HackaDay 2022: Securing by the crowd

Competitions

Playback of this video is not currently available

0:02:00

Securing by the crowd

It is crucial to marshal a centralised platform so that cybersecurity talents around the world can congregate, while future cybersecurity talents can begin to learn, hack and co-secure the environment and society in the near future. The centralised platform is a cyber ecosystem, carries a cycle of learn to hack and hack to learn, such that the goal of nurture, upskill and reskill cybersecurity talents around the world can be accomplished and continuously contributing to the ecosystem.

Why you should join?

HackaDay is PwC Hong Kong’s annual flagship event which includes competitions for students to understand more on the ecosystem in Cybersecurity and Cloud.

For the 6th consecutive year, HackaDay serves as a platform to raise the competency level of future talents to better prepare them for a meaningful career in cybersecurity with the Capture The Flag competition.

This year, we introduce our first Hackathon contest that will allow students in Hong Kong and Macau to test their limit in technical skills while solving hot real-world problem. This hackathon is unlike any you would usually participate in which emphasise on the final presentation. Instead, we value the design principles, methodology and development skills you possess.

pic

Hackathon

Participants of PwC’s Hackathon are expected to have a basic understanding of developing a data lake infrastructure on a designated platform, building virtual machines, network components, databases to support one’s infrastructure and eventually auto deploy in cloud via CI/CD pipelines.

Students should also consider to include a UI UX element so that users without too much knowledge of cloud can easily define basic parameters to self-service the deployment, by providing their own account credentials and network/ storage requirements.

The deployment should make use of orchestration and automation through DevSecOps. And the deployed platform should be secure since day 1.

When
  • 26 Sep – 14 Oct
    Nomination, team formation and application
  • 24 Oct
    Online briefing
  • 30 Oct – 12 Nov
    Hackathon platform opens
  • 24 Nov
    Prize presentation for winners on HackaDay 2022 at Tai Kwun, Hong Kong
Participants
  • Full-time undergraduate university students in Hong Kong and Macau during school year 2022/2023
Judging panel
  • PwC Hong Kong Cybersecurity and Cloud team
  • Representatives from AWS and Microsoft Azure
pic

Rules

  • Team format – each university can register a maximum of two teams, and each team must consist three to four members.
  • Each team will be entitled to a credit of USD 100 for development of the final product using the assigned cloud platform (during the two week competition period).
  • We will share the detailed requirements of the respective topic on 30 Oct to eligible teams and teams are expected to submit the source code, technical documentation together with screenshots before the submission deadline. (12 Nov, 11.59pm, Hong Kong time)
  • Teams are not allowed to make any changes to the final product after the deadline. Team that violated this rule will be disqualified.
  • Top 5 selected teams to be invited to conduct a presentation of the design principles, methodology and the final outcome to the judging panel via Zoom. (During week of 14 Nov; Around 30 mins)
  • Teams are not permitted to collaborate.

Disclaimer

scoring

Scoring

  • The competition will test the skills and knowledge of teams on developing a real world application. The competition will test the skills and knowledge of teams on developing a web application and the integration with cloud (AWS or Microsoft Azure).
  • The winner will be determined by the team attaining the highest score.

Area

Ratio

Frontend: UI/UX

20%

Backend: Scalability (how reusable is the code)

20%

Backend: Reliability (bug-free)

20%

Backend: Code Readability

20%

(Bonus) Additional Functionality/ Security Consideration

20%

Documentation

10%

Technical Walkthrough

10%

Total

100%

pic

Prizes

Winners will be awarded with PwC’s internships or direct entry to PwC’s Superday for final year students and will receive sponsorships of cloud related examinations offered by AWS or Microsoft Azure. 

*With PwC Hong Kong’s Cybersecurity and Cloud team
** Visit our Career website to find out more about our internship and graduate programmes.

Get prepared

Here are some quick tutorials to get you prepared to develop an interactive web portal that retrieves user requirement for a data lake infrastructure, compile a Terraform template accordingly which can be eventually deployed to AWS/ Microsoft Azure through CI/CD pipeline.

