✅ This week — what to do
- Before class — bring your term project runnable (work-in-progress).
- In class (300 min) — present WIP live (attack → root cause → fix) + peer review; play the practice CTF (
scrimmage.md) that previews the final. - Worksheet 16 — project checklist (
worksheet.md). - After — finish the project for the Week 19 demo: a pre-recorded video walkthrough submitted before the session, plus a 3-minute live Q&A (see Format, below — it is not a repeat of today's live format).
Time breakdown: AGENDA.md (../../AGENDA.md).
Format
- Work-in-progress team presentations of the term project: attack → root cause → fix, demoed live.
- A practice CTF tournament that previews the Week 19 final, plus cross-team peer review of projects.
The graded final presentation + full CTF tournament happen in Week 19. This week is the live studio/warm-up — today's demo is in-person and ungraded. Week 19 itself has since moved to a different format: each team submits a pre-recorded video walkthrough before the session (graded asynchronously on the rubric), and the in-class slot is a 3-minute live Q&A, not a re-demo (
AGENDA.md§Week 19). Rehearse the content today; the delivery format changes for the final.
Bring
- Draft threat model, vulnerability report (CWE/OWASP mapped), remediated code, SBOM + signed artifact, and your CI pipeline.
- A 10-minute demo + 5-minute Q&A.
Practice CTF
A short capture-the-flag mixing web, API, binary, supply-chain, cloud, and LLM challenges from Weeks 1–15. Cross-team scrimmage. → scrimmage.md.
References
- All prior weeks + https://owasp.org/Top10/2025/