The ShmooCon 2022 CFP is now closed.  Thanks to all who submitted.

ShmooCon and The Shmoo Group are soliciting papers and presentations for the seventeenth ShmooCon to be held at the Washington Hilton in Washington D.C. the weekend of January 14, 2022.


October 18, 2021 – CFP opens
November 26, 2021 – CFP closes at 11:59 PM, EST
December 13, 2021 – CFP notifications go out
January 14-16, 2022 – ShmooCon XVII


The Shmoo Group (TSG) is a group of security professionals from around the world who donate their time and energy towards information security research and development. Many years ago, TSG had an idea. This idea has grown into a community recognized annual security conference attended by over 2000 people. 

Our goal for ShmooCon is to educate, inform, and entertain the attendees. ShmooCon is primarily a security conference, but we also encourage innovative and interesting submissions on offbeat technology topics.


ShmooCon has always been committed to providing a safe and healthy environment for its attendees.  Based on current DC COVID restrictions, controls in place at the Hilton, and our own decisions on current best practices several policies will be in place.  Most notably for you, everyone in attendance at the con must be vaccinated and agree to wear a mask while on the conference floor. 

Please visit for more information and to follow any changes as we get closer to the con.


We are most interested in new presentations, but important updates on existing work are welcome too. We are also interested in presentations from new faces, therefore, we encourage any individual who has not spoken at a conference before to submit a talk and attempt to make ShmooCon their inaugural event. 


This year ShmooCon will have two tracks to accommodate a variety of speaking styles and topics.  

Fast and Furious – 10-minute plenary presentations meant to entertain, educate, and allow you to drive your point home quickly.

One Track Mind – Plenary presentations covering technical interests in either a 20 or 50 minute format.

When:  Saturday
Talk Duration: 10 minutes

Fast and Furious presentations will run on Saturday.  There won’t be time for Q&A as we plan to move through these talks in a fairly rapid manner.

Presentations for Fast and Furious may include, but are not limited to: 

  • Talks that are as much about fun as they are about technology 
  • Rants, Homages, Calls to Action…you get the idea.
  • Research results, particularly focusing on surveys and “state of the industry”

When: Friday, Saturday, Sunday
Talk Duration: 20 or 50 minutes

You can submit for either the shorter (One Track Mind 20) or longer time slot (One Track Mind 50), or both.  If submitting for both, you must describe within your submission how you would change your presentation for each time slot.

One Track Mind presentations will run Friday, Saturday, and Sunday.  It is the presenter’s responsibility to budget time for audience participation and questions – there are hard limits to allow time for presenters and staff to prepare for the next talk.

One Track Mind presentations should be focused on topics that are of interest to security and technology professionals who are paying attention to current trends and issues. 

Some generalized topics we think might be of particular interest this year include:

  • Defensive tooling and related open source software
  • Security in the CI/CD pipeline
  • Advances in security training
  • New approaches to IoT and Operational Technology security
  • Security user experience improvements 
  • Breach detection and response
  • Disinformation and other information operations topics
  • Operational security
  • Security automation
  • Tech policy and politics

Presentations that are rehashes of old talks, primers on known technologies, or vendor pitches are not likely to be accepted. We want ShmooCon to be educational and entertaining to the attendees and the community at large. We expect our speakers to be an integrated part of that experience by delivering talks that are well thought out, well presented, and original.

If you feel you have a presentation that would be appropriate but that does not meet the guidelines in this CFP, feel free to submit it anyway as we sometimes accept out-of-scope talks that are so cool and compelling they’ll obviously be of interest to ShmooCon attendees. Just be sure to include information explaining your reasoning so we can better evaluate your proposal. 


Submissions with two or more speakers are welcome at ShmooCon.  However, we reserve the right to limit the number of free speaker passes granted to an accepted talk.  


ShmooCon XVII will continue to use a web-based submission process.   Please note that all communications from the conference will be via the contact author.

