This article may rely excessively on sources too closely associated with the subject, potentially preventing the article from being verifiable and neutral. Please help improve it by replacing them with more appropriate citations to reliable, independent, third-party sources. (August 2015) (Learn how and when to remove this template message)
Black Hat Briefings
StatusActive
GenreSecurity Conference
FrequencyAnnual
VenueVaries
Location(s)United States, United Kingdom, Singapore
Years active26
InauguratedJuly 9, 1997 (1997-07-09)
FounderJeff Moss
Organised byInforma Tech
Websiteblackhat.com

Black Hat Briefings (commonly referred to as Black Hat) is a computer security conference that provides security consulting, training, and briefings to hackers, corporations, and government agencies around the world. Black Hat brings together a variety of people interested in information security ranging from non-technical individuals, executives, hackers, and security professionals. The conference takes place regularly in Las Vegas, Barcelona, London and Riyadh. The conference has also been hosted in Amsterdam, Tokyo, and Washington, D.C. in the past.[1][2]

History

The first Black Hat was held July 7-10, 1997 in Las Vegas, immediately prior to DEF CON 5.[3] The conference was aimed at the computer industry, promising to give them privileged insight into the minds and motivations of their hacker adversaries. Its organizers stated: "While many conferences focus on information and network security, only the Black Hat Briefings will put your engineers and software programmers face-to-face with today's cutting edge computer security experts and 'hackers.'"[4] It was presented by DEF CON Communications and Cambridge Technology Partners. It was founded by Jeff Moss, who also founded DEF CON, and is currently the Conference Chair of the Black Hat Review Board.[5] These are considered[by whom?] the premier information security conferences in the world. Black Hat started as a single annual conference in Las Vegas, Nevada and is now held in multiple locations around the world.[6] Black Hat Briefings was acquired by CMP Media, a subsidiary of U.K.-based United Business Media (UBM) in 2005[7][8] which was then acquired by Informa Tech in June 2018.

Culture

Black Hat is typically scheduled prior to DEF CON with many attendees going to both conferences. It has been perceived by the security industry as a more corporate security conference whereas DEF CON is more informal.

Components

The conference is composed of three major sections: the Black Hat Briefings, Black Hat Trainings, and Black Hat Arsenal.

Briefings

The Briefings are composed of tracks, covering various topics including reverse engineering, identity and privacy, and hacking. The briefings also contain keynote speeches from leading voices in the information security field, including Robert Lentz, Chief Security Officer, United States Department of Defense; Michael Lynn; Amit Yoran, former Director of the National Cyber Security Division of the Department of Homeland Security;[2][9] and General Keith B. Alexander, former Director of the National Security Agency and former commander of the United States Cyber Command.[10]

Trainings

Training is offered by various computer security vendors and individual security professionals. The conference has hosted the National Security Agency's information assurance manager course, and various courses by Cisco Systems, Offensive Security,[11] and others.[12][13]

Arsenal

Arsenal is a portion of the conference dedicated to giving researchers and the open source community a place to showcase their latest open-source information security tools. Arsenal primarily consists of live tool demonstrations in a setting where attendees can ask questions about the tools and sometimes use them. It was added in 2010.[14] ToolsWatch maintains an archive of all Black Hat Briefings Arsenals.[15]

Notable incidents

Michael Lynn presenting a briefing in 2005

Black Hat had historically been known for the antics of its hacker contingent, and the disclosures brought in its talks. In the past, companies have attempted to ban researchers from disclosing vital information about their products. At Black Hat USA in 2005, Cisco Systems tried to stop Michael Lynn from speaking about a vulnerability that he said could let hackers virtually shut down the Internet.[2] However, in recent years, researchers have worked with vendors to resolve issues, and some vendors have challenged hackers to attack their products.[16][17][18][19]

