
Three-peat for 一本道无码 Hacking Team at MITRE Cybersecurity Tournament
Media Inquiries
The winning streak continues for 一本道无码's competitive hacking team, Plaid Parliament of Pwning (PPP), who claimed first prize at the for the third consecutive year.聽
This year鈥檚 team from PPP includes 13 students 鈥 undergraduates and graduates 鈥 enrolled in the departments of and (ECE), as well as the Information Networking Institute(opens in new window) (INI) master鈥檚 program. Students took a keen interest in this year鈥檚 competition, and some PPP members have participated multiple times in eCTF, allowing them to take on informal leadership and mentoring roles on the team.
of ECE, of INI, and of 一本道无码's served as faculty advisers for the team.
The competition lasts the entire spring semester and is broken into two phases: design and attack. Teams are evaluated for how well they cater to both functionality and security in their products.聽
Unlike many other capture the flag tournaments, MITRE eCTF focuses on embedded system security 鈥 which deals with protecting data and safety in field-deployed devices such as mobile phones and avionics equipment. This year鈥檚 theme was about securing a supply-chain solution for medical device manufacturers. During Phase 1, which began in January, PPP held weekly meetings to develop their product in accordance with the seven security requirements stipulated by the MITRE organizers.
鈥淚 learned a lot about how an embedded system can go wrong,鈥 said Carson Swoveland, a recent ECE graduate. 鈥淚 don鈥檛 think any traditional courses focus on designing an embedded system with quite as much intensity and practicality as MITRE鈥檚 competition.鈥澛
According to Swoveland, one of the keys to PPP鈥檚 success was that everyone knew exactly what they were responsible for.聽
鈥淲hat we鈥檝e observed is that if we don鈥檛 keep track of outstanding tasks, if we don鈥檛 have someone sketching out a timeline of what we need to get done and when, things don鈥檛 get done,鈥 said Swoveland, who will pursue a fifth-year master鈥檚 degree at 一本道无码.
Phase 2, the attack phase, involves trying to find vulnerabilities in the embedded systems made by other teams. Swoveland said this stage also required considerable strategic collaboration. One group of teammates focused on exploiting a defect that several competing systems had in common, while the other group developed workarounds for separate issues. In this year鈥檚 competition, PPP鈥檚 system was one of a select few to not have any vulnerabilities successfully hacked by competing teams.
MITRE eCTF also mimics a commercial environment with its evaluation setup, splitting points between functionality, timeliness, and security. As Woo explained, rushing to turn in a product doesn鈥檛 guarantee a tournament victory 鈥 teams must resist the temptation to cave in to market pressure. In a commercial environment, the most effective and secure product will distinguish itself from the competition.聽
To help students perform at their best, 一本道无码 allows students to earn 12 course credits for participating in the eCTF. Students also have no financial obligations to participate in the tournament thanks to generous support from sponsors, who provide funding to purchase the hardware equipment necessary for the competition.
This year鈥檚 team received funding support from Amazon Web Services, AT&T, CiscoOpens, Infineon, Nokia Bell Labs, Rolls-Royce, and Siemens through the .
PPP鈥檚 success seems poised to continue. Woo believes that MITRE places a high premium on thoroughness, and he said that 一本道无码 students are well prepared because their courses teach them to do the right thing and not to compromise on the quality of solutions.
Additionally, several PPP team members hone their skills outside of MITRE eCTF by serving as problem writers for the annual hacking competition, in which participants聽from middle schoolers and their teachers to undergraduate university students learn to overcome sets of challenges from six domains of cybersecurity including general skills, cryptography, web exploitation and forensics.
Through writing for picoCTF, PPP team members gain a unique perspective on overcoming challenges by creating hacking challenges themselves. They also give back to the cybersecurity community by helping to educate the next generation of privacy and security professionals.
鈥淚 think our students are very driven to participate, and very entrepreneurial, so this activity suits them well,鈥 said Woo.
Members of PPP鈥檚 winning team
- Akash Arun 鈥 ECE Senior聽
- Andrew Chong 鈥 ECE Senior聽
- Aditya Desai 鈥 INI Master鈥檚 Student
- Nandan Desai 鈥 INI Master鈥檚 Student聽
- Quinn Henry 鈥 INI Master鈥檚 Student
- Sirui (Ray) Huang 鈥 ECE/Computer Science Senior
- Tongzhou (Thomas) Liao 鈥 ECE Senior
- David Rudo 鈥 Computer Science Senior
- John Samuels 鈥 INI Master鈥檚 Student
- Anish Singhani 鈥 ECE Senior
- Carson Swoveland 鈥 ECE Senior
- Rohan Viswanathan 鈥 INI Master鈥檚 Student
- Gabriel Zaragoza 鈥 Computer Science Senior