Black Hat Europe

Black Hat Europe
Name	Black Hat Europe
Genre	Information security conference
Frequency	Annual
Location	London, Amsterdam, Barcelona
First	2003
Organizer	U.S. Black Hat / Reed Exhibitions

Black Hat Europe is an annual information security conference held in Europe that brings together researchers, practitioners, vendors, and policymakers for briefings, training, and networking. The event sits alongside other major gatherings such as DEF CON, RSA Conference, and Chaos Communication Congress, and has become a focal point for disclosure of vulnerabilities, advance of offensive and defensive techniques, and commercial cybersecurity development. Attendees include representatives from technology companies, intelligence services, academic institutions, and legal bodies, creating intersections among Microsoft, Google, IBM, Cisco Systems, Kaspersky Lab, and national agencies like GCHQ and National Cyber Security Centre (United Kingdom).

Overview

Black Hat Europe features two main components: technical briefings and intensive training courses. The program mirrors structures seen at DEF CON, RSA Conference, and CanSecWest, offering sessions on exploit development, reverse engineering, secure software lifecycle, and threat intelligence. Vendors such as FireEye, Symantec, Palo Alto Networks, and CrowdStrike exhibit products alongside research groups from MIT, Stanford University, University of Cambridge, and ETH Zurich. Regulatory and policy perspectives appear via participation from bodies like the European Commission, ENISA, NATO Cooperative Cyber Defence Centre of Excellence, and national CERTs such as CERT-EU.

History and Development

Founded as a European extension of the U.S.-based Black Hat (security conference), the event migrated among venues including London, Amsterdam, and Barcelona while expanding its scope to cover both tactical and strategic security themes. Early years featured contributions from research collectives such as L0pht Heavy Industries, Cult of the Dead Cow, and academics connected to Oxford University and Imperial College London. Over time Black Hat Europe incorporated commercial training mirroring curricula from SANS Institute and certification tracks related to ISC2 and EC-Council. The conference has evolved alongside incidents and milestones like the Stuxnet disclosure, the Sony Pictures hack, the WannaCry cyberattack, and legislative frameworks including the NIS Directive and General Data Protection Regulation.

Conferences and Events

Annual conferences typically include a keynote track, multiple briefing tracks, hands-on training, vendor exhibitions, and capture-the-flag or challenge events akin to DEF CON CTF and CTFtime competitions. Notable co-located events and partner gatherings often mirror topics from Black Hat USA, InfoSec Europe, Nullcon, and regional meetups such as OWASP Global AppSec chapters. Training sessions have covered tools and platforms including Metasploit Framework, Burp Suite, Wireshark, and hardware platforms discussed at REcon and ShmooCon. The event draws sponsors ranging from startups funded by Y Combinator to established firms listed on the NASDAQ and FTSE 100.

Keynotes and Notable Presentations

Keynotes have been delivered by figures connected to entities like GCHQ, NHS Digital, Europol, Interpol, and leading academics from Cambridge University and Imperial College London. Historic briefings echoed major disclosures such as methodologies comparable to analyses of Stuxnet, Duqu, and Mirai botnet research, and vulnerability demonstrations that influenced vendors like Apple Inc., Google LLC, Microsoft Corporation, and Oracle Corporation to issue advisories. Presentations have come from independent researchers associated with groups like Project Zero, Team Cymru, CERT Coordination Center, and corporate labs at Kaspersky Lab and Trend Micro.

Training and Certifications

The training wing offers multi-day courses on exploit development, firmware analysis, mobile security, cloud security, and incident response. Instructors often hail from SANS Institute, Offensive Security, CISCO Systems Security, and university labs at Royal Holloway, University of London and Delft University of Technology. Training outcomes are relevant to professional credentials issued by organizations such as ISC2 (e.g., CISSP), EC-Council (e.g., CEH), and practical certifications like OSCP from Offensive Security. Hands-on labs use environments comparable to platforms supported by Kali Linux and virtualization stacks from VMware and Oracle VM VirtualBox.

Community Impact and Controversies

Black Hat Europe has influenced vulnerability disclosure norms and driven commercial security tool adoption, while attracting scrutiny over ethical boundaries, dual-use research, and vendor relationships. Debates mirror controversies seen at DEF CON and Chaos Communication Congress regarding responsible disclosure, publication embargoes, and collaboration with law enforcement agencies such as Europol and national intelligence services. Critics have raised concerns about commercialization and accessibility relative to grassroots communities like Hacktivist collectives and regional chapters of OWASP. Notable incidents have sparked discourse similar to reactions to the Vault 7 disclosures and disputes involving export controls under frameworks like the Wassenaar Arrangement.

Category:Information security conferences Category:Technology conferences