SlideShare a Scribd company logo
1 of 31
Download to read offline
De ce să ı̂nvăt
, securitate?
Răzvan Deaconescu
razvan.deaconescu@upb.ro
Talks by Softbinator (#149)
13 mai 2021
1 / 31
wargame
2 / 31
WarGames (film, 1983)
https://moviejunkyard.wordpress.com/2013/05/22/wargames1983/
3 / 31
Cyber Wargame
https://techbeacon.com/security/how-train-your-next-security-crisis-let-wargames-begin
4 / 31
Wargames
I https://overthewire.org/wargames/
I https://io.netgarage.org/
I https://www.wechall.net/
I https://w3challs.com/
I http://pwnable.kr/
5 / 31
Wargames
securitate
scenariu / setup
challenge
fun
6 / 31
Challenge / Provocare
ne-trivial
ceva nou
exciting
catharsis
improvement
7 / 31
Scrisul de cod - challenge?
trivial?
same old?
boring?
next?
8 / 31
Nu e vorba de scrisul de cod
First, solve the problem. Then, write the code.
John Johnson
9 / 31
Securitate / Wargames vs. Dezvoltare / scris cod vs. Bug
hunting
trivial vs. provocator
comun vs. nou
tern vs. exciting
thrill of the hunt + catharsis vs. checklist
ı̂mbunătăt
, ire vs. platitudine
It’s more about the journey than the destination.
10 / 31
De ce să ı̂nvăt
, securitate?
provocare
11 / 31
CTF (Capture the Flag)
12 / 31
Capture the Flag (video game)
https://kotaku.com/overwatchs-new-ctf-map-is-a-big-improvement-1822886612
13 / 31
Capture the Flag (security)
https://ro.pinterest.com/pin/465489311475951778/
14 / 31
CTF
I https://ctftime.org/
I https://picoctf.org/
I https://capturetheflag.withgoogle.com/
I https://dctf.def.camp/
I https://unbreakable.ro/
15 / 31
CTF
time-bound
diversitate de scenarii
echipă
16 / 31
Sarcini ı̂n echipă
9 women cannot make a baby in one month.
Fred Brooks
17 / 31
CTF Team Work
distribut
, ie de sarcini
rotat
, ie de sarcini
utilitare colaborative
sinergie co-echipieri
planificare
pregătire anterioară
formare s
, i ment
, inere echipă
18 / 31
CTF Community
write ups
mentorat
organizat competit
, ii
19 / 31
De ce să ı̂nvăt
, securitate?
provocare
echipă, comunitate
20 / 31
Ce trebuie pentru securitate?
I ret
, elistică
I sisteme de operare
I software engineering
I hardware
I compilatoare
I matematică
I utilitare de dezvoltare, colaborare
I linie de comandă
21 / 31
Ce (mai) trebuie pentru securitate?
I răbdare
I perseverent
, ă
I răbdare
I perseverent
, ă
I răbdare
I perseverent
, ă
I să te ı̂nt
, elegi bine cu ceilalt
, i
22 / 31
Pentru securitate . . .
. . . trebuie multe, dar . . .
. . . le ı̂nvet
, i, având ca obiectiv securitatea.
23 / 31
It’s more about the journey than the destination,
but . . .
. . . you have to have a destination.
Security is the destination. The goal. OS,
networking, compilers are the journey.
24 / 31
sisteme
de
operare
rețelistică
hardware
software
engineering
logică
matematică
compilatoare
securitate
25 / 31
De ce să ı̂nvăt
, securitate?
provocare
echipă, comunitate
ı̂nvet
, i celelalte lucruri
26 / 31
Nu e greu pentru ı̂ncepători?
Dimpotrivă.
Cea mai des ı̂ntâlnită ı̂ntrebare la ı̂ncepători: Ce să ı̂nvăt
, ? De
unde ı̂ncep?
Cel mai greu pentru ı̂ncepător e să aibă ı̂ntrebări. Probleme.
T
, eluri.
Computers are useless. They can only give you answers.
Pablo Picasso
(Comunitatea de) securitate(a) ı̂t
, i dă probleme. Scenarii.
Wargames. CTF.
Ce mai as
, tept
, i?
27 / 31
De ce să ı̂nvăt
, securitate?
provocare
echipă, comunitate
ı̂nvet
, i celelalte lucruri
ı̂t
, i dă cadrul de ı̂nvăt
, ăre: probleme, provocări,
scenarii
28 / 31
De unde ı̂ncep?
I picoCTF: https://picoctf.org/
I OverTheWire: https://overthewire.org/wargames/
I Security Summer School:
https://security.cs.pub.ro/summer-school/wiki/
29 / 31
Have fun and happy hacking, cracking,
breaking, smashing, learning!
30 / 31
Resurse
I slide-urile prezentării:
https://www.slideshare.net/razvandeaconescu/
I cod sursă prezentare:
https://github.com/razvand/slides
I Security Summer School:
https://security.cs.pub.ro/summer-school/wiki/
I resurse agregate de wargames / CTF:
https://zaratec.github.io/ctf-practice/
I alte resurse agregate de wargames / CTF:
https://fareedfauzi.gitbook.io/practice-ctf-list/
31 / 31

