Lightning Talk: Lessons Learned from the Embedded Capture-the-Flag (eCTF) competitions
summary
Study of the 2023–24 eCTF competitions collected and analyzed all teams' submissions including source code documentation firmware and interviews and finds repeatable gaps: many teams assume OS-style process separation or that compiler NX flags will work despite no MMU or program loader, and few model physical attacks like glitching or side channels. Practical issues include single address space, poor entropy for crypto, and limited vendor Rust support. A taxonomy of microcontroller security challenges is under development.
AI-written summary · about
related talks
17mEmbedded Security's Weakest Link: Lessons From Simple Mistakes
01h 57mSecurity Competitions
01h 06mHacking and Securing C++
46mCapture the Flag for Developers
18mIoT Security's Toughest Challenges: Root of Trust, TEEs, & Firmware Updates
46mRSAC Security Scholar Poster Pitch-Off
47mGaining experience through CTFs
03mCODE BLUE 2016 contests