SlideShare une entreprise Scribd logo
1  sur  31
Télécharger pour lire hors ligne
De ce să ı̂nvăt
, securitate?
Răzvan Deaconescu
razvan.deaconescu@upb.ro
Talks by Softbinator (#149)
13 mai 2021
1 / 31
wargame
2 / 31
WarGames (film, 1983)
https://moviejunkyard.wordpress.com/2013/05/22/wargames1983/
3 / 31
Cyber Wargame
https://techbeacon.com/security/how-train-your-next-security-crisis-let-wargames-begin
4 / 31
Wargames
I https://overthewire.org/wargames/
I https://io.netgarage.org/
I https://www.wechall.net/
I https://w3challs.com/
I http://pwnable.kr/
5 / 31
Wargames
securitate
scenariu / setup
challenge
fun
6 / 31
Challenge / Provocare
ne-trivial
ceva nou
exciting
catharsis
improvement
7 / 31
Scrisul de cod - challenge?
trivial?
same old?
boring?
next?
8 / 31
Nu e vorba de scrisul de cod
First, solve the problem. Then, write the code.
John Johnson
9 / 31
Securitate / Wargames vs. Dezvoltare / scris cod vs. Bug
hunting
trivial vs. provocator
comun vs. nou
tern vs. exciting
thrill of the hunt + catharsis vs. checklist
ı̂mbunătăt
, ire vs. platitudine
It’s more about the journey than the destination.
10 / 31
De ce să ı̂nvăt
, securitate?
provocare
11 / 31
CTF (Capture the Flag)
12 / 31
Capture the Flag (video game)
https://kotaku.com/overwatchs-new-ctf-map-is-a-big-improvement-1822886612
13 / 31
Capture the Flag (security)
https://ro.pinterest.com/pin/465489311475951778/
14 / 31
CTF
I https://ctftime.org/
I https://picoctf.org/
I https://capturetheflag.withgoogle.com/
I https://dctf.def.camp/
I https://unbreakable.ro/
15 / 31
CTF
time-bound
diversitate de scenarii
echipă
16 / 31
Sarcini ı̂n echipă
9 women cannot make a baby in one month.
Fred Brooks
17 / 31
CTF Team Work
distribut
, ie de sarcini
rotat
, ie de sarcini
utilitare colaborative
sinergie co-echipieri
planificare
pregătire anterioară
formare s
, i ment
, inere echipă
18 / 31
CTF Community
write ups
mentorat
organizat competit
, ii
19 / 31
De ce să ı̂nvăt
, securitate?
provocare
echipă, comunitate
20 / 31
Ce trebuie pentru securitate?
I ret
, elistică
I sisteme de operare
I software engineering
I hardware
I compilatoare
I matematică
I utilitare de dezvoltare, colaborare
I linie de comandă
21 / 31
Ce (mai) trebuie pentru securitate?
I răbdare
I perseverent
, ă
I răbdare
I perseverent
, ă
I răbdare
I perseverent
, ă
I să te ı̂nt
, elegi bine cu ceilalt
, i
22 / 31
Pentru securitate . . .
. . . trebuie multe, dar . . .
. . . le ı̂nvet
, i, având ca obiectiv securitatea.
23 / 31
It’s more about the journey than the destination,
but . . .
. . . you have to have a destination.
Security is the destination. The goal. OS,
networking, compilers are the journey.
24 / 31
sisteme
de
operare
rețelistică
hardware
software
engineering
logică
matematică
compilatoare
securitate
25 / 31
De ce să ı̂nvăt
, securitate?
provocare
echipă, comunitate
ı̂nvet
, i celelalte lucruri
26 / 31
Nu e greu pentru ı̂ncepători?
Dimpotrivă.
Cea mai des ı̂ntâlnită ı̂ntrebare la ı̂ncepători: Ce să ı̂nvăt
, ? De
unde ı̂ncep?
Cel mai greu pentru ı̂ncepător e să aibă ı̂ntrebări. Probleme.
T
, eluri.
Computers are useless. They can only give you answers.
Pablo Picasso
(Comunitatea de) securitate(a) ı̂t
, i dă probleme. Scenarii.
Wargames. CTF.
Ce mai as
, tept
, i?
27 / 31
De ce să ı̂nvăt
, securitate?
provocare
echipă, comunitate
ı̂nvet
, i celelalte lucruri
ı̂t
, i dă cadrul de ı̂nvăt
, ăre: probleme, provocări,
scenarii
28 / 31
De unde ı̂ncep?
I picoCTF: https://picoctf.org/
I OverTheWire: https://overthewire.org/wargames/
I Security Summer School:
https://security.cs.pub.ro/summer-school/wiki/
29 / 31
Have fun and happy hacking, cracking,
breaking, smashing, learning!
30 / 31
Resurse
I slide-urile prezentării:
https://www.slideshare.net/razvandeaconescu/
I cod sursă prezentare:
https://github.com/razvand/slides
I Security Summer School:
https://security.cs.pub.ro/summer-school/wiki/
I resurse agregate de wargames / CTF:
https://zaratec.github.io/ctf-practice/
I alte resurse agregate de wargames / CTF:
https://fareedfauzi.gitbook.io/practice-ctf-list/
31 / 31

