Embracing the Challenge: Our Passion for Capture the Flag (CTF) Competitions
Published:
At NTT Security cybersecurity isn’t just a job—it’s a passion. This enthusiasm is vividly displayed in our participation in Capture the Flag (CTF) competitions. These events are not only a test of skill but also a fantastic opportunity for team building and professional growth. Our team, made of specialists from NTT Security Sweden, NTT Japan SOC, and NTT Data Germany, eagerly take part in these competitions, driven by a shared love for cybersecurity and the thrill of solving complex challenges together.
Diverse Competitions, Diverse Skills
CTF competitions come in various forms, each designed to test different aspects of cybersecurity expertise. Some of the most popular categories include:
- Web Security: Participants are tasked with hacking into a deliberately vulnerable website to find a hidden code, known as the “flag.”
- Reverse Engineering: This involves analyzing binary sequences or executable files to understand their workings and bypass security mechanisms. The goal is to reverse engineer the software to uncover the correct password and capture the flag.
- OSINT: Participants use publicly available information to gather intelligence and find the flag
Our team members are not assigned to specific categories; instead, they choose based on their interests. For example, some have a knack for reverse engineering, while others excel in forensics. This flexibility allows everyone to explore different areas and contribute their unique skills.
The Joy of Teamwork
One of the main drivers for our participation in CTF competitions is the opportunity to work together in a less formal setting. It’s a chance to hang out, order some food, and dive into cybersecurity challenges as a team. This camaraderie is a crucial part of our team-building efforts, fostering a sense of unity and shared purpose.
Learning Through Fun
While there’s no strict way to prepare for CTF competitions, our daily work in the Security Operations Center provides a solid foundation. These events offer a chance to learn new skills and gain insights into the latest threat intelligence. The hands-on experience is invaluable, allowing us to discover new tricks and techniques that enhance our professional capabilities.
Some of our cyber security analysts credit their CTF experience with helping them secure a job at NTT Security. The practical skills that they gained from these competitions complemented the academic knowledge learnt in higher education, giving them an edge in the rigorous interview process.
Real-World Challenges
Many CTF competitions are organized by renowned security companies and feature well-thought-out challenges that mimic real-world scenarios. Participants often tasked with hacking into systems, acting as the threat, providing a taste of what cyber threats are like in the real world. This realism adds an extra layer of motivation, as we get to experience firsthand the challenges we might face in our professional roles.
Competing on a Global Stage
One of the highlights of our CTF journey was participating in the Hack Box Business CTF, an exclusive event for companies. Competing against some of the biggest names in cybersecurity, our team finished in the top 20 globally. This achievement not only filled us with pride but also fuelled our determination to excel in future competitions. It’s important to note that our success is a result of collaboration across various NTT teams, including NTT Sec SE, NTT Japan SOC, and NTT Data Germany.
Recent results:
11th/268 teams at Undutmaning 2024
65th/5,694 teams at Cyber Apocalypse CTF 2024
5th/1,100 teams at Boss Of The SOC (BOTS) 2023
17th/657 teams at Hack the Box Business CTF Dirty Money 2022
A Collaborative Spirit
During competitions, teamwork is paramount. We often work together on tasks, moving around the room to assist each other as needed. This collaborative spirit ensures that we leverage our collective strengths, making us more effective in tackling challenges.
In conclusion, CTF competitions are more than just a test of skill—they’re a celebration of our passion for cybersecurity. They provide a platform for learning, collaboration, and professional growth, all while having fun. As we continue to participate in these events, we look forward to the new challenges and opportunities they bring, helping us stay one step ahead in the ever-evolving world of cybersecurity.