| |
IIAS 6000
Rationale:
Cyber defense competitions are competitive events between academic institutions. The manner in which these events are conducted reflects upon the participants and effectiveness of each participating institutions academic programs. To demonstrate integrity and fair play, each cyber defense competition is expected to adhere to reasonable standards of play for accurate representation and effective measurement to industry and other academic institutions.
IIAS 6000
The goals and / or objectives of each competition are to be made available to all participants, sponsors and observers prior to the start of the event.
IIAS 6001
The competition is to be structured in a manner as to evaluate the defensive and responsive skills of each of the participating defensive teams under exact hardware, software application and operating system configurations. After competition hours instruction is not permitted to blue team members during the event.
IIAS 6002
Cyber Defense competitions may be established and organized by academic institutions. Each academic competition is to be conducted by relevant industry professionals as much as possible. Event scoring and monitoring by relevant industry professionals is required.
IIAS 6003
All participating team advisors agree to the competition standards, goals, guidelines and rules of engagement prior to the start of the competition. Demonstration of acceptance can be by e-mail notification to the Competition Director or by a signed acceptance statement prior to the start of the competition.
IIAS 6004
All participating industry partners associated with the respective competition agree to all competition standards prior to start of the competition, including goals, guidelines and rules of engagement. Demonstration of acceptance can be by e-mail notification to the Competition Director or by a signed acceptance statement provided prior to start of actual competition activities. Competition standards include but are not limited to the following:
- Statement of ethics
- Goals of the competition
- Team organization
- Scoring methodology
- Competition rating effectiveness
- Approved inject scenarios
- Competition Topology
- Competition equipment
IIAS 6005
The Chief Judge and Competition Director approve competition standards prior to start of the competition, including goals, guidelines and rules of engagement. Demonstration of acceptance can be by e-mail notification to the competition director or by a signed acceptance statement provided prior to start of actual competition activities. Competition standards include but are not limited to the following:
- Statement of ethics
- Goals of the competition
- Team organization
- Scoring methodology
- Competition rating effectiveness
- Approved inject scenarios
- Competition Topology
- Competition equipment
IIAS 6006
White and gold team members shall have no social contact with blue team members from start to finish of the competition. This includes after competition hour activities. This standards intent is to minimize any image of improprietary during the competition.
IIAS 6007
All team members, including white, red, blue, green, orange or other team members must sign participant agreements subjecting them to the stated rules of engagement and ethics statement.
IIAS 6008
All signed statements by all competition participants will be organized and compiled for ready review by industry partners, the Chief Judge and the Competition Director. This includes white, red, blue, green, orange or other team members.
IIAS 6009
Faculty, administration or staff of any participating blue team shall not be involved in scoring of any activities for the competition.
IIAS 6010
A briefing and summary of the competition activities and results will be provided to the participating teams. Discretion by the Competition Director will be exercised in what information is provided and how it is provided.
IIAS 6011
Red team members shall have no prior knowledge as to which blue team member is assigned to any particular blue team network.
IIAS 6012
Scenario injects are designed to demonstrate the technical skills, response skills, recovery skills, and business professionalism of each team under varying circumstances and environments. Scenario injects are to be issued to blue team members by designated white, gold or other team members.
IIAS 6013
The Competition Director is to make and / or approve, or delegate all team assignments. The Competition Director may be a representative from industry or academia, however, if a scoring dispute or decision that may involve the outcome or results of the competition, any academic representative must exclude themselves from any decision and the results reverts to a panel consisting of the Chief Judge and three gold or white team members as selected by the Chief Judge.
IIAS 6014
To demonstrate skills derived from prior instruction, faculty representatives from participating blue teams may not provide any defensive or skills instruction to their associated blue team members from the start to the end of the competition.
IIAS 6015
Scenario injects are intended to and should be designed to demonstrate the technical, responsive, recovery, hardening skills, and business professionalism of each team under identical circumstances and environments. Inject scenarios may consist of service requests, hardware reconfigurations, simulated hardware failures, or business activities. Thus, scenario injects are to be distributed to all blue team captains simultaneously, or within a five minute window. If distribution of a particular scenario inject to the blue teams is not conducted with equality, the scenario inject should be recalled from all blue teams and not counted.
IIAS 6016
The integrity and effectiveness of the scoring mechanism and procedures will be demonstrated and verified to Competition Director and the Chief Judge prior to start of the competition.
IIAS 6017
All scores and points for each individual blue team will be reviewed and certified by both the Competition Director and the Chief Judge prior to being awarded to the respective teams.
IIAS 6018
All final scores for the competition will be reviewed and certified as accurate by both the Competition Director and the Chief Judge prior to being awarded to the teams for placement status.
IIAS 6019
The integrity of the competition equipment shall be demonstrated to the competition director and chief judge and approved as reliable and meeting the goals of the competition prior to start of the competition.
IIAS 6020
Room access logs for each blue team will be maintained for any access to each team room from beginning to end of the competition and will be provided to the competition director at the end of each day.
IIAS 6021
Network scoring logs will be secured and provided to the competition director at the end of each day.
IIAS 6022
Scoring inject results will be provided to the competition director at the end of each day.
IIAS 6023
Scoring mechanism and competition logs security will be demonstrated to the competition director and chief judge prior to start of the competition and at any time during the competition. The means by which the integrity of the scoring is maintained during, before and after the competition has ended will be recorded in the Competition Results Section of the Competition Log Book 20 pt's.
IIAS 6024
The integrity of any competition logs will be maintained throughout the competition with the results provided to the competition director upon completion of the competition.
IIAS 6050
IIAS 1000 series - International Industry and Academic Standards may be reviewed and revised as determined by the IIAS review board.
|
