Slashdot Mirror
DARPA's Cyber Grand Challenge Offers $3.75 Million In Prizes
An anonymous reader writes "Computer security experts from academia, industry and the larger security community have organized themselves into more than 30 teams to compete in DARPA's Cyber Grand Challenge, a tournament designed to speed the development of automated security systems able to defend against cyberattacks as fast as they are launched. The Challenge plans to follow a 'capture the flag' competition format that experts have used for more than 20 years to test their cyber defense skills. The winning team from the CGC finals stands to receive a cash prize of $2 million. Second place can earn $1 million and third place $750,000."
DARPA's Mike Wallace gave a presentation on the Cyber Grand Challenge a few months ago at ShmooCon. It's pretty interesting. https://archive.org/details/ShmooCon2014_Introducing_DARPAs_Cyber_Grand_Challenge (Video hosted on Archive.org)
RFC 7258 - Pervasive Monitoring Is an Attack
Of course, the whole point of a Cyber Doomsday Machine is lost, if you keep it a secret. Why didn't you tell the world, eh?
https://imgur.com/gallery/vdJM...
Of course it doesn't include that. One of the quiet realizations of the information age is that more powerful groups are able to leverage any given information better through their ability to acquire new information and tools to parse information rapidly.
The pragmatic reality is that this makes realpolitik the default relationship of government to technology. And it's not clear that are real demand for restraint is going to outweigh the potential leverage all that information gives intelligence workers. For all intents and purposes, it's "too easy" to grab for them to leave it on the table.
That's less than half the pot of a dota2 tournament!
I wonder if the money for this would be well spent coding a hypervisor that is provably secure. If this means going to Ada 2012 as the language for coding, so be it. The goal is to get this out of the way.
From there, random scans of a VM's memory structure and maybe even a snapshot on the SAN level and a scan of the filesystem. If a rootkit exists in RAM, the VM can be snapshotted for forensic purposes and rolled back, or the networks connections it touches shift to honeypot networks/machines.
Of course, some focus on making security host based, as opposed to focusing on the network exclusively would be a good thing too.
Cross-site scripting???
... for challenging DARPA.