Mengenal CyberX CTF: Ajang Latihan Siber Terbaru untuk Persiapan Ancaman Nyata

Understanding CyberX CTF: The Latest Cyber Training Platform for Real Threat Preparation

Friday, 15 November 2024

In today’s digital era, cyber threats continue to evolve with increasingly complex attack patterns. To meet these challenges, snc.id introduces CyberX—an innovative cybersecurity training platform. One of CyberX's flagship features is the Capture the Flag (CTF) competition, an interactive training arena that combines practical learning with real-world attack simulations. Through CyberX CTF, participants have the opportunity to hone their skills in facing cyber threats directly within a safe and controlled environment.

The Origins of CyberX CTF from Collaboration with BSSN

CyberX was first introduced through snc.id’s collaboration with the National Cyber and Encryption Agency (BSSN) during the Industrial Cyberdrill Exercise (ICE 4.0) event held in Yogyakarta in October 2024. In this event, CyberX played a pivotal role as the main technical platform, supporting cybersecurity training simulations for participants from various industry sectors. The success of this event paved the way for CyberX to continue as a comprehensive cybersecurity training solution, especially in critical sectors such as banking, government, and large corporations.

What is Capture the Flag (CTF) and How Does It Work?

Capture the Flag (CTF) is a type of cybersecurity competition designed to sharpen participants’ technical skills. In CTF, participants are faced with a series of challenges or “flags” that must be discovered by solving various technical cybersecurity problems. CyberX CTF provides challenges across multiple categories, including cryptography, web exploitation, forensics, and binary exploitation.

The Benefits of Participating in CyberX CTF

The CyberX CTF competition not only provides a platform to enhance technical skills but also offers additional benefits to participants, including:

Real-World Experience: Challenges in CTF reflect threats and scenarios that can occur in real life. Participants can learn how to defend systems from actual attacks, strengthening their readiness to face real-world threats.
Advanced Technical Skills: In CTF, participants use a variety of tools and techniques commonly employed by cybersecurity professionals. This competition helps to refine skills such as forensic analysis, encryption, and codebreaking, which are crucial for cyber defense.
Collaboration and Teamwork: CyberX CTF also hones collaboration skills, encouraging participants to share knowledge and coordinate their steps effectively.
Networking and Industry Recognition: Through CyberX CTF, participants can connect with other cybersecurity professionals, including industry experts. This opens opportunities for establishing strong connections within the cybersecurity field and gaining recognition for their skills.

Types of Challenges in CyberX CTF

Within CyberX CTF, participants will encounter challenges across several categories, including:

Forensics: Data analysis and digital investigation, where participants must find clues within data or systems.
Cryptography: Challenges involving decryption and codebreaking.
Binary Exploitation: Participants work with binary programs, understanding structures, and finding ways to exploit vulnerabilities.
Web Exploitation: Focuses on weaknesses in web applications, such as SQL injection attacks, XSS, and other exploits.

snc.id’s Commitment to Building Cyber Resilience Through CyberX

The success of CyberX in supporting BSSN at the ICE 4.0 event demonstrates its effectiveness as a comprehensive cybersecurity training platform. snc.id is committed to continuously developing CyberX and its CTF features, making it accessible to more organizations and individuals seeking to strengthen their cyber resilience. By integrating People, Process, and Technology, CyberX ensures that each training session not only educates participants on defense and attack techniques but also builds a strong foundation of cyber resilience.

CyberX CTF stands as a tangible step in training Indonesia's future cyber workforce to prepare for the ever-growing threats ahead. Through technology and collaboration, snc.id aims to contribute to a more resilient and sustainable cybersecurity ecosystem for the nation.

Terms and Conditions

The SnC Services Use Agreement (“Agreement”) between users as parties using the SnC services (“CUSTOMER”) and Security and Connectivity (“SNC”) as the site manager for SnC services, contains the terms and conditions of using the site service SnC (“SnC”) which applies to CUSTOMER to be able to use the SnC. Please read carefully this Agreement. You must read, understand, accept and agree to all terms and conditions in this Agreement before using the all of services contained in SnC. By using the application and/or continuing access to the SnC, the CUSTOMER agrees to all the terms and conditions contained therein, and therefore agrees to be bound by an Agreement with SNC and therefore you agree to be able to receive services and access to all service contained in the SnC. If CUSTOMER do not accept and approve one, part or all of the contents of the terms and conditions of this Agreement, CUTOMER is not permitted to access further and are welcome to leave the SnC with applicable terms and conditions. Every activity related to the use of the SnC services, so that both SNC and CUSTOMER in this matter, are legally protected through applicable regulations on regulations including but not limited to regulations on Electronic Information and Transactions and Intellectual Property Rights, and for all forms of engagement arising from all activities on the SnC have fulfilled the legal requirements and conditions of an agreement as stated in the Indonesian Civil Code.

