Explore the gamification of developer education through Capture The Flag (CTF) competitions in this NolaCon 2018 conference talk. Delve into Slack's approach to security education, examining the pros and cons of CTFs, goal-setting, communication strategies, and infrastructure planning. Learn about various CTF components including flags, trivia, cryptography, forensics, and web application challenges. Gain insights from the speakers' experiences, including successes, challenges, and surprises encountered during CTF execution. Discover valuable lessons learned and potential future developments in this innovative approach to enhancing developer security awareness.
Overview
Syllabus
Introduction
Development at Slack
Security Education
Pros and cons of CTFS
CTF Goals
CTF Communication
CTF Planning
CTF Infrastructure
CTF Flags
Trivia and Sleuthing
Cryptography
Forensics
Webapp
CTF Execution
What Worked
What Didn't
Surprises
Feedback
Lessons Learned
Future Work
Thank You!
