Gamifisering av informasjonssikkerhet TG Hack maritioo whoami Marit

whoami Marit. Iren. Rognli. Tokle “Hackersjef Marit” Leader TG: Hack Leader Ui. O-CTF Mobile

Agenda Intro Gamification of information security Values of gamification

‘’the use of game mechanics and experience design to digitally engage and motivate people

“CTF is a hacking competition with a wide spectre of security related tasks where

$CTF TG 19{Hi_I_am_a_fancy_flag 123}$

CTF ● ● ● Capture the Flag Ethical hacking Team based competition Challenges in

CTF - Jeopardy Style ● ● Different categories Dynamic vs. fixed scoring How to

TG: Hack Onsite at The Gathering (and offsite) Tutorials, workshops and walkthrough AFK and

TG: Hack Focus on beginners, but also make challenging tasks for experienced haxxors Gamification

For CTF competitors ● ● Awesome way to learn programming, security and hacking. ○

I would argue that most CTFers usually has a higher level of knowledge than

CTF ‘’the use of game mechanics and experience design to digitally engage and motivate

Gamification for [companies|universities|states] ● ● Security awareness Security training/ capacity building Social activity/ team

TG: Hack’s experiences Kids getting motivated to learn programming/security Beginners gaining loads of knowledge

Conclusion Norway needs infosec people, CTF might help get more. tghack. no is a

Thanks for watching! https: //tghack. no || github. com/tghack

Slides: 23

Download presentation

Gamifisering av informasjonssikkerhet TG: Hack @maritio_o

whoami Marit. Iren. Rognli. Tokle “Hackersjef Marit” Leader TG: Hack Leader Ui. O-CTF Mobile Consultant Sopra Steria Er du sikker? Pwnrpuff girls & bootplug Mobile, web and pwn

TG: Hack Crew

Agenda Intro Gamification of information security Values of gamification

‘’the use of game mechanics and experience design to digitally engage and motivate people to achieve their goals” - 2014, Gartner

Gamification of information security

CTF? WTF? !

“CTF is a hacking competition with a wide spectre of security related tasks where the goal is to find a flag. ” - Hacker boss Marit

$CTF TG 19{Hi_I_am_a_fancy_flag 123}$

CTF TG 19{Hi_I_am_a_fancy_flag 123}

CTF ● ● ● Capture the Flag Ethical hacking Team based competition Challenges in the computer security domain Two modes: ○ Attack & Defense ○ Jeopardy Style Gamification of infosec

CTF - Jeopardy Style ● ● Different categories Dynamic vs. fixed scoring How to play the game How to win Choose task Solve it Submit flag Score points Gamification of infosec

TG: Hack

TG: Hack Onsite at The Gathering (and offsite) Tutorials, workshops and walkthrough AFK and n 00 b categories Publish writeups, task source code, and templates Home made CTF platform 1300+ competitors 709 active teams Gamification of infosec

TG: Hack Focus on beginners, but also make challenging tasks for experienced haxxors Gamification of infosec Goal of becoming the de facto hacking platform in Norway

Why is gamification valuable?

For CTF competitors ● ● Awesome way to learn programming, security and hacking. ○ Writing/reading writeups Team work & friendship Fun and addictive ○ Accomplishment ○ Dueling with known teams in scoreboards ○ Global team rating Attractive for employers Why is gamification valuable?

I would argue that most CTFers usually has a higher level of knowledge than the common developer/security person.

CTF ‘’the use of game mechanics and experience design to digitally engage and motivate people to achieve their goals” - Why is gamification valuable? 2014, Gartner

Gamification for [companies|universities|states] ● ● Security awareness Security training/ capacity building Social activity/ team building Recruitment Why is gamification valuable?

TG: Hack’s experiences Kids getting motivated to learn programming/security Beginners gaining loads of knowledge Putting CTFing on résumé Getting a job Why is gamification valuable?

Conclusion Norway needs infosec people, CTF might help get more. tghack. no is a good platform to start with CTF has gains for individuals, companies, everyone really. Social gains are great. (And all technical people should join the Ui. O CTF which finishes at 16. 30. )

Thanks for watching! https: //tghack. no || github. com/tghack