Past competitions
2024 eCTF
Teams designed and implemented a supply chain security solution for microcontrollers on a medical device. The system had to securely verify the device integrity while keeping sensitive data confidential.
View Rules – Watch the Award Ceremony
- First Place Overall: Plaid Parliament of Pwning – Carnegie Mellon University, advised by Anthony Rowe, Patrick Tague, and Maverick Woo
- Second Place Overall: SINGPwny – University of Illinois Urbana-Champaign, advised by Kirill Levchenko
- Third Place Overall: b01lers – Purdue University, advised by Christina Garman, Mohammadkazem Taram, and Santiago Torres-Arias
Additional Awards:
- Best Poster: Purdue University, advised by Christina Garman, Mohammadkazem Taram, and Santiago Torres-Arias
- Top High School: 0xDACC – Delaware Area Career Center, advised by Eli Cochran
- Responsible Disclosure Award: Plaid Parliament of Pwning – Carnegie Mellon University, advised by Anthony Rowe, Patrick Tague, and Maverick Woo
Posters:
- Carnegie Mellon University
- Colombe academy of Technology
- Delaware Area Career Center
- East Tennessee State University
- Ecole Royale de l’Air
- Florida Atlantic University
- Indian Institute of Technology Indore
- Indian Institute of Technology Madras
- ISD 196
- Kilgore College
- Michigan State University
- Pace University
- Purdue University
- Tennessee Tech University
- Tufts University
- United States Coast Guard Academy
- University at Buffalo
- University of California, Irvine
- University of Connecticut
- University of Illinois Urbana-Champaign
- University of Nebraska Omaha
- University of New Haven
- University of North Dakota
- Virginia Tech
Full List of 2024 eCTF Scores
Rank | School | Final Score |
1 | Carnegie Mellon University | 41581 |
2 | University of Illinois Urbana-Champaign | 28660 |
3 | Purdue University | 26926 |
4 | University at Buffalo | 12558 |
5 | Indian Institute of Technology Madras | 8275 |
6 | Delaware Area Career Center | 8216 |
7 | Ecole Royale de l’Air | 7447 |
8 | Indian Institute of Technology Indore | 6614 |
9 | Michigan State University | 6393 |
10 | University of Nebraska Omaha | 5644 |
11 | University of California, Irvine | 4964 |
12 | Florida Atlantic University | 3974 |
13 | Tennessee Tech University | 3843 |
14 | Tufts University | 3803 |
15 | University of Connecticut | 3698 |
16 | Colombe academy of Technology | 3540 |
17 | East Tennessee State University | 3376 |
18 | Kilgore College | 3368 |
19 | United States Coast Guard Academy | 3316 |
20 | Virginia Tech | 3268 |
21 | Michigan Technological University | 3088 |
22 | Massachusetts Institute of Technology | 3020 |
23 | Shawnee Mission Center for Academic Achievement | 2572 |
24 | United States Air Force Academy | 2445 |
25 | University of Texas at Arlington | 2412 |
26 | University of Colorado, Colorado Springs | 2386 |
27 | Oklahoma Christian University | 2195 |
28 | CyberAegis | 2012 |
29 | ISD 196 | 1198 |
30 | Pace University | 1192 |
31 | University of New Haven | 1044 |
32 | University of Washington | 666 |
33 | University of California Los Angeles | 609 |
34 | University of California, Santa Cruz | 606 |
35 | City College of San Francisco | 568 |
36 | The Ohio State University | 541 |
37 | Georgia Institute of Technology 2 | 528 |
38 | Northeastern University | 525 |
39 | Texas A&M University | 525 |
40 | Morgan State University | 520 |
41 | Georgia Institute of Technology 1 | 514 |
42 | Singapore Management University 1 | 500 |
43 | Duke University | 492 |
44 | Columbia University | 473 |
45 | California State University, Los Angeles | 472 |
46 | San Francisco State University | 450 |
47 | United States Cyber Games | 450 |
48 | Worcester Polytechnic Institute | 450 |
49 | Embry-Riddle Aeronautical University, Prescott | 400 |
50 | University of California, Santa Barbara | 383 |
51 | Kansas State University | 366 |
52 | Thomas Jefferson High School for Science and Technology | 337 |
53 | Strayer University | 330 |
54 | NorthWest Arkansas Community College | 283 |
55 | Saddleback College | 268 |
56 | Baldwin Wallace University | 250 |
57 | University of North Dakota | 231 |
58 | The Citadel | 220 |
59 | The University of Tulsa | 216 |
60 | Dakota State University | 140 |
61 | Norfolk State University | 100 |
62 | Springfield-Clark County Career Technology Center | 100 |
63 | Indian Institute of Technology Dharwad | 83 |
64 | West Virginia University | 70 |
65 | Lakota East High School 2 | 66 |
66 | Florida International University | 61 |
67 | The University of Alabama | 56 |
68 | University of Florida | 50 |
69 | University of Maryland, Baltimore County | 50 |
70 | Veermata Jijabai Technological Institute | 50 |
71 | Lakota East High School 1 | 40 |
72 | Symbiosis Institute of Technology | 33 |
73 | Parkway Spark! | 25 |
74 | Lakota West High School 1 | 20 |
75 | Ipnet Institute of Technology | 16 |
76 | Center I (Albemarle County Public Schools) | 8 |
2023 eCTF
Teams designed and implemented a key fob system for a car door lock. The system had to protect the car from unauthorized entry and prevent attacks like replays and key fob cloning.