Definitions

1. Subscription Application Form (FAB), which is a form completed with subscription requirements made by and between the CUSTOMER and SNC to subscribe to the SnC Service and must be completed by the CUSTOMER to be submitted to SNC as an application for subscription to the Service Agreement.
2. Change Form (FP) is a form that must be completed by the Customer and then submitted to the SNC for requests for changes to non-technical data or changes to technical data.
3. Subscription Fee is a fee that must be used by CUSTOMERS to SNC for the services they use.
4. Field Report (BALAP) is an official report on the installation and activation of Equipment for the operation of the Service, as well as the deactivation of the Service.
5. Installation is a condition where a physical device is connected so that a service can be used.
6. Activation is a condition in which a service can be used.
7. Block is a condition where a Service/service cannot be used temporarily.
8. Unblock is a condition where a Service/service can be reused.
9. Close is a condition where the physical device has been de-installed so that the service/service cannot be used continuously, it can also be called disconnection.
10. Service means Managed Services and or Managed Security provided by SNC through SnC services.
11. SnC consists of Managed Services & Security which consists of WAN, LAN, Managed Services and Managed Security.
12. SnC equipment is equipment owned or provided by SNC which is placed at the CUSTOMER's location for the operation of the Service.
13. Customer Equipment means equipment belonging to or provided by the Customer which is placed at the CUSTOMER's location for the operation of the Service.
14. CUSTOMER is a person or party who subscribes to SnC services

Scope

1. SNC agrees to provide service facilities as stated in the Agreement.
2. For the convenience and security of using the Service, the CUSTOMER is prohibited from taking actions that can harm any party, including but not limited to:
a. Interfere with or damage a network or computer system of any party.
b. Spamming or sending emails continuously irresponsibly.
c. Forge email headers or other methods used for the purpose of impersonating the CUSTOMER.
d. Violation of intellectual property rights.
e. Actions that violate the norms of decency, decency, regulations, or laws that apply in the Territory of the Republic of Indonesia.

Term

1. The service subscription period is as stated in the Agreement or Subscription Application Form
2. CUSTOMER is required to notify in writing of the unsubscribe request to SNC at least 1 (one) month prior to the unsubscribe date.
3. Minimum period of subscription for Managed Services and/or Managed Security according to the agreement stated in the Subscription Application Form which is an integral part of this agreement
a. Managed Service there are 3 models of subscription period, namely 1 year, 2 years and 3 years
b. Managed Security there are 3 models of choice of subscription period, namely 3 months, 6 months and 1 year

Ownership of Assets

1. The assets of the SnC Equipment and its supporting facilities used in the context of providing the Services remain in the ownership of SNC to be lent to the CUSTOMER as recorded and stated in the contract.
2. During the subscription period, the equipment assets and supporting facilities belonging to SNC as stated in paragraph 1 of this Article are the responsibility of the CUSTOMER.
3. If there is a loss of equipment assets and supporting facilities belonging to SNC as stated in paragraph 1 of this Article, then the CUSTOMER is obliged to provide a missing certificate from the police to SNC a maximum of 2 x 24 hours since the assets of equipment and supporting facilities belonging to SNC are known to be missing.
4. The cost of replacing lost equipment assets and supporting facilities belonging to SNC including shipping costs are the responsibility of the CUSTOMER with the value adjusted to the book value for the current year at SNC.
5. The fees as referred to in paragraph (4) of this Article will be billed together with the CUSTOMER's bill.

Customer Personal Data Protection

1. Customer agrees to give SNC the right to process his/her personal data contained in FAB (“Customer Data”) for the purpose of performing SnC services and/or other obligations under the Agreement.
2. SNC does not disclose customer data to any third party other than Employees, Directors of SNC on an as needed basis to the extent necessary to carry out obligations under this agreement.
3. Subcontractors or professional advisors authorized in writing by SNC to process customer data on an as-needed basis to the extent necessary to perform obligations under this agreement.
4. To the extent required by applicable laws and regulations. In such case, SNC shall notify the Customer in writing to disclose the customer data (to the extent permitted by applicable laws and regulations) as soon as possible after becoming aware of such requirements.

Disclaimer

1. SNC is not responsible for the losses of the CUSTOMER or third parties arising in connection with the use of the Services.
2. The service uses the principle of sharing network resources, so that speed performance and connectivity availability are determined by the traffic density that occurs and the capabilities of the devices used. Thus, SNC does not implicitly or explicitly provide any guarantee regarding the bandwidth speed that is actually enjoyed by the CUSTOMER.
3. Multimedia services are created/provided by media institutions that are partners of SNC and SNC is not responsible for the content or materials of Multimedia Services