A DEVELOPMENT OF A CAPTURE THE FLAG SYSTEM: USING SCENARIO BASED CYBER EXERCISE
Mohd Hazali Mohamed Halip, Asraful Syifaa‘ Ahmad, Noor Afiza Mat Razali, Afiqah M. Azahari, M. S. Mohamad Raub, K. H. Othman · Journal of Fundamental and Applied Sciences · 2018
Cyberspace faces a constant series of cyberattack and threats ranging from a sophisticated malware to a simple phishing attack. Thus, it is important to train a skilled cyber security professional in keeping the cyberspace secure. Cyber security exercises such as Capture the Flag (CTF) can clarify the skills needed to build cyber security capacity. This paper discusses about the development of the CTF system as a tool to enhance the students’ knowledge about the computer security. The system is developed by offering scenario based cyber exercise to build up the offensive and defensive skills in a computer penetration testing. There are 5 modules involve in CTF development which include scoreboard, scenarios, questions, participants and game management. The proposed CTF system was used in a mini CTF competition and data collected was analyzed to determine the learning outcome from the exercise.