Conferences play crucial role in hacker, security, and cryptography communities, providing venues for knowledge sharing, vulnerability disclosure, technical talks, and community building. These gatherings embody hacker values of open information exchange and technical excellence.

Hacker & Community-Focused Conferences#

DEF CON (Las Vegas, NV, USA): The world’s largest hacker convention, focusing on vulnerability research, social engineering, and hardware hacking.

Security BSides (Las Vegas, NV; San Francisco, CA; Columbus, OH; London, UK; various global locations): A community-driven framework of events offering an alternative to large corporate conferences, focusing on grassroots security research and local collaboration.

Chaos Communication Congress (Hamburg/Leipzig, Germany): Europe’s largest association of hackers, hosted by the Chaos Computer Club (CCC), focusing on security, privacy, and freedom of information.

TROOPERS (Heidelberg, Germany): A highly technical, vendor-neutral IT security conference focusing on penetration testing and high-end security research.

Hackers on Planet Earth / HOPE (New York, NY, USA): A prominent, long-running hacker conference sponsored by 2600: The Hacker Quarterly.

ShmooCon (Washington, D.C., USA): An annual east coast hacker convention offering technical exploitation and defense presentations.

THOTCON (Chicago, IL, USA): A localized, highly technical hacking conference with non-profit, grassroots origins.

Corporate, Professional, & Strategy Conferences#

Black Hat (Las Vegas, NV, USA; London, UK; Singapore; Middle East): Premier corporate security events focusing on the disclosure of new vulnerabilities, zero-days, and corporate defense strategies.

RSA Conference / RSAC (San Francisco, CA, USA; APJ regional variants): The largest corporate cybersecurity event globally, centered on enterprise vendors, C-level strategy, and security policy.

Gartner Security & Risk Management Summit (National Harbor, MD, USA; London, UK; Sydney, Australia; Dubai, UAE): Strategic conferences tailored for CISOs and risk management executives focusing on market trends and compliance.

Infosecurity Europe (London, UK): The primary gathering for the European enterprise cyber defense and commercial vendor community.

SANS Institute Training Events (Orlando, FL, USA; London, UK; various global locations): Intensive, multi-day technical training and certification events for working security professionals.

SecureWorld (Boston, MA; Seattle, WA; various US locations): Regional conferences connecting local security leaders, practitioners, and vendors.

FIRST Annual Conference (Global rotating locations): Hosted by the Forum of Incident Response and Security Teams, focusing on cooperative incident response and technical data sharing among international security teams.

Academic Security Symposia#

USENIX Security Symposium (Baltimore, MD, USA / US locations vary): The premier academic forum for advanced peer-reviewed research in computer systems and networks security.

IEEE Symposium on Security and Privacy (San Francisco, CA, USA): The longest-running flagship academic conference for developments in electronic privacy and security.

ACM Conference on Computer and Communications Security / CCS (The Hague, Netherlands; US locations vary): Highly selective international conference presenting peer-reviewed cybersecurity and privacy research.

Network and Distributed System Security Symposium / NDSS (San Diego, CA, USA): Top-tier academic symposium dedicated to Internet and systems security research.

Annual Computer Security Applications Conference / ACSAC (US locations vary): Academic conference focusing on applied security research and practical solutions to enterprise network security problems.

European Symposium on Research in Computer Security / ESORICS (EU locations vary): Europe’s premier academic security conference for foundational and applied research.

Cryptography Conferences (Sponsored by IACR)#

International Cryptology Conference / CRYPTO (Santa Barbara, CA, USA): The flagship international conference on cryptologic research and mathematical cryptography.

EUROCRYPT (EU locations vary): The primary European conference on all aspects of cryptology.

Real World Crypto / RWC (Global locations vary): Symposium focusing on the applied side of cryptography, bridging academic research with industrial deployment.

Cryptographic Hardware and Embedded Systems / CHES (Global locations vary): Academic conference focusing on the design and analysis of cryptographic hardware and physical layer security.

Theory of Cryptography Conference / TCC (Global locations vary): Conference focused on the theoretical foundations of cryptography and theoretical computer science.

Fast Software Encryption / FSE (Global locations vary): Workshop dedicated to symmetric-key cryptography, including block ciphers and hash functions.

Digital Forensics & Steganography Workshops#

Digital Forensics Research Workshop / DFRWS (US; EU; APAC regional events): The preeminent academic and practitioner conference for peer-reviewed digital forensics research, memory analysis, and incident response methodologies.

ACM Information Hiding and Multimedia Security / IH&MMSec (Global locations vary): The primary academic workshop focused on steganography, steganalysis, digital watermarking, and media forensics.

IEEE International Workshop on Information Forensics and Security / WIFS (Global locations vary): Academic workshop covering theoretical and applied aspects of information forensics, biometric security, and hardware tampering.

International Conference on Digital Forensics and Cyber Crime / ICDF2C (Global locations vary): Academic event bridging digital forensics research with law enforcement and cybercrime investigation techniques.

IFIP WG 11.9 International Conference on Digital Forensics (Global locations vary): Working group conference focusing on advancing the science and technology of digital forensics and standardizing forensic procedures.