The 四虎影视鈥檚 CyberHerd team claimed first place at 鈥檚 鈥淎dversary Wars鈥� Capture the Flag, capping the competitive team鈥檚 debut at what is widely regarded as the largest hacking and security conference in the world. In the process, the CyberHerd bested more than 90 teams, including a three-time reigning champion team that included professionals from Singapore鈥檚 Cyber Security Agency.
In a buzzing Las Vegas convention center packed with thousands of cybersecurity pros from around the world, the air was filled with the click of keyboards, bursts of applause, and faces displaying intense concentration. For CyberHerd team members 鈥� Bellini College of Artificial Intelligence, Cybersecurity and Computing students Sanaan Wani, a computer science major; Fagan Afandiyev, a cybersecurity major; and Nevin Southammavong a cybersecurity major 鈥� it was both awe-inspiring and a chance to prove themselves on a global stage.
Adversary Village: a calculated choice
DEF CON 33 included 72 specialized 鈥渧illages,鈥� each hosting its own competitions in areas ranging from car hacking to industrial control systems. The , which focused on simulations, threat actor emulation and tools that merge offensive and defensive tactics, stood out to the 四虎影视 CyberHerd attendees. Before committing to that village鈥檚 capture-the-flag competition, or CTF, the team scouted multiple villages, weighing rules, formats, and required skills.
In the field of cybersecurity, CTF competitions test how well contestants can exploit vulnerabilities in a system to capture or reveal hidden pieces of information.
鈥淲e checked out a lot of the villages to see which CTFs matched what we know and what we鈥檝e practiced,鈥� Wani said. 鈥淪ome needed bigger teams or used skills we haven鈥檛 worked with as much. The Adversary Village lined up with what we鈥檙e good at, but it was still tough enough to really test us.鈥�
That choice played to their strengths in web application security, APIs and cloud environments, skills honed through 四虎影视 coursework and prior competitions.
鈥淲hat we鈥檝e learned at 四虎影视 and the competitions we鈥檝e done before really set us up for this,鈥� Wani said. 鈥淥ur classes gave us the technical foundation, and the other CTFs taught us how to work as a team under pressure.鈥�
Against the best in the world
The competition roster was as intimidating as it was inspiring. 鈥淯sually, when we compete, it鈥檚 solely against other collegiate teams,鈥� Wani said. 鈥淎t DEF CON, it鈥檚 you against the world. Some people might shy away from that, but we wanted to see what we could do.鈥�
The CyberHerd鈥檚 start was far from ideal. Because they scouted so many CTFs, the lost time that the competition used to get started. But they advanced quickly. Going into the final day in fourth place, they cracked a pivotal problem that pushed them into the top three. The digital scoreboard showed their quick climb.
鈥淭hird out of 90 wasn鈥檛 a bad place to be, but we wanted to win,鈥� Wani said. He said that team clinched first place with a last-minute solve by Afandiyev and held it until time expired.
鈥淲e were on the cusp of either winning or coming in second. Luckily, we found a new attack path and that was it, no one else could catch us,鈥� said Afandiyev.
鈥淲hen we moved into first, it was both exciting and terrifying,鈥� Wani said. 鈥淵ou see your name at the top of the scoreboard, and now you have to hold it.鈥�
The CTF mirrored real-world vulnerabilities found in corporate and government systems, including one where competitors exploited a search field to reveal a database, a textbook SQL injection attack.
鈥淭his was one of the most competitive events in the world, and the challenges were not trivial,鈥� said Marbin Pazos Revilla, an assistant professor of instruction and faculty advisor. 鈥淭he students were able to connect the dots and do what they needed to win. These scenarios are very similar to how threat actors attack and exploit vulnerabilities.鈥�
Celebrating the win
When the results were announced, the CyberHerd immediately called their faculty advisors to share the news.
鈥淚t鈥檚 a huge deal for a university team to win something like this,鈥� Wani said. 鈥淲e were excited, proud, and ready to celebrate. Later that night, I even signed us up for two more competitions.鈥�
The experience was made possible through funding from , the state-wide center for cybersecurity, and its executive director, Gen. (Ret.) Frank McKenzie, expressed pride in the 四虎影视 team.
鈥淲e鈥檙e off to a wonderful start,鈥� he said.
鈥淐ybersecurity is a hands-on field, and there鈥檚 no substitute for real-world, high-pressure experience,鈥� McKenzie said. 鈥淏y backing opportunities like DEF CON, we鈥檙e giving students the chance to grow their skills, test their knowledge, and discover what it takes to perform at an elite level.鈥�
Faculty advisor Sriram Chellappan echoed McKenzie鈥檚 sentiments.
鈥淭he Bellini College of Artificial Intelligence, Cybersecurity and Computing and CyberFlorida are committed to getting our students into the competitive landscape of cybersecurity,鈥� he said. 鈥淭he CyberHerd is clear evidence of that commitment, and winning the Adversarial Wars CTF only affirms how our students are taking best advantage of opportunities we are providing them. These students are the future leaders of cybersecurity protecting national and global security.鈥�
Aside from bragging rights, the top honor came with a voucher that each team member can use for future Offensive Security certifications, which typically cost more than $1,700. Each student will choose from a range of certification options offered by OffSec.
The victory has set a new standard for the CyberHerd.
鈥淲e鈥檝e won on the biggest stage,鈥� Wani said. 鈥淣ow anything less than first is not acceptable.鈥