Part of a series on
Computer hacking
History Phreaking Cryptovirology Hacking of consumer electronics List of hackers
Hacker culture andethic Hackathon Hacker Manifesto Hackerspace Hacktivism Maker culture Types ofhackers Black hat Grey hat White hat
Conferences Black Hat Briefings Chaos Communication Congress DEF CON Hackers on Planet Earth Security BSides ShmooCon Summercon
Computer crime Crimeware List of computer criminals Script kiddie
Hacking tools Exploit forensics-focused operating systems Payload Social engineering Vulnerability
Practice sites HackThisSite Zone-H
Malware Rootkit Backdoor Trojan horse Virus Worm Spyware Ransomware Logic bomb Botnet Keystroke logging HIDS Web shell RCE Infostealer
Computer security Application security Cloud computing security Network security
Groups Anonymous Chaos Computer Club Homebrew Computer Club (defunct) Legion of Doom (defunct) LulzSec (defunct) Masters of Deception (defunct) Red team /Blue team
Publications 2600: The Hacker Quarterly Hacker News Nuts and Volts Phrack
v t e

DEF CON (also written asDEFCON, Defcon, orDC) is ahacker convention held annually inLas Vegas,Nevada. The first DEF CON took place in June 1993 and today many attendees at DEF CON includecomputer security professionals,journalists, lawyers, federal government employees, security researchers, students, andhackers with a general interest insoftware,computer architecture, hardware modification, conference badges, and anything else that can be "hacked". The event consists of several tracks of speakers about computer and hacking-related subjects, as well as cyber-security challenges and competitions (known as hackingwargames). Contests held during the event are extremely varied and can range from creating the longestWi-Fi connection to finding the most effective way to cool a beer in theNevada heat.^[3]

Other contests, past and present, includelockpicking,robotics-related contests, art, slogan, coffee wars,scavenger hunt, andCapture the Flag. Capture the Flag (CTF) is perhaps the best known of these contests and is a hacking competition in which teams of hackers attempt to attack and defend computers and networks using software and network structures. CTF has been emulated at other hacking conferences as well as in academic and military contexts (asred team exercises).

Federal law enforcement agents from theFBI,DoD,United States Postal Inspection Service,DHS (viaCISA) and other agencies regularly attend DEF CON.^[4][5] Some have considered DEF CON to be the "world's largest" hacker conference given its attendee size and the number of other conferences modeling themselves after it.

DEF CON was founded in 1993, by then 18-year-oldJeff Moss as a farewell party for his friend, a fellow hacker and member of "Platinum Net", aFidoNet protocol based hacking network fromCanada.^[6] The party was planned for Las Vegas a few days before his friend was to leave the United States, because his father had accepted employment out of the country. However, his friend's father left early, taking his friend along, so Jeff was left alone with the entire party planned. Jeff decided to invite all his hacker friends to go to Las Vegas with him and have the party with them instead. Hacker friends from far and wide got together and laid the foundation for DEF CON, with roughly 100 people in attendance.

The term DEF CON comes from the movieWarGames, referencing theU.S. Armed Forces defense readiness condition (DEF CON). In the movie, Las Vegas was selected as a nuclear target, and since the event was being hosted in Las Vegas, it occurred to Jeff Moss to name the convention DEF CON. However, to a lesser extent, CON also stands for convention and DEF is taken from the letters on the number 3 on atelephone keypad, a reference tophreakers.^[7] The official name of the conference includes a space in between DEF and CON.

Though intended to be a one-time event, Moss received overwhelmingly positive feedback from attendees, and decided to host the event for a second year at their urging. The event's attendance nearly doubled the second year, and has enjoyed continued success.^[8] In 2019, an estimated 30,000 people attended DEF CON 27.^[9]

For DEF CON's 20th Anniversary, a film was commissioned entitledDEF CON: The Documentary.^[10] The film follows the four days of the conference, events and people (attendees and staff), and covers history and philosophy behind DEF CON's success and unique experiences.

In January 2018, the DEF CON China Beta event was announced. The conference was held May 11–13, 2018 in Beijing, and marked DEF CON's first conference outside the United States. The second annual DEF CON China was canceled due to concerns related toCOVID-19.^[11]

In 2020, due to safety concerns overCOVID-19 the DEF CON 28 in-person Las Vegas event was cancelled^[12] and replaced with DEF CON Safe Mode,^[13] a virtual event planned for the same August 6–9 dates as DC 28.

In 2021, DEF CON 29 was held on August 5–8 in-person in Las Vegas and virtually (viaTwitch andDiscord). In-person attendees were required to wear masks in conference areas and to show proof of COVID-19 vaccination. Attendees with verified vaccine records (verified by a 3rd party) were given a wristband which was required for entry into the conference areas.^[14]

Attendees at DEF CON and other Hacker conferences often utilize an alias or "handle" at conferences. This is in keeping with the hacker community's desire for anonymity. Some known handles include DEF CON founderJeff Moss' handle of "Dark Tangent". A notable event at DEF CON is DEF CON 101 which starts off the conference and may offer the opportunity for an individual to come up on stage and be assigned a handle by a number of members of the community.

