HITCON Community 2024 - Call For Paper！（延長至 6/23）

HITCON Community 2024 & Enterprise 2024 - Call For Paper 延長至 6/23

感謝海內外許多朋友熱情的投稿，本次大會主題「20 Years of HITCON:  Mind Meld Hacker Spirit from Human to AI」受到大家熱烈回應也有許多朋友詢問是否可增加投稿的時間。經大會討論，決定將徵稿日期延長至 6 月 23 日，敬請把握最後投稿機會喔！

通往 HITCON 投稿系統 ➡️ https://cfp2024.hitcon.org/zh/call-for-proposal

HITCON Community 2024 & Enterprise 2024 - Call For Paper the deadline will be postponed to 6/23

There are too many friends around the world interested in the slogan of HITCON Community 2024 ‘20 Years of HITCON:  Mind Meld Hacker Spirit from Human to AI’. People keep asking if we could postpone the deadline of call for paper. After discussing with the committees, we decided to postpone the deadline of Call for Paper until 6/23.

　

Call for paper system  ➡️ https://cfp2024.hitcon.org/zh/call-for-proposal

HITCON CMT: August 23-24 2024 Onsite in 中央研究院人文社會科學館

HITCON ENT: October 30 2024 Onsite in 松菸文創

0. 關於 HITCON CMT Conference & HITCON ENT Conference

在純技術的領域裡面沒有黑與白，我們認為駭客代表著高超的技術、挑戰的精神。有別於一般商業性質濃厚之研討會，台灣駭客年會提供一個舞台，讓駭客們有機會與大家分享最新與最深入的資安技術，面對面交換經驗、自由的對談。大會對於會議議程的內容相當謹慎，我們希望確保在駭客年會上發表的內容，是不帶商業色彩的安全研究、最新的趨勢探討或者是夠水準的駭客技術，也希望每一場演講都是參與者最想關注的議題。

HITCON 是一個每年在台灣舉辦的技術導向資安研討會，致力為資安社群帶來最新與最深入技術與實踐。歷年來，我們邀請來自全球各地的講者、會眾以及台灣主要資安社群共襄盛舉。我們會涵蓋深入的駭客技術，提供一個與駭客專家們交流、學習並分享技術研究的舞台。 今年 HITCON 將會分成社群場與企業場，在社群場，我們將更將著重技術的本質、駭客攻防技術與思維，並聯繫國內外資安社群，培養駭客社群文化。

除了技術的分享，也可體驗到駭客文化，在駭客與駭客社群的交流下，常常有最新、最有趣和最敏感的議題。我們歡迎所有對資訊安全有興趣的朋友一同參與這每年一度的盛會。在企業場，將針對企業防禦實務技術及資安管理流程、政策，並促進國內外產官學研技術交流及國際聯防。我們歡迎所有對資訊安全有興趣的朋友一同參與這每年一度的盛會。

1. 今年 HITCON 主題

20 Years of HITCON : Mind Meld Hacker Spirit from Human to AI

今年 HITCON 迎來了成立 20 週年，標誌著從地下聚會到知名駭客會議的二十年間的演變。多年來，它已成為世界級資訊安全研究蓬勃發展重要會議，促進了世界各地豐富而活躍的資安社群。這段旅程見證了新技術的出現，如智慧型裝置、雲端運算和網路戰爭。在這些新興科技之下，駭客精神的本質——對研究、創新、發現、Hacking、守護網路安全的理念——依然不變，引導著駭客社群的前進。 

近年來，人工智慧（AI）的出現帶來了資訊安全的技術突破。當我們將人工智慧整合到駭客的日常任務中時，Alignment 的問題便應運而生。如何讓人工智慧可理解使用者的目標與價值觀，以適切的處理問題，是相當困難的挑戰，也產生許多資安、隱私相關的議題。如何 Mind Meld 人工智慧及駭客精神，引導人工智慧可理解資安、學習隱私相關的概念，是未來將人工智慧落地於資安應用中必要的一環。

