Farouq Hassan
Cloud Security
Paramount Assure
Farouq Hassan is a cybersecurity researcher and graduate of Al Hussein Technical University (HTU), where he specialized in offensive security. He underwent training at Jordan’s National Cyber Security Centre (NCSC) Masar Program and completed an eight-month internship with the Information Security Directorate at the Special Communications Commission of the Jordan Armed Forces (SCC-JAF). He previously served as a cybersecurity trainer at Mint Education and currently serves as a Cloud Security at Paramount Assure. Farouq is the creator of Déjà View, a picture-based multi-factor authentication system designed to be resilient against post-quantum threats, which forms the basis of his research presented at Black Hat MEA 2026. He holds HackTheBox Master rank alongside certifications including CDSA, CWSE, CAPT, CWES, NCA, AZ-900, and SC-900.
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
Dejaview: MFA Picture-Based Passwords for the Post Quantum World!
Textual passwords are popular and dangerous at the same time. They are convenient, requiring only a few finger strokes, but are easy to forget, difficult to manage, and vulnerable to keylogging. Today�s authentication systems are becoming more complex and require increasingly advanced security mechanisms. With the advent of quantum computers, textual passwords may become even more vulnerable to high speed brute force attacks. Our research focuses on developing innovative solutions for a PQ authentication system that balances usability with resistance to brute force attacks.We propose a new approach to passwords that integrates picture based passwords with multi factor authentication and passkey technologies. Unlike classical picture based password systems, where the secret is hidden within the picture, our approach uses the picture itself as the password. Since the space of possible pictures is practically infinite, conventional brute force techniques become impractical.The proposed system uses three authentication factors: a user selected picture as the secret, a facial or fingerprint biometric key, and a standard time based authentication code delivered through an authentication app. These factors are cryptographically chained to provide layered security for authentication, confidentiality, and auditing.The proposed system is generic, allowing integration with online login systems or deployment as a cyber physical security control. It is also customizable, offering additional security layers according to user needs. The implementation is designed around post quantum requirements and complies with NIST specifications.
- 13:50
- Thu
- 03 Dec
Stage:
Briefing Stage 1
Sessions Type:
Keynote