Computer security conference

A computer security conference is a convention for individuals involved in computer security. They generally serve as meeting places for system and network administrators, hackers, and computer security experts. Common activities at hacker conventions may include:

• Presentations from keynote speakers or panels. Common topics include social engineering, lockpicking, penetration testing, and hacking tools.^[1][2]
• Hands-on activities and competitions such as capture the flag (CTF).
• "Boot camps" offering training and certification in Information Technology.^[3]

General security conferences might be held by non-profit/not-for-profit/for-profit professional associations, individuals or informal group of individuals, or by security product vendor companies.

• 0SecCon Zero Security Conference held in Kerala^[5]
• 44Con,^[6] an Infosec conference and training event that occurs annually in London, UK.
• ACM-CCS (Conferences on Computer and Communications Security),^[7] security conference held since 1993.
• ACSAC, Annual Computer Security Applications Conference^[8] - oldest information security conference held annually.^[9]
• ASIA or the Annual Symposium on Information Assurance^[10] that serves as the academic track for the New York State Cyber Security Conference,^[11] an annual information security conference held in Albany, NY usually for two days during June targeted at academic, government, and industry participants.
• Black Hat, a series of conferences held annually in different cities around the world. Black Hat USA, held in Las Vegas immediately before DEF CON, is one of the largest computer security events in the world.^[12]
• BlueHat Conference, a twice a year, invitation-only Microsoft security conference aimed at bringing Microsoft security professionals and external security researchers together.^[13][14][15]
• Brucon, yearly conference, previously held in Brussels, since 2012 it is held in Ghent. Lasting 2 days, and preceded by a training.^[16]
• CanSecWest, in Vancouver is held at the end of March and hosts the Pwn2Own hacking contest.^[17][18][19]
• CSS - International Conference on Cryptography and Security System^[20] in Poland.
• CIA Conference - A series of international conference on cyber security which aims to bridge the gap between the corporate need of cyber security to the fancy world of hacking.^[21][22]
• DeepSec, in Vienna covers many security aspects of computing and electronic communications as well as security management and social aspects. DeepSec is visited by a broad international audience, academics, researchers, vendors, finance, public administration etc. (2 days trainings, 2 days conference).^[23] Presentations are published on Vimeo and YouTube.
• DEF CON is one of the world's largest and most notable hacker conventions, held annually in Las Vegas, Nevada.^[24]
• Department of Defense Cyber Crime Conference, an annual conference that focuses on the computer security needs of the United States federal government, military, and defense contractors.
• FSec - Croatian annual security conference held at the Faculty of organization and informatics in Varaždin.^[25]
• GreHack.fr,^[26] an annual conference held in Grenoble. Speakers from academia, industry. Both offensive and defensive security.^[27]
• Hack.lu, an annual conference held in Luxembourg
• Hacker Halted, Presented by EC-Council, the objective of the global series of Hacker Halted conferences is to raise international awareness towards increased education and ethics in IT Security.^[28]
• HackinParis, Is an annual event organized by SYSDREAM. The program includes IT security, industrial espionage, penetration testing, physical security, social engineering, forensics, malware analysis techniques and countermeasures.^[29]
• HACK-IT-N^[30] is a cybersecurity conference that deals with current issues and offensive and defensive techniques of the moment: hacking, cyber-espionage, cyber-surveillance etc. It's held in Bordeaux at the end of each year and organized by TEHTRIS^[31] and the ENSEIRB-MATMECA^[32] engineering school.^[33]
• Hackito Ergo Sum, Security conference pertaining to research topics, with attendees and speakers from both the industry, the offensive side and the academic circles, held in Paris every April.^[34]
• HITBSecConf / Hack In The Box, deep-knowledge security conference held in Malaysia and the Netherlands.^[35]
• HOU.SEC.CON, A Houston-area Cyber/information Security Conference established in 2010,^[36]
• ICISSP International Conference on Information Systems Security and Privacy,^[37]
• IEEE Symposium on Security and Privacy,^[38] top-tier privacy & security conference.
• IEEE WIFS Workshop on Information Forensics and Security conference hosted by IEEE Signal Processing Society.^[39]
• IIA/ISACA Chicago IT Hacking and Cybersecurity Conference, a regional, two-day event that brings together executives and professionals in audit, IT, and risk management functions to hear current trends and first-hand knowledge from subject matter experts.^[40]
• INFOWARCON^[41] Beyond Information Warfare - Offensive Cyber Weapons and Technologies Training Congress.
• IP EXPO Europe, held annually at London's ExCeL Centre
• IP EXPO Nordic, held annually at Stockholm's Waterfront Congress Centre
• IWSECC International Workshop on Security Engineering for Cloud Computing in conjunction with the 14th International Conference on Availability, Reliability and Security (ARES Conference » Vienna, Austria^[42])
• LeetCon, IT-Security-Convention in Hannover (Germany), frequently October or November every Year. Talks about IT-Security, IoT, Industry 4.0 and more.
• Middle Tennessee Cyber Conference is an annual two-day event that covers cybersecurity trends, first-hand knowledge from subject matter experts, and operates a CtF for attendees.^[43]
• NDSS (Network & Distributed System Security Symposium),^[44] annual security conference from Internet Society.
• NSPW (New Security Paradigms Workshop),^[45] a workshop with new ideas in security.
• Nullcon Security Conference is an annual security event held in Goa, India.^[46][47]
• Open Web Application Security Project (OWASP), Focuses on web application security.^[48]
• Positive Hack Days, Annual international IT Security event with workshops held in Moscow, Russia.^[49]
• REcon is a computer security conference with a focus on reverse engineering and advanced exploitation techniques.
• RSA Security Conference, Cryptography and information security-related conference held annually in the San Francisco Bay Area.
• RuhrSec, annual non-profit security conference at the Ruhr University Bochum.^[50]
• S4:SCADA Security Scientific Symposium, Security conference pertaining to SCADA held annually by Digital Bond, usually in Miami.^[51]
• SecurIT 2012, International Conference on Security of Internet of Things held in mid of August at Amrita Vishwa Vidyapeetham.^[52]
• SecureWorld Expo, a series of IT Security conferences offering education, CPE training opportunities, and networking of security leaders, experts, senior executives, and policy makers who shape the face of security.^[53]
• SIN ACM, or the International Conference on Security of Information and Networks.^[54]
• SOURCE Conference, SOURCE is a computer security conference in Boston, Dublin and Seattle that offers education in both the business and technical aspects of the security industry.^[55]
• SSTIC [fr],^[56] Annual French Security Symposium held in Rennes.^[57]
• Swiss Cyber Storm, International IT Security Conference held in October at KKL Lucerne.^[58]
• TROOPERS IT Security Conference, Annual international IT Security event with workshops held in Heidelberg, Germany.^[59]
• USENIX Security,^[60] annual security conference associated with USENIX.
• Virus Bulletin conference, annual security conference held late September or early October since 1989.^[61]