A notable part of DEF CON is the conference badge, which identifies attendees and ensures attendees can access conference events and activities. The DEF CON badge has historically been notable because of its changing nature, sometimes being an electronic badge (PCB), withLEDs, or sometimes being a non-electronic badge such as avinyl record. Conference badges often contain challenges or callbacks to hacker or other technology history, such as the usage of theKonami Code in the DEF CON 24 badge, or the DEF CON 25 badge reverting to the look of the DEF CON 1 badge. DEF CON Badges do not (generally) identify attendees by name; however, the badges are used to differentiate attendees from others. One way of doing this has been to have different badges, a general conference attendee (HUMAN) badge, a Staff member (GOON), Vendor, Speaker, Press, and other badges. In addition, individuals and organizations have begun creating their own badges in what has become known as badgelife. These badges may be purchased in many cases, or earned at the conference by completing challenges or events. Some badges may give the holder access to after hours events at the conference. In 2018, the evolution of this came with what was termed "shitty addon's" or SAOs. These were miniature (usually) PCBs that connected to the official and other badges that may extend functionality or were just collected.^[15][16]

Villages are dedicated spaces arranged around a specific topic. Villages may be considered mini conferences within the con, with many holding their own independent talks as well as hands-on activities such as CTFs, or labs. Some villages include Aerospace Village, Car Hacking Village, IoT Village, Recon,Biohacking,lockpicking,ham radio, and the well knownSocial Engineering and vote hacking villages. In 2018 the vote hacking village gained media attention due to concerns about US election systems security vulnerabilities.^[17][18]

DEF CON has its own cultural underground which results in individuals wanting to create their own meetups or "cons" within DEF CON. These may be actual formal meetups or may be informal. Well known cons are:

• Queercon, a meetup ofLGBTQ community.
• Linecon, any long line has the potential to turn into a con.
• QuietCon, a meetup to hang out or talk quietly away from the hustle and bustle of the rest of the conference attendees.

Workshops are dedicated classes on various topics related toinformation security and related topics. Historical workshops have been held on topics such as Digital Forensics investigation, hackingIoT devices, playing withRFID, fuzzing and attacking smart devices.

Since DEF CON 11, fundraisers have been conducted for theElectronic Frontier Foundation (EFF). The first fundraiser was adunk tank and was an "official" event. The EFF now has an event named "The Summit" hosted by the Vegas 2.0 crew that is an open event and fundraiser. DEF CON 18 (2010) hosted a new fundraiser called MohawkCon.

Within DEF CON there are many contests and events which range from, Capture the Flag, Hacker Jeopardy,^[19] Scavenger Hunt,^[20] Capture the Packet, Crash and Compile,^[21] and Hackfortress^[22] to name a few.

The Black Badge is the highest award DEF CON gives to contest winners of certain events.Capture the flag (CTF) winners sometimes earn these, as well as Hacker Jeopardy winners. The contests that are awarded Black Badges vary from year to year, and a Black Badge allows free entrance to DEF CON for life, potentially a value of thousands of dollars.^[23]

In April 2017, a DEF CON Black Badge was featured in an exhibit^[24] in theSmithsonian Institution'sNational Museum of American History entitled "Innovations in Defense: Artificial Intelligence and the Challenge of Cybersecurity". The badge belongs to ForAllSecure's Mayhem Cyber Reasoning System,^[25] the winner of theDARPA2016 Cyber Grand Challenge at DEF CON 24 and the first non-human entity ever to earn a Black Badge.

The first instance of the DEF CON CTF was held in 1996, at the 4th DEF CON, and has been held since then every year.^[26] It's one of the few CTF in the attack/defense format. The prize of the winning team is a couple of black badges.^[27]

In 1996, the first DEF CON CTF was organized, with a couple ofservers for participants to hack, and judges to decide if a machine has been hacked, and award points accordingly.^[39]

In 2002, the companyImmunix took part in the game under the moniker "immunex",^[40] to benchmark the security of their Linux-based operating system, with modifications includingStackGuard,FormatGuard,OpenWall'snon-executable stack, SubDomain (the ancestor ofAppArmor), ...^[41] Confident in their defense capabilities, they even opened access to their servers to other teams, and even spent some time taunting them. The team got the second place, and all their services deployed on their Immunix stack were never compromised.^[42] It was also the first year the contest had an organiser-provided services infrastructure connected to a real-time scoreboard.^[43]

In 2003, the game had become so popular that a qualification round was introduced, with the previous winner automatically qualified.^[44]

In 2008, the Sk3wl of Root team took advantage of abug in the game (privilege dropping andforking were inverted), allowing them to have such a massive lead that they spent most of the CTF playingGuitar Hero.^[45][46]