2. 徵稿內容

我們歡迎任何資訊安全相關題材的稿件。本次投稿分為 CMT 演講議程、ENT 演講議程及教學議程（Hacking 101），除了過往以頂尖技術研究為主的演講議程外，今年也維持了 Hacking 101 教學議程，這是一系列針對資安入門到初階課程，希望能透過多元方式（e.g：現場實作、影片教學、簡報演講、CTF）來帶領聽眾踏入資安研究領域之中，使其更了解往後自身發展的興趣方向。

 

您可自行決定您的稿件較適合的方向，惟審稿委員可能會視您的稿件內容調整為演講議程或教學議程。

演講議程： 

• 40 分鐘含問答時間

• 創新深入技術研究為主要標準

• 著重研究新穎性、技術深度與實用性三個方向評量

教學議程（Hacking 101）：

• 80 分鐘含 10 - 20 分鐘休息時間

• 目標在於提供具教育性質的議程

• 著重教育性、實作性與仔細的教學細節，以提供初學者易於學習的材料

此外，由於每年 HITCON 均會收到大量品質優異的投稿，若您的投稿資訊量過少，例如說明內容過短或不具體、未附上投影片或佐證資料，審稿委員將很難把您的稿件與其他資訊完整的稿件放在一起比較，容易造成遺珠之憾。

因此，建議您盡量在投稿系統中提供詳細、具體的稿件說明，以利委員們進行審核作業。尤其教學議程（Hacking 101）的性質，更是強烈建議提早提供完整教材進行審查。

本年度的審稿會在投稿期間開始、採先到先審，亦即您的稿件有可能在投稿結束前就被錄取，若是多數稿件品質優異，投稿亦有可能在預定的截止時間前提早結束，提醒有意提交議程稿件者儘早完成投稿。

本年度配合主題，我們徵稿範圍包含但不限於以下主題：

• Test-of-Time Security Technology

• Artificial Intelligence (AI) Hacking: Data Science for Security, Machine Learning (ML) & AI for Security, Hacking ML & AI, ML&AI Reasoning and Interpretation, Adversarial Machine Learning

• Exploit & Vulnerability: Red Team, Exploit Development, Exploiting Memory-safe Language, Fuzzer, Wormable Vulnerability, Web AppSec

• Security in the Cyberwar: Security issues related to Cyberwar

• Malware: Malware Analysis, Malware Development, Ransomware, APT/Cybercrime, Reverse Engineering

• Blue Team: Digital Forensics, Incident Response, Security Operation Process and Automation, Detection Engineering, SOAR, Detection as Code      

• Cloud Security: IAM in the cloud infra, Penetration & Vulnerability Discovery in Cloud Environment

• Privacy and Data Protection: Encryption, Key Management, Post Quantum Cryptography, Side Channel Attack

• Blockchain Security: Web3, Cryptocurrency, DeFi

• IoT Hacking & Security: IoT security, IoT Protection, IoT Hacking & Exploit, IIoT security, Hardware Reversing Engineering, Radio Hacking, Cyber Physical Security (CPS)

• Communication Hacking: Telecommunications Hacking, Communications Satellite, 5G/6G Security & Radio Hacking 

• Talent Education and Security Community: CTF, Cyber Range, Experience of Security Community, Legal and Social Aspect of Information Security

• Enterprise Security: Cyber Security Framework, Cyber Defense Verifications, Breach Attack Simulation, Patch Management, Cloud Security, Infrastructure Governance, PSIRT

• Cyber Security Maturity Measurement: Security Risk Measurement, Defense Performance Analysis, PSIRT Maturity, CSIRT/SOC Maturity

• Supply Chain Security: Supply Chain Risk Management, DevOpsSec, SLSA, SBOM

• Vulnerability Management: Vulnerable Disclosure Procedure, Vulnerability Discovery, Vulnerability Prioritization

• Security Compliance: Automatic and Continuous Compliance

特別投稿

• 明日之星由於 HITCON 研討會的稿件來源漸趨專業與收到的投稿量漸增，為鼓勵學生踴躍投稿，特別設立明日之星， 希望能讓更多學生有更多發表研究的舞台。講者可以在投稿時勾選明日之星選項，報名此特別投稿方案。