Contenu connexe

Plus de Răzvan Deaconescu

Common Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahatCommon Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahatRăzvan Deaconescu
 
De ce să știi limbaj de asamblare
De ce să știi limbaj de asamblareDe ce să știi limbaj de asamblare
De ce să știi limbaj de asamblareRăzvan Deaconescu
 
Despre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruieștiDespre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruieștiRăzvan Deaconescu
 
Organizarea unei echipe didactice
Organizarea unei echipe didacticeOrganizarea unei echipe didactice
Organizarea unei echipe didacticeRăzvan Deaconescu
 
MOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uriMOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uriRăzvan Deaconescu
 
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucruDespre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucruRăzvan Deaconescu
 

Plus de Răzvan Deaconescu (14)

Secretul succesului
Secretul succesuluiSecretul succesului
Secretul succesului
 
De ce ne plac anti-eroii
De ce ne plac anti-eroiiDe ce ne plac anti-eroii
De ce ne plac anti-eroii
 
Common Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahatCommon Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahat
 
Lucruri care contează
Lucruri care conteazăLucruri care contează
Lucruri care contează
 
Cuvintele au putere
Cuvintele au putereCuvintele au putere
Cuvintele au putere
 
Cum sa predai de nota 10
Cum sa predai de nota 10Cum sa predai de nota 10
Cum sa predai de nota 10
 
De ce să știi limbaj de asamblare
De ce să știi limbaj de asamblareDe ce să știi limbaj de asamblare
De ce să știi limbaj de asamblare
 
Open Source for Students
Open Source for StudentsOpen Source for Students
Open Source for Students
 
Despre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruieștiDespre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruiești
 
Organizarea unei echipe didactice
Organizarea unei echipe didacticeOrganizarea unei echipe didactice
Organizarea unei echipe didactice
 
MOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uriMOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uri
 
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucruDespre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucru
 
Stagii pe Bune - Editia 1000
Stagii pe Bune - Editia 1000Stagii pe Bune - Editia 1000
Stagii pe Bune - Editia 1000
 
vmchecker @SCS
vmchecker @SCSvmchecker @SCS
vmchecker @SCS
 

Dernier

Grant Readiness 101 TechSoup and Remy Consulting
Grant Readiness 101 TechSoup and Remy ConsultingGrant Readiness 101 TechSoup and Remy Consulting
Grant Readiness 101 TechSoup and Remy ConsultingTechSoup
 
Software Engineering Methodologies (overview)
Software Engineering Methodologies (overview)Software Engineering Methodologies (overview)
Software Engineering Methodologies (overview)eniolaolutunde
 
Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...
Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...
Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...fonyou31
 
Introduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The BasicsIntroduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The BasicsTechSoup
 
BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...
BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...
BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...Sapna Thakur
 
The Most Excellent Way | 1 Corinthians 13
The Most Excellent Way | 1 Corinthians 13The Most Excellent Way | 1 Corinthians 13
The Most Excellent Way | 1 Corinthians 13Steve Thomason
 
Holdier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdfHoldier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdfagholdier
 
APM Welcome, APM North West Network Conference, Synergies Across Sectors
APM Welcome, APM North West Network Conference, Synergies Across SectorsAPM Welcome, APM North West Network Conference, Synergies Across Sectors
APM Welcome, APM North West Network Conference, Synergies Across SectorsAssociation for Project Management
 
General AI for Medical Educators April 2024
General AI for Medical Educators April 2024General AI for Medical Educators April 2024
General AI for Medical Educators April 2024Janet Corral
 
BASLIQ CURRENT LOOKBOOK LOOKBOOK(1) (1).pdf
BASLIQ CURRENT LOOKBOOK  LOOKBOOK(1) (1).pdfBASLIQ CURRENT LOOKBOOK  LOOKBOOK(1) (1).pdf
BASLIQ CURRENT LOOKBOOK LOOKBOOK(1) (1).pdfSoniaTolstoy
 
Activity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdfActivity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdfciinovamais
 
Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...
Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...
Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...EduSkills OECD
 
Sanyam Choudhary Chemistry practical.pdf
Sanyam Choudhary Chemistry practical.pdfSanyam Choudhary Chemistry practical.pdf
Sanyam Choudhary Chemistry practical.pdfsanyamsingh5019
 
Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactPECB
 
fourth grading exam for kindergarten in writing
fourth grading exam for kindergarten in writingfourth grading exam for kindergarten in writing
fourth grading exam for kindergarten in writingTeacherCyreneCayanan
 
Disha NEET Physics Guide for classes 11 and 12.pdf
Disha NEET Physics Guide for classes 11 and 12.pdfDisha NEET Physics Guide for classes 11 and 12.pdf
Disha NEET Physics Guide for classes 11 and 12.pdfchloefrazer622
 
SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptx
SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptxSOCIAL AND HISTORICAL CONTEXT - LFTVD.pptx
SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptxiammrhaywood
 
1029-Danh muc Sach Giao Khoa khoi 6.pdf
1029-Danh muc Sach Giao Khoa khoi  6.pdf1029-Danh muc Sach Giao Khoa khoi  6.pdf
1029-Danh muc Sach Giao Khoa khoi 6.pdfQucHHunhnh
 

Dernier (20)

Grant Readiness 101 TechSoup and Remy Consulting
Grant Readiness 101 TechSoup and Remy ConsultingGrant Readiness 101 TechSoup and Remy Consulting
Grant Readiness 101 TechSoup and Remy Consulting
 
Código Creativo y Arte de Software | Unidad 1
Código Creativo y Arte de Software | Unidad 1Código Creativo y Arte de Software | Unidad 1
Código Creativo y Arte de Software | Unidad 1
 
Software Engineering Methodologies (overview)
Software Engineering Methodologies (overview)Software Engineering Methodologies (overview)
Software Engineering Methodologies (overview)
 
Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...
Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...
Ecosystem Interactions Class Discussion Presentation in Blue Green Lined Styl...
 
Introduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The BasicsIntroduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The Basics
 
BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...
BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...
BAG TECHNIQUE Bag technique-a tool making use of public health bag through wh...
 
The Most Excellent Way | 1 Corinthians 13
The Most Excellent Way | 1 Corinthians 13The Most Excellent Way | 1 Corinthians 13
The Most Excellent Way | 1 Corinthians 13
 
Holdier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdfHoldier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdf
 
APM Welcome, APM North West Network Conference, Synergies Across Sectors
APM Welcome, APM North West Network Conference, Synergies Across SectorsAPM Welcome, APM North West Network Conference, Synergies Across Sectors
APM Welcome, APM North West Network Conference, Synergies Across Sectors
 
General AI for Medical Educators April 2024
General AI for Medical Educators April 2024General AI for Medical Educators April 2024
General AI for Medical Educators April 2024
 
Mattingly "AI & Prompt Design: Structured Data, Assistants, & RAG"
Mattingly "AI & Prompt Design: Structured Data, Assistants, & RAG"Mattingly "AI & Prompt Design: Structured Data, Assistants, & RAG"
Mattingly "AI & Prompt Design: Structured Data, Assistants, & RAG"
 
BASLIQ CURRENT LOOKBOOK LOOKBOOK(1) (1).pdf
BASLIQ CURRENT LOOKBOOK  LOOKBOOK(1) (1).pdfBASLIQ CURRENT LOOKBOOK  LOOKBOOK(1) (1).pdf
BASLIQ CURRENT LOOKBOOK LOOKBOOK(1) (1).pdf
 
Activity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdfActivity 01 - Artificial Culture (1).pdf
Activity 01 - Artificial Culture (1).pdf
 
Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...
Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...
Presentation by Andreas Schleicher Tackling the School Absenteeism Crisis 30 ...
 
Sanyam Choudhary Chemistry practical.pdf
Sanyam Choudhary Chemistry practical.pdfSanyam Choudhary Chemistry practical.pdf
Sanyam Choudhary Chemistry practical.pdf
 
Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global Impact
 
fourth grading exam for kindergarten in writing
fourth grading exam for kindergarten in writingfourth grading exam for kindergarten in writing
fourth grading exam for kindergarten in writing
 
Disha NEET Physics Guide for classes 11 and 12.pdf
Disha NEET Physics Guide for classes 11 and 12.pdfDisha NEET Physics Guide for classes 11 and 12.pdf
Disha NEET Physics Guide for classes 11 and 12.pdf
 
SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptx
SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptxSOCIAL AND HISTORICAL CONTEXT - LFTVD.pptx
SOCIAL AND HISTORICAL CONTEXT - LFTVD.pptx
 
1029-Danh muc Sach Giao Khoa khoi 6.pdf
1029-Danh muc Sach Giao Khoa khoi  6.pdf1029-Danh muc Sach Giao Khoa khoi  6.pdf
1029-Danh muc Sach Giao Khoa khoi 6.pdf
 

De ce să învăț securitate?