The latest Codebreakers competition organised by Kaspersky among cybersecurity specialists from more than 35 countries including the UAE, Saudi Arabia, Turkiye, and South Africa has revealed that reverse engineering is the most complex task performed by InfoSec practitioners. Reverse engineering implies detailed examination of a software product or web application to detect vulnerabilities or hidden features. It covers a broad range of areas, including decompilingand disassembling executable files and libraries, and analysis of system data.
According to the external research, the vast majority of cyber professionals state that the cybersecurity skills shortage and skills gap have not improved over the past few years and even got worse. To help InfoSec practitioners enhance their skills, Kaspersky has been continuously running expert trainings both online and offline, organising bootcamps and workshops.
In June 2023, Kaspersky conducted the Codebreakers cybersecurity competition with over 550 participants from 35 countries. The countries which participated are: Saudi Arabia, France, Bangladesh, Paraguay, Malaysia, Spain, Vietnam, India, Hungary, Pakistan, Brazil, Romania, Russia, Luxembourg, UAE, Turkey, Egypt, Iran, Kazakhstan, Belgium, Germany, Tanzania, Singapore, Italy, USA, Uzbekistan, Kenya, Indonesia, Togo, South Africa, Korea, Portugal, China and Peru.
The contest was designed to test different hard skills of InfoSec professionals in a limited timeframe and reveal strengths and weaknesses in their expertise.
Experts from Kaspersky Global Research and Analysis Team (GReAT) set a number of cybersecurity challenges in three different tracks: Threat Hunting with Yara, Reverse Engineering, and Incident Response. Participants were given such tasks as analуsing an attack scenario on a corporate network and collecting evidence; writing Yara rules for detecting malware; reverse engineering a program and uncovering its secrets by cracking the APK obfuscator; training a machine learning model. YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples.
Only 18 participants were able to solve all the tasks. The best results were shown by InfoSec practitioners from the Czech Republic and South Korea.
According to the competition results, the tasks that were most complicated for the participants were related to reverse engineering as they required specific knowledge of system programming, features of x86 and ARM architecture and practical skills in working with disassemblers (e.g., IDA Pro, Ghidra) and debuggers (eg x64dbg/WinDBG/OllyDbg).
The tasks that were solved fastest were associated with Yara, one of the most familiar and popular tools among those that analyse malicious code. These tasks were the easiest to perform.
“We tried to make the CTF tasks as close as possible to the real-world challenges InfoSec professionals face every day. Participants were required to apply their knowledge in a variety of situations, ranging from beginner-friendly to expert level, testing their readiness to deal with advanced cyber threats in future scenarios. Congratulations to the finalists who managed to solve all challenges and I am confident they will fully benefit from the free training offered by Kaspersky,” says Dan Demeter, Senior Security Researcher at Kaspersky.
“We are trying to keep up with the times and contribute to better professional background of InfoSec practitioners. Our Expert Training portfolio provides courses covering different cybersecurity topics, from basic knowledge in reverse engineering and writing Yara rules to advanced methods of finding threats and malware analysis. We believe that our cybersecurity competition will help participants to reveal and work on the areas that need improvements to be able to cope with even the most complex threats in the future,” comments Yuliya Dashchenko, Team Lead of Expert Trainings at Kaspersky.
The winner of Codebreakers received free access to one of Kaspersky’s Expert Trainings. Others were given a big discount for training programs.
“I enjoyed that the competition was well balanced and contained good challenges. I loved the scoring system as well and was happy to play with Klara,” says one of the participants under the nickname Termopan.
Kaspersky is a global cybersecurity and digital privacy company founded in 1997. Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection, specialized security products and services, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. Over 400 million users are protected by Kaspersky technologies and we help over 220,000 corporate clients protect what matters most to them.