SecTor

SecTor
Name	SecTor
Status	Active
Genre	Information security conference
Frequency	Annual
Location	Toronto, Ontario
Country	Canada
First	2004
Organizer	Toronto Information Security Network

SecTor SecTor is an annual information security conference held in Toronto, Ontario, Canada, that gathers practitioners, researchers, educators, vendors, and policymakers for talks, workshops, and networking. The event draws participants from technology hubs, academic institutions, law enforcement agencies, standards bodies, and private industry, fostering exchanges among attendees linked to MIT, Stanford University, Carnegie Mellon University, University of Toronto, University of Waterloo, and international organizations such as International Organization for Standardization and Institute of Electrical and Electronics Engineers. Speakers and delegates include representatives from firms and institutions like Microsoft, Google, Amazon Web Services, IBM, Cisco Systems, BlackBerry Limited, Facebook, Apple Inc., Red Hat, Salesforce, Palantir Technologies, CrowdStrike, FireEye, Kaspersky Lab, Symantec, McAfee, NortonLifeLock, Trend Micro, Checkpoint Software Technologies, Fortinet, Palo Alto Networks, RSA Security, Deloitte, PwC, Ernst & Young, KPMG, Accenture, Booz Allen Hamilton, Capgemini, Siemens, Schneider Electric, Bank of America, JPMorgan Chase, Goldman Sachs, Toronto Police Service, Royal Canadian Mounted Police, and participants from governmental agencies like National Security Agency, Communications Security Establishment and United States Department of Homeland Security.

Overview

SecTor provides a multi-track program featuring keynote addresses, technical talks, hands-on workshops, training, and panel discussions that cover offensive and defensive cybersecurity, incident response, threat intelligence, cryptography, privacy, governance, and compliance. Attendees often include security researchers affiliated with Massachusetts Institute of Technology, Princeton University, Harvard University, Yale University, Columbia University, University of California, Berkeley, University of Oxford, University of Cambridge, ETH Zurich, Tsinghua University, National University of Singapore, and technology companies such as Intel, AMD, NVIDIA, ARM Holdings, Oracle Corporation, SAP SE, VMware, Atlassian, Uber Technologies, Airbnb, Shopify, IBM Research, Facebook AI Research, and cybersecurity startups supported by accelerators like Y Combinator and Techstars.

History and Development

Founded in 2004 by local organizers and community groups in Toronto, the conference expanded from single-track vendor sessions to a broad program influenced by trends observed at events like Black Hat USA, DEF CON, RSA Conference, CanSecWest, Hack In The Box, Infosecurity Europe, BSides, Chaos Communication Congress, ShmooCon, Troopers, AusCERT, FIRST Conference, SANS Institute trainings, and academic symposia such as USENIX Security Symposium. Over time, SecTor incorporated content reflecting research from labs at Bell Labs, Microsoft Research, Google DeepMind, IBM Watson, Facebook Reality Labs, and collaborations with policy fora such as World Economic Forum and standards discussions at Internet Engineering Task Force and World Wide Web Consortium. Growth paralleled industry movements involving mergers and acquisitions by firms like Symantec Corporation and VeriSign, regulatory shifts influenced by statutes such as Personal Information Protection and Electronic Documents Act and international rules including General Data Protection Regulation.

Conferences and Events

Annual programs typically feature keynote stages, concurrent technical tracks, vendor expo halls, Capture The Flag competitions inspired by DEF CON CTF, specialized training days modeled after SANS Institute courses, mentorship sessions drawing on alumni networks from University of Toronto Faculty of Law, and networking events with representatives from venture capital firms like Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, and Index Ventures. The conference schedule has included dedicated workshops on topics highlighted at Black Hat Europe and panel sessions with participants from think tanks such as Brookings Institution, RAND Corporation, Chatham House, and industry groups including ISACA, International Association of Privacy Professionals, Open Web Application Security Project, and Cloud Security Alliance.

Topics and Tracks

Tracks span application security, network security, cloud security, IoT and embedded device security, industrial control systems protection, mobile security, cryptographic engineering, privacy-enhancing technologies, threat hunting, malware analysis, reverse engineering, social engineering, red teaming, blue teaming, vulnerability disclosure, secure software development, compliance, and legal-technical intersections. Presentations often reference protocols and platforms like Transport Layer Security, Secure Shell, Hypertext Transfer Protocol, Bluetooth, Zigbee, Modbus, DNP3, Android (operating system), iOS, Windows 10, Linux kernel, Docker (software), and services such as Amazon Web Services, Microsoft Azure, Google Cloud Platform, and identity frameworks like OAuth 2.0 and SAML.

Notable Speakers and Presentations

Notable presenters over the years have included researchers and practitioners associated with landmark work akin to findings from Mudge, contributors from groups formerly at L0pht Heavy Industries, authors of influential vulnerabilities like the disclosure in Stuxnet reports, analysts involved with investigations comparable to those by Mandiant in the Advanced Persistent Threat domain, cryptographers connected to RSA (cryptosystem), academics from Stanford Cryptography Group, and speakers with backgrounds at NSA Tailored Access Operations defectors and whistleblowers discussed in contexts like Edward Snowden. Sessions have showcased exploit demonstrations, zero-day research comparable to disclosures at Pwn2Own, forensic case studies inspired by landmark incidents such as breaches at Target Corporation, Equifax, Yahoo!, and Marriott International, and policy debates reflecting issues raised in hearings before bodies like the United States Congress.

Impact and Reception

SecTor is recognized in the cybersecurity community for contributing to professional development, knowledge transfer, and local ecosystem building in Toronto and Canada, influencing hiring pipelines into companies including Shopify, BlackBerry Limited, OpenText Corporation, Ceridian, and public-sector units such as Canadian Centre for Cyber Security. Coverage and critiques have appeared in technology press outlets and specialist publications that also report on events like Wired, The Register (publication), Ars Technica, Krebs on Security, Dark Reading, Threatpost, SC Magazine, CSO Online, and academic citations in conferences such as IEEE Symposium on Security and Privacy and ACM Conference on Computer and Communications Security. The conference's role in community education echoes initiatives run by Women in CyberSecurity and diversity efforts similar to Grace Hopper Celebration and regional security meetups including OWASP chapters and BSides Toronto.

Category:Computer security conferences