DISM CTF System Handover

29th of March is the Good Friday. A group of DISM students (and soon to be graduates) came back to the Cyber Wargame Centre on the afternoon of this lovely public holiday.

They are the outgoing and upcoming organizing committee members of the DISM Capture The Flag (CTF) competition. And the seniors were back in the CWC lab to walk through and explain to their successors on details of DISM's very own CTF, which include but are not limited to the organizing objectives, server setup, network topology, application daemon, web interface, admin functionality, underlying design, expansion option and future directions.

The first season of DISM CTF in 2012 has been a success, albeit its relatively small scale. Let us hope in the hands of the new committee, in time to come there would be CTF S2, S3, S4... each of which achieves a new height!

Senior walking through the write-up grading and approval system

Upcoming CTF committee attentively watching a demonstration

Organizing Committee from different years engaged in discussion

Group photo of the two generations of committee with lecturers

Asia Pacific CACS / ISRM 2013

In today’s ever changing market landscape, there has been a growing concern by business leaders and enterprise stakeholders regarding Cybersecurity risks, IT governance and compliance to both local and foreign regulations.

The Asia-Pacific Computer Audit, Control and Security Conference (CACS)/Information Security and Risk Management Conference (ISRM) 2013 is Asia’s premier conference for IT Audit, Information Security, Governance, Risk and Compliance Professionals. It aims to bring together members of the business and IT controls community, to discuss and share industry best practices regarding these complex challenges at a strategic and thematic level. The conference promises to bring new insights into the current IT and regulatory environment needed to develop strategies to address these growing risks and concerns at the root cause.

This comprehensive event will feature a host of computer auditing and information systems experts who will share their wealth of knowledge and experiences. Attendees will have the opportunity to engage with thought leaders from diverse industries, helping their enterprises achieve greater trust in, and value from, information technology.

CACS/ISRM 2013 will be held from the 6th to 7th May 2013 at the Marina Bay Sands Expo & Convention Centre (Singapore), with the post-conference workshops following on the 8th to 9th May 2013.

Attendees can earn up to 30 CPE credits; 16 CPE by attending the CACS/ISRM 2013 Conference and an additional 14 CPE credits for attending both days of optional post-conference workshops.

Click here for the conference brochure.

Details Extract

When
Monday, 6 May, 2013 - Thursday, 9 May, 2013
8:00 AM - 5:00 PM

Where
Sands Expo and Convention Centre
10 Bayfront Avenue
018956
Singapore

Register Now

Source Page: http://cacs2013.isaca.org.sg/

Addition of Certified Ethical Hackers

Two DISM students passed the very much sought after EC-Council Certification Examination on 20 March 2013.The details are as follows:

 

CEH - Certified Ethical Hacker

1. Richie Lam
2. Fiona Chang

Congratulations!!!

AIRRIAD4 (more photographs)

Our partner, ThinkSECURE has put up more photographs of Airriad4 event.

Please visit this URL for viewing the photographs.

We look forward to the next Airraid event. Cheers.

Inside the Cyber Range of Singapore Polytechnic

Inside the Cyber Range: an interactive cyber attack exercise.

FutureGov visits the new Cyber Wargame Centre at Singapore Polytechnic (SP) to observe how real-world cyber-warfare simulations are conducted and speaks to information security students and to the Course Manager for the Diploma in Infocomm Security Management, Liew Chin Chuan.

Inside a red-lit room, 20-year-old Amirul Razdi is leading his team in a cyber-assault on “enemy computers” — his classmates in the neighbouring blue room. He is looking for vulnerabilities he knows will allow him and his peers to hack into the computer system.

 

At the same time, he watches intently as fellow seniors from the Department of Digital Media and Infocomm Technology work feverishly to defend and protect their systems in the blue room.

 

Please visit this URL to read the full article.....

EC-Council Certification Examination Results

We have conducted the EC-Council Certification Examination on 13 March 2013. Congratulations to the following DISM students who passed their examinations. The details are as follows:

 

CHFI - Certified Hacking and Forensic Investigator

1. Yang Xudong

ECSA - EC-Council Certified Security Analyst

1. Yang Xudong

CEH - Certified Ethical Hacker

1. Jeremy Heng Wen Ming
2. Lai Qi Wei
3. Oh Han Yi
4. Nikolas Tay Zhihao

Congrats and well done, folks!!!

AIRRAID4 Photographs

AIRRAID4 Photographs for your viewing.

1st Place Team: STAND

2nd Place Team: Burst Link

3rd Place Team: Steamboat

Henry of DragonVenture, addressing the participants of Airraid4.



Airraid4 Gamemaster, Julian of ThinkSECURE.

Christopher of ThinkSECURE with team Narwhal.

SP Gradshow 2013

SP Gradshow 2013 was successfully held from 8 - 9 March 2013. We saw many visitors and guests attended the event to look at our projects showcased during the event. Our DISM students also participated in the gradshow.

