Kids To Hack Corporate Crime Caper Case At DEF CON

The Social Engineering Capture the Flag contest for kids is now an official DEF CON contest.

Call it a life-sized DEF CON version of the game Clue.
Thats how Christopher Hadnagy, the mastermind behind the fourth annual Social Engineering Capture the Flag Contest for DEF CON Kids and chief human hacker at
Social-Engineer.org
, describes this years contest, which will be held during the famed adult DEF CON hacker conference in Las Vegas.
This years Who Dunnit? A Social Engineering Corporate Crime! is part and parcel of the official DEF CON conferences competitions. It previously piggybacked off
DEF CON Kids, now known as R00tz
. The premise of the contest is that a corporate crime has been committed, and the 5- to 12-year-old contestants must use a mix of social skills, password and cipher cracking, lock picking, and a little social engineering to get to the bottom of the caper.
They interview people, crack ciphers, codes, and puzzles to remove clues from their docket to figure out who committed the crime and what the crime is, Hadnagy says.
Unlike the grown-ups version of the Social Engineering CTF that Hadnagy and his team have run at DEF CON the past five years -- where contestants try to schmooze as much potentially sensitive information as possible from high-profile corporate targets via some open source intelligence gathering and live cold telephone calls -- the kid-friendly version is all about critical thinking skills.
[The fifth annual DEF CON Social Engineering Capture the Flag Contest kicks off today with new tag team rules to reflect realities of the threat. Read
Social Engineering Grows Up
.]
The mini-social engineers will be assigned to two-person teams that combine a younger and an older contestant who are given a series of challenges that provide them with clues.
The original concept was to help with critical thinking skills. Part of critical thinking is being able to work with a person you dont know and to be able to work as a team and plan, Hadnagy says. This is a way to introduce our kids to some level of the security industry, the human side of the security industry, and showing them skillsets they can work on and use. They can own and use these skills... Our goal is to encourage them to think about security as a future profession.
One alumna of the contest who has competed each year and is now a college student will return as a homecoming of sorts at this years CTF. Ashley Wong will assist Hadnagys CTF team of Amanda White and Tamara Kaufman. She is helping us organize and run it. Its really cool because she played every year of the contest, Hadnagy says.
Wong, who is now studying robotics in college, attributes much of the necessary critical thinking skills for that field to the social engineering CTF, Hadnagy says. A lot of the critical thinking skills have helped her. Shes a success story.
As in past years, various security experts, DEF CON organizers, and DEF CON goons will play roles in the contest. Many of the contestants traditionally have been the kids of hackers or DEF CON attendees, but Hadnagy says there are several new contestants this year whose names he cant match to security industry regulars.
Each year, one team has finished far ahead of the others, but tradition has been that the other teams have continued on. One team spent an hour trying to pick a lock and wouldnt accept help from Deviant Ollam, says Hadnagy, referring to the lockpick master of DEF CON who also helps with the kids event.
Its not a linear thing, so theres no official order to the flag capture. A team can be interviewing someone about the crime, picking a lock, or solving a cipher, in no particular order. They have to solve the crime -- who did it, how they did it, and where they did it. But they have to complete every task.
The kids social engineering contest will be held on Saturday, Aug. 9, beginning at 9:30 a.m. Registration is under way for the event, which will include a chance to meet the famed social engineer-turned security expert Kevin Mitnick.
They can meet someone who did it the wrong way but is now doing it the right way, Hadnagy says.
Rules and a registration form are available
here
.

Last News
▸ Debunking Machine Learning in Security. ◂ Discovered: 23/12/2024 Category: security	▸ Researchers create BlackForest to gather, link threat data. ◂ Discovered: 23/12/2024 Category: security	▸ Travel agency fined £150,000 for breaking Data Protection Act. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Kids To Hack Corporate Crime Caper Case At DEF CON