Rules

• Competition Director – Individual leading the operation of the event
• White Team – Competition officials tasked with running the competition, including configuration of the environment
• Purple Team – Competitors tasked with defending systems against other teams, and with attempting to compromise the systems of other teams
• Blue Team – Competitors tasked solely with defending systems against other teams.
• Red Team – Unscored team attempting to compromise the systems of the defending teams.
• Team Captain – Team member of a Purple Team acting as the primary liaison between the Purple Team and the White Team

• Questions will be directed to the White Team or competition organizers.
• Printed reference materials (books, magazines, checklists) are permitted in competition areas and teams may bring printed reference materials to the competition. Digital resources are also allowed.
• Throughout the competition, White Team members will occasionally need access to a team’s system(s) for scoring, troubleshooting, etc. Teams must immediately allow White Team members’ access when requested.
• Teams must not connect any devices or peripherals to the competition network unless specifically authorized to do so by White Team members.
• Teams may not modify the hardware configurations of competition systems. Teams must not open the case of any server, printer, PC, monitor, KVM, router, switch, firewall, or any other piece of equipment used during the competition. All hardware related questions and issues should be referred to the White Team.
• During a competition period, teams may not remove any provided equipment from the competition area unless specifically authorized to do so by White Team members.
• Teams must compete without “outside assistance” from non-team members from the start of the competition to the end of the competition (including overnight hours for multi-day events). All private communications (calls, emails, chat, texting, directed emails, forum postings, conversations, requests for assistance, etc) with non-team members that would help the team gain an unfair advantage are not allowed and are grounds for disqualification and/or a penalty assigned to the appropriate team.
• “Destructive” attacks that may adversely affect hardware or competition infrastructure are prohibited. These types of attacks are not allowed and are grounds for disqualification and/or a penalty assigned to the appropriate team. Examples include but are not limited to: Denial of Service attacks, ARP Poisoning, DHCP exhaustion, hardware side-channel attacks, etc.
• Physical attacks/social engineering are strictly prohibited.
• Attempts to reverse-engineer, modify, or tamper with competition scoring and/or infrastructure is strictly prohibited. These actions are not allowed and are grounds for disqualification and/or a penalty assigned to the appropriate team.
• Teams must not modify the network configurations of provided systems.

• All activity on competition networks must be related to the competition.
• All network activity that takes place on the competition network may be logged and subject to release. Competition officials are not responsible for the security of any information, including login credentials, which competitors place on the competition network.
• While designing custom tools and scripts is allowed, only systems that are physically present at the event may be used to exploit and manage systems. Teams may not use external systems as part of their command and control mechanisms nor may they use external systems as staging points for their payloads. These and any similar activities must be done from systems that are physically present at the event.
• It is permissible to use external chat and email applications for sharing information between team members as long as these are not used on provided systems (exception for provided laptop to teams that did not bring their own).
• Paid tools are not allowed. Software that is freely available to all teams is allowed. Paid tools that allow for temporary use without a fee (such as a trial) are allowed.

• All participants, including competitors, sponsors, and guests/viewers are expected to behave in a professional manner. Activities such as excessive swearing, sexual harassment, disrespectful or unruly behavior, consumption of illegal drugs, unauthorized consumption of alcoholic beverages, and others are considered to be a violation. This is not an exhaustive list as such other actions/behaviors deemed either improper or unprofessional, by staff, may be determined to be a violation.
• No physical or verbal altercations between competitors and/or competition staff/sponsors is allowed. Violation may result in immediate disqualification from competition pending decision by competition staff.
• Participants must also follow the conduct rules of the hosting event, such as the rules of the conference and/or physical venue.
• These rules apply to all DSU Computer Club security competitions and events involving its activities and/or participants.
• Any and/or all violations may lead to a punishment as little as a warning, to disqualification from the current event, to an outright ban on participating in future events. Investigating possible violations and deciding punishment severity is the responsibility of solely the competition staff. All decisions are final.

• All data collected throughout the course of the competition, including but not limited to system/network/application logs, are solely owned by DSU Computer Club. Participation in the competition is implied consent to this collection. DSU Computer Club is not responsible for the security of said information; including anything personal and/or private in nature that was willingly provided by the participant.
• DSU Computer Club is not responsible for data collected by other participants in the event.
• All data collected by the hosting conference, sponsors, viewers, and/or physical venue is not under the control of DSU Computer Club.
• Flash and or video photography may be taken of competitors by competition staff and/or its approved media, and consent is implied by participating in the event. Participants may request to not be photographed/videoed at any time.
• We are not responsible for other entities that may take photos/video of participants. If you’d prefer to not be, then please inform the person of this. Contact competition staff if others are not abiding by your privacy request and we will do our best to resolve it.
• Protests by any team must be presented in writing by the Team Captain to the White Team as soon as possible. The competition officials will be the final arbitrators for any protests or questions arising before, during, or after the competition. Rulings by the competition officials are final. All competition results are official and final as of the Closing Ceremony.
• In the event of a team disqualification, the entire team must leave the competition area immediately upon notice of disqualification and is ineligible for any individual or team award.

(Rules are subject to change at any time)