Three consecutive national competitions!The secret of this Fudan team is ...

Author:Fudan University Time:2022.09.04

A few days ago, the Finals of the 15th National College Student Information Security Competition -Innovation Capability Practice Finals was successfully concluded. The Bai Ze team from Fudan University successfully defended the championship with a big score, achieving the "three consecutive championships" of Fudan in the top domestic college student information security competition. This is also the first "three consecutive championships" in the history of the event.

Four team members Sun Xinqian (first from left), Zhao Yudi (second from left), Liu Fengyu (second from right), Li Zhongrui (first from the right), and the instructor Zhang Yuan (third from left)

This is the third time Bai Ze's team on behalf of Fudan's network security event. After 4 months, after the online preliminary round, offline partition competition, and three rounds of fierce competition in the national finals, they stood out from the 2218 participating teams across the country. Finally, they topped 8398 high -level lists. A heavy gold medal.

Behind the "three consecutive championships", what is Bai Ze's secret?

It is inseparable from the strong scientific research atmosphere in the laboratory, and it is inseparable from the mutual learning between teachers and students. Successful answers may be hidden in the reunion after each game, every week, the mobs are unable to fight, each of which is the late night to overcome difficulties.

The hard -won "three consecutive championships":

"Counterattack" a day, more than 2,000 points in the second place

The Bai Ze team is a young team hatched by Fudan University Software and Safety Laboratory in April 2018.

"There are Bai Zetu at home, and the monsters are eliminated." As a Swiss beast in the myths of ancient Chinese floods, "Bai Ze" was regarded as auspicious names, appearance and deer spells for all the ghost names, appearances, and expels from the world. The team is named after "Bai Ze" to highlight its original intention of guarding the security of the network space.

On the road to maintaining network security and protecting user data security, the Bai Ze team continued to move forward. From a small team that was originally only 7 people, it developed into a team covering the number of students and players in all stages of Benshuo. Essence In just 4 and a half years, the team has won a number of awards for CTF (Capture The Flag, which means network security offensive and defensive flag) and security attacks. More than 10 papers were published at top academic conferences in the field of network security.

Cyber Security Technology Competition is a simulation of cyber warfare in the real world. Captain Zhao Yudi introduced that the BREAK and FIX links of this finals adopt a dynamic offensive and defensive competition mode. Each team is an attacker and defense party. Essence This has a very comprehensive investigation of the participating team's penetration and protection capabilities.

Although the participating experience is rich, Fudan's "three consecutive championships" this year are not easy.

The number of participants and the number of participants have reached a record high, and the competition is extremely fierce. In fact, until August 23, the last minute before the end of the first day of the finals, the ranking was still refreshing and changing. The final point system is implemented, and every time the team solves, the corresponding score will be obtained, but at the same time, the score obtained by the solution will be reduced over time. Because for a long time on some topics, the Bai Ze team was temporarily ranked fourth at the end of the first participation day.

"We were running against time." Zhao Yudi said that everyone was under pressure at that time, but fortunately turned the pressure into motivation. The next day, the team members collaborated and cooperated with each other to solve two high -value topics, and finally successfully won the championship with more than 2,000 points in more than 2,000 points.

Behind the championship: Saiyan combination, long teaching, team inheritance

The network world is complex and changing. The actual combat competitions of network security often conduct comprehensive inspections of Crypto, REVERSE, Web (Network), MISC (Miscellaneous), and PWN (binary attack). "White hats" "division of labor collaboration and team complementation.

There are four members of the participating teams, each with its own specialties. "Web direction and code audit will often be handed over to the captain Zhao Yudi; Sun Xingan is the main force of the reverse project; Liu Fengyu, who is also a web direction, is good at the topic of Java class; Li Zhongrui is mainly responsible for the binary attack and loopholes of PWN." The instructor Zhang Source introduction.

The four players are composed of two old members and two new members, both from the system software and security laboratories led by Professor Yang Yan of the School of Computer Science and Technology. The associate professor Zhang Yuan is both a master's graduate instructor and a coach of the competition.

Zhang Yuan introduced that the "old -fashioned new" model has always been the key to team building. The Bai Ze team mainly absorbs talents from the laboratory's newly enrolled masters and doctoral students, and is also open to interested and capable undergraduates to gradually form a stable talent echelon. In order to allow more students to understand this direction, Zhang Yuan faced a professional course to undergraduate students- "System Security Offensive and Defense Technology". Taking the CTF competition as an example, we can introduce network security knowledge. Because of this course, Li Zhongrui had a strong interest in binary and network offense and defense during the undergraduate period. After studying, he joined the laboratory and grew into the main player of the Baize team. "Teacher Zhang led us to the field of network security from 0 to 1," he said.

In 2020, the Baize team participated in the 13th National University Student Information Security Contest-Innovation Practice Race Finals, the first winning championship is different from the professional CTF team. The Baize team is based on the laboratory. The main line of the work, so the team's daily training pays more attention to the practice of the game and combining the research. "There are many types of topics in the competition to test safety offensive and defensive skills in different fields. I try to combine the direction where each player is good at with his scientific research direction. In this case, students can also exercise offensive and defensive practice while doing scientific research projects. At the same time, some achievements in our scientific research can also support competition competitions. "Zhang Yuan explained.

When it comes to the relationship between "scientific research" and "competition", Zhao Yudi summarized with "mutual achievements". Li Zhongrui said: "It is based on the solid knowledge accumulation of usual scientific research work and tempering professional skills. In the competition, you can be calm and respond to new fields and new problems. In turn, the competition is a platform that communicates as a foreign world, which can make us even more Understanding the latest needs of society, and at the same time, the simulation environment of the competition can prompt us to discover new research points. "

In fact, Zhang Yuan's previous research direction was mobile security. He had not participated in offensive and defensive competitions before. However, as a team coach, in the process of guiding students, he must continue to learn about the latest developments in the frontier and enhance innovation capabilities. "This is a process of teaching. I also grow up with my classmates."

In addition to winning, Zhang Yuan also hopes that the players can receive a sense of belonging in the team. When the team members described the relationship between Mr. Zhang Yuan and everyone, "We are brothers and comrades."

Guarding the Internet and cultivating talents,

Contribute to the development of China's network security industry

For Bai Ze's players, staying up late is no stranger to life. Some games are 48 hours uninterrupted, and the time is very tight. The players can only take a while to rest for a while. The fatigue on the body is inevitable, but they have never regretted the decision to join the laboratory and team.

"It seems that we are a bit similar to the online hacker, but in fact, we are just the opposite of the hacker. It is the 'white hat' that confronts the hacker." In Li Zhongrui's eyes, although it is also discovered vulnerabilities, the two parties have a clear intention to use the technology of technology. Different, "technology" is a tool for illegal profit in hacking, but in the "white hat" of guarding network security, it has become a weapon to maintain netizens and national security.

Since its establishment, the team teachers and students have accepted the teaching concept of "integration of knowledge and action" and practiced the goal of "building a strong shield for the country and breeding talents for the industry". Team members Li Zhongrui believes that the field of network security has just emerged. Many new technologies are emerging. The network space as the fifth territory after land, sea, air, and heaven has become increasingly prominent in the importance of the country and the economy and society. "Many players of the Bai Ze team have chosen this field because of their interests and love. We want to do our best to contribute to the development of China's network security."

In addition to scientific research and competitions, the Baize team has also established cooperation with relevant national ministries and commissions, as well as leading enterprises such as Baidu, Huawei, and Ali to facing major national needs, transforming scientific research