2018 Rules & REgistration Guidelines
Red Team Competition Overview
Formerly called High School Forensics, the Red Team Competition (RED) is organized as a two part red team operation designed specifically for high school students.
The online Qualification Round (September) will primarily focus on reconnaissance, penetration testing, and investigation of a target organization.
During Finals (in-person, 8 - 10 November), teams will be tasked with infiltrating and analyzing the findings of the operation without getting caught. Students will need to apply skills related to forensics, cryptography, reverse engineering, exploitation, and social engineering.
In 2018, RED Finals will be hosted in four CSAW global regions :
- CSAW Europe at Grenoble INP - Esisar (Valence, France)
- CSAW MENA at the Higher School of Communications of Tunis (SUP’COM, Ariana, Tunisia)
- CSAW México at University Iberoamericana Mexico City (IBERO, Mexico City, Mexico)
- CSAW US-Canada at NYU Tandon School of Engineering (Brooklyn, New York, USA)
This competition exists for many reasons. For students who are already interested in computer science and cyber security, it provides a fun opportunity to hone skills and gain experience. For students with no prior interest/experience in cyber security and digital forensics, RED helps to increase awareness of educational opportunities and career paths in this dynamic field.
Additional benefits include:
- Scholarships, prizes, travel awards
- Pre-college experiences
- Experience of participating in an international competition with thousands of students from around the world
- Opportunity to meet industry experts and learn about internships
We encourage legally exploring computer systems and learning how computers and systems work. CSAW RED does not condone hacking in the illegal sense, such as breaking into machines illegally, stealing information, and launching denial of service attacks.
Qualification Round Dates & Times
CSAW’18 RED will run 21 - 30 September 2018
Start Time: 20:00 UTC Time, 21 September 2018
End Time: 20:00 UTC Time, 30 September 2018
Qualification Round Eligibility
Everyone is welcome to play in the online Qualification Round of RED. We have players from around the world and with different life experiences who participate -- not just high school students. However, even though the Qualification Round is open, only high school teams from certain global regions of the are eligible to qualify for Finals. Please read the next section carefully for further details.
Teams/players may play as much or as little as they want through the Qualification Round. For high school students, we recommend dedicating as much time as you have to working through the challenge while still maintaining your normal school and extracurricular schedule.
Rules for Qualifying Round & Finals Eligibility
- Registration is required through the RED platform: red.csaw.io. Registration will remain open through the Qualification Round.
- Players can compete individually or in teams
- In order to qualify for Finals, teams must be formed during the Qualification Round and a mentor should be identified.
- Mentors can assist teams in preparing for the Qualification round, but they should not assist players in solving challenges.
- Players should compete under only one (1) team name; playing for multiple teams constitutes cheating.
- Furthermore, teams should work independently; sharing answers privately or publicly or collaborating with another team to secure multiple spots at Finals constitutes cheating.
- Attacking the infrastructure will result in disqualification and a team-wide CSAW ban
- Attempting to brute force flags or guess answers on the submission platform is prohibited
- Use of automated vulnerability scanners, such as SQLMap are not allowed
- Teams may use any freely available tool to complete a given challenge
- Tools that must be purchased (e.g., ordered online) are prohibited
- Receiving assistance from non-team members is prohibited, for example, a team’s mentor or friends. It's okay to use free tools and resources available on the Internet, but it's not okay to ask people (online or offline) to help you solve the problem.
Additional eligibility rules vary per region:
CSAW Europe hosted by Grenoble INP - Esisar
Teams must consist of 1 to 3 students, all of whom must be enrolled in the same high school located in "Auvergne-Rhône-Alpes" region, composed of Grenoble, Lyon, and Clermont-Ferrand academies. Ten (10) teams, with no more than two (2) teams per school, will be invited to Finals as follows:
- The top scoring team from the Auvergne-Rhône-Alpes region = 1 team
- The next top 3 scoring teams from each academy (Grenoble, Lyon and Clermont-Ferrand) = 9 teams
- Lycée/High School limit: eligibility is limited to 2 teams per school
CSAW MENA hosted by SUP’COM
Teams must consist of 1 to 3 students, all of whom must be enrolled in the same high school in Tunisia. Eligible teams qualify for Finals by getting the maximum available points. The top 10 scoring teams will be invited to Finals.