Conference attendees had been known to hijack wireless connections of the hotels, hack hotel television billing systems, and in one instance, deploy a fake automated teller machine in a hotel lobby.[20] In 2009, web sites belonging to a handful of security researchers and groups were hacked and passwords, private e-mails, instant messaging chats, and sensitive documents were exposed on the vandalized site of Dan Kaminsky, days before the conference. During Black Hat USA in 2009, a USB thumb drive that was passed around among attendees was found to be infected with the Conficker virus, and in 2008, three men were expelled for packet sniffing the press room local area network.[21]

Venues, dates, and locations

Black Hat had initially started within the United States but expanded over the years across USA, Europe, Asia, Middle East, Africa, Washington DC, and Abu Dhabi:[22]

Conference Name Location Venue Duration Year
Black Hat Asia 2024[23] Singapore Marina Bay Sands April 16 - April 19 2024
Black Hat Spring Trainings 2024[24] United States, Washington DC Walter E Washington Convention Center March 12 - March 15 2024
Black Hat Europe 2023[25] United Kingdom, London Excel London December 4 - December 7 2023
Black Hat USA 2023[26] United States, Las Vegas, Virtual Mandalay Bay August 5 - August 10 2023
Black Hat Asia 2023[27] Singapore, Virtual Marina Bay Sands May 9 - May 12 2023
Black Hat Spring Trainings 2023[28] Virtual N/A March 13 - March 16 2023
Black Hat Europe 2022[29] United Kingdom, London Excel London December 5 - December 8 2022
Black Hat USA 2022[30] United States, Las Vegas, Virtual Mandalay Bay August 6 - August 11 2022
Black Hat Spring Trainings 2022[31] Virtual N/A June 13 - June 16 2022
Black Hat Asia 2022[32] Singapore, Virtual Marina Bay Sands May 10 - May 13 2022
Black Hat Europe 2021[33] United Kingdom, London Excel London November 8 - November 11 2021
Black Hat USA 2021[34] United States, Las Vegas, Virtual Mandalay Bay July 31 - August 5 2021
Black Hat Asia 2021[35] Virtual N/A May 4 - May 7 2021
Black Hat Spring Trainings 2021[36] Virtual N/A March 15 - March 18 2021
Black Hat Europe 2020[37] Virtual N/A December 7 - December 10 2020
Black Hat Asia 2020[38] Virtual N/A September 29 - October 2 2020
Black Hat USA 2020[39] Virtual N/A August 1 - August 6 2020
Black Hat Europe 2019[40] United Kingdom, London Excel London December 2 - December 5 2019
Black Hat Trainings 2019[41] United States, Alexandria Hilton Alexandria October 17 - October 18 2019
Black Hat USA 2019[42] United States, Las Vegas Mandalay Bay August 3 - August 8 2019
Black Hat Asia 2019[43] Singapore Marina Bay Sands March 26 - March 29 2019
Black Hat Europe 2018[44] United Kingdom, London Excel London December 3 - December 6 2018
Black Hat Trainings 2018[45] United States, Chicago Sheraton Grand Chicago October 22 - October 23 2018
Black Hat USA 2018[46] United States, Las Vegas Mandalay Bay August 4 - August 9 2018
Black Hat Asia 2018[47] Singapore Marina Bay Sands March 20 - March 23 2018
Black Hat Europe 2017[48] United Kingdom, London Excel London December 4 - December 7 2017
Black Hat USA 2017[49] United States, Las Vegas Mandalay Bay July 22 - July 27 2017