View Rules – View Technical Specs – View Award Ceremony Slides
- First Place Overall: Plaid Parliament of Pwning – Carnegie Mellon University, advised by Maverick Woo, Anthony Rowe, and Patrick Tague
- Second Place Overall: SlugSec – University of California, Santa Cruz, advised by Alvaro Cardenas
- Third Place Overall: sigpwny – University of Illinois Urbana Champaign, advised by Kirill Levchenko
- Additional Awards:
- Best Write-Up: ret2rev – University of New Haven, advised by Aladin Sabanovic and Christopher Martinez
- Best Poster: b01lers – Purdue University, advised by Antonio Bianchi, Aravind Machiry, and Santiago Torres-Arias
- Hardware Hacker: Plaid Parliament of Pwning – Carnegie Mellon University, advised by Maverick Woo, Anthony Rowe, and Patrick Tague
- Posters:
- Carnegie Mellon University
- Delaware Area Career Center
- Florida Atlantic University
- Indian Institute of Technology
- Michigan State University
- Morgan State University
- Purdue University
- Singapore Management University
- Texas A&M University
- Tufts University
- University at Buffalo
- University of California, Santa Cruz
- University of Colorado Colorado Springs Team 1
- University of Colorado Colorado Springs Team 2
- University of Illinois at Urbana-Champaign
- University of Massachusetts Amherst
- United States Air Force Academy
- Virginia Tech University
- Worcester Polytechnic University
Full List of 2023 eCTF Scores
Rank | School | Final Score |
1 | Carnegie Mellon University | 28158 |
2 | University of California Santa Cruz | 17167 |
3 | University of Illinois at Urbana-Champaign | 12586 |
4 | University at Buffalo | 11885 |
5 | Indian Institute of Technology Madras | 11346 |
6 | Purdue University | 10419 |
7 | Michigan State University | 8680 |
8 | Worcester Polytechnic Institute | 8576 |
9 | University of Massachusetts Amherst | 5899 |
10 | Singapore Management University | 5210 |
11 | Tufts University | 4676 |
12 | Virginia Tech | 4052 |
13 | University of New Haven | 4044 |
14 | Texas A&M University | 3985 |
15 | Florida Atlantic University | 3969 |
16 | University of Colorado, Colorado Springs 1 | 3816 |
17 | University of Colorado, Colorado Springs 2 | 3743 |
18 | University of Washington | 3334 |
19 | Morgan State University | 2620 |
20 | University of California Irvine | 1897 |
21 | Delaware Area Career Center | 1562 |
22 | University of North Dakota | 1375 |
23 | US Air Force Academy | 1328 |
24 | ISD 196 | 525 |
25 | Georgia Institute of Technology | 491 |
26 | Rose-Hulman Institute of Technology | 436 |
26 | River Hill High School | 436 |
28 | University of Connecticut | 431 |
29 | Thomas Jefferson High School for Science and Technology | 425 |
30 | Clemson University | 400 |
31 | Florida International University | 391 |
32 | Marriotts Ridge High School | 389 |
33 | Symbiosis Institute of Technology | 336 |
34 | University of Dayton | 325 |
35 | Air Force Institute of Technology | 300 |
35 | Amrita Vishwa Vidyapeetham University | 300 |
37 | University of Alabama in Huntsville | 250 |
38 | United States Military Academy | 231 |
39 | Indiana Institute of Technology | 228 |
39 | The Harker School | 228 |
41 | Thadomal Shahani Engineering College | 225 |
41 | Lakota East High School | 225 |
41 | Louisiana State University | 225 |
41 | University of Maryland College Park | 225 |
45 | Norfolk State University | 213 |
46 | BASIS Chandler | 200 |
46 | Baldwin Wallace University | 200 |
48 | Essex North Shore Agricultural and Technical School | 191 |
48 | University of Edinburgh | 191 |
50 | Mount Saint Dominic Academy | 189 |
51 | New York University | 183 |
51 | Penn State Abington | 183 |
51 | West Virginia University | 183 |
55 | University of New Hampshire | 150 |
56 | Springfield-Clark County CTC | 136 |
57 | University of Arizona | 131 |
57 | University of Texas at Arlington | 131 |
59 | Harmony Science Academy | 128 |
60 | North Carolina State University | 113 |
2022 eCTF
Teams secured an avionic device by designing a secure firmware update system and bootloader. The system must protect intellectual property and aircraft mission secrets in an untrusted environment, and ensure firmware protection and integrity in the face of supply-chain threats such as hardware trojans.