3. 投稿方式

請至 HITCON 投稿系統 註冊，並且在截止時間前透過該系統完成投稿。 如有任何疑問，歡迎來信至 reviewboard@hitcon.org 詢問。

4. 重要時程 

徵稿開始：即日起

徵稿截止：2024 年 6 月 9 日 任意時區

審稿完成：2024 年 6 月 23 日

活動日期：HITCON CMT 2024：2024 年 08 月 23 日 - 2024 年 08 月 24 日
                  HITCON ENT 2024：2024 年 10 月 30 日 

5. 講者福利 

HITCON CMT 2024

1. 在台講者：HITCON 將會提供美金 400 元講師費，並受邀參加講者晚宴及 City Tour。大會期間將 提供三日住宿（8/22, 23, 24）和每日午餐、點心、茶水，以及精美伴手禮作為紀念。

2. 海外講者：HITCON 將會提供美金 600 元講師費，並受邀參加講者晚宴及 City Tour。大會期間將 提供三日住宿（8/22, 23, 24）和每日午餐、點心、及茶水，以及精美伴手禮作為紀念。

3. Hacking 101 講者：HITCON 將會提供美金 100 元講師費，並受邀參加講者晚宴及 City Tour。大會期間將 提供每日午餐、點心及茶水，以及精美伴手禮作為紀念。

HITCON ENT 2024 福利將在日後公佈待補充

---

0. About HITCON CMT 2024 & HITCON ENT 2024

Hacks in Taiwan Conference (HITCON), a technology-orientated cybersecurity conference annually held in Taiwan, is dedicated to bringing the latest and the most in-depth technologies and practices to the security community.

Over the years, we have invited worldwide speakers and congregations to participate in these grand events. Also, we provide this avenue for the community to exchange technical research, bleeding-edge hacking technology, and a relatively wide range of corporate security issues.

This year, HITCON will be divided into community and enterprise conferences. In the community conference (CMT), we will focus more on the essence of technology, hacking technques and hacker mindset, and connect with domestic and foreign cybersecurity communities to cultivate the hacker community culture. In the enterprise conference (ENT), we will focus more on the practicalities of technology, defense techniques and security management, and connect with domestic and foreign cybersecurity communities to cultivate cyber security.

1. HITCON 2024 theme

20 Years of HITCON : Mind Meld Hacker Spirit from Human to AI

HITCON celebrates its 20th anniversary, marking two decades of evolution from an underground gathering to a prominent hacker conference. Over the years, it has burgeoned into a thriving hub for the cybersecurity community, fostering rich and vibrant communities around the world. The journey has witnessed the emergence of new technologies such as mobile, cloud computing, and cyber warfare. Despite these advancements, the core essence of the hacker spirit, commitment to research, innovation, discovery, hacking everything, and securing the cyberspace, remains unaltered, serving as the guiding force behind our discussions and explorations.

In recent years, the emergence of artificial intelligence (AI) has brought about a paradigm shift in cybersecurity. As we integrate AI into our daily hacking missions, we are faced with the challenge of aligning its capabilities with our values and objectives. Aligning AI with the hacker spirit becomes paramount, ensuring that our endeavors remain rooted in ethical and principled hacking practices. This Mind Melding of AI with the hacker spirit represents a new frontier in cybersecurity.

2. The Call for Papers

We welcome submissions on any information security-related topics. This year's submissions are divided into three categories: HITCON CMT presentation sessions, HITCON ENT presentation sessions and HITCON CMT Hacking 101(tutorial sessions), and you can decide which direction your submission is best suited for. However, the review committee may adjust the session type based on the content of your submission. We suggest a presentation session length of 40 minutes, including Q&A, while a tutorial session is 80 minutes, including Q&A.

Additionally, since HITCON receives a large number of high-quality submissions every year, if your submission has too little information, such as a short or non-specific description, or if you do not include presentation slides or supporting materials, it may be difficult for the review committee to compare your submission with others, which may result in missing out on a great opportunity. Therefore, we suggest that you provide detailed and specific submission information in the submission system to facilitate the review process. 

Reviewing Rules

Since this year's HITCON conference is expected to be held in-person, live presentations are the preferred option for both domestic and foreign speakers. If you have any concerns or difficulties, please feel free to let us know. 

