Capture the flag challenge design and implementation - part 2

• Main Author: Lee, Andre Wen Bin
• Other Authors: Li Yi (SCSE)
• Format: Final Year Project
• Language: English
• Published: Nanyang Technological University 2024
• Subjects: Computer and Information Science; Engineering; Computer science and engineering
• Online Access: https://hdl.handle.net/10356/175045
• Institution: Nanyang Technological University

Learning software security can be rather challenging due to majority of the concepts involved being hard to visualize. As such, hands-on activities are often integrated in learning to provide learners with a more holistic understanding of the topics. These hands-on activities are known as Capture the Flag (CTF) competitions. In a bid to provide a fun and interactive way of learning software security, the CZ4067 Software Security course aims to incorporate CTF exercises for the students to engage in and hone their practical skills and at the same time encourage creativity. This paper evaluates the design considerations behind the CTF challenges, including the concepts taught, learning objectives and benefit to students. Other than the design aspect, this paper also delves into the implementation of these challenges, including the backend setup as well as future extensibility.