SEC536: Adversarial AI - Penetration Testing AI Systems



Get a head start by checking in the evening before classes begin. Pick up your event badge, printed course materials, and any event giveaways. A valid government-issued photo ID is required.
In-Person
Check in before class begins and pick up your event badge, printed course materials, and any event giveaways. A valid government-issued photo ID is required.
In-Person
Ease into the day with freshly brewed coffee, decaffeinated coffee, and a selection of hot teas.
In-Person
Step away from class and enjoy coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Lunch is on your own. Explore nearby dining options to enjoy a meal of your choice before classes resume in the afternoon.
In-Person
Enjoy an afternoon pick-me-up featuring coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Kick off your SANS Cyber Defense Initiative 2026 experience at the Welcome Reception. Be part of this kickoff event and join the industry’s most powerful gathering of cybersecurity professionals. Share stories, make connections, and learn how to make the most of your week in Washington, D.C.
Come join your instructors and fellow students for a fun, relaxed evening. Beverages (adult and otherwise) and small bites will be included.
In-Person
Ease into the day with freshly brewed coffee, decaffeinated coffee, and a selection of hot teas.
In-Person
Step away from class and enjoy coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Lunch is on your own. Explore nearby dining options to enjoy a meal of your choice before classes resume in the afternoon.
In-Person
Enjoy an afternoon pick-me-up featuring coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Join SANS Institute, FBI cyber leadership, and cybersecurity professionals from across government and industry for an evening built around the threats shaping national security today.
Begin with an in-person networking reception at the Grand Hyatt Washington, then take your seat for a featured conversation with Brett Leatherman, Assistant Director of the FBI's Cyber Division. Hear how the FBI is confronting increasingly sophisticated nation-state adversaries and cybercriminals, strengthening public-private cybersecurity partnerships, and preparing for the threats ahead.
In-Person
The cyber threat landscape confronting the United States is growing more complex and consequential, as nation-state adversaries and criminal actors target critical infrastructure, private industry, and emerging technologies at unprecedented scale.
Assistant Director Brett Leatherman will examine the threats shaping today’s environment, how the FBI sees the threat landscape evolving in the years ahead, and how the FBI is preparing now to stay ahead of increasingly sophisticated and persistent adversaries. He will discuss how the FBI is advancing national cyber priorities through stronger public-private defense, operational innovation, intelligence sharing, and proactive disruption in alignment with President Trump’s Cyber Strategy for America.
The session will trace the strategic evolution of the FBI Cyber Division and the operational shifts, partnerships, and innovations strengthening its ability to defend the homeland. It will highlight significant recent successes, from disrupting malicious cyber activity and combating ransomware to enhancing support for victims, while examining how lessons from today’s operations are shaping the FBI’s approach to tomorrow’s threats.
In-Person & Virtual
Ease into the day with freshly brewed coffee, decaffeinated coffee, and a selection of hot teas.
In-Person
Start your day at the Vendor Expo Breakfast, where attendees can enjoy a complimentary breakfast while connecting with leading cybersecurity vendors and solution providers. Explore innovative technologies, learn about emerging industry trends, and engage in meaningful conversations with experts dedicated to advancing cyber defense and resilience.
In-Person
SANS CDI 2026 Exhibitor Hall brings together leading cybersecurity organizations and technology providers with a community of practitioners, defenders, and decision-makers dedicated to strengthening cyber resilience.
Designed to complement the SANS mission of advancing practical, real-world cybersecurity education, the Exhibitor Hall offers attendees the opportunity to explore innovative solutions, engage directly with industry experts, and discover technologies shaping the future of digital defense.
In-Person
Step away from class and enjoy coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Join us for lunch and take advantage of the opportunity to connect with fellow cybersecurity professionals, industry experts, and sponsors. Whether you're discussing insights from the morning sessions or exploring solutions in the Exhibitor Hall, lunch provides a valuable time to network, collaborate, and recharge for the afternoon ahead.
In-Person
Enjoy an afternoon pick-me-up featuring coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
As the world of technology continues to change, so does the role of the security leader. Organizations are under growing pressure to adopt AI, and they look to security leaders to support this transformation. Finding a way to say “yes” while fulfilling our responsibilities to the organization is now part of the job. Whether you’re a CISO, Director of Security, or someone aspiring for such a position, you should consider how the current trends in IT and business affect your professional journey. Does your current approach to security leadership set you up for success?
