사이버 보안 대회에서 깃발 뺏기 이해하기

### 사이버 보안에서 깃발 뺏기(CTF) 이해하기: 에피소드 1 개요
* 🎮 깃발 뺏기(CTF)는 **90년대 초부터 시작된 사이버 보안 분야의 경쟁 이벤트**로, 기술이 발전함에 따라 인기를 얻고 있습니다.
* 🛡 이 시리즈는 **총 4편**으로 구성되어 있으며, **CTF의 기초**부터 시작하여 참가에 필요한 기술, 이러한 기술을 배울 수 있는 곳, 마지막으로 **CTF 대회에 참가할 수 있는 곳**까지 소개합니다.
* 💡 에피소드 1에서는 **CTF의 정의**에 초점을 맞추고, 에피소드 2에서는 이러한 이벤트에서 효과적으로 경쟁하는 데 필요한 기술을 간략하게 설명합니다.
* 🔍 CTF 대회는 크게 공격자(레드팀)와 수비자(블루팀)의 역할을 맡는 **공격-방어형 CTF**와 인기 게임쇼 형식과 유사한 **데자뷰형 CTF**의 두 가지 유형으로 분류할 수 있습니다.
* 🧠 공격-방어 CTF에서 참가자들은 **공격자와 방어자 모두처럼 생각하는 법**을 배워 사이버 보안 전략에 대한 귀중한 인사이트를 얻습니다.
* 🌐 제퍼디 스타일의 CTF는 **여러 팀이 프로그래밍, 암호학 등 다양한 주제에 대한 질문에 답**하며 경쟁할 수 있어 더 많은 사람들이 참여할 수 있습니다.
* 📅 기술을 연마하는 데 관심이 있는 분들을 위해 **CTF와 사이버 보안의 세계를 더 깊이 파헤칠 다음 에피소드**에 대한 알림을 구독할 것을 권장합니다.
* 🔗 진행자인 그랜 콜린스는 CTF 참여를 통해 사이버 보안 기술을 개발하는 데 있어 **이론적 지식과 실무 경험 모두의 중요성**을 강조합니다.

깃발 뺏기 대회는 실질적인 도전과 팀워크를 통해 사이버 보안 기술을 향상시킵니다.

capsule flag, also known and abbreviated as CTF, is a competition between either professionals or students looking to enhance their skills in cybersecurity. These serve as a style of competition which probes learning experience, hands-on experience, training with different tools, and sharpening of skills. When first starting out with the whole idea behind capture flag, it can seem like a daunting learning experience, maybe too complex for someone like you who's starting out, or maybe an intermediate like me. You've maybe been told to participate in these events to sharpen your skills, or display your skills to specific employers, or to have this as a portfolio builder. Whatever the reason may be, today in this four-episode series, we will be addressing the whole idea behind capture the flag in cybersecurity. More students [Music] hello everyone, my name's Gran Collins. I am an aspiring cybersecurity professional, an undergraduate student completing an undergraduate cybersecurity program, and I like to call myself a little bit, maybe just a little bit, of an IT nerd. Today, we'll be addressing capture the flag through a

series of four. Before we even get started with episode 1, I will be addressing the outlining of all four episodes, starting with number 1, which is this episode, talking about what is Capture the Flag. That's the main question. Number 2, the question being asked is what kind of skills are required for competing in Capture the Flag. Episode 3, the question is where do I learn these particular skills if I'm somebody who doesn't have a particular skill set and one of the skills that I have mentioned in episode 2. And number 4 is where do you participate once you have these skills down and you continue to learn. Where do you participate with CTF competitions, both online and offline? Sure, hit subscribe and make sure to hit that notification bell for this 4-episode series. If you're watching this right now as of the time of uploading, if all four episodes have already been released, I ask you to also hit the subscribe button and the notification bell just because more episodes in series like these will be coming in the

future of course, so you don't never want to miss a series or an episode. Now that we have a summary, let's go ahead and dive in episode 1 with the question being, What is capture the flag? Capture the flag, I'm gonna call it CTF for the rest of these series, just because to abbreviate, to get those acronyms held down. Okay, let's keep going though. So, capture the flag events have been around a lot longer than I have been born, which really says something about capture the flag itself and really about my credibility as a person and as a professional or as a cybersecurity aspiring professional. You have to remember that I'm an aspiring cybersecurity professional. In all seriousness, capture a flag has been around since the early 90s, being these kinds of you and aren't particularly new. In fact, the early 90s was when this thing started, and they've only gained more popularity as time and technologies has continued to exponentially grow. CTF is it an event. You know what, I take that back. I will be

playing capture the flag. I will do. I will change simultaneously. I'm sorry. I didn't make it my mind. Okay, sorry. In all seriousness, CTF is, whether you want to call it an event or game, is usually hosted by either conferences or local conferences like b-sides, Petri flag events. I'm gonna call them competitions. Very difficulty or no, as depends on the professional and the level of advancement where the student or the professional is at. There are two types of CTF. One is called the attack-defence CTF. The other is a jeopardy style game CTF. As I researched this topic and gotten to know what the industry looks like, I would say that the attack-defence CTF are usually a little bit more popular than a jeopardy style of CTS. Well, we're gonna go ahead and break down both of them, starting with the attack-defence CTF. So, as the name suggests from attack-defence CTF, there's attackers and defenders in this type of game. The attackers are known as the red team and the defenders.