A hacker conference, also known as a hacker con, is a convention for hackers. These serve as meeting places for phreakers, hackers, and security professionals.

The actual events, time-spans, and details of various themes of these conventions not only depends on the specific convention attended but also its perceived reputation. Typically the actual details of any given convention are couched in mild secrecy due to the legality of certain panels, as well as the willingness of attendees to explain themselves to law enforcement and less computer-savvy individuals (see hacker definition controversy).

Common topics include wardriving, lockpicking, corporate and network security, personal rights and freedoms, new technologies, as well as general 'geek' motifs. Some may also have contests and general collaborative events such as hackathons.

One facet of Hacker conferences that tends to differentiate many "HackerCons" from general computer security conferences, is the evolution of the conference badge. While many conferences use a fairly standard paper/plastic badge to identify attendees by name, many hacker con's have evolved to use more non-traditional badges, such as electronic PCB's with LED's, LCD screens, and can include wifi and advanced, often hidden functionality, to include games, that do not identify the individual, sometimes promoting a group identity or regional/local group affiliation. This has spurred the creation of so-called "badgelife" where different individuals and organizations (such as local hacker groups) may design, create, and sell or otherwise distribute a separate badge attendees wear in addition to their conference badge. These badges may be purchased, but some may have to be earned by completing a challenge at the conference. One of the rarest and most desirable badges is the DefCon Black Badge.^[62] While the use of the badges are traditionally associated with DefCon, their use has spread to other conferences.

