Skip to content

NOC - Everything You Wanted to Know About the DEF CON NOC

Neil WylerBart Stump

The DEF CON NOC team reveals how they build, operate, and defend the world's most dangerous network for 30,000+ attendees.

Summary

DEF CON Network Operations Center

Neil Wyler (grifter) and Bart Stump present the behind-the-scenes operations of the DEF CON Network Operations Center — the team responsible for designing, deploying, and operating the conference network infrastructure.

Network Architecture

The DC27 network connected 30,000+ conference attendees through a custom-built infrastructure including 40Gbps uplink capacity, wired and wireless access across multiple venues, a dedicated security monitoring layer, and isolated village networks.

Real-Time Attack Response

The NOC operates as both network provider and defensive security team, monitoring for attacks on the network infrastructure, conference systems, and attendee devices in real time. The team responds to dozens of active attack attempts during each conference day.

Notable Incidents

The talk reveals notable incidents observed during DC27: active exploitation of attendee devices on open Wi-Fi, attempted attacks on conference registration systems, and creative attacks on the NOC's own monitoring infrastructure by attendees.

Related talks