View Rules – View Technical Specs
- First Place Overall: Plaid Parliament of Pwning – Carnegie Mellon University, advised by Maverick Woo
- Second Place Overall: scriptohio – The Ohio State University, advised by Rajiv Ramnath
- Third Place Overall: ret2rev – Texas A&M University, advised by Martin Carlisle
- Additional Awards:
- Fortress Award: ret2rev – Texas A&M University, advised by Martin Carlisle
- Dedication and Preserverence Award: 0xDACC – Delaware Area Career Center, advised by Eli Cochran
- SCA Master Award: Plaid Parliament of Pwning – Carnegie Mellon University, advised by Maverick Woo
- SCA Master Award: TechSec – Massachusetts Institute of Technology, advised by Mengjia Yan
- Posters:
Full List of 2022 eCTF Scores
Rank | School | Final Score |
1 | Carnegie Mellon University | 23541 |
2 | The Ohio State University | 18960 |
3 | Texas A&M University | 6011 |
4 | University of California Irvine | 4514 |
5 | University at Buffalo | 3293 |
6 | Singapore Management University | 3131 |
7 | University of Massachusetts Amherst | 3121 |
8 | Delaware Area Career Center | 2288 |
9 | University of Connecticut | 2102 |
10 | Massachusetts Institute of Technology | 700 |
11 | Michigan State University | 700 |
12 | University of Wyoming | 600 |
13 | University of Illinois Urbana-Champaign | 500 |
14 | University of New Hampshire | 400 |
15 | Amrita Vishwa Vidyapeetham University | 400 |
16 | Florida International University | 400 |
17 | Nova Southeastern University | 400 |
18 | University of Colorado Boulder | 400 |
19 | Worcester Polytechnic Institute | 400 |
20 | Morgan State University | 400 |
21 | University of Texas at Dallas | 400 |
22 | Norfolk State University | 300 |
23 | University of Dayton | 300 |
24 | Baldwin Wallace University | 300 |
25 | Northeastern University | 200 |
26 | Virginia Tech University | 200 |
27 | Indiana Institute of Technology | 200 |
28 | Dakota State University | 100 |
2021 ECTF
Teams designed a secure communications system for an unmanned aerial vehicle (UAV) package delivery system. The system had to be secure to prevent attackers from gaining access to the network to spy on and disrupt the UAV system. View Rules
- First Place Overall: NUAV@NUsec – Northeastern University, advised by Guevara Noubir
- Second Place Overall: TAMU – Texas A&M University, advised by Martin Carlisle
- Third Place Overall: 0xDACC – Delaware Area Career Center, advised by Eli Cochran
- Additional Awards:
- First Try’s The Charm: TAMU – Texas A&M University, advised by Martin Carlisle
- Tech Support Hero: Adrian Self – Delaware Area Career Center
- Best Write-Up: GOATS – Worcester Polytechnic Institute, advised by Robert Walls
- Above and Beyond in Testing: Cacti – University at Buffalo, advised by Ziming Zhao
- Write-ups:
2020 eCTF
Teams designed a secure audio digital rights management (DRM) module for a next-generation multimedia player on the Digilent Cora Z7. The system had to be secure to prevent users from playing pirated music, support region locking, and prevent the creation of cloned bootleg players.
