This fascinating and entertaining challenge on the subject of computer security looks set to attract many spectators again this year.
There will be a number of brain-teasers on the subject of system security, protected by various obstacles, at http://hacking.linuxtag.org/ to mark the tenth anniversary of the LinuxTag website . For those who can successfully accomplish all six tasks the prize will be an unlimited admission ticket to LinuxTag. In addition they will win the “Mojo", which will improve their chances of participating in the actual Hacking Contest, where they can demonstrate their abilities in front of a large audience on 13 May at LinuxTag in Berlin. "We and our partners are thereby providing more scope for web security skills in this contest. This is actually a way of enhancing their security capabilities", is how Nils Magnus, Event Coordinator for LinuxTag e. V., explains the expansion of the contest on the web. “The advantage of Hack-us! Is that absolutely anyone can take part. The more people who address this subject the better.”
Experience computer security in person
The whole process will culminate on 13 May with the LinuxTag Hacking Contest, and this will be a highly instructional event too. The Hacking Contest will feature four teams of three, competing with one another in order to demonstrate their abilities in the fields of systems and network security. The teams will be unable to see what the others are entering on the keypad, but the audience will be able to follow everything on the large projection screen. Firstly, taking advantage of any available gaps in security and any tricks they may know, they have to prepare a newly set up system to make it as difficult as possible for other experts.
Then the teams will swap computers, attempt to identify the traps and loopholes set by the others, and tighten up the system that they have been presented with, in other words, to make it more secure. In the third stage, using the local network, they will attempt to penetrate their original, compromised system, which has been similarly “improved” by their opponents. Following Stage 2 points will be awarded for any security gaps that can be closed, and additional points can be won after Stage 3 for any gaps that still remain.
Every member of the winning team will receive a PlugPC together with a developer’s kit (see below for the specifications). For each of the runners-up there will be an HDTV Media Player from Western Digital. The third-placed team members will each be given a 5000mAh universal battery charger. A Hacking Contest T-shirt will also be awarded to each participant. “Our contest is primarily intended to be fun", emphasizes Kester Habermann, Technical Coordinator for LinuxTag e.V. and the contest presenter. “However, those who take part will provide practical demonstrations of their suitability as systems administrators. It is only by attempting to incorporate weak points that one will be able to find them quickly later on."
Certificate improves career opportunities
As attractive as the contest T-shirt is, it still does not provide serious evidence of one’s achievements. However, changes are afoot this year: Astaro, the company that sponsors the Hacking Contest and has been organizing it in partnership with LinuxTag e.V. for many years, will be joining with LinuxTag e.V. in order to issue a personal certificate for the first time to the participants in the Hacking Contest. This will provide details about their rankings, and details about the contest too.
“In the course of the Hacking Contest participants are able to demonstrate their capabilities in front of an audience, and to show that they can also perform under time pressure. Preparing for hacking requires far-reaching technical understanding and moreover, an analytical and well-structured approach is needed in order to expose one’s opponent’s attacks”, according to Markus Hennig, CTO of Astaro and a presenter of the contest: “These are all talents which every manufacturer is keen to attract for his own development department but which cannot be acquired through training." The certificate is also ideal for inclusion in one’s documents when applying for a position, as Markus Hennig points out: “Those who have demonstrated their capabilities at LinuxTag immediately gain two extra points in their job interview."
More information about the Hacking Contest can be found on the new website at http://hacking.linuxtag.org
Prizes:
1st place – Each team member will receive a PlugPC with 1.2 GHz Marvell Kirkwood processor, 2 x GBit Ethernet, 2 x USB 2.0, eSATA, internal SD card reader, WLAN 802.11 b/g, Bluetooth 2.1; DevKit without JTAG module
2nd place - Western Digital TV HD media player (1080p)
3rd place – universal battery, ZNEX Power Pack 5000mAh
About the sponsor Astaro
With 56,000 installations around the world Astaro is protecting the networks of companies, universities and government departments against IT security risks. Based in Karlsruhe, Astaro is the European market leader in the rapidly expanding market for unified threat management. Products in the areas of network security, web security, email security, web application security, wireless security and email archiving are available via a worldwide network of certificated partners. More information is available at http://www.astaro.com/.
About LinuxTag
LinuxTag is Europe’s leading specialist trade fair and conference for all aspects of open source Linux and free software. This four-day event has been taking place since 1996, and since 2007 it has been held annually on the Berlin Exhibition Grounds. It offers the very latest information for professional users, decision-makers, developers, newcomers and the community. In addition to the program of papers and a separate congress for business and public sector authorities, LinuxTag traditionally includes an exhibition featuring projects and companies associated with the open source sector. Verein LinuxTag e.V. is the non-commercial organizer of the event, which it stages jointly with Messe Berlin GmbH. More information is available at http://www.linuxtag.org/.