are known as the blue team. The flag that they talk about in most cases is either a hidden text file, an image file, or some sort of folder hidden and embedded into our system. CTFs that are hosted in events and event settings, conferences, security conferences, you usually have the option to either be fully red team, fully blue team, or participate in both. That's kind of a nice thing about in-person conferences that they have. It's great to get experience with both the red team and the blue team when you are participating in attack-defense CTF. When you do participate in either side, you're learning either about how the attacker thinks or how the defender thinks. And I think that adding both processes as one, like understanding where attackers and defenders think, is really important. So it's something that I really emphasize if you are gonna do these attack-defense CTF, do both sides eventually. More information on the red team and on the blue team, I recommend that you go over to Colin Kelly's channel, link in the

description below. He is broken down with a red team and the blue team. Do what tools they use, what skills they have. I highly recommend you to subscribe to his channel as he is a cybersecurity student as well. Links in the description below. Do you see how I did there? Boom, then okay. There's a cringefest at the cringefest. In addition to the Red Team Blue Team CTF, there's also what is called the Red Team CTF. And it's basically where the host of a conference sets up a CTF and everyone is the attacker. There's no defenders. These types of challenges I've broken up as I've researched are broken up either into programming, cryptography, exploitation, or reverse engineering. And in fact, I would say reverse engineering applies to even all three of the above again. The skills again we will outline those in episode 2. The skills and the challenges presented, right? So we've learned what an attack defense CTF or a Blue Team Red Team CTF is, but what about

the Jeopardy style game. Jeopardy style CTFs are similarly very similar to the real Jeopardy TV show. Basically, you can have an unlimited amount of people. You don't just have two teams; you can have more than two teams come together, and they just answer points pertaining to particular answers and questions, of course. It's just like the Jeopardy game. These topics range from exploitation, steganography. I did not say that right. Okay, I'm gonna move on. Cryptography, programming questions, things of that nature of vulnerabilities. It's going to be covered in an array of topics. And again, these job style games are not limited to two teams. Attack defense and jeopardy style CTFs are not just mutually exclusive, meaning you can have both within the same. You can have a jeopardy style game where one question requires you to be the red team and participate and go find a file in a system. So they're not mutually exclusive. You can force your do both. Alright, so we learn what a CTF is, capture the flag. We've learned what the

red team, the blue team, or else you want to call it TAC defense. You've learned what jeopardy-style CTFs are. In the next episode, episode 2, we will talk about the skills required to participate in a CTF and be actually competitive and successful. So stay tuned to episode 2.

What is Capture the Flag in Cybersecurity? | Capture the Flag Series

Grant Collins

사이버 보안에서 깃발 탈취(CTF) 이해하기

깃발 뺏기(CTF)는 전문가와 학생을 대상으로 사이버 보안 기술을 향상시키기 위한 대회입니다.

이 이벤트는 다양한 도구를 사용한 실습과 교육, 기술 연마 기회를 제공합니다.

이 시리즈에서는 사이버 보안에서 CTF의 개념과 기술 개발 및 포트폴리오 구축에 대한 이점을 살펴봅니다.

깃발 뺏기(CTF) 이벤트 이해하기

깃발 뺏기(CTF) 이벤트는 90년대 초부터 시작되었으며 기술의 발전과 함께 인기를 얻고 있습니다.

연사는 사이버 보안 전문가 지망생이라고 밝히며 이 분야에서 CTF의 신뢰성을 강조합니다.

CTF는 사이버 보안 문제와 기술 개발에 초점을 맞춘 경쟁 이벤트로 설계되었습니다.

깃발 뺏기(CTF) 대회에 대한 이해

CTF 대회는 컨퍼런스에서 주최하며 참가자의 실력 수준에 따라 난이도가 달라집니다.

CTF에는 공격-방어와 위험 요소 스타일의 두 가지 주요 유형이 있습니다.

공격-방어형 CTF는 공격팀과 방어팀으로 나뉘며, 제퍼디 스타일 CTF는 여러 팀이 익스플로잇, 암호화 등 다양한 주제를 다루는 질문에 답하여 점수를 획득하는 방식입니다.

사이버 보안의 레드팀과 블루팀에 대한 이해

레드팀 CTF는 프로그래밍, 암호화, 익스플로잇, 리버스 엔지니어링 등 공격자에 초점을 맞추고 있습니다.

블루팀의 역할은 공격을 방어하는 것으로, 주로 숨겨진 파일이나 폴더를 공격의 표적으로 삼습니다.

대면 회의는 두 팀에 모두 참여할 수 있는 기회를 제공하여 공격자와 방어자의 관점을 모두 이해하는 귀중한 경험을 제공합니다.

이 시리즈는 깃발 뺏기(CTF) 대회에 초점을 맞춘 네 개의 에피소드로 구성되어 있습니다.

에피소드 1에서는 CTF의 기본 사항을 다루고, 에피소드 2에서는 성공적인 대회 참가에 필요한 기술에 대해 설명합니다.

이후 에피소드에서는 이러한 기술을 배울 수 있는 곳과 온라인과 오프라인에서 CTF 대회에 참가하는 방법을 다룹니다.