By Nicole Capozziello
Published November 11, 2021
A team of computer science and engineering graduate students placed 5th worldwide and 1st in the United States in the DEFCON AutoDriving Capture the Flag (CTF) competition organized by Baidu.
Over 90 teams participated in the event, which focuses on autonomous driving security.
“This was our first time participating in the AutoDriving CTF and we are very proud of the team,” says Ziming Zhao, an assistant professor in the Department of Computer Science and Engineering and one of the team’s advisors.
“Congratulations to the whole team,” says Jinhui Xu, professor and chair of the Department of Computer Science and Engineering. “High impact international competitions like these are a great way to showcase the talented students in our department and at the University at Buffalo.”
With safety as the No.1 priority for autonomous driving, the contest encouraged participants to exploit and defend autonomous driving vehicles by all means, including but not limited to robust physical adversarial attacks and defenses in the form of camouflage stickers and road graffiti; adversarial road patches; sensor spoofing/hijacking; and multi-sensor fusion manipulations.
“Competing alongside some of the leading cybersecurity researchers from around the globe in these CTFs competitions helps build our confidence as cybersecurity researchers,” says Nishant Vishwamitra, a PhD student in the Department of Computer Science and Engineering and the Team Cacti leader.
In preparation for the competition, the team met regularly to study and practice on example challenges and the 2020 version of the competition.
“On the day of the CTF, our team had a clear division of tasks, which helped us be successful,” said Zheyuan Ma, a PhD student and member of Team Cacti.
“A key part of studying security is putting skills to the test in practice. Hacking challenges known as CTF competitions are a great way to do this,” says Zhao.
“These competitions push us to think as efficient cybersecurity researchers, as hackers and as forensic investigators," adds Vishwamitra. “We learn transferrable skills that we can apply to any cybersecurity research area.”
Hongxin Hu, an associate professor and Team Cacti’s other advisor, says, “For our students, this kind of competition is a really good chance for them to gain hands-on skills. It can also help them find new research problems.”
One student in the lab is already working on a research direction directly motivated by this CTF competition.
In the future, Team Cacti plans to participate in more software, hardware, and CTF competitions. Hu adds, “We hope to recruit more undergraduate students and underrepresented students to our team.”
Prior to this competition, the team placed 9th during the spring semester in the MITRE Embedded CTF competition.
In addition to Vishwamitra and Ma, other team members include PhD students Xi Tan and Qiqing Huang, and masters’ students Shaik Sabiha and Keyan Guo.
The competition was held as part of DEFCON 29, on August 6, 2021. It was sponsored by BCTF (Baidu Capture The Flag) and the University of California at Irvine.