Securing Identity: CTF Competition

Rules

• Team format – each university can register a maximum of two teams, and each team must consist of a maximum of four members.
• Teams are not permitted to collaborate during the competition.
• The competition will test the skills and knowledge of teams under seven hacking categories. Students have to attempt all to score the highest points possible:
  • Identity - The identity challenge tests the teams’ ability to secure and manage digital identities. This includes implementing authentication and authorization mechanisms, detecting identity-based attacks, and protecting identity data. Teams will need a good understanding of identity management systems and common vulnerabilities.
  • AI - The AI challenge tests the teams' capability to compromise the AI models and algorithms. Through clever tactics and strategic manoeuvres. Success in this challenge will require a deep understanding of the inner workings of AI, combined with a comprehensive knowledge of attack vectors.
  • Cloud - The cloud challenge tests the teams' capability to resolve real-life complex questions using cloud resources, including network service discovery, vulnerability assessment and exploitation against common network protocols and infrastructure architecture.
  • Red Team & Blue Team - The red team and blue team challenge tests the teams' understanding of the enterprise’s infrastructure and ability to execute the attack path used in real world cyberattacks, as well as some threat hunting techniques.
  • Threat Intelligence & Incident Response - The threat intelligence and incident response challenge tests the teams’ ability to respond to threat and incident on a timely basis.
  • Web - The web challenge tests the teams’ ability to analyse and exploit poor configuration and vulnerabilities in different web services and programme logic.
  • Binary & Reverse Engineering - The challenge seeks to test the teams’ knowledge on binary analysis and reverse engineering, analytical thought process and the ability to think out of the box.

Disclaimer

Scoring

• Two to six challenges per category.
• Difficulty level varies for each challenge, with scores ranging from 50 to 500.
• The winner will be determined by the team attaining the highest score.
• If two teams attain the same score, the team completing the challenge in the shortest time prevails.

Prizes*

Winners

• Job placement within PwC Malaysia's Digital Trust and Cybersecurity practice upon graduation
  
• Sponsorships of Offensive Security Certified Professional (OSCP) certification/ CREST Practitioner Security Analyst (CPSA) examination, upon confirmation of employment
• More attractive prizes up for grab

_{*Terms and conditions apply.}