More Related Content

More from Răzvan Deaconescu

Common Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahatCommon Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahatRăzvan Deaconescu
 
De ce să știi limbaj de asamblare
De ce să știi limbaj de asamblareDe ce să știi limbaj de asamblare
De ce să știi limbaj de asamblareRăzvan Deaconescu
 
Despre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruieștiDespre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruieștiRăzvan Deaconescu
 
Organizarea unei echipe didactice
Organizarea unei echipe didacticeOrganizarea unei echipe didactice
Organizarea unei echipe didacticeRăzvan Deaconescu
 
MOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uriMOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uriRăzvan Deaconescu
 
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucruDespre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucruRăzvan Deaconescu
 

More from Răzvan Deaconescu (14)

Secretul succesului
Secretul succesuluiSecretul succesului
Secretul succesului
 
De ce ne plac anti-eroii
De ce ne plac anti-eroiiDe ce ne plac anti-eroii
De ce ne plac anti-eroii
 
Common Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahatCommon Bullshit: Când oamenii mănâncă ... rahat
Common Bullshit: Când oamenii mănâncă ... rahat
 
Lucruri care contează
Lucruri care conteazăLucruri care contează
Lucruri care contează
 
Cuvintele au putere
Cuvintele au putereCuvintele au putere
Cuvintele au putere
 
Cum sa predai de nota 10
Cum sa predai de nota 10Cum sa predai de nota 10
Cum sa predai de nota 10
 
De ce să știi limbaj de asamblare
De ce să știi limbaj de asamblareDe ce să știi limbaj de asamblare
De ce să știi limbaj de asamblare
 
Open Source for Students
Open Source for StudentsOpen Source for Students
Open Source for Students
 
Despre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruieștiDespre dezvăț: Uneori strici ca să contruiești
Despre dezvăț: Uneori strici ca să contruiești
 
Organizarea unei echipe didactice
Organizarea unei echipe didacticeOrganizarea unei echipe didactice
Organizarea unei echipe didactice
 
MOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uriMOOC-uri, comunitati, mentori, universitati si hub-uri
MOOC-uri, comunitati, mentori, universitati si hub-uri
 
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucruDespre eficiență: Cum și cu ce tool faci cât mai bine un lucru
Despre eficiență: Cum și cu ce tool faci cât mai bine un lucru
 
Stagii pe Bune - Editia 1000
Stagii pe Bune - Editia 1000Stagii pe Bune - Editia 1000
Stagii pe Bune - Editia 1000
 
vmchecker @SCS
vmchecker @SCSvmchecker @SCS
vmchecker @SCS
 

Recently uploaded

General Principles of Intellectual Property: Concepts of Intellectual Proper...
General Principles of Intellectual Property: Concepts of Intellectual  Proper...General Principles of Intellectual Property: Concepts of Intellectual  Proper...
General Principles of Intellectual Property: Concepts of Intellectual Proper...Poonam Aher Patil
 
Application orientated numerical on hev.ppt
Application orientated numerical on hev.pptApplication orientated numerical on hev.ppt
Application orientated numerical on hev.pptRamjanShidvankar
 
microwave assisted reaction. General introduction
microwave assisted reaction. General introductionmicrowave assisted reaction. General introduction
microwave assisted reaction. General introductionMaksud Ahmed
 
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptxMaritesTamaniVerdade
 
Sociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning ExhibitSociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning Exhibitjbellavia9
 
Unit-IV- Pharma. Marketing Channels.pptx
Unit-IV- Pharma. Marketing Channels.pptxUnit-IV- Pharma. Marketing Channels.pptx
Unit-IV- Pharma. Marketing Channels.pptxVishalSingh1417
 
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...ZurliaSoop
 
Key note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdfKey note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdfAdmir Softic
 
