The hacking defense competition is a contest where participants test their ability to solve computer and information security problems in a legitimate environment. There are various types depending on the operation method and purpose, with the most well-known format being CTF (Capture The Flag), where participants solve given problems to obtain the correct answer string referred to as a 'flag'. The hacking defense competition is divided into various types depending on the operational purpose and the characteristics of the participants (adults, youth, professionals, etc.). Here are some representative types:

Types of Hacking Defense Competition Problems

• Jeopardy Style

  : Participants choose and solve the problems they want and submit the correct token (Flag). Through problems in individual technical units such as web hacking, reverse engineering, forensics, and cryptography, participants can learn a wide range of knowledge and verify their skills.

  
  

• Attack & Defense Style

  : Teams operate their own servers or services while simultaneously attacking opponents' systems. This requires comprehensive real-time response, strategic thinking, and collaboration as teams must simultaneously reinforce their vulnerabilities (patch) and target the vulnerabilities of the opposing system. This form is frequently adopted in parts of internationally renowned competitions (e.g., DEF CON CTF).

  
  

• Scenario-Based Style

  : This format involves resolving staged challenges based on a fictional incident situation or worldview. For instance, participants can experience a process similar to real-life situations involving penetration → privilege escalation → data theft → incident analysis. This offers significant training benefits as it allows participants to experience the entire process of responding to security incidents beyond solving unit technology problems.

The issues (contents) of the hacking defense competition are designed to enable participants to learn and verify a wide array of technologies that form the foundation of hacking and information security. In addition to essential technical areas such as web hacking, system hacking, reverse engineering, cryptography, malware analysis, and forensics, recent competitions have incorporated the latest technologies and security issues, including specific industrial sectors like industrial control systems (OT/ICS), transportation, maritime, aerospace, and AI security.

Why CTF Competitions Are Often Participated in Teams

When participants compete as a team, a strategy of dividing roles to utilize each person's expertise is frequently employed. For example, one person may handle reverse engineering, while another is responsible for web hacking to quickly solve problems, or multiple people may collaborate to brainstorm ideas and solve high-difficulty problems. This is significant as it allows participants to experience the teamwork and problem-solving processes necessary for real security organizations to respond to threats, beyond simply assessing an individual's skill level.