Attend this session to learn how experienced CISOs:
Those of us whose professional roots are grounded in technology often look at enterprise defenses from the perspective of the threats. While understanding the relationship between attacks and defenses is important, it’s no longer sufficient.
Attend this session to learn how to think about the role of a modern security leader to succeed in today’s environment.
In-Person & Virtual
MITRE recently hosted the Critical Infrastructure Cybersecurity Tabletop Exercise (CICS TTX), bringing together approximately 200 participants from 70 organizations—including federal, state, and local governments, emergency managers, and industry representatives from pipelines, electricity, IT, communications, and rail—across five metropolitan areas.
This classified exercise focused on strengthening national resilience during a protracted cyber conflict affecting multiple critical infrastructures and highlighted the interdependencies between sectors instead of sector or entity specific issues.
This session will present unclassified outcomes from the exercise, share key lessons learned, and discuss ongoing activities and newly developed technologies to address identified gaps.
Attendees will gain insights into cross-sector collaboration, strategies for managing extended cyber incidents, and practical approaches for improving preparedness and recovery across interconnected infrastructures.
In-Person & Virtual
Ease into the day with freshly brewed coffee, decaffeinated coffee, and a selection of hot teas.
In-Person
Step away from class and enjoy coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Lunch is on your own. Explore nearby dining options to enjoy a meal of your choice before classes resume in the afternoon.
In-Person
Enjoy an afternoon pick-me-up featuring coffee, tea, assorted sodas and juices, fruit, and a featured snack.
Registration:
About Core NetWars: The most comprehensive and AI-forward cyber range in the NetWars portfolio. Designed for practitioners across multiple disciplines, Core NetWars combines emerging AI security challenges with real-world cyber scenarios to strengthen the technical skills most needed for today's threats. It is the only range that qualifies for the annual Core NetWars Tournament of Champions!
Computer Requirements: Internet-based
Recommended For: All infosec practitioners of any level. It is recommended, but not required, that students have a basic or foundational knowledge of information technology and technical topics.
Disciplines: Cybersecurity 101, Cyber Defense, Penetration Testing, Digital Forensics, Incident Response, Cloud Computing, and AI.
Example Topics:
Interactive Scenario: SANS students are deployed to BLOCCORP, a global media giant built on toys, streaming, gaming, and AI. As strange activity spreads across its infrastructure, they uncover compromised systems, vulnerable AI models, rogue IoT devices, and reckless automation. Can they expose BLOCCORP’s hidden agenda and stop its AI-driven ambitions before the damage is done?
In-Person & Virtual
Ease into the day with freshly brewed coffee, decaffeinated coffee, and a selection of hot teas.
In-Person
Step away from class and enjoy coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Lunch is on your own. Explore nearby dining options to enjoy a meal of your choice before classes resume in the afternoon.
In-Person
Enjoy an afternoon pick-me-up featuring coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Registration:
About Core NetWars: The most comprehensive and AI-forward cyber range in the NetWars portfolio. Designed for practitioners across multiple disciplines, Core NetWars combines emerging AI security challenges with real-world cyber scenarios to strengthen the technical skills most needed for today's threats. It is the only range that qualifies for the annual Core NetWars Tournament of Champions!
Computer Requirements: Internet-based
Recommended For: All infosec practitioners of any level. It is recommended, but not required, that students have a basic or foundational knowledge of information technology and technical topics.
Disciplines: Cybersecurity 101, Cyber Defense, Penetration Testing, Digital Forensics, Incident Response, Cloud Computing, and AI.
Example Topics:
Interactive Scenario: SANS students are deployed to BLOCCORP, a global media giant built on toys, streaming, gaming, and AI. As strange activity spreads across its infrastructure, they uncover compromised systems, vulnerable AI models, rogue IoT devices, and reckless automation. Can they expose BLOCCORP’s hidden agenda and stop its AI-driven ambitions before the damage is done?
In-Person & Virtual
Ease into the day with freshly brewed coffee, decaffeinated coffee, and a selection of hot teas.
In-Person
Step away from class and enjoy coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person
Lunch is on your own. Explore nearby dining options to enjoy a meal of your choice before classes resume in the afternoon.
In-Person
Enjoy an afternoon pick-me-up featuring coffee, tea, assorted sodas and juices, fruit, and a featured snack.
In-Person