Spellings Wk 3 English CAPS CARES Please Practise
Spellings Wk 3 English CAPS CARES Please PractiseSpellings Wk 3 English CAPS CARES Please Practise
Spellings Wk 3 English CAPS CARES Please PractiseAnaAcapella
 
Holdier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdfHoldier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdfagholdier
 
Introduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The BasicsIntroduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The BasicsTechSoup
 
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdfUGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdfNirmal Dwivedi
 
How to Create and Manage Wizard in Odoo 17
How to Create and Manage Wizard in Odoo 17How to Create and Manage Wizard in Odoo 17
How to Create and Manage Wizard in Odoo 17Celine George
 
PROCESS RECORDING FORMAT.docx
PROCESS      RECORDING        FORMAT.docxPROCESS      RECORDING        FORMAT.docx
PROCESS RECORDING FORMAT.docxPoojaSen20
 
Food safety_Challenges food safety laboratories_.pdf
Food safety_Challenges food safety laboratories_.pdfFood safety_Challenges food safety laboratories_.pdf
Food safety_Challenges food safety laboratories_.pdfSherif Taha
 
How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17Celine George
 
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptxSKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptxAmanpreet Kaur
 
ICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptxICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptxAreebaZafar22
 
Mixin Classes in Odoo 17 How to Extend Models Using Mixin Classes
Mixin Classes in Odoo 17  How to Extend Models Using Mixin ClassesMixin Classes in Odoo 17  How to Extend Models Using Mixin Classes
Mixin Classes in Odoo 17 How to Extend Models Using Mixin ClassesCeline George
 

Recently uploaded (20)

General Principles of Intellectual Property: Concepts of Intellectual Proper...
General Principles of Intellectual Property: Concepts of Intellectual  Proper...General Principles of Intellectual Property: Concepts of Intellectual  Proper...
General Principles of Intellectual Property: Concepts of Intellectual Proper...
 
Application orientated numerical on hev.ppt
Application orientated numerical on hev.pptApplication orientated numerical on hev.ppt
Application orientated numerical on hev.ppt
 
microwave assisted reaction. General introduction
microwave assisted reaction. General introductionmicrowave assisted reaction. General introduction
microwave assisted reaction. General introduction
 
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
 
Sociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning ExhibitSociology 101 Demonstration of Learning Exhibit
Sociology 101 Demonstration of Learning Exhibit
 
Unit-IV- Pharma. Marketing Channels.pptx
Unit-IV- Pharma. Marketing Channels.pptxUnit-IV- Pharma. Marketing Channels.pptx
Unit-IV- Pharma. Marketing Channels.pptx
 
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
 
Key note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdfKey note speaker Neum_Admir Softic_ENG.pdf
Key note speaker Neum_Admir Softic_ENG.pdf
 
Spellings Wk 3 English CAPS CARES Please Practise
Spellings Wk 3 English CAPS CARES Please PractiseSpellings Wk 3 English CAPS CARES Please Practise
Spellings Wk 3 English CAPS CARES Please Practise
 
Holdier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdfHoldier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdf
 
Introduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The BasicsIntroduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The Basics
 
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdfUGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
 
How to Create and Manage Wizard in Odoo 17
How to Create and Manage Wizard in Odoo 17How to Create and Manage Wizard in Odoo 17
How to Create and Manage Wizard in Odoo 17
 
Asian American Pacific Islander Month DDSD 2024.pptx
Asian American Pacific Islander Month DDSD 2024.pptxAsian American Pacific Islander Month DDSD 2024.pptx
Asian American Pacific Islander Month DDSD 2024.pptx
 
PROCESS RECORDING FORMAT.docx
PROCESS      RECORDING        FORMAT.docxPROCESS      RECORDING        FORMAT.docx
PROCESS RECORDING FORMAT.docx
 
Food safety_Challenges food safety laboratories_.pdf
Food safety_Challenges food safety laboratories_.pdfFood safety_Challenges food safety laboratories_.pdf
Food safety_Challenges food safety laboratories_.pdf
 
How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17
 
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptxSKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
 
ICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptxICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptx
 
Mixin Classes in Odoo 17 How to Extend Models Using Mixin Classes
Mixin Classes in Odoo 17  How to Extend Models Using Mixin ClassesMixin Classes in Odoo 17  How to Extend Models Using Mixin Classes
Mixin Classes in Odoo 17 How to Extend Models Using Mixin Classes
 

De ce să învăț securitate?