
DEF CON 33 - Building a Malware Museum - Mikko Hypponen
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 40:12
Mikko Hyppönen discusses the difficulty of preserving modern digital culture, such as always-online multiplayer games, and shares his journey of archiving malware history through both online and physical museums 1:45. He concludes by announcing his departure from cybersecurity after 34 years to join the drone defense industry 37:41.
Key Takeaways:
• Preserving digital culture is significantly harder than physical art because complex experiences like mobile games rely on servers and closed-source code that eventually go offline 6:05-7:12.
• Hyppönen collaborated with the Internet Archive to create the Malware Museum, allowing users to run vintage viruses from the 1980s and 90s safely in a browser emulator 7:55-10:30.
• His company built a physical art museum in Helsinki featuring modern art pieces inspired by malware, such as a sculpture made of computer mice representing the "ILOVEYOU" worm 12:00-20:34.
• Hyppönen's perspective on malware shifted over time from seeing it as vandalism to recognizing it as a form of digital culture or "graffiti" worth preserving 27:28-29:00.
• After 34 years with the same company, Hyppönen is leaving to join Sensor Fusion to build defense systems against military drones in the Ukraine war 37:41-38:26.
Hyppönen emphasizes the importance of archiving our digital heritage while he moves to a new industry to defend against physical threats 38:58.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
How many people are here because you uh have read or been influenced by Mo before? [Applause] You people who are new, you should be excited. This is going to be special. This is going to be a very special opportunity for for everybody to listen. Um, I feel like that this year is very much a transitional year for a lot of people in the the industry the industry doesn't exist. If you're here, there is no industry. It's a transitional year for a lot of us as we kind of take stock at at what's happened over the past decade for a lot of us personally, a lot of us in the world. Kind of take a look at what's next. figure out why we do the things we do, why we did the things we do, and we're trying to figure out what's next. Uh, I think Miko's going to talk to us right now about something that's t…