Listen to this Post
Introduction:
The global cybersecurity landscape is evolving at an unprecedented pace, demanding continuous knowledge exchange and skill development. EOCON 2026, the 7th edition of the EyesOpen Cybersecurity Conference, serves as a critical bilingual (French/English) platform where professionals, researchers, and decision-makers converge online from November 23–28, 2026, to address emerging threats, AI security, and workforce development. This article extracts the core technical themes from the EOCON 2026 Call for Speakers and provides actionable insights, tutorials, and commands to help you prepare a submission that bridges research, industry, and the African cyber ecosystem.
Learning Objectives:
- Understand the key technical tracks at EOCON 2026, including AI security, DevSecOps, and cloud hardening.
- Learn how to structure a compelling speaker proposal with practical, hands-on content.
- Acquire verified Linux and Windows commands for implementing zero-trust architectures and incident response.
You Should Know:
1. Artificial Intelligence in Cybersecurity and AI Security
The integration of AI into security operations (SecOps) is no longer optional—it’s a necessity. EOCON 2026 seeks submissions on adversarial machine learning, AI-driven threat hunting, and the security of AI models themselves. A key area is the OWASP Top 10 for LLM Applications, which highlights risks like prompt injection, insecure output handling, and excessive agency.
Step-by-step guide: Implementing a Basic AI-Powered Threat Detection Pipeline on Linux
This tutorial sets up a lightweight anomaly detection system using Python and scikit-learn to monitor system logs.
1. Install Python Dependencies:
sudo apt update && sudo apt install python3-pip -y pip3 install pandas scikit-learn numpy
2. Create a Log Parser Script (`log_parser.py`):
This script ingests `/var/log/syslog` and extracts features like timestamp, process ID, and error codes.
import re
import pandas as pd
from datetime import datetime
def parse_syslog(file_path):
with open(file_path, 'r') as f:
lines = f.readlines()
data = []
for line in lines:
match = re.search(r'(\w{3}\s+\d+\s+\d+:\d+:\d+)\s+(\w+)\s+(.)', line)
if match:
data.append([match.group(1), match.group(2), match.group(3)])
return pd.DataFrame(data, columns=['timestamp', 'process', 'message'])
- Train an Isolation Forest Model for Anomaly Detection (
train_model.py):from sklearn.ensemble import IsolationForest import joblib import numpy as np Simulated feature vectors (e.g., frequency of errors per minute) X = np.random.rand(1000, 5) Replace with actual feature extraction model = IsolationForest(contamination=0.1, random_state=42) model.fit(X) joblib.dump(model, 'anomaly_model.pkl') print("Model trained and saved.")
4. Deploy as a Cron Job:
Schedule the script to run every 5 minutes to detect anomalies in real-time.
crontab -e Add: /5 /usr/bin/python3 /path/to/detect_anomalies.py
Why this matters: This foundational approach demonstrates how AI can augment traditional SIEM tools, a topic highly relevant to EOCON’s AI security track.
2. Secure Coding, Application Security, and DevSecOps
EOCON 2026 emphasizes secure software development and DevSecOps practices. Integrating security into the CI/CD pipeline is paramount. A critical tool is Trivy, an open-source vulnerability scanner for containers and IaC.
Step-by-step guide: Integrating Trivy into a GitHub Actions Workflow (Windows/Linux/macOS)
This guide shows how to automatically scan a Docker image for vulnerabilities on every push.
1. Create a GitHub Actions Workflow File (`.github/workflows/security-scan.yml`):
name: DevSecOps Security Scan on: push: branches: [ main ] jobs: scan: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v3 - name: Build Docker image run: docker build -t myapp:latest . - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@master with: image-ref: 'myapp:latest' format: 'table' exit-code: '1' ignore-unfixed: true severity: 'CRITICAL,HIGH'
2. Configure Trivy Locally (Windows):
For local testing on Windows, install Trivy via Chocolatey:
choco install trivy trivy image --severity HIGH,CRITICAL myapp:latest
3. Interpret the Results:
The scan will output a table of vulnerable packages, their CVE IDs, and fixed versions. A non-zero exit code will fail the build, enforcing a “security as code” policy.
Why this matters: This aligns with EOCON’s call for “Secure software, application security, and DevSecOps”, showcasing practical automation that bridges development and security teams.
