Hack A Day – Securing Identity: CTF Competition

Securing Identity

Join us for the 8th annual Hack A Day, hosted by PwC Hong Kong, on 11 November 2024!

This year’s theme, “Securing Identity,” highlights the importance of protecting personal and digital identities in our interconnected world.

Students from Hong Kong, Macau, Singapore, Indonesia, Vietnam, Malaysia, and Thailand are invited to participate in our Hackathon and Capture the Flag Competition alongside the Hack A Day Cybersecurity Conference. These competitions offer a unique chance to engage with AI tools, showcase your cybersecurity skills, and compete with talented peers.

Why you should join

PwC Vietnam is committed to raising cybersecurity awareness among young people. As part of our commitment, we present the Capture The Flag Competition, providing valuable platforms to enhance the skills of future talents and equip them for a rewarding career in cybersecurity.

Seize the opportunity to learn to hack and hack to learn, and co-secure while becoming an integral part of the thriving cyber ecosystem. Don't miss your chance to join us and be part of this exciting journey of knowledge and collaboration.

This is our identity. This is PwC's Dark Lab.

Capture The Flag Competition

Celebrate the 8th year of our highly anticipated annual Capture The Flag Competition. This signature event is a prime opportunity to attract and recruit top talents.

Students will have the opportunity to showcase their skills as they research, identify, and execute strategic attacks to capture as many flags as possible during the competition.

When

Monday, 11 November 2024
7:30am - 4:30pm (Vietnam time)

Participants

Full-time undergraduate university students in Vietnam during school year 2024/2025
Each university can nominate 1 team for this competition. Each team can consist of 2-4 participants

Where

HCMC: Le Meridien Saigon Hotel - 3C Ton Duc Thang St., Ben Nghe Ward, District 1, Ho Chi Minh City
Hanoi: PwC Vietnam office - 16th Floor, Keangnam Hanoi Landmark 72, Pham Hung Road, Nam Tu Liem District, Hanoi

Judging panel

PwC Hong Kong Cybersecurity and Cloud team

Agenda

Time	Happening
07:00-07:30	Registration
07:30-08:15	Welcome remarks & briefing
08:15-15:00	Competition
15:00-16:00	Results announcement & Award presentation
16:00-16:30	Closing & group photo

Rules

Team format – Each university can nominate 1 team and each team can consist of maximum 4 members.
Teams are not permitted to collaborate during the competition.
The competition will test the skills and knowledge of teams under seven hacking categories. Students have to attempt all to score the highest points possible:
- Identity - The identity challenge tests the teams’ ability to secure and manage digital identities. This includes implementing authentication and authorization mechanisms, detecting identity-based attacks, and protecting identity data. Teams will need a good understanding of identity management systems and common vulnerabilities.
- AI - The AI challenge tests the teams' capability to compromise the AI models and algorithms. Through clever tactics and strategic manoeuvres. Success in this challenge will require a deep understanding of the inner workings of AI, combined with a comprehensive knowledge of attack vectors.
- Cloud - The cloud challenge tests the teams' capability to resolve real-life complex questions using cloud resources, including network service discovery, vulnerability assessment and exploitation against common network protocols and infrastructure architecture.
- Red Team & Blue Team - The red team and blue team challenge tests the teams' understanding of the enterprise’s infrastructure and ability to execute the attack path used in real world cyberattacks, as well as some threat hunting techniques.
- Threat Intelligence & Incident Response - The threat intelligence and incident response challenge tests the teams’ ability to respond to threat and incident on a timely basis.
- Web - The web challenge tests the teams’ ability to analyse and exploit poor configuration and vulnerabilities in different web services and programme logic.
- Binary & Reverse Engineering - The challenge seeks to test the teams’ knowledge on binary analysis and reverse engineering, analytical thought process and the ability to think out of the box.

Disclaimer

Scoring

Two to six challenges per category.
Difficulty level varies for each challenge, with scores ranging from 50 to 500.
The winner will be determined by the team attaining the highest score.
If two teams attain the same score, the team completing the challenge in the shortest time prevails.