Black Hat Asia 2017[50] Singapore Marina Bay Sands March 28 - March 31 2017
Black Hat Europe 2016[51] United Kingdom, London Business Design Centre November 1 - November 4 2016
Black Hat USA 2016[52] United States, Las Vegas Mandalay Bay July 3 - August 4 2016
Black Hat Asia 2016[53] Singapore Marina Bay Sands March 29 - April 1 2016
Black Hat Europe 2015[54] Netherlands, Amsterdam Amsterdam RAI November 10 - November 13 2015
Black Hat USA 2015[55] United States, Las Vegas Mandalay Bay August 1 - August 6 2015
Black Hat Asia 2015[56] Singapore Marina Bay Sands March 24 - March 27 2015
Black Hat Trainings 2014[57] United States, Potomoc The Bolger Center December 8 - December 11 2014
Black Hat Europe 2014[58] Netherlands, Amsterdam Amsterdam RAI October 14 - October 17 2014
Black Hat USA 2014[59] United States, Las Vegas Mandalay Bay August 2 - August 7 2014
Black Hat Asia 2014[60] Singapore Marina Bay Sands March 25 - March 28 2014
Black Hat USA 2013[61] United States, Las Vegas Caesars Palace July 27 - August 1 2013
Black Hat Europe 2013[62] Netherlands, Amsterdam Grand Hotel Krasnapolsky March 12 - March 15 2013
Black Hat USA 2012[63] United States, Las Vegas Caesars Palace July 21 - July 26 2012
Black Hat Europe 2012[64] Netherlands, Amsterdam Grand Krasnapolsky March 14 - March 16 2012
Black Hat USA 2011[65] United States, Las Vegas Caesars Palace July 30 - August 2 2011
Black Hat DC 2011[66] United States, Crystal City Hyatt Regency January 16 - January 19 2011
Black Hat USA 2010[67] United States, Las Vegas Caesars Palace July 24 - July 29 2010
Black Hat DC 2010[68] United States, Crystal City Hyatt Regency January 31 - February 3 2010
Black Hat USA 2009[69] United States, Las Vegas Caesars Palace July 25 - July 30 2009
Black Hat DC 2009[70] United States, Crystal City Hyatt Regency February 16 - February 17 2009
Black Hat USA 2008[71] United States, Las Vegas Caesars Palace August 2 - August 7 2008
Black Hat DC 2008[72] United States, Crystal City Westin Washington DC City Center February 18 - February 21 2008
Black Hat USA 2007[73] United States, Las Vegas Caesars Palace July 28 - August 2 2007
Black Hat USA 2006[74] United States, Las Vegas Caesars Palace July 29 - August 3 2006
Black Hat Federal 2006[75] United States, Crystal City Sheraton Crystal City January 23 - January 26 2006
Black Hat USA 2005[76] United States, Las Vegas Caesars Palace July 23 - July 28 2005
Black Hat USA 2004[77] United States, Las Vegas Caesars Palace July 24 - July 29 2004
Black Hat Federal 2003[78] United States, Tysons Corner Sheraton Premiere September 29 - October 2 2003
Black Hat USA 2003[79] United States, Las Vegas Caesars Palace July 28 - July 31 2003
Black Hat USA 2002[80] United States, Las Vegas Caesars Palace July 29 - August 1 2002
The Black Hat Briefings '01[81] United States, Las Vegas Caesars Palace July 11 - July 12 2001
The Black Hat Briefings '00[82] United States, Las Vegas Caesars Palace July 26 - July 27 2000
The Black Hat Briefings '99[83] United States, Las Vegas The Venetian July 7 - July 8 1999
The Black Hat Briefings '98[84] United States, Las Vegas Caesars Palace July 29 - July 30 1998
The Black Hat Briefings[85] United States, Las Vegas Unknown July 9 - July 10 1997