In 2009, it was announced^[47] that "Diutinus Defense Technology Corp" (DDTEK) would be the new organisers, but nobody knew who they were. It was revealed at the end of the game that the team playing as sk3wl0fr00t was the organizer.^[27] "Hacking the top hacker contest seemed like a fun way to introduce ourselves to CTF organization. The yells of "bullshit" from CTF teams during the DEF CON 17 awards ceremony were very gratifying." said vulc@n, a member of DDTEK, on the topic.^[27]

In 2011, the team "lollerskaters dropping from roflcopters" used a0day inFreeBSD (namely CVE-2011-4062^[48]) to escapejails, causing havoc in the game's infrastructure.^[49]

In 2016, the 15th edition of the CTF was done in partnership with theDARPA, as part of itsCyber Grand Challenge program, where teams wrote autonomous systems to play the game without any human interaction.^[50]

In 2017, the Legitimate Business Syndicate came up with their very own CPU architecture called cLEMENCy: amiddle-endian with 9 bits bytesCPU. With its specifications released only 24 hours before the beginning of the CTF, it was designed with the explicit goals of both surprising the teams, and leveling the playing field by breaking all their tools.^[51]

DEF CON Groups are worldwide, local chapters of hackers, thinkers, makers and others. DEF CON Groups were started as a splinter off of the2600 meetup groups because of concerns over politicization. Local DEF CON groups are formed and are posted online.^[52] DEF CON Groups are usually identified by the area code of the area where they are located in the US, and by other numbers when outside of the US e.g., DC801, DC201. DEF CON Groups may seek permission to make a logo that includes the official DEF CON logo with approval.

Following are a list of high-profile issues which have garnered significant media attention.

• DEF CON was also portrayed inThe X-Files episode "Three of a Kind" featuring an appearance byThe Lone Gunmen. DEF CON was portrayed as a United States government–sponsored convention instead of a civilian convention.
• A semi-fictionalized account of DEF CON 2, "Cyber Christ Meets Lady Luck", written byWinn Schwartau, demonstrates some of the early DEF CON culture.^[82]
• A trip to DEF CON for a hacker showdown figures into the plot ofThe Signal. DirectorWilliam Eubank came to Las Vegas and screened the film at DEF CON Movie Night.
• A fictionalized version of DEF CON called "EXOCON" is the setting for the climax ofJason Bourne, the fifth film of theBourne film series. The primary antagonist of the film, a fictionalizedCIA director, played byTommy Lee Jones, is akeynote speaker at the event, mimicking DEF CON 20's controversial keynote speaker,NSA directorKeith B. Alexander.
• In theMr. Robot Season 3 opener "eps3.0_power-saver-mode.h" Elliot and Darlene visit a qualifying tournament for the DEF CON Capture the Flag (CTF) contest. Sharp-eyed viewers will notice DEF CON's smiley-face-and-crossbones mascot Jack among the set decorations.
• DocumentarianWerner Herzog included DEF CON in his 2016 filmLo and Behold, Reveries of the Connected World, a film described as a "playful yet chilling examination of our rapidly interconnecting online lives".

Each conference venue and date has been extracted from the DEF CON archives for easy reference.^[83]

• Black Hat Briefings
• Chaos Communication Congress (C3)
• Electronic voting
• Hack-Tic, a quadrennial European convention
• Hackers on Planet Earth (HOPE)
• Security BSides, a community supported conference with locations across the globe
• Summercon, the first American hacker conference, organized by members ofPhrack
• ToorCon, a yearly hacker conference held inSan Diego, California since 1999

• "DEF CON's Moss: Undercover Reporter Damages 'Neutral Zone'Archived 2019-09-24 at theWayback Machine."Information Week. August 6, 2007.
• Greenberg, Andy (August 10, 2023)."Teens Hacked Boston Subway Cards to Get Infinite Free Rides—and This Time, Nobody Got Sued".Wired. Retrieved2023-08-10.
• Mills, Elinor. "NSA director finally greets DEF CON hackers."CNET. July 27, 2012.
• Newman, Lily Hay "To Fix Voting Machines, Hackers Tear Them Apart"WIRED August 1, 2017.

Wikimedia Commons has media related toDEF CON.

DEF CON

• Official website
• Official FAQ
• DEF CON Groups
• DEF CON v3 Tor .onion addresses

Multimedia

• DEF CON: The Documentary
• DEF CON: The Documentary onIMDb
• A first ever look inside the DEF CON NOC (2008)
• The Story of DEF CON – video interview with Jeff Moss, a.k.a. Dark Tangent, the founder of DEF CON
• Transcript, audio, video of Jess Moss describing DEF CON's inception

• Las Vegas Valley conventions and trade shows
• Annual events in Nevada
• Hacker conventions
• Recurring events established in 1993
• 1993 establishments in Nevada

• Pages using IMDb title with no id set
• All articles with dead external links
• Articles with dead external links from August 2025
• Articles with dead external links from October 2022
• Articles with permanently dead external links
• Articles with short description
• Short description is different from Wikidata
• All articles with unsourced statements
• Articles with unsourced statements from September 2023
• Webarchive template wayback links
• Commons category link from Wikidata