Black Hat Briefings

Black Hat Briefings. The Black Hat Briefings is a premier series of global information security conferences, founded in 1997 by security researcher Jeff Moss. Often described as a more technical counterpart to its sister event, DEF CON, the Briefings serve as a crucial interface between the academic research community, government agencies, and the private sector. The event is renowned for presenting cutting-edge security research, vulnerabilities, and offensive techniques, attracting professionals from FBI agents to chief information security officers and ethical hackers.

History

The conference was established in 1997 by Jeff Moss, also known as "The Dark Tangent," initially as a single annual event in Las Vegas. Moss, a prominent figure in the hacker culture and founder of DEF CON, created the Briefings to provide a more formal, business-oriented venue for the dissemination of advanced security research. In 2005, the event and its brand were acquired by CMP Media, which later became part of United Business Media. This acquisition led to a significant expansion, with the launch of additional Black Hat events worldwide, including in Europe, Asia, and the Middle East, such as Black Hat Europe and Black Hat Asia. The conference has been held in notable Las Vegas Strip venues including Caesars Palace and the Mandalay Bay Resort and Casino.

Format and content

The event typically spans several days, beginning with intensive, hands-on technical training sessions led by world-renowned security experts. These multi-day courses cover topics ranging from advanced penetration testing and exploit development to secure coding practices and industrial control system security. The core of the Briefings is a two-day main conference featuring succinct, high-impact presentations known for their technical depth and novel findings. A hallmark of the format is the "Arsenal," a live tool demonstration area where researchers showcase new open-source security utilities. The conference also features a robust vendor exhibition where major firms like IBM Security, Palo Alto Networks, and CrowdStrike display the latest security technologies.

Notable presentations and discoveries

The Briefings have been the stage for numerous landmark disclosures that have shaped the security industry. In 2005, Michael Lynn's controversial presentation on Cisco Systems IOS vulnerabilities led to a legal injunction and became a defining moment for responsible disclosure debates. In 2010, researchers revealed the Stuxnet worm, a sophisticated cyberweapon targeting Iranian nuclear facilities. Other significant talks have included early exposures of critical flaws in Microsoft Windows, Apple's iOS, and the Android platform. Presentations on Advanced Persistent Threat groups like Equation Group and APT28, and vulnerabilities in ubiquitous protocols like HTTPS and Bluetooth, are regularly featured, often presented by teams from Google Project Zero, IOActive, and academic institutions like Johns Hopkins University.

Impact and reception

The conference is widely regarded as one of the most influential events in cybersecurity, directly impacting software development, corporate security policies, and national defense strategies. Its research frequently leads to the issuance of critical Common Vulnerabilities and Exposures advisories and urgent patches from vendors like Microsoft, Adobe, and Oracle Corporation. The event's culture of "full disclosure" has sparked ongoing ethical dialogues within the community, balancing the need for public awareness against potential risks from black hat hackers. Reception from entities like the Department of Homeland Security and the National Security Agency has been mixed, with officials both attending for intelligence and occasionally criticizing the publication of offensive techniques. The media, including Wired and The Washington Post, consistently cover its major revelations.

Related events

The Black Hat Briefings ecosystem includes several directly related conferences organized globally under the same brand. The most prominent is DEF CON, a larger, more informal hacker conference also founded by Jeff Moss, which immediately follows the Briefings in Las Vegas, creating a renowned "back-to-back" security week. Other regional Black Hat events include Black Hat Europe, often held in cities like London or Amsterdam, and Black Hat Asia, frequently hosted in Singapore. The organization also runs Black Hat USA as its flagship Las Vegas event. These satellite conferences replicate the core format of training and briefings, adapting content to regional threats and audiences, and are complemented by other major industry gatherings like RSA Conference and Hack in the Box.

Category:Computer security conferences Category:Recurring events established in 1997 Category:Hacking (computer security)