Full Report
On Saturday Dec 3, at BSides Cape Town we announced the winner of a prize for local information security research. The purpose of the competition was twofold. Firstly, to highlight interesting research produced in .za for the purpose of publicising up ‘n coming security folks, since there are a few disparate communities (academic / industry is the greatest split). Secondly, to provide some degree of reward in the form of a cash prize. The prize is (unsurprisingly) not meant to compensate for time spent, but rather to give the typical researcher who conducts the work in their spare time some recognition and perhaps a cool gadget to associate with the work.
Analysis Summary
# Industry News: South African Security Research Prize Highlights Community Engagement Efforts
## Summary
SensePost announced the winner of a local information security research prize at BSides Cape Town, aiming to recognize up-and-coming researchers in the disparate South African (ZA) academic and industry security communities. Despite the positive goals of publicizing talent and offering a modest cash reward, the competition was marked by a significant lack of nominations, suggesting challenges in engaging the broader local research ecosystem.
## Key Details
- **Date:** Winner announced on Saturday, December 3 (article published Dec 6, 2011).
- **Companies Involved:** SensePost (Organizer), Thinkst (Nominee), Rhodes University (Nominee).
- **Category:** Community Initiative / Talent Recognition.
## The Story
SensePost sponsored a cash prize competition at BSides Cape Town to spotlight cybersecurity research originating from South Africa (.za). The initiative specifically sought to bridge the gap between academic and industry security communities and provide recognition, rather than full compensation, for spare-time research efforts. The competition ultimately yielded a disappointing turnout, receiving only three submissions from two researchers despite multiple security conferences having taken place in the country that year. The nominees were Jameel Haffejee (Thinkst) for work on a Google Chrome GPG plugin and a security conference data collector, and Etienne Stalmans (Rhodes University) for research on detecting fast-flux botnets via DNS traffic. Etienne Stalmans was awarded the R5000 prize.
## Business Impact
### For the Companies Involved
- **SensePost:** Reinforces SensePost's commitment to fostering local talent and community engagement, enhancing its reputation as a thought leader invested in the domestic security ecosystem. The low nomination rate, however, signals a potential internal marketing or awareness gap for future initiatives.
### For Competitors
- Minimal immediate impact, as this was a community recognition effort, not a product launch or competitive acquisition. It sets a precedent for how other regional firms might choose to support local research.
### For Customers
- Indirectly positive, as stronger talent recognition pipelines should eventually lead to better-vetted and higher-quality security talent entering the market.
### For the Market
- Highlights a regional market dynamic: while research is being conducted, there is a visible disconnect or hurdle in getting that research recognized and submitted to local industry-backed platforms. This suggests an inherent fragmentation between academic output and industry awareness within the South African cyber sector.
## Technical Implications
The recognized research areas—DNS analysis for botnet detection (Etienne Stalmans) and specialized browser security tooling (Jameel Haffejee)—indicate active, practical security innovation occurring regionally in network traffic analysis and application security layers.
## Strategic Analysis
- **Market Positioning:** SensePost positions itself as a community builder and talent aggregator for the ZA security space, using these initiatives to scout and build relationships.
- **Competitive Advantage:** Non-monetary goodwill and early access/visibility to emerging researchers constitute a strategic, low-cost pipeline advantage.
- **Challenges:** The primary challenge identified is the execution and broad awareness of such initiatives, demonstrated by the low nomination rate, indicating difficulty in penetrating the intended audience across disparate communities.
## Industry Reactions
- **Expert Commentary:** The organizing body views the low submission rate as a significant concern, suggesting that simply creating an incentive is insufficient; better methods for outreach across academic institutions and independent researchers are required.
- **Market Response:** The commitment to repeating the sponsorship next year suggests a belief that persistence can overcome initial engagement hurdles.
## Future Outlook
- Expect SensePost to adjust its outreach strategy for the next iteration of the research prize. Watch for whether future events attract significantly higher quality or quantity of submissions, indicating a change in community engagement effectiveness.
## For Security Professionals
This news serves as a reminder that localized research, even conducted in spare time, can gain industry recognition. Practitioners should be aware of specialized local incentives and consider submitting their work to build professional visibility outside of traditional conference publication channels.