0x03 Advisory board

Five people whose job is to tell us when we are wrong.

The advisory board gives the organising team an outside view of the programme, process and promises. It advises; the organising team runs the conference and makes the decisions.

Five advisors confirmed

All five advisors for 0x03 are confirmed and listed below. Each serves in a personal capacity for this edition.

Seats
Five Fixed for this edition.
Paid
No Volunteers, like everybody else on this conference.

3–4 April 2027 a Dehradun venue, to be announced Term of one edition

Separate from the review board

01 What the board does

Advice, with the right to be ignored.

An advisory board that can overrule the organisers is a second organising team, and two teams running one conference is how a conference stops happening. So the arrangement is deliberately lopsided: the board advises, the team decides, and the team has to explain itself.

Every edition of BSides Dehradun has been run by people who were still learning how to run it. That is not a criticism of this conference in particular. It is what a volunteer event is, but it does mean the organising team is reliably the group least able to see its own blind spots. The advisory board exists to be a second pair of eyes from outside, attached to nothing.

Seats are held for one edition. An advisor who wants to carry on is asked again; an advisor who does not is thanked and left alone. Nobody accumulates a title here, and nobody's name stays on this page longer than their involvement does.

  • Reads the programme before it is public

    A running order reads very differently to somebody who has not spent six months building it. The board sees the shape of the day early enough for a bad call to still be reversible.

  • Keeps the conference honest about its size

    This is a volunteer event in a valley, not a trade show. The board's most useful function is saying when an ambition has outgrown the number of people available to deliver it.

  • Sits outside the money

    Advisors take no part in sponsorship decisions and receive nothing for the role. Where an advisor's employer sponsors the conference, that buys exactly what the prospectus says it buys and nothing on the programme.

  • Is willing to disagree in public

    The whole point of an external board is that it can say no in a way an internal team cannot. An advisory board that has never disagreed with anything is decoration.

02 The board

Meet the advisory board.

Meet the five advisors for this edition, working across offensive security, security assurance and IoT research.

Five advisors · Board complete

  1. Veerababu Penugonda

    Founder, and better known as Mr-IoT

    IoTSRG

    Has been publishing IoT and embedded security work since 2017, and runs IoTSRG, whose tooling, device lists and lab guides are all open source.

    LinkedIn profile
  2. Nipun Jaswal

    Senior director, and global capability lead for offensive security

    NTT DATA

    Has written twelve books on penetration testing, network forensics and exploit development, the first of them Mastering Metasploit in 2014, and has disclosed more than ten zero-days.

    LinkedIn profile
  3. Sanjeev Multani

    Head of security, and better known as Mr. BoF

    Nuvollo

    Has published LVS, an open source vulnerable web application covering the OWASP Top Ten of 2013, and gives the specialism as kernel exploits and buffer overflows.

    X profile
  4. Dhawal Shrivastava

    Senior security assurance engineering lead

    Microsoft

    Is a founding member of the security assurance team at Microsoft's Security Response Center in India, sits on the core team for BlueHat Asia and BlueHat India, and built PSIRT operations at Citrix before that.

    LinkedIn profile
  5. Dr. Madhavi Thaker

    Project manager, IoT security

    DIA-SVPCoE, Gujarat University

    Has more than 16 years of experience across industry, academia and research in IoT, AI/ML and cybersecurity.

    LinkedIn profile

Where an employer is named it is there to tell you what kind of work the person does. It is not a statement that the organisation endorses, sponsors or has any view about BSides Dehradun. Advisors sit here as individuals.

03 Conflicts

Where an advisor steps back.

An advisor with a stake in an outcome does not get to advise on it. Three cases cover almost everything, and all three have come up at conferences smaller than this one.

Submitting a talk
Allowed, declared An advisor may submit to the call for papers like anyone else, and says so when they do. They take no part in the review of their own proposal.
Their employer sponsoring
Allowed, declared Sponsorship buys what the prospectus lists. An advisor does not carry an employer's interest into a programme conversation.
A conflict they spot first
Expected The version of this rule that actually works is the one an advisor applies before anybody has to ask.

The two boards are separate lists with separate jobs. The advisory board looks at the conference; the review board reads submissions to the call for papers. One person may sit on both, and where that happens it is stated on both pages rather than left for a reader to notice.

Anything that looks like a conflict nobody has declared is worth an email to info@bsidesdehradun.com, the general address. Reports about behaviour rather than process go to conference@bsidesdehradun.com instead, which is a shorter list and is set out in the code of conduct.

04 Questions

What people ask about the board.

What does the advisory board actually do?

It advises, and the organising team decides. The board reads the programme before it is public, says when an ambition has outgrown the number of volunteers available to deliver it, and is expected to disagree out loud when that is the honest thing to do. An advisory board that has never disagreed with anything is decoration.

Can the board overrule the organisers?

No, and that is deliberate. A board that can overrule the organisers is a second organising team, and two teams running one conference is how a conference stops happening. The arrangement is lopsided on purpose: the board advises, the team decides, and the team has to explain itself.

Who sits on the advisory board?

The five advisors for 0x03 are Veerababu Penugonda, Nipun Jaswal, Sanjeev Multani, Dhawal Shrivastava and Dr. Madhavi Thaker. Each serves in a personal capacity for one edition.

Are advisors paid?

No. Advisors are volunteers like everybody else on this conference, take no part in sponsorship decisions, and receive nothing for the role.

How long is a term?

One edition. An advisor who wants to carry on is asked again, and one who does not is thanked and left alone. Nobody accumulates a title here, and nobody's name stays on this page longer than their involvement does.

Can an advisor submit a talk?

Yes, like anyone else, and they declare it when they do. They take no part in the review of their own proposal. The same holds if their employer sponsors the conference: sponsorship buys what the prospectus lists and nothing on the programme.

Is this the same as the review board?

No. Two separate lists with separate jobs. The advisory board looks at the conference as a whole; the review board reads submissions to the call for papers and chooses the talks. One person may sit on both, and where that happens it is stated on both pages rather than left for a reader to notice.

Can I nominate somebody for 0x03?

The five advisory seats for 0x03 are confirmed, so there is no open seat to nominate somebody for. Questions about the board can be emailed to the organising team.

Get in touch

Questions about the advisory board?

All five seats for this edition are confirmed. If you have a question about the board or its role, get in touch with the organising team.