CSAW México hosted by University Iberoamericana Mexico City
Teams must consist of 1 to 3 students, all of whom must be enrolled in the same high school in México. Eligible teams qualify for Finals by getting the maximum available points.
Ten (10) teams, with no more than one (1) team per school, will qualify for Finals. In the event that more than one team from the same school ranks in the top 10, the team with the most points will be invited to Finals.
CSAW US-Canada hosted by NYU Tandon School of Engineering
Teams must consist of 1 to 3 students, all of whom must be enrolled in the same high school in the United States. Eleven (11) teams will be invited to Finals as follows:
- The top 2 scoring teams per US region, with no more than 1 team per high school (8 teams)
The 4 US Regions are defined here:
Added Sept. 7: American Samoa, Guam, and the Northern Mariana Islands are considered part of the West region. Puerto Rico and US Virgin Islands are considered part of the South region.
- The top 2 scoring all-female teams (2 teams)
- The top scoring New York City team (1 team)
Recommendations for Qualifying Round
- Minimum computer specs: Intel i3 and above (or AMD equivalent), 4 GB RAM, 128 GB HDD/SSD with at least 20GB free space available
- Unfiltered Internet access at 5+ Mbps, as well as the ability to install software.
- We recommend that teams access the RED Slack channel and keep this open during the competition to be alerted of any updates.
Qualification Round Platform
The qualification round of RED is played on an online platform: red.csaw.io. Only registered teams will be given access to the challenges at the “Start Time.”
During the Qualification Round, challenges will be released on the RED platform on a staggered schedule over the course of the 10 day competition. Teams earns points by solving challenges. Points will be displayed on a public scoreboard. The scoreboard is likely to be hidden closer to the end of the competition.
Preparation Resources & Tools
CTF101, a new resource from the NYU Tandon OSIRIS Lab and CTFD.
CSAW365, an archive of past CTF challenges
Each team is required to identify a mentor: either a teacher or a parent/guardian approved by the team’s high school. The mentor will assist the team in preparing to compete in both the Qualification and Final competitions. Mentors should not assist students in solving challenges during the Qualification Round nor the Final Competition.
Typically, the mentor will also serve as the chaperone for teams who qualify for and travel to the Final Competition. In the event that a mentor is unavailable to accompany a team to Finals, an alternative chaperone who is approved by the team’s school and guardians can be identified.
Finalists and mentors will be notified via email by their host region no later than 5 October 2018. Teams and mentors will receive notification via the emails that are registered on red.csaw.io.
A Travel Award will be presented to each qualifying team and their mentor/chaperone. Travel Awards vary by region. Typically, transportation and lodging (hotel or residence hall), and meals are provided, free of cost to the Finalists. Teams will be provided details when they are invited to Finals.
Final Round Dates & Times
In-person Finals will be held 8 - 10 November 2018. Dates of CSAW Finals and competition times may differ slightly for each international region based on time zones.
Format of Finals
Finals requires in-person participation. Teams will be given a brief story-line. Starting with a single piece of evidence, teams will need to employ forensic analysis to discover additional evidence. Evidence is both physical and digital. Each team will be required to submit a report with their findings, to be assessed and scored on-site by a panel of industry judges. The winners will be announced at the award ceremony. A 1st, 2nd, and 3rd place team is identified for each international region.
Prizes vary by international region. Please check the CSAW website as well as the regional CSAW webpages for details on prizes via region.
Please direct your inquiries as follows:
CSAW Europe > csaw-europe-red@esisar.
CSAW Mena > firstname.lastname@example.org
CSAW México > email@example.com
CSAW USA & General Inquiries > firstname.lastname@example.org
Check out the Red Team competition online qualification round scoreboard.
Une traduction en Français du document RED TEAM rules.