Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Comments
A Call for New Voices on the Security Conference Circuit
Newest First  |  Oldest First  |  Threaded View
LysaMyers
50%
50%
LysaMyers,
 User Rank: Author
9/16/2017 | 1:01:43 AM
Re: Suggestions?
Sorry for the delay, it appears the first version of my comment disappeared into the ether! 

As for bigger conferences, the two that come most readily to mind are RSA and BlackHat/Defcon. But between those two extremes, there are countless dozens or hundreds of options. There are conferences that focus on defense, others on offense. There are some that are more corporate, some that are more informal. There are some that focus on specific aspects of security like usability, privacy, IoT, Anti-malware, etc. There are some that are geared towards particular demographics or regions of the country. And there are even a surprising number geared towards specific business verticals like Healthcare or Education. There are a ton of different cons to check out now: Google can actually be helpful for this, as can following coverage from Dark Reading, or security folk on Twitter. 
LysaMyers
50%
50%
LysaMyers,
 User Rank: Author
9/15/2017 | 3:25:48 PM
Re: Perhaps Some Tips?
"What you did wrong" may be as simple as "submitted to a conference with an overwhelming number of applicants".

Larry Zeltser has posted a list of tips that really sums it up for me.

https://zeltser.com/submit-security-conference-proposal/

The few times I've been on the reviewing end of the equation, the most important things I looked for in session abstracts were a topic that has some new or interesting angle/subject, and an abstract that clearly illustrated that they had a clear plan for what they would be covering.

Another thing to do is to find people who are on conference selection committees and ask for their unvarnished opinion on your submission. They may see issues that might be less intuitive to those of us who haven't had to wade through a sea of session abstracts.
geriatric
50%
50%
geriatric,
 User Rank: Moderator
9/15/2017 | 9:05:14 AM
Perhaps Some Tips?
I have been thinking about doing a talk for some time now. I submitted an abstract to a security conference, but it was rejected (READ: ignored). So I really don't know what I did wrong. What about some tips from those who have cracked the elite circle for us wannabes?
SDiver
50%
50%
SDiver,
 User Rank: Strategist
9/7/2017 | 9:30:42 PM
Suggestions?
Great article, Lysa,

 

I've spoken at local security conferences for the past seven years and would like to expand into the larger conferences.  Have any suggestions?  It seems that conferences come and go before I ever learn about them.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-21742
PUBLISHED: 2021-09-25
There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter settings, attackers could use this vulnerability to obtain some sensitive information of users by accessing specific pages.
CVE-2020-20508
PUBLISHED: 2021-09-24
Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field.
CVE-2020-20514
PUBLISHED: 2021-09-24
A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/<id>.html allows authenticated attackers to delete all users.
CVE-2016-6555
PUBLISHED: 2021-09-24
OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in ver...
CVE-2016-6556
PUBLISHED: 2021-09-24
OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a user of the web UI views the data. This iss...