Pixelflut is a common activity at hacker events. It is a protocol for software to draw a canvas. Usually this is done in a client-server architecture with multiple clients who send individual pixels and the server displays. The clients then overwrite each others images on the same server.^[63][64] There are various variants of the protocol and different implementations for both the server and the client.

• AthCon, the largest hacker conference in South Eastern Europe taking place annually in Athens, Greece.^[65]
• BSides, community conference that initially started in the US is now global.^[66]
• Blackhoodie, is a series of free, women-only reverse engineering conference offering workshops and talks. They are held in different cities around the world on a regular basis to encourage women interested in the cyber security field.
• BornHack, an annual hacker camp on the Danish island of Funen.
• CactusCon, the largest hacker and cybersecurity conference in Arizona, held annually since 2012.^[67]
• CarolinaCon, an annual information security and rights conference held every spring in North Carolina's Research Triangle.
• Chaos Communication Congress, the oldest and Europe's largest hacker conference, held by Chaos Computer Club.
• CIA Conference - A series of international conference on cyber security which aims to bridge the gap between the corporate need of cyber security to the fancy world of hacking.^[21][22]
• CircleCityCon is a security and technology conference held annually in June in Indianapolis.^[68]
• Cop CON, is a unique Cyber Policing Conference held across India every year by Indian Cyber Army.^[69]
• CypherCon, a Milwaukee based hacker conference held late winter each year.^[70]
• DEF CON, in Las Vegas, Nevada, is the biggest hacker convention in the United States held during summer (June–August).
• DerbyCon, an annual hacker conference based in Louisville, KY (2011–2019).^[71]
• DEVSEC Conf, National Conference on Cyber Security and Operation Development (DevOps) in Farsi in Iran ^[72]
• Diana Initiative, an annual hacker conference to promote Women in cybersecurity technologies by The Diana Initiative non profit org located in Las Vegas, NV.^[73]
• Digital Overdose Con, a Europe based hacker and tech conference focused on rookies held in the spring each year.^[74]
• Ekoparty, a hacker convention in Argentina and one of the most important in South America, held annually around September in Buenos Aires.^[75]
• GrrCon, an annual hacker conference hosted each September in Grand Rapids, Michigan.^[76]
• GroundZero Summit, an annual hacker conference hosted each November in Hotel Ashoka, New Delhi.^[77]
• Hack in the Box, an annual hacker conference.^[78][79]
• Hackers Day is one of the hacking conferences in India held frequently in January–February every year.^[80] The organizers also used to organize DEFCON Lucknow, which was dissolved by the DEFCON after many controversies^{[81][non-primary source needed]} arose in 2016.
• Hackers 2 Hackers Conference (H2HC) is the oldest security research (hacking) conference in Latin America and one of the oldest ones still active in the world.^[82]
• Hackers Idol, is a unique Hackers & Cyber Enthusiast Talent Hunt held across India every year by Indian Cyber Army.^[83]
• Hackers Next Door, in New York City is held by Tech Learning Collective during the Winter (November/December).^[84]
• Hackers on Planet Earth (HOPE), in New York City is held by 2600: The Hacker Quarterly in mid-summer (July/August) every other year.
• Hackfest.ca, in Quebec, Canada, bilingual conferences and hacking games.^[85]
• Hackers Teaching Hackers, a hacker conference in Columbus, Ohio, featuring talks, hands-on villages, a CTF, mentorship, and more.^[86]
• HackMiami Conference, a hacker conference in Miami, Florida, organized by the HackMiami hackerspace.^[87]
• Hardwear.io - Hardware Security Conference is an annual Hardware Security event held in The Hague, Netherlands. It is being organized every year to answer the emerging threats and attacks on hardware.^[88]
• IDSECCONF, Indonesian annual IT Hacking and Cybersecurity conference.^[89]
• INFILTRATE,^[90] hosted by Immunity, Inc, is a deep technical security conference that focuses on offensive technical issues. The conference has been held annually in Miami Beach, Florida since 2011.
