Jeopardy Capture the Flag Challenges Valdemar Švábenský Masaryk University, Czech Republic PA197 Secure Network Design May 22, 2019 2 ▪ Traditional outdoor game (and later computer games) ▪ In cybersecurity: training activity for exercising skills ▪ Finding secret “flags” as solutions to cybersecurity challenges Capture the Flag (CTF) game 3 1. Attack-Defense 2. Attack-Only 3. Jeopardy Three types of CTF 4 ▪ The “original” CTF ▪ Teams fixing own vulnerable hosts while attacking other teams ▪ Awaiting you on May 24 Attack-Defense CTF 5 Attack-Only CTF ▪ You played this on April 3 6 ▪ Most common type of CTF ▪ Solving cybersecurity-related assignments ▪ Tasks in categories worth different amount of points ▪ Today’s topic Jeopardy CTF 7 Jeopardy CTF: Naming 8 Jeopardy CTF: Upcoming Competitions ▪ Facebook CTF ▪ June 1 ▪ Prizes: $3,133.70 + $2,000 + $1,000 ▪ https://fbctf.com/ ▪ Google CTF ▪ June 22 ▪ Prizes: $31,337 and advancement to the finals ▪ https://capturetheflag.withgoogle.com/ ▪ … And many more: ▪ https://ctftime.org/ 9 Your tasks 1. Register at one (or more) of these websites: ▪ https://www.hackthebox.eu/ ▪ https://www.root-me.org/?lang=en ▪ https://www.hackthissite.org/ ▪ https://www.hackthis.co.uk/ 2. Solve some challenges! (The homework will be related to this, so the more you solve here, the better for you ☺ ) 10 Reflection ▪ Which platform did you choose? Why? ▪ Have you learned something today? What was it? ▪ What did you like about this type of practice? ▪ What did you not like? ▪ Any other comments? 11 Resources ▪ https://www.youtube.com/watch?v=ThBpRBpyxLI ▪ https://github.com/CSIRT-MU/edu-resources ▪ https://www.kali.org/ ▪ https://defcon.org/ 12 Join us! ▪ Learn practical cybersecurity topics ▪ Cooperate on interesting projects Cybersecurity Laboratory at FI MU: kypo.fi.muni.cz Computer Security Incident Response Team of Masaryk University Interested in cybersecurity? @csirtmu csirt.muni.cz THANK YOU! QUESTIONS? JOIN US AT CSIRT-MU :) Valdemar Švábenský et al. svabensky@ics.muni.cz csirt.muni.cz, kypo.fi.muni.cz @csirtmu