Beginning October 18, 2021, Visit HTTPS://CFP.SHMOOCON.ORG and be prepared with the following information: 

  • Speaker name(s) and contact information 
  • Presentation Title
  • Track/Time Preference (may select more than one but please describe how your talk would differ between tracks in item 6 below)
  • Abstract (copied from your submission)
  • Document in TEXT or PDF format which contains the following in this order:
    1. Title of Presentation
    2. Presenter(s) Name 
    3. Abstract of your presentation limited to 200 words or less for use in the ShmooCon program and on the website.
    4. Bio limited to 100 words for you OR your group (not 100 words per person).
    5. Detailed Description – the most important part of your submission. You need to provide detailed information that demonstrates your knowledge of your topic and how you will present it to the audience.  Do not rely on your abstract to be enough for the review committee. It isn’t. (See more about this in the hints section below.)
    6. Track/Time Preference – describe how you would adjust your presentation for track or time considerations.  Do not leave this portion out if you submit to multiple tracks.
    7. Why do you feel this submission is a good fit for ShmooCon?  
    8. List of other conferences at which submission has been presented or submitted.
    9. Are you a potential first-time presenter at ShmooCon?  Have you spoken at any other conferences?  If yes, which ones?
    10. List of facilities requested beyond what is already provided (power, projector with VGA input, sound projection, and internet connectivity). 

Please Note:

  • Submissions that do not follow the above format risk being rejected without review. 
  • A sample submission can be found online at We provide this as a general example. Your detailed description (number 5 in the above list) need not look like or be formatted like ours, but it should contain more than enough information to convince us of the merit of your talk.  In fact, it should be better than what we show in the sample.
  • A CFP submission checklist has been created for your convenience:


Speakers accepted to Fast and Furious will receive free admission to the conference.

Speakers accepted to One Track Mind receive free admission to the conference and either a $200 (shared) honorarium OR one (1) guest admission to ShmooCon. You will need to inform us of your choice upon being accepted. Please be kind and confer with fellow presenters if applicable before making this decision.


Several alternates will also be chosen and receive free admission. Alternates should come to ShmooCon prepared to present in the event a named speaker is unable to take the stage.  


First and foremost, follow the instructions above. We cannot stress this enough.  It’s off-putting to open a submission and not find all the information requested.  In addition, please submit the information in the order requested.  Make things easier for us, not harder.

Convince us that we should accept your talk – your abstract is a teaser to the audience, but your detailed description is where you show the review committee why you should be on stage.  We don’t need a novel, but the more you help us see how cool/unique/timely/etc. your talk is, the better chance it has of being accepted. Do not send slides as your detailed description, but you can link to them in your submission as supporting evidence if you like.

Give us the spoilers!  We’re not the audience, we’re the selection committee.  Often, we get a proposal that outlines an excellent situation with a problem that needs to be fixed, insightful analysis and then merely the promise of an exciting solution.  That’s great for the abstract, not for the explanation.  We need to know the solution, the punch line, or the story’s exciting conclusion.  If you don’t tell us the whole thing, we’re going to presume the ending is disappointing.

Spelling does count!  Let spell check do its job and present us with a professional looking submission.  Also, sentences start with capital letters.  As for oxford commas and spaces after a period, we’ve agreed to disagree on those for now.

On a similar note – Spell ShmooCon and Shmoo correctly. Your submission stands out for the wrong reasons if these words are presented incorrectly.  There is only one C in ShmooCon and not a one in the word Shmoo.  Bonus points if you remember to capitalize the single C.

Finally, please be respectful to those who have come before us. Where appropriate, reference prior art and the work of others in this space. We will admit that the records of who has done what in the hacker community can be hard to piece together and prior art is often hidden in strange places. However, if the Program Committee does a quick Google search on your topic area, we would expect to see relevant and directly related prior art referenced in your submission and presentation. 


Members of TSG and select ShmooCon volunteers review all submissions. 


If you submitted – Thank you!

If you get accepted – Congratulations!

If you aren’t accepted, don’t fret. Remember that we receive many more submissions than we have room for in our program and this absolutely means that talks with merit get turned away. Keep submitting elsewhere.  Submit to us again next year.  And again, thank you.

Questions can be sent to