Skip to content

A CTF That Teaches

Brandon Workentin

A CTF That Teaches

Summary

### Designing Educational Capture The Flag Competitions for ICS At 00:00, Brandon Workentin from SecurityMatters presents on the architectural and educational principles behind designing effective industrial control system Capture The Flag (CTF) challenges at the ICS Village. Workentin explores how gamified challenges can bridge the technical knowledge gap between IT and OT engineers.

### The Divergence Between Traditional IT and Industrial Systems At 07:02, Workentin explains the unique technical hurdles faced by traditional web and binary CTF players when encountering industrial control systems. Unlike standard Windows or Linux targets, industrial hardware utilizes real-time operating systems (RTOS), ladder logic programs, and proprietary industrial communication buses.

### Emulating Authentic Physical Infrastructure At 14:24, the presentation explores the physical hardware engineering behind the competition. Workentin demonstrates how organizers integrated real-world programmable logic controllers (PLCs), human-machine interfaces (HMIs), and ruggedized field PCs into hands-on challenge benches that authentically simulate municipal water treatment and power distribution environments.

### Scaffolded Learning and Competency Progression Concluding between 21:08 and 26:00, Workentin outlines instructional scaffolding methods. He emphasizes designing multi-tiered challenge tracks that first teach foundational industrial packet capture and protocol parsing before escalating to advanced firmware reverse engineering and physical process manipulation.

(AI summary — Gemini Flash)

Related talks