REGULATIONS OF “ASEAN STUDENT CONTEST ON INFORMATION SECURITY 2023”

1. Sign-up schedule

- The team registration is before September 15^th, 2023.

- The online application form can be downloaded from the Organizer’s official website and sent to its email address at ascis@vnisa.org.vn upon completion.

- All student of a team must be in the same institution.

The list of successfully registered teams and their relevant information shall be made available on event’s website so that all the participating teams can review and report any inaccurate information. Requests for correction, if any, need to be sent to the Organizer at least 01 week prior to the commencement of each round.

- Strictly follow the instructions in the test rooms and the contest’s rules.

2. Format and timeline of the Contest

The contest consists of 03 rounds. All teams will compete with each other in information security knowledge and skills following CTF format.
The teams will join online, self-manage the team and connect video directly to the host during the competition with video conference system

a) The Starting Round: Online CTF (Jeopardy) on October 07^th, 2023, with its duration of roughly 4 hours.

- The format of this round includes: Pwnable (exploiting software errors, buffer overflow, format string, shellcode...); Reverse engineering (software source code reverse engineering, unpacking the packers, crypters to protect the software); Web (Web application attack techniques); Network/Forensic (Investigate, analyze, trace digital cases); Crypto/ACM (Decode puzzles, attack cryptographic algorithms, use programming/algorithmic skills to solve games, mazes...).

- The teams must have points from the Starting Round to compete in the Semifinal Round.

b) The Semifinal Round: The teams from Viet Nam compete onsite CTF (Jeopardy) in Northern group and Southern group, the teams from other ASEAN Member States compete online CTF (Jeopardy) in ASEAN group. Video conferencing tools may be used to surveil remote contestants to ensure fair competition. The expected date of this round is on October 21^st, 2023, with its duration of roughly 9 hours, consists of 2 phases: phase 1 duration of 4 hours, phase 2 duration of 5 hours. There is a 30 minutes break between the two phases.

- The format of this round includes: Pwnable (exploiting software errors, buffer overflow, format string, shellcode...); Reverse engineering (software source code reverse engineering, unpacking the packers, crypters to protect the software); Web (Web application attack techniques); Network/Forensic (Investigate, analyze, trace digital cases); Crypto/ACM (Decode puzzles, attack cryptographic algorithms, use programming/algorithmic skills to solve games, mazes...).

- After the end of phases 1, the top 20 teams will compete Final Round, other teams continue phase 2.

c) The Final Round: Onsite CTF (Attack & Defense) with teams from Viet Nam and online CTF (Attack & Defense) with teams from ASEAN Member States. The expected date of this round is on October 21^st, 2023 within the duration of 5 hours (same time phase 2 of the Semifinal Round). In case teams from Viet Nam can not able onsite participation (due to COVID-19, etc…), online participation is an alternative way.

- In the Final Round, the teams shall be tested on their ability to counter-measure cyber-attacks against their opponents and to defend their own computer networks.

Detailed description of the contest and the award-winning criteria shall be communicated to every participating team prior to each stage of the contest.

The Organizer shall reserve the right to change the timings of the contest in each round to meet the actual requirements. Any changes as such shall be informed to the participating teams directly and via the official website of the Organizer.

* The timeline may be adjusted as appropriate

* The teams from Vietnam may be join online if they cannot join onsite

3. Awards

a) Number of Prizes:

• The Qualifying Round: Each group has 01 First Prize, 03 Second Prizes, 05 Third Prizes and some Consolation Prizes

The number of prizes shall be decided by the Organizer based on the number of competing teams in each contest site.

• The Final Round: 01 Grand Prize ($600++), 03 Second Prizes , 05 Third Prizes and 11 Consolation Prizes

The list of teams winning will be show on the website https://ascis.vnisa.org.vn

b) Prizes include:

- Certificates of VNISA.

- Cash or cash equivalents

* The winning teams from ASEAN countries will receive cash prize via PayPal. Please send the team leader’s PayPal account to the Organizer if your team wins.

4. Extra information

a) ASCIS is the biggest annual Capture the Flag (CTF) competition in cyber security for Asean students organized by Vietnam Information Security Association (VNISA) under the sponsorship of the Ministry of Information and Communications and the Ministry of Education and Training of Viet Nam with hundreds of students attended every year.

ASCIS 2023 is the 16th time competition for Vietnamese students and the 5th time for ASEAN students.

ASCIS 2022 has attracted nearly 160 teams with more than 600 students from 22 universities of 7 countries in ASEAN. The team winning the First prize of the Qualifying Round of ASCIS 2022 has been chosen to participate in Cyber Sea Game 2022 and won the first prize.

b) Contact information of the Organizer:

Vietnam Information Security Association (VNISA)

Contact person: Mr. Hoang Duy, mobile: (84) 981564086, telegram: t.me/+3r7Cms54UbIxZWI1, email: ascis@vnisa.org.vn,

messenger: m.me/ ascisVNISA