3. Cloud Security and Infrastructure Hardening
With the mass migration to cloud environments, securing infrastructure is a top priority. EOCON 2026 features a dedicated track on “Cloud, infrastructure, and critical systems security”. A foundational skill is implementing zero-trust network access (ZTNA) using open-source tools like Tailscale or WireGuard.
Step-by-step guide: Hardening an AWS EC2 Instance with a Zero-Trust Approach (Linux)
This guide secures a Linux-based EC2 instance using iptables and fail2ban, complemented by a mandatory VPN.
1. Update and Harden SSH Configuration (`/etc/ssh/sshd_config`):
sudo nano /etc/ssh/sshd_config Set: PermitRootLogin no PasswordAuthentication no PubkeyAuthentication yes AllowUsers your_username
Restart SSH: `sudo systemctl restart sshd`
2. Install and Configure Fail2ban:
sudo apt install fail2ban -y sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local sudo nano /etc/fail2ban/jail.local Enable [bash] section and set bantime = 3600 sudo systemctl enable fail2ban && sudo systemctl start fail2ban
3. Implement Strict Iptables Rules (Restrictive by Default):
sudo iptables -P INPUT DROP sudo iptables -P FORWARD DROP sudo iptables -P OUTPUT ACCEPT sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT Only if using SSH with key sudo iptables -A INPUT -p tcp --dport 443 -j ACCEPT For HTTPS sudo iptables -A INPUT -i lo -j ACCEPT
Note: This blocks all incoming traffic by default, enforcing a zero-trust model where only explicitly allowed ports are open.
Why this matters: This hands-on approach directly addresses EOCON’s focus on “Infrastructure security” and “Digital sovereignty”, demonstrating practical defense-in-depth.
4. Threat Intelligence, Incident Response, and Digital Forensics
EOCON 2026 highlights threat intelligence and incident response as core themes. A key skill is memory forensics using the Volatility Framework to detect rootkits and advanced persistent threats (APTs).
Step-by-step guide: Extracting Malicious Processes from a Windows Memory Dump using Volatility (Linux)
This tutorial assumes you have a memory dump (memory.dmp) from a Windows system.
1. Install Volatility 3 on Linux:
git clone https://github.com/volatilityfoundation/volatility3.git cd volatility3 pip install -r requirements.txt
2. Identify the Operating System Profile:
python3 vol.py -f /path/to/memory.dmp windows.info
This command identifies the Windows build and kernel version, which is crucial for accurate analysis.
3. List Running Processes:
python3 vol.py -f /path/to/memory.dmp windows.pslist
Look for hidden processes (not listed in windows.psscan) or processes with suspicious names (e.g., `svch0st.exe` instead of svchost.exe).
4. Dump a Suspicious Process:
If you find a process with PID 1234, dump its executable for offline analysis:
python3 vol.py -f /path/to/memory.dmp windows.dumpfiles --pid 1234
Why this matters: This provides a concrete forensic technique that aligns with EOCON’s “Digital forensics and incident response” track, equipping attendees with skills to investigate real-world breaches.
5. Cryptography, Quantum Computing, and Data Security
EOCON 2026 explicitly calls for submissions on “Cryptography, and Quantum computing” and “Privacy and data security education”. As quantum computers threaten traditional RSA and ECC, post-quantum cryptography (PQC) is becoming critical.
Step-by-step guide: Implementing Post-Quantum Key Exchange using OpenSSL’s Kyber (Linux)
OpenSSL 3.2+ includes support for the Kyber algorithm (ML-KEM).
1. Check OpenSSL Version:
openssl version Ensure version is 3.2.0 or higher
2. Generate a Post-Quantum Key Pair:
openssl genpkey -algorithm kyber512 -out private_key.pem openssl pkey -in private_key.pem -pubout -out public_key.pem
- Simulate a Hybrid Key Exchange (Classical + Post-Quantum):
This demonstrates how to combine ECDH (for compatibility) with Kyber (for quantum resistance).Generate an ephemeral ECDH key openssl genpkey -algorithm X25519 -out ecdh_private.pem openssl pkey -in ecdh_private.pem -pubout -out ecdh_public.pem Combine with Kyber public key for hybrid encapsulation (conceptual) In practice, use a library like liboqs for full integration.
Why this matters: This prepares the cybersecurity community for the imminent threat of “harvest now, decrypt later” attacks, a topic that will resonate with EOCON’s forward-looking audience.
