This year's winner is Joseph Bonneau for his paper "The Science of Guessing: Analyzing an Anonymized Corpus of 70 Million Passwords."
*See contest results
NSA AWARD FOR THE BEST SCIENTIFIC CYBERSECURITY PAPER