• Kernelcon, is an Omaha, Nebraska hacker convention held annually in April, beginning in 2019.
• Kiwicon, is a Wellington, New Zealand hacker convention.
• LayerOne, held every spring in Los Angeles, California.^[91]
• LeHack, FRENCH HACKERS CONFERENCE hosted in Paris ^[92]
• Malcon, the world's first International Malware Conference, hosted in India.^[93]
• No Hat^[94] is an international computer security conference held annually in Bergamo (IT), and considered the largest technical security event in Italy.
• NorthSec, in Montreal, Quebec, is an applied security event held yearly mid-May, featuring two days of conference followed by a 48h on-site CTF.^[95]
• Notacon, in Cleveland, Ohio, is an art and technology conference held frequently in mid-April.
• Nuit Du Hack, in Paris, France, is the oldest and largest hacker conference held frequently in late-June.^[96]
• PhreakNIC, in Nashville, Tennessee, is held by Nashville 2600.^[97] around October.
• Pumpcon, A yearly HackerCon in a bar in Philadelphia, PA.^[98]
• Quahogcon, In Providence, Rhode Island is held at the end of April.^[99]
• Roadsec,^[100] One of the biggest hacking conferences in Latin America, held in Brazil, with smaller city editions throughout the whole year, and a big ending edition held in São Paulo in November (February - November).
• ROOTCON,^[101] is the leading pioneer of hacking conferences in the Philippines and the most sought after conference by security researchers, professionals and enthusiasts for top caliber source of security skills and discoveries that is held annually around the months of September - October.
• RootedCON, in Madrid, Spain, is one of the biggest hacker conference in Europe. This convention started in 2010. (March)
• ShellCon, in Los Angeles CA is an information security conference that is held annually in the beautiful beach cities of Los Angeles.^[102]
• ShmooCon, in Washington, DC is an annual east coast hacker conference that is held in Washington, DC.^[103]
• SkyDogCon, A technology conference in Nashville, TN for the individual with the Renaissance Mind. SkyDogCon exists to facilitate learning, information sharing, and mingling with like-minded people in a relaxed atmosphere.^[104]
• Sthack is an annual security conference in Bordeaux, followed by the traditional Capture The Flag.
• Summercon, one of the oldest hacker conventions, held during Summer (frequently in June). It helped set a precedent for more modern "cons" such as H.O.P.E. and DEF CON.
• The Hackers Conference, is India's biggest Cyber Security Conference held in New Delhi, India every Year.^[105]
• THOTCON, a Chicago based hacker conference held in the Spring each year.^[106]
• ToorCon, San Diego hacker convention that emerged from the 2600 user group frequently in late September.^[107]
• WildWestHackinFest, a conference focused on training and development held in Deadwood, South Dakota in October. Explore the Black Hills and learn how to hack all the things, including the IoT.^[108]
• ZeroAccess, is a unique International Cyber Security Conference held in India, India in the Month of April by Indian Cyber Army^[109]

• Stichting HAL2001, a not-for-profit organization, holds a quadrennial Dutch hacker convention. They have, so far, held HAL2001 (Hackers at Large) and What the Hack (2005, originally called HEX (referring to the 16th anniversary of the event, as well as an acronym for Hacking Extreme)). The Dutch conferences held prior Stichting HAL2001's existence were Galactic Hacker Party (1989), Hacking at the End of the Universe (1993) and Hacking In Progress (1997), notable for being held simultaneously and in conjunction with Beyond HOPE. The not-for-profit organization 'Stichting Hxx'^[110] was organizing the 2009 incarnation of this con; HAR (Hacking at Random).^[111] During the summer of 2013 the next installment of the series, called OHM (Observe Hack Make), was held.,^[112] followed by SHA (Still Hacking Anyway) in 2017. The 2021 edition was delayed due to Covid and held as MCH (May Contain Hackers) in 2022.

• Hacker Convention Comparison based on internet connectivity and attendees
• InfoSec conferences^{[permanent dead link‍]}
• List of french non-commercial IT sycurity event in 2019.