See also

References

  1. ^ "Black Hat". blackhat.com.
  2. ^ a b c "Computer Security Conferences Attract Both Hackers, Anti-Hackers". Fox News. 4 August 2006. Archived from the original on 30 July 2013. Retrieved 15 August 2009.
  3. ^ Lange, Larry (July 15, 1997). "Microsoft Opens Dialogue With NT Hackers". EE Times. CMP Media Inc. Retrieved January 28, 2024.((cite news)): CS1 maint: url-status (link)
  4. ^ "The Black Hat Briefings USA 1997 Information".
  5. ^ "Black Hat". blackhat.com.
  6. ^ "Black Hat ® About Black Hat". blackhat.com.
  7. ^ "UBM news releases". Media. Archived from the original on 2016-12-20. Retrieved 2016-11-03.
  8. ^ "CMP Media Buys Black Hat". Retrieved 2016-11-03.
  9. ^ "Error". Archived from the original on 2009-02-11. Retrieved 2009-08-15.
  10. ^ "Commander of U.S. Cyber Command and National Security Agency Director, General Keith Alexander, To Keynote Day One of Black Hat USA 2013" (Press release). WWBT-TV NBC 12, WorldNow (Gannaway). May 14, 2013. Archived from the original on June 15, 2013. Retrieved June 13, 2013.
  11. ^ "Announcing the Kali Linux Dojo". Offensive Security. May 28, 2014. Retrieved April 15, 2019.
  12. ^ "Black Hat ® DC 2009 Training Index". blackhat.com.
  13. ^ "Black Hat ® Europe 2009 Training Index". blackhat.com.
  14. ^ "Black Hat Technical Security Conference: USA 2010 // Black Hat Arsenal: Call for Tools". blackhat.com.
  15. ^ "ToolsWatch.org – The Hackers Arsenal Tools Portal » Arsenal". www.toolswatch.org. Retrieved 2016-11-03.
  16. ^ "Security Expert: PC Media Players Full of Holes". Fox News. 3 August 2007. Archived from the original on 6 December 2010. Retrieved 15 August 2009.
  17. ^ "Microsoft Dares Security Experts to Find Holes in Windows Vista". Fox News. 4 August 2006. Archived from the original on 30 July 2013. Retrieved 15 August 2009.
  18. ^ "Microsoft Challenges Hackers On Vista". CBS News. 3 August 2006.
  19. ^ "Hackers expose weakness in trusted sites - Technology & science - Security". NBC News. Associated Press. 2 August 2009. Retrieved 2014-10-09.
  20. ^ Zetter, Kim. "Researcher Demonstrates ATM 'Jackpotting' at Black Hat Conference". Wired. ISSN 1059-1028. Retrieved 2024-01-28.
  21. ^ "Hanging with hackers can make you paranoid". CNN. 4 August 2009. Archived from the original on January 22, 2015.
  22. ^ "Black Hat Archives". blackhat.com. Retrieved 2024-01-29.
  23. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-29.
  24. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-29.
  25. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-29.
  26. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  27. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  28. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-29.
  29. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  30. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  31. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-29.
  32. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  33. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  34. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  35. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  36. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-29.
  37. ^ "Black Hat". www.blackhat.com. Retrieved 2024-01-28.
  38. ^ "Black Hat Asia 2020". www.blackhat.com. Retrieved 2024-01-28.
  39. ^ "Black Hat USA 2020". www.blackhat.com. Retrieved 2024-01-28.
  40. ^ "Black Hat Europe 2019". www.blackhat.com. Retrieved 2024-01-28.
  41. ^ "Black Hat Trainings 2019". www.blackhat.com. Retrieved 2024-01-29.
  42. ^ "Black Hat USA 2019". www.blackhat.com. Retrieved 2024-01-28.