The review process for this year's conference will begin during the submission period and will be conducted on a first-come, first-served basis. This means that your submission may be accepted before the submission deadline if the majority of the submissions are of high quality. Chance of ending the Call for Papers early if the quality of submissions is extraordinary. We remind those who are interested in submitting session proposals to complete their submissions as soon as possible.

Scope and Topics

• Test-of-Time Security Technology

• Artificial Intelligence (AI) Hacking: Data Science for Security, Machine Learning (ML) & AI for Security, Hacking ML & AI, ML&AI Reasoning and Interpretation, Adversarial Machine Learning

• Exploit & Vulnerability: Red Team, Exploit Development, Exploiting Memory-safe Language, Fuzzer, Wormable Vulnerability, Web AppSec

• Security in the Cyberwar: Security issues related to Cyberwar

• Malware: Malware Analysis, Malware Development, Ransomware, APT/Cybercrime, Reverse Engineering

• Blue Team: Digital Forensics, Incident Response, Security Operation Process and Automation, Detection Engineering, SOAR, Detection as Code      

• Cloud Security: IAM in the cloud infra, Penetration & Vulnerability Discovery in Cloud Environment

• Privacy and Data Protection: Encryption, Key Management, Post Quantum Cryptography, Side Channel Attack

• Blockchain Security: Web3, Cryptocurrency, DeFi

• IoT Hacking & Security: IoT security, IoT Protection, IoT Hacking & Exploit, IIoT security, Hardware Reversing Engineering, Radio Hacking, Cyber Physical Security (CPS)

• Communication Hacking: Telecommunications Hacking, Communications Satellite, 5G/6G Security & Radio Hacking 

• Talent Education and Security Community: CTF, Cyber Range, Experience of Security Community, Legal and Social Aspect of Information Security

• Enterprise Security: Cyber Security Framework, Cyber Defense Verifications, Breach Attack Simulation, Patch Management, Cloud Security, Infrastructure Governance, PSIRT

• Cyber Security Maturity Measurement: Security Risk Measurement, Defense Performance Analysis, PSIRT Maturity, CSIRT/SOC Maturity

• Supply Chain Security: Supply Chain Risk Management, DevOpsSec, SLSA, SBOM

• Vulnerability Management: Vulnerable Disclosure Procedure, Vulnerability Discovery, Vulnerability Prioritization

• Security Compliance: Automatic and Continuous Compliance

Submission Option

• Future Star

• Due to the increasing professionalism of the papers submitted to the HITCON conference and the growing number of submissions received, this year we have set up the "Future Star" program to encourage students to submit their work and provide them with a platform to present their research.

• Bounty House

• Bounty House is a mysterious program that lasts for about 20-40 minutes. The speaker's name is not disclosed, and recording is strictly prohibited on-site. This program allows the speaker to talk about the exciting process of discovering vulnerabilities and discuss interesting incidents in the cybersecurity field.

3. Delivery Preference

• Please create an account and submit the proposal through CFP Website before the deadline

• Speakers should come onsite and present the research, 

• All correspondence and queries should be sent to reviewboard@hitcon.org with the headline "HITCON CMT 2024"

4. Important Dates

Call for Papers Opened: From now on

Call for Papers Closed: June 9, 2024 (Any Time Zone) 

Notification to Submitters: June 23, 2024

Event Dates: HITCON CMT August 23 - August 24, 2024

                        HITCON ENT October 30, 2024

5. Speaker Benefits

• For speakers in Taiwan, HITCON will provide a speaker fee of $400 USD and invite to attend the VIP party and City Tour.During the conference, daily lunch, snacks,and drinks will be provided, as well as exquisite souvenirs as a memento. 

• For overseas speakers, HITCON will provide a speaker fee of USD 400 and a transportation subsidy of USD 200,and invite to attend the VIP Party and City Tour. Lunch, snacks, and beverages will be provided daily during the conference, as well as exquisite souvenirs as a memento.

• For Hacking 101 speakers, HITCON will provide a speaker fee of $100 USD and invite to attend the VIP party and City Tour. During the conference, daily lunch, snacks, and drinks will be provided, as well as exquisite souvenirs as a memento. 

• HITCON ENT 2024 Speaker Benefits will be released at a later date.