be ashamed of missing incidents

Chief cybersecurity officer at 25: ten years later

Blitz. Lifehacks from CISOs

The future of cybersecurity architecture: the art of balancing innovation and budget

How we made the safest car in Europe

Practical approaches to modernizing security architecture on existing infrastructure in the transport sector

Constructivism and engineering culture in the creation of enterprise-class products

The Innostage approach

Protecting information systems starts with the right IT architecture

Privacy by design for information systems and building the SDLC cycle

Building design implementation processes

The methodology of designing an architecture and identifying its needs

The thorny path from design to operation

How market needs drive development: the case of Orion soft

No cybersecurity without IT: removing traffic from the network infrastructure

How not to get hooked on someone else’s ecosystem and create your own that is sure to do the job

Sensitive data in production within AI within a bank within the marketplace. How to build infrastructure

Opening of the module The SOC: today and tomorrow

All the unanswered questions about SOCs

Rise of the machines: is it possible to replace SOC analysts with artificial intelligence?

Autonomous (unmanned) SOCs: What the future of cybersecurity monitoring and incident response will look like

SOC harmony in action: SIEM, SOAR, ChatGPT

The new ITIL in the world of SOC

EDR, NDR, XDR: All-DR. What types of sensors are primarily needed in the SOC place

SOCs with WAF, or Why SOCs need to monitor web application security

Autotesting your correlation. CI and CD tools in the service of the purple team

Playing out the defense of the future

Playbook quality metrics: how to get away from the human factor in lessons-learned procedures

To make it or not to make it: How to assess responses to сybersecurity incidents

What lies ahead for SOCs: evolution, degradation, transformation ...

New industrial control systems need new security products

How to SOC like a legend

A new SIEM in an existing SOC. The subtleties of the transition

Security cubed: how to provide incident monitoring in a microservice architecture

Break

Opening of the Cybersecurity Architecture track

Questions & Answers

Meteor hall

# Practice and Theory on Secure Development

This room will be fully dedicated to the Secure Development track, where DevSec aces from POSIdev community will tell you absolutely everything about secure development and application protection. 

In addition to the speeches themselves, on May 25 you will be treated to special workshops with the opportunity to get new knowledge in practice. 

# Location:

- from m. Sportivnaya metro station - 10-15 min.
- from Vorobyovy Gory metro station - 10-15 min.
- from Cyberarena - 5-10 min.
- from Hack-fest - 5-10 min.
- from Cybercity - 7-15 min.
- from Standoff ISA - 2-7 min.
- from Pier - 5-10 min.

Cyber ​​hub

Sylvester, the canary seeker

Benchmarking Static Application Security Testing tools: how good are they?

The artifacts takeover: mass compromise of dependencies for initial access

Track opening

ASP.NET Core SCA

Fathers and children: analytics and triage of transitive dependencies

SLSA: assessing the efficiency of cloud-based supply chain protection

Securing public cloud deployment pipelines: why it’s essential and how to do it

Secure development: experience of a cloud provider

So, you’ve finally integrated security scanners into your pipelines: now what?

X-Files: the convenience of (in)security

MLSecOps: how do we set the trends?

Container security. How we embarked on developing our own solution and what came out of it

Measuring secure development: down to the last milligram

Ingosstrakh experience in implementing SAST in Azure DevOps

Frontend application security testing (FAST): its role and place in DevSecOps

The Magic of WebAssembly: from browsers to app runtime protection

From frenemies to allies: teaming up developers and cybersecurity pros for safer products

Navigating a company’s CI/CD landscape: a developer’s first day on the job

A security scan in 30 seconds? Easy... at first glance

Integrating threat modeling into the development process

Building a DevSecOps pipeline in cloud CI/CD

Crafting Semgrep rules: perks and handy tips

OWASP Top 10

Docker: escaping the container

Quick start guide: implementing secure development in your company

Secure by design culture

XXE: how XML processing leads to security issues

Boosting runtime security with Kubernetes: a game changer?

Phobos hall

 # Cybersecurity: where to start, how to develop it and what tasks it solves on a national scale

Galaxy Hall will host meetings and speeches on three tracks:

- **Cyber security: where to start.** A track for thousands of new people just entering IS and for specialists who want to expand their horizons and get simple and clear instructions “how to do it quickly, cheaply and effectively?”.

- **Cyber Security from different angles.** We will discuss a wide range of topics: IS distributed registries and Web3, the use of graphene tubes and AI, behind the scenes and prospects of the Russian startup market, how cyber attacks disable drones, airplanes and satellites, the consequences of cyber warfare, how to write a book on IS and write your own course, and much more. 

- **State.** Roundtables and discussions on the topic of state agenda in the context of cybersecurity

#Location:

- from Sportivnaya metro station - 15 min.
- From Vorobyovy Gory metro station - 10 min.
- from Cyberhub - 5-10 min.
- from Hack-fest - 2 min.
- from Cybercity - 5-10 min.
- from ISA Standoff - 7 min.
- from Pier - 5 min.

From hacker to CEO

What needs to change for leaks to become less frequent

Changing the mindset of owners or managers: why cyber security should be taught in management programs

Dive into dotnet development: deep analysis

Positive Hack Days festival. Opening. Are Russian companies well-prepared to fend off cyberattacks?

Meteor hall

Galaxy hall

Hyperion hall

Pulsar hall

Gravity hall

Triton hall

Discovering Russia with the Russian Geographical Society

Sputnik stage

Merch

Workshops

Chess / Zone of Threats board game tournament

Posi

Positive football

Food court

Basketball

Hacker HQ

Railway station

Junkyard

City Hall

Entrance

Standoff

Ganimed hall

Deimos hall

Orion hall

Positive HR

Positive Labs

Titan hall

Квест для детей. Регистрация

Digital forest

Panel house

Entrance Central

Phobos hall

Registration

Pluto hall