Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
A Call for New Voices on the Security Conference Circuit
Oldest First  |  Newest First  |  Threaded View
SDiver
50%
50%
SDiver,
User Rank: Strategist
9/7/2017 | 9:30:42 PM
Suggestions?
Great article, Lysa,

 

I've spoken at local security conferences for the past seven years and would like to expand into the larger conferences.  Have any suggestions?  It seems that conferences come and go before I ever learn about them.
geriatric
50%
50%
geriatric,
User Rank: Moderator
9/15/2017 | 9:05:14 AM
Perhaps Some Tips?
I have been thinking about doing a talk for some time now. I submitted an abstract to a security conference, but it was rejected (READ: ignored). So I really don't know what I did wrong. What about some tips from those who have cracked the elite circle for us wannabes?
LysaMyers
50%
50%
LysaMyers,
User Rank: Author
9/15/2017 | 3:25:48 PM
Re: Perhaps Some Tips?
"What you did wrong" may be as simple as "submitted to a conference with an overwhelming number of applicants".

Larry Zeltser has posted a list of tips that really sums it up for me.

https://zeltser.com/submit-security-conference-proposal/

The few times I've been on the reviewing end of the equation, the most important things I looked for in session abstracts were a topic that has some new or interesting angle/subject, and an abstract that clearly illustrated that they had a clear plan for what they would be covering.

Another thing to do is to find people who are on conference selection committees and ask for their unvarnished opinion on your submission. They may see issues that might be less intuitive to those of us who haven't had to wade through a sea of session abstracts.
LysaMyers
50%
50%
LysaMyers,
User Rank: Author
9/16/2017 | 1:01:43 AM
Re: Suggestions?
Sorry for the delay, it appears the first version of my comment disappeared into the ether! 

As for bigger conferences, the two that come most readily to mind are RSA and BlackHat/Defcon. But between those two extremes, there are countless dozens or hundreds of options. There are conferences that focus on defense, others on offense. There are some that are more corporate, some that are more informal. There are some that focus on specific aspects of security like usability, privacy, IoT, Anti-malware, etc. There are some that are geared towards particular demographics or regions of the country. And there are even a surprising number geared towards specific business verticals like Healthcare or Education. There are a ton of different cons to check out now: Google can actually be helpful for this, as can following coverage from Dark Reading, or security folk on Twitter. 


Data Leak Week: Billions of Sensitive Files Exposed Online
Kelly Jackson Higgins, Executive Editor at Dark Reading,  12/10/2019
Lessons from the NSA: Know Your Assets
Robert Lemos, Contributing Writer,  12/12/2019
4 Tips to Run Fast in the Face of Digital Transformation
Shane Buckley, President & Chief Operating Officer, Gigamon,  12/9/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-19807
PUBLISHED: 2019-12-15
In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. The timeri variable was originally intended to be for a newly created timer instance, but was used for ...
CVE-2014-8650
PUBLISHED: 2019-12-15
python-requests-Kerberos through 0.5 does not handle mutual authentication
CVE-2014-3536
PUBLISHED: 2019-12-15
CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration
CVE-2014-3643
PUBLISHED: 2019-12-15
jersey: XXE via parameter entities not disabled by the jersey SAX parser
CVE-2014-3652
PUBLISHED: 2019-12-15
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.