  43. ^ "Black Hat Asia 2019". www.blackhat.com. Retrieved 2024-01-28.
  44. ^ "Black Hat Europe 2018". www.blackhat.com. Retrieved 2024-01-28.
  45. ^ "Black Hat Trainings 2018". www.blackhat.com. Retrieved 2024-01-29.
  46. ^ "Black Hat USA 2018". www.blackhat.com. Retrieved 2024-01-28.
  47. ^ "Black Hat Asia 2018". www.blackhat.com. Retrieved 2024-01-28.
  48. ^ "Black Hat Europe 2017". www.blackhat.com. Retrieved 2024-01-28.
  49. ^ "Black Hat USA 2017". www.blackhat.com. Retrieved 2024-01-28.
  50. ^ "Black Hat Asia 2017". www.blackhat.com. Retrieved 2024-01-28.
  51. ^ "Black Hat Europe 2016". www.blackhat.com. Retrieved 2024-01-28.
  52. ^ "Black Hat USA 2016". www.blackhat.com. Retrieved 2024-01-28.
  53. ^ "Black Hat Asia 2016". www.blackhat.com. Retrieved 2024-01-28.
  54. ^ "Black Hat Europe 2015". www.blackhat.com. Retrieved 2024-01-28.
  55. ^ "Black Hat USA 2015". www.blackhat.com. Retrieved 2024-01-28.
  56. ^ "Black Hat Asia 2015". www.blackhat.com. Retrieved 2024-01-28.
  57. ^ "Black Hat Trainings 2014". www.blackhat.com. Retrieved 2024-01-29.
  58. ^ "Black Hat Europe 2014". www.blackhat.com. Retrieved 2024-01-28.
  59. ^ "Black Hat USA 2014". www.blackhat.com. Retrieved 2024-01-28.
  60. ^ "Black Hat Asia 2014". www.blackhat.com. Retrieved 2024-01-28.
  61. ^ "Black Hat USA 2013". www.blackhat.com. Retrieved 2024-01-28.
  62. ^ "Black Hat Europe 2013". www.blackhat.com. Retrieved 2024-01-28.
  63. ^ "Black Hat USA 2012". www.blackhat.com. Retrieved 2024-01-29.
  64. ^ "Black Hat ® Technical Security Conference: Europe 2012 // Home". www.blackhat.com. Retrieved 2024-01-29.
  65. ^ "Black Hat ® Technical Security Conference: USA 2011 // Home". www.blackhat.com. Retrieved 2024-01-29.
  66. ^ "Black Hat ® Technical Security Conference: DC 2011 // Archives". www.blackhat.com. Retrieved 2024-01-29.
  67. ^ "Black Hat ® Technical Security Conference: USA 2010 // Home". www.blackhat.com. Retrieved 2024-01-29.
  68. ^ "Black Hat ® Technical Security Conference: DC 2010 // Archives". www.blackhat.com. Retrieved 2024-01-29.
  69. ^ "Black Hat ® Technical Security Conference: USA 2009 // Home". www.blackhat.com. Retrieved 2024-01-29.
  70. ^ "Black Hat ® DC 2009 Briefings Archives". www.blackhat.com. Retrieved 2024-01-29.
  71. ^ "Black Hat : Upcoming : Black Hat USA 2008 Main Page". www.blackhat.com. Retrieved 2024-01-29.
  72. ^ "Black Hat : DC 2008 Briefings". www.blackhat.com. Retrieved 2024-01-29.
  73. ^ "Black Hat USA 2007 Briefings & Training". www.blackhat.com. Retrieved 2024-01-29.
  74. ^ "Black Hat USA 2006 Briefings & Training". www.blackhat.com. Retrieved 2024-01-29.
  75. ^ "Black Hat Federal 2006 Briefings & Training". www.blackhat.com. Retrieved 2024-01-29.
  76. ^ "Black Hat USA 2005 Briefings & Training". www.blackhat.com. Retrieved 2024-01-29.
  77. ^ "Black Hat USA 2004 Briefings & Training". www.blackhat.com. Retrieved 2024-01-29.
  78. ^ "Black Hat Federal 2003 Briefings and Training". www.blackhat.com. Retrieved 2024-01-29.
  79. ^ "Black Hat USA 2003 Topics and Speakers". www.blackhat.com. Retrieved 2024-01-29.
  80. ^ "Black Hat USA 2002 Briefings and Training". www.blackhat.com. Retrieved 2024-01-29.
  81. ^ "The Black Hat Windows 2001 Security Conference '01 in Las Vegas". www.blackhat.com. Retrieved 2024-01-29.
  82. ^ "The Black Hat Briefings '00! in Las Vegas". www.blackhat.com. Retrieved 2024-01-29.
  83. ^ "The Black Hat Briefings '99". www.blackhat.com. Retrieved 2024-01-29.
  84. ^ "The Black Hat Briefings Conference Main Index". www.blackhat.com. Retrieved 2024-01-29.
  85. ^ "The Black Hat Briefings USA 1997 Home Page". www.blackhat.com. Retrieved 2024-01-29.