Close ties with SANS Training Singapore help Xponents prepare for high-profile Capture the Flag competition in Las Vegas
HTX’s relentless focus on forging partnerships once again paid off when two of its teams competing in DEF CON 32 walked away from the event with third and fifth place finishes in their respective Capture the Flag (CTF) village cybersecurity competitions.
Widely regarded as the largest white hat hacking and cybersecurity conference in the world, DEF CON 32 was held at the Las Vegas Convention Centre in the United States from 8 to 11 August 2024.
The industry partner involved in this latest HTX achievement is SANS Training Singapore, the Singapore subsidiary of SANS Institute, which specialises in cybersecurity training and information security.
HTX and SANS Training Singapore had on 7 November 2023 signed a Memorandum of Understanding (MOU) to collaborate and develop a cyber competency framework and training roadmap for HTX officers.
Since the signing ceremony, SANS Training Singapore has worked with HTX to organise an AI CTF at the Tech X Summit in April 2024. The former has also developed an initial draft of the cyber competency and training roadmap for HTX, as well as conducted a CTF preparatory class in June that prepared Xponents bound for DEF CON 32.
So how did Xponents train for DEF CON 32? According to Jerry Tan, lead engineer for adversary emulation at HTX’s xCyber division, it was all down to constant practice.
Xponents attending the preparatory class in June. (Photo: HTX)
“Our preparations included taking part in Capture the Flag competitions every week and undergoing a comprehensive training program provided by SANS Training Singapore. During these sessions, we enhanced our cybersecurity skills by exploring various domains within the field. We also identified tools that could help us solve challenges more efficiently, allowing us to refine our strategies and improve our problem-solving speed,” said Jerry, who was part of the Red Team Village team that finished fifth out of 85 teams.
To make sure that the Xponents were as well prepared as they could be for the competition, SANS Training Singapore also held online prep sessions during which their instructor Chris Dale provided additional coaching.
Chong Ying Xiang, another member of xCyber, said Chris’ coaching was pivotal in helping the two HTX teams excel at the competition.
“SANS Training Singapore’s involvement was important because it gave us a solid framework and foundation to tackle the challenges. It was great working with Chris and his infectious optimism motivated the team to press on even when things were not progressing during the challenges. Chris provided invaluable guidance on how to tackle the DEF CON challenges by tapping his extensive experience in cybersecurity,” said Ying Xiang.
Chris also had words of praise for the Xponents he worked with, describing them as enthusiastic and highly motivated learners.
“We had individuals who were highly analytical, others who were quick to jump to possible solutions, and others who contributed in a variety of ways. Their experience was evident in how swiftly they turned to the right tools and techniques when faced with a challenge,” he said.
“What stood out about the teams was that, despite some initial nervousness, everyone was eager to engage with the challenges and, most importantly, learn and push their limits. This is what a CTF is truly about: facing new challenges where you don’t have all the answers, but having a mindset ready to engage, learn, and solve them,” he added.
The Xponents did indeed walk away from the competition enlightened. Jerry, for instance, said one key lesson he took home was the importance of tackling challenges head-on.
Ying Xiang, on the other hand, learned that inquisitiveness can be a powerful enabler.
“Besides learning that cybersecurity is a team sport and that it is important for teams to collaborate and work on problems, I also learned that we should always be curious and leave no stone unturned, no matter how improbable the answer might seem,” he said.