 

More information can be found at http://www.render.sg.

SP Model Student Award

Our DISM,Year-3 Yang Xudong (second from left), was awarded the Model Student Award for his excellent academic and CCA achievements.

Congratulations!!!

AIRRAID 4 – RETURN OF THE LIMPEH

On 6th March 2013, students from the Diploma in Infocomm Security Management (DISM) took part in AIRRAID 4 – a storyline-based wireless, wired and application penetration-testing competition. This one day event was held at the Cyber Wargame Centre located in Singapore Polytechnic’s (SP) School of Digital Media & Information Technology (DMIT). Participants of this competition consisted of a number of teams, which were made up of various individuals who ranged from students to industry professionals (both local and overseas).

During the competition, teams took the role of professional penetration testers whose task was to break into the internal network of Limpeh Pte Ltd, a fictitious company. As the competition progressed, teams were given a number of additional ad-hoc missions (called KAMIKAZE! missions) which put their skills in various areas of infocomm security to the test. These missions included gaining unauthorized access to FTP servers, locating and gaining access to wireless access points and even obtaining passwords from a smartphone. In addition to the missions, there was also a degree of strategizing involved as teams were given opportunities to trade in their points for advanced access into the company’s network which simulated the bidding/ tender phase in a real world environment.

Throughout the course of the competition, teams were extremely focused and attempted to use many different attack vectors to complete the missions. From making use of high gain antennas to locate access points around the building to even social engineering, teams were pushed to their limits and had to use every trick in their arsenal to complete the missions. 

The competition was a valuable learning experience as the participants had an opportunity to immerse themselves in an environment which was modelled after a real life scenario. This was truly a one of a kind experience for the student participants, who had the chance to take the theories and concepts taught during their modules and apply them in a practical situation. 

All in all, the competition was well received by the participants and we hope for more of such events to come!

Competition summation provided by 

Nikolas Tay from Team Dystopian Knights

AIRRAID4 PENETRATION TESTING GAME RESULTS

6 Mar 2013. The AIRRAID4 Penetration Testing Game ended at 5pm. The participants of twelve registered teams compete with one another their skills on the INTEGRATED PURPOSE-BUILT MULTI-SEGMENT ENTERPRISE-CLASS WIRELESS + WIRED NETWORK + WEB/APPLICATION SERVER INFRASTRUCTURE, exactly the type of infrastructure like what you find in real-world organizations!

At the end of the game, the winning teams were determined. Below were the winning placement:

1. STAND
2. Burst Link
3. Steamboat

Congratulation to the above 3 winning teams!!!  

We will update the blog entry with photographs of the event shortly. Stay tune.

AIRRAID4 Pre-Event Briefing (Updates)

The AIRRAID4 Pre-Event Briefing was held on the 5th March 2013 at Cyber Wargame Centre. We saw a good number of attendees for the pre-event briefing. Mr Julian Ho of ThinkSECURE, conducted the briefing to the attendees.

The actual event will be held on 6th March 2013, 9am to 5pm. All are welcome to visit us at the CWC.

AIRRAID4 Pre-Event Briefing

For all registered teams, you should have received the email confirmation from ThinkSECURE by now.

AIRRAID4 pre-event briefing will be held on 5 March 2013, 1800hrs - 1900hrs (GMT+8) at the following venue:

Singapore Polytechnic
School of Digital Media and Infocomm Technology
Cyber Wargame Centre
Block T20, Level 3
500 Dover Road, Singapore 139651

Below is the directional map to CWC when you alight at Dover MRT Station.

See you there!!!

DISM SIG Reunion Lunch cum Handover

At the end of another academic year, graduating seniors of DISM Special Interest Group invited the forthcoming core committee members to a lunch gathering which would serve as an informal handover and sharing session, as per tradition.

This year the group of ten young information security enthusiasts went to the Manhattan Fish Market at the Star Vista mall which was just opened less than half a year ago.

Two batches of SIG members having a casual chat.

While enjoying the sumptious meal with fellow juniors, year 3 seniors present also gladly shared about their internship experience and elaborated on the doubts and queries raised by their successors in regard to academic study, course curriculum and school activities.

Taking a group photo after a fulfilling lunch
From left to right: Wee Kiat, Edmund, Nikolas, Wei Kiat, Xudong,
Amadeus, Mustaqiim, Kenji and Ren Hann (Photographer Jeremy)

After lunch, the session continued as the group hanged out in the mall. A few other topics such as the future plan of the group in the next academic year and competition and training preparation also came to light. The new committee are definitely confident in bringing DISM SIG to an even higher level.

Let us take a closer look at these young promisng faces!
From left to right: Edmund, Jeremy, Wei Kiat, Nikolas,
Amadeus, Mustaqiim, Kenji, Ren Han (Photographer Xudong)

The best is yet to be!

Let us wish this group of young men good luck in all their future endeavors and watch as their success stories unfold.