Click here to understand more and to get you prepared for this upcoming competition.

pic

Capture the Flag Competition

When
  • 24 November 2022 (Thursday)
  • 8:30am - 4:30pm
Where
  • Tai Kwun, 10 Hollywood Road, Central, Hong Kong (Hong Kong participants)
  • Virtual (Macau and Singapore students)
Participants
  • Full-time undergraduate university students in Hong Kong, Macau and Singapore during school year 2022/2023
Judging panel
  • PwC Hong Kong Cybersecurity and Cloud team
pic

Agenda

Time

Happening

8:30-9am

Registration

9-9:15am

Welcome remarks and briefing

9:15am-4pm

Competition

4-4:30pm

Results announcement and award presentation

pic

Rules

  • Team format – each university can register a maximum of two teams, and each team must consist of a maximum of four members.
  • Teams are not permitted to collaborate during the competition.
  • The competition will test the skills and knowledge of teams under six hacking categories. Students have to attempt all to score the highest points possible:
    • Cloud – The cloud challenge tests the teams' capability to resolve real-life complex questions using cloud resources, including network service discovery, vulnerability assessment and exploitation against common network protocols and infrastructure architecture.
    • Red Team & Blue Team – The red team and blue team challenge tests the teams' understanding of the enterprise’s infrastructure and ability to execute the attack path used in real world cyberattacks, as well as some threat hunting techniques.
    • Threat Intelligence & Incident Response – The threat intelligence and incident response challenge tests the teams’ ability to respond to threat and incident on a timely basis.
    • Web – The web challenge tests the teams’ ability to analyse and exploit poor configuration and vulnerabilities in different web services and programme logic.
    • Binary – The binary challenge seeks to test the teams’ knowledge on binary analysis, analytical thought process and the ability to think out of the box.
    • Web 3.0 – The Web 3.0 challenge tests the teams’ understanding of decentralisation and token-based economics and ability to exploit known limitation of these new concepts.

Disclaimer

scoring

Scoring

  • Two to six challenges per category.
  • Difficulty level varies for each challenge, with scores ranging from 50 to 500.
  • The winner will be determined by the team attaining the highest score.
  • If two teams attain the same score, the team completing the challenge in the shortest time prevails.
pic

Prizes

Champion team

  • One-year internship* or direct entry to PwC’s Superday for final year students**
  • Full sponsorship of Offensive Security Certified Professional (OSCP) PEN-200 certification (90-day lab access)
  • Full sponsorship for CREST Practitioner Security Analyst (CPSA) examination

First runner-up team

  • Three-month internship* or direct entry to PwC’s Superday for final year students**
  • Half sponsorship of Offensive Security Certified Professional (OSCP) PEN-200 certification (90-day lab access)
  • Full sponsorship for CREST Practitioner Security Analyst (CPSA) examination

Second runner-up team

  • Three-month internship* or direct entry to PwC’s Superday for final year students**
  • Full sponsorship for CREST Practitioner Security Analyst (CPSA) examination

* With PwC Hong Kong’s Cybersecurity & Privacy team
** Visit our Career website to find out more about our internship and graduate programmes.

Interested in joining our hacking competitions?

Register through your respective university representative before 14 Oct 2022.

Hong Kong

City University of Hong Kong
Gerhard Hancke
gp.hancke@cityu.edu.hk

Hong Kong University of Science and Technology
Charles Zhang
charlesz@cse.ust.hk

The Chinese University of Hong Kong
S.Y. Chau
sychau@ie.cuhk.edu.hk

Hong Kong Metropolitan University
Dr. Jeff Au Yeung
jauyeung@hkmu.edu.hk

Hang Seng University of Hong Kong
Esther Woo
estherwoo@hsu.edu.hk

Hong Kong Baptist University
Dr. Jean Lai
jeanlai@comp.hkbu.edu.hk

Lingnan University
Natalie Ng
natalieng@ln.edu.hk

The Hong Kong Polytechnic University
Haibo Hu
haibo.hu@polyu.edu.hk

The University of Hong Kong
S.M. Yiu
smyiu@cs.hku.hk

The Education University of Hong Kong
Lemon Kwan
hmkwan@eduhk.hk


Macau

Macao Polytechnic Institute
Jacky Tang
sktang@ipm.edu.mo

Macau University of Science and Technology
Andy Cheang
bobzhang@um.edu.mo

University of Macau
Bob Zhang
bobzhang@um.edu.mo

HackaDay 2022:
Cybersecurity Conference

Find out more

pic

Balancing security and opportunity to move boldly forward.

Cybersecurity and Privacy

Contact us

Kenneth Wong

Kenneth Wong

Mainland China and Hong Kong Digital Trust & Risk - Cybersecurity and Privacy Leader, PwC Hong Kong

Tel: +[852] 2289 2719

Kok Tin Gan

Kok Tin Gan

Partner, PwC Hong Kong

Tel: +[852] 2289 1935

Follow us