Ten Years of iCTF: The Good, The Bad, and The Ugly
Ten Years of iCTF: The Good, The Bad, and The Ugly
复制标题
iCTF 十年：好的、坏的和丑陋的
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
Yan Shoshitaishvili
中科院分区：
文献类型：
--
作者：
Giovanni Vigna;Kevin Borgolte;Jacopo Corbetta;Adam Doupé;Y. Fratantonio;L. Invernizzi;Dhilung Kirat;Yan Shoshitaishvili
作者姓名：维格纳，乔瓦尼; Borgolte，Kevin;科尔贝塔，雅格布; Doupe，Adam; Fratantonio，Yanick; Invernizzi，Luca; Kirat，Dhilung; Shoshitaishvili，Yan|摘要：安全竞赛已经成为一种流行的方式来促进安全教育，通过创造一个竞争的环境，参与者超越了传统安全课程通常需要的努力。现场安全竞赛（也称为“夺旗”或CTF竞赛）特别适合支持实践经验，因为它们通常具有攻击和防御组件。不幸的是，由于这些比赛让几个（可能是许多）团队相互竞争，因此很难设计、实现和运行。本文提出了一个框架，该框架是基于10多年来运行世界上最大的教育CTF（称为iCTF）的经验教训。该框架的目标是为教育机构和其他组织提供运行可定制的CTF竞赛的能力。该框架是开放的，并利用安全社区创建教育安全挑战语料库。
Author(s): Vigna, Giovanni; Borgolte, Kevin; Corbetta, Jacopo; Doupe, Adam; Fratantonio, Yanick; Invernizzi, Luca; Kirat, Dhilung; Shoshitaishvili, Yan | Abstract: Security competitions have become a popular way to foster security education by creating a competitive environment in which participants go beyond the effort usually required in traditional security courses. Live security competitions (also called “Capture The Flag,” or CTF competitions) are particularly well-suited to support hands-on experience, as they usually have both an attack and a defense component. Unfortunately, because these competitions put several (possibly many) teams against one another, they are difficult to design, implement, and run. This paper presents a framework that is based on the lessons learned in running, for more than 10 years, the largest educational CTF in the world, called iCTF. The framework’s goal is to provide educational institutions and other organizations with the ability to run customizable CTF competitions. The framework is open and leverages the security community for the creation of a corpus of educational security challenges.