6. Cyber Talent Development and Training
EOCON 2026 places a strong emphasis on “Cybersecurity workforce development” and “Online learning, e-learning, and hybrid cybersecurity instruction”. The conference collaborates with EXAMBOOT to offer training and certification sessions.
Step-by-step guide: Setting Up a Portable Cyber Range with Docker Compose
A cyber range is essential for hands-on training. This tutorial sets up a vulnerable web application (OWASP Juice Shop) and a SIEM (ELK stack) for educational purposes.
1. Create a `docker-compose.yml` File:
version: '3' services: juice-shop: image: bkimminich/juice-shop ports: - "3000:3000" elk: image: sebp/elk ports: - "5601:5601" - "9200:9200" - "5044:5044" environment: - ELASTICSEARCH_START=1
2. Deploy the Range:
docker-compose up -d
This spins up a vulnerable web app at http://localhost:3000` and an ELK stack for log analysis athttp://localhost:5601`.
3. Conduct a Training Exercise:
Have participants perform an SQL injection on Juice Shop and then monitor the logs in Kibana to see the attack in real-time.
Why this matters: This directly supports EOCON’s mission of “capacity building” and provides a reusable asset for training sessions proposed for the conference.
What Undercode Say:
- Key Takeaway 1: EOCON 2026 is not merely a conference; it is a movement to “build the future of digital security”, particularly for the African cyber ecosystem. The bilingual (French/English) format lowers barriers, fostering inclusive global collaboration.
- Key Takeaway 2: The Call for Speakers explicitly seeks a blend of “academically grounded contributions with strong scientific and practical value”. This means your proposal must bridge theory and practice—demonstrating not just what a vulnerability is, but how to exploit and how to fix it.
Analysis: The EOCON 2026 agenda reflects the industry’s shift from siloed security to integrated DevSecOps, AI-driven defense, and quantum-resistant cryptography. The inclusion of the EyesOpen CTF and certification tracks indicates a strong preference for interactive, skill-building content over passive lectures. Speakers who can deliver live demos, provide downloadable scripts, and engage in Q&A will stand out. Furthermore, the emphasis on “digital sovereignty” and “African cyber ecosystem” suggests a strategic focus on regional capacity building, making it an ideal platform for practitioners working in or with emerging markets. The conference’s partnership with EXAMBOOT also signals a commercial-academic bridge, offering speakers potential pathways to monetize their expertise through certifications. Finally, the online format ensures a global reach of 1,000+ participants, maximizing the impact of your submission.
Prediction:
- +1 EOCON 2026 will catalyze the development of standardized, open-source cyber ranges tailored for the African context, addressing the continent’s unique infrastructure challenges.
- +1 The integration of post-quantum cryptography tutorials into mainstream training curricula will accelerate, driven by the conference’s focus on quantum computing.
- -1 The rapid adoption of AI in security, as promoted by EOCON, will widen the skills gap, as traditional security professionals struggle to adapt to machine learning-driven threat hunting without proper retraining.
- +1 The hybrid (online/in-person) model will become the gold standard for international cybersecurity conferences, democratizing access to expert knowledge.
- -1 Over-reliance on automated DevSecOps pipelines without corresponding manual oversight may introduce new classes of misconfiguration vulnerabilities, a risk that EOCON’s workshops must address.
- +1 The conference’s focus on “digital sovereignty” will inspire new regional data protection frameworks and cloud infrastructure investments across Africa.
- +1 EOCON’s bilingual approach will foster stronger Franco-Anglo cybersecurity collaborations, leading to more unified threat intelligence sharing against global adversaries.
- -1 As quantum computing advances, the “harvest now, decrypt later” threat will become more tangible, increasing the urgency for EOCON to push for immediate PQC migration strategies.
- +1 The EyesOpen CTF will evolve into a year-round, league-based competition, creating a sustainable talent pipeline identified through EOCON 2026.
- +1 EXAMBOOT’s certification tracks will become benchmark credentials for cybersecurity professionals in Francophone Africa, directly addressing the workforce development gap.
For more information and to submit your proposal, visit the official CFP platform: https://eyesopensecurity.com/?modal=cfp. Submission deadline: October 30, 2026.
▶️ Related Video (68% Match):
🎯Let’s Practice For Free:
🎓 Live Courses & Certifications:
Join Undercode Academy for Verified Certifications
🚀 Request a Custom Project:
Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands
IT/Security Reporter URL:
Reported By: Https: – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
