Cature the flag (was Re: Selinux kernel patches)

[Sandy Harris <sandy@storm.ca>]

Dale Amon wrote:
> 
> On Tue, Feb 06, 2001 at 03:28:44PM -0500, Pete Loscocco wrote:
> > We think that we have a good architecture and that it warrants
> > consideration. ...
> 
> Just a wild suggestion. When things are well along and
> everyone thinks the system is ready, why not put a box
> out on a public network for a game of "capture the flag"?

The annual Defcon conference (http://www.defcon.org/) has run such
a contest, on a LAN at the conference, for several years now. Some
firewall vendors bring machines for use as targets.
 
> Offer a free T-shirt "I cracked the NSA" to anyone who
> succeeds *and* tells precisely how it was done. Set up
> tests for system cracks both from fully external or from
> various shell access levels.

In addition to attackers' machines and target machiness, they have
other machines doing packet logging so attacks can be analysed
later.

A web search on "defcon capture the flag" will turn up the rules,
last year's logs and some discussion.

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.