Panoply, a network security competition, is a network assessment and network defense competition combined into a single event. Panoply events are ideal for corporate and team competitions.
During Panoply, competitors vie for control of common resources and the critical services on those resources. Once a competitor takes possession of a resource, they must secure it against attacks from other players and maintain the critical services running on the resource. Competitors accumulate points for controlling and operating critical services such as SMTP, DNS, HTTP, HTTPS, SSH and so on.
How does Panoply work?
Panoply is a timed competition event over four to six hours. At the beginning of the competition, common resources are available for competitors to scan, assess and penetrate. To claim ownership of a service, competitors must plant their flag, an assigned hexadecimal string, inside the banner of the service. An automated scanner detects ownership changes and awards ownership of the service to the competitor(s) whose flag appears in the service banner. At random intervals, an automated scoring engine checks the status and functionality of all critical services. If a competitor has ownership of a fully functional critical service during a successful service check, they are awarded points for owning and maintaining a critical service.
Competitors accumulate points for each critical service they control and continue to accumulate points as long as they own and maintain those critical services. Competitors failing to secure resources and services are at risk from other players. The team or individual with the highest point total at the end of the competition wins.
The Panoply competition is a very flexible event that is easily customized to match participant skill levels from absolute beginner to professional penetration tester.
Contact the CIAS-ISAO about how to create a personalized Panoply event for your ISAO, organization and/or members. Discounted pricing is available exclusively for CIAS-ISAO members.
