DEF CON

DEF CON
Samsonswiki · CC BY-SA 4.0 · source
Name	DEF CON
Status	Active
Genre	Computer security, hacking
Frequency	Annual
First	1993
Location	Las Vegas, Nevada
Organizer	Independent hacker community

DEF CON DEF CON is an annual gathering focused on computer security and hacker culture held in Las Vegas, Nevada. Founded by Jeff Moss, the event brings together researchers, practitioners, law enforcement, vendors, journalists, and hobbyists for technical talks, competitions, and social interaction. Attendees include professionals from National Security Agency, Department of Defense (United States), private firms such as Google, Microsoft, Amazon (company), and academics from institutions like Massachusetts Institute of Technology and Stanford University. The convention serves as a hub for exchange among members of communities represented by groups such as Cult of the Dead Cow, Chaos Computer Club, and Electronic Frontier Foundation.

History

The origins trace to a small meeting organized by Jeff Moss after the Black Hat party in 1993, inspired by earlier meetups among participants from Phrack, 2600: The Hacker Quarterly, and bulletin board culture including FidoNet. Early years featured figures linked to Kevin Mitnick controversies and debates involving Clifford Stoll and Bruce Schneier. As the event grew through the 1990s it intersected with episodes involving United States Secret Service, Federal Bureau of Investigation, and policy discussions influenced by legislation such as the Computer Fraud and Abuse Act. By the 2000s DEF CON expanded alongside developments in Wi‑Fi (IEEE 802.11), RFID, and SCADA vulnerabilities, drawing speakers from DARPA projects and researchers affiliated with Carnegie Mellon University and University of California, Berkeley.

Organization and Events

DEF CON is organized by a volunteer core team supported by sponsorships from vendors including Cisco Systems, Intel, IBM, and NVIDIA. The schedule typically features multiple parallel tracks in hotel conference spaces at venues in Las Vegas Strip locations. Events include formal presentations, workshops, hands‑on training sessions from groups like SANS Institute and Black Hat, and informal meetups often involving representatives from Twitter (now X), Facebook, Apple Inc., and startups. The convention uses badge systems and community moderation inspired by practices from Open Source Initiative and Internet Engineering Task Force gatherings. Logistics coordinate with municipal authorities of Clark County, Nevada and venue management, while media coverage involves outlets such as Wired (magazine), The New York Times, and The Washington Post.

Contests and Villages

Competitions are central, with headline events like the Capture the Flag (CTF) tournament that attracts teams from DEF CON CTF, university groups including Massachusetts Institute of Technology, and corporate red teams from Google Project Zero. Other contests include lockpicking challenges influenced by techniques documented by Deutsches Museum and Slock.it communities, social engineering captures linked to research by Christopher Hadnagy-style practitioners, and hardware hacking inspired by work at MIT Media Lab. The convention hosts multiple "villages" dedicated to specific technologies: IoT villages focusing on devices produced by companies such as Samsung Electronics and Philips, Bluetooth (IEEE 802.15.1) experimentation, Automotive Security Village exploring vulnerabilities in systems deployed by Bosch (company), and ICS/SCADA villages probing industrial control protocols used by Schneider Electric and Siemens. Villages often collaborate with standards bodies like Institute of Electrical and Electronics Engineers.

Speakers and Community

Speakers represent a cross-section of the field: independent researchers associated with publications such as Phrack, academics from University of Cambridge, authors like Dan Kaminsky (deceased) and Mikko Hyppönen, and corporate security teams from Microsoft Research and Amazon Web Services. The community includes non‑profit organizations such as Electronic Frontier Foundation advocates, think tanks like RAND Corporation analysts, and former government operatives from National Reconnaissance Office and Central Intelligence Agency. Panels cover disclosure ethics referencing cases like Stuxnet and debates over vulnerability reporting involving standards set by Internet Society. Cultural features include art installations, film screenings of works by Alex Winter, and oral histories referencing venues like 2600 HQ.

Security Impact and Controversies

DEF CON has been influential in revealing vulnerabilities affecting products produced by firms such as Intel Corporation, AMD, Cisco Systems, and Toyota. High‑profile disclosures have led to coordination with vendors and advisories from bodies including US‑CERT and NIST. The event has also been controversial: interactions with law enforcement agencies like FBI and United States Department of Homeland Security prompted debates over informant use and surveillance techniques discussed in press coverage by The Guardian and The Intercept. Incidents involving arrested attendees have involved prosecutors referencing statutes such as the Computer Fraud and Abuse Act and prompted legal scholarship at institutions like Harvard Law School and Columbia Law School. DEF CON’s open environment has driven both defensive advances embraced by enterprises such as IBM Security and offensive research that sparked policy responses from legislators in United States Congress.

Category:Computer security conferences