Skip to main content

All weeks · Overview · CTF brief

Week 19 · Lecture slides

Week 19

Contents6 sections

Final — Capstone CTF + Project Demos

The grand finale


Two parts

  1. 🏆 Capstone CTF tournament — whole-term, team-based
  2. 🎤 Final project demos — graded

🏆 CTF tournament

  • Web · API · supply chain · cloud · memory safety · LLM/agentic
  • Team leaderboard, prizes — the live CTFd board (bigger, includes bonus/boss challenges)
  • Graded score comes from the paper trail: flag/proof + payload + one-line mitigation per challenge

🎤 Final project demo (graded)

Present your secured build end-to-end:

  • Threat model → vulnerabilities → remediation
  • SBOM + signed artifact
  • Security CI/CD pipeline
  • Submit a recorded video walkthrough before the session — graded asynchronously on the rubric
  • 3-min live Q&A per team on the day (not a live demo slot)

Bring

  • Video walkthrough submitted before the session
  • Threat model + vuln report (CWE/OWASP mapped)
  • Fixed code, SBOM, signed artifact, CI pipeline

Thank you

You can now threat-model, break, fix, and ship secure software.

All weeks in Software Security