Final — Capstone CTF + Project Demos
The grand finale
Two parts
- 🏆 Capstone CTF tournament — whole-term, team-based
- 🎤 Final project demo videos — graded (submitted with the report)
🏆 CTF tournament
- Web · API · memory safety · supply chain · cloud · LLM/agentic · DevSecOps — 14 challenges, 165 pts
- Team leaderboard, prizes — the live CTFd board (bigger, includes bonus/boss challenges)
- Graded score comes from the paper trail: flag/proof + payload + one-line mitigation per challenge
🎤 Final project demo (graded)
Present your secured build end-to-end:
- Threat model → vulnerabilities → remediation
- SBOM + signed artifact
- Security CI/CD pipeline
- Recorded video walkthrough, linked in the report and due with it — graded asynchronously on the rubric
- No per-team live slot — the instructor may call a team for a short live Q&A
Bring
- Video walkthrough link in your report (due with the report)
- Threat model + vuln report (CWE/OWASP mapped)
- Fixed code, SBOM, signed artifact, CI pipeline
Thank you
You can now threat-model, break, fix, and ship secure software.