View Rules – View Reference Design
- First Place Overall: Husky Records – Northeastern University, advised by Guevara Noubir
- Second Place Overall: Insecure Example – University of Cincinnati, advised by Carla Purdy
- Third Place Overall: Cornell – Cornell University, advised by Daniel Weber
- Fourth Place Overall: CyberGatorz – University of Florida, advised by Mark Tehranipoor
- Additional Awards:
- Best Documentation: Husky Records – Northeastern University, advised by Guevara Noubir
- Best Write-Up: Husky Records – Northeastern University, advised by Guevara Noubir
- Tech Support Hero: Husky Records – Northeastern University, advised by Guevara Noubir
- First High School Submission: 0xDACC – Delaware Area Career Center, advised by Eli Cochran
2019 eCTF
Teams designed a secure video game console on the Digilent Arty Z7. The system had to attempt to protect the intellectual property of game designers, prevent users from loading their own software, and allow verified users to install and play games that they have purchased.
View Rules – View Reference Design
- First Place Overall: DeNUvo — Northeastern University, advised by Guevara Noubir
- Second Place Overall: ROP it like its hot — Carnegie Mellon University, advised by Martin Carlisle
- Two-way tie for Third Place Overall:
- ZOO_MES — University of Massachusetts, advised by Wayne Burleson
- TigerBytes — Rochester Institute of Technology, advised by Ziming Zhao and Marcin Łukowiak
- Additional Awards:
- 0Day Award: ROP it like its hot — Carnegie Mellon University, advised by Martin Carlisle
- Iron Flag: DeNUvo — Northeastern University, advised by Guevara Noubir
- Best Writeup: ROP it like its hot — Carnegie Mellon University, advised by Martin Carlisle
- Best Documentation: DeNUvo — Northeastern University, advised by Guevara Noubir
- Tech Support Hero: ZOO_MES — University of Massachusetts, advised by Wayne Burleson
2018 eCTF
Teams designed a secure ATM-bank system.
View Rules – View Reference Design
- First Place Overall: Hokie Hackers – Virginia Tech, advised by Matthew Hicks and Patrick Schaumont
- Second Place Overall: Anonymous Elephants – Tufts University, advised by Ming Chow
- Third Place Overall: VuPenn – University of Pennsylvania, advised by James Weimer
- Additional Awards:
- First To Market: TechSec – MIT
- Iron Flag 1: HokieHackers – Virginia Tech, advised by Matthew Hicks and Patrick Schaumont
- Iron Flag 2: 0xbu – Boston University, advised by Renato Mancuso
- Golden Flag: VuPenn – University of Pennsylvania, advised by James Weimer
- Flag Factory: HokieHackers – Virginia Tech, advised by Matthew Hicks and Patrick Schaumont
- Best Documentation: Nullify – University of Nebraska, Omaha, advised by Bill Mahoney
- Best Writeup: Anonymous Elephants – Tufts University, advised by Ming Chow
2017 eCTF
Teams designed a secure bootloader for a self-driving car.
View Rules – View Reference Design
- First Place Overall: Firmware Dogs – University of Connecticut, advised by John Chandy
- Mass Attack Winner: Team Sprite – Northeastern University, advised by Guevara Noubir
- Iron Flag Winners:
- Firmware Dogs – University of Connecticut, advised by John Chandy
- pgm_read_flag() – Carnegie Mellon University, advised by Martin Carlisle
- Snorlax – University of Massachusetts-Amherst, advised by Dan Holcomb
2016 eCTF
In the inaugural eCTF, teams designed a secure pin door lock system.
View Rules – View Reference Design
- First Place Overall: We’re Probably Insecure – Worcester Polytechnic Institute, advised by Thomas Eisenbarth
- Most Flag Points: WillHax4Snacks – Northeastern University, advised by Yunsi Fei
- Iron Flag: Tufts eCTF – Tufts University, advised by Ming Chow
QUESTIONS? EMAIL US AT ECTF@MITRE.ORG
MITRE is a not-for-profit organization that operates research and development centers sponsored by the federal government. MITRE works with industry and academia to apply science, technology, and systems engineering that enables the government and the private sector to make better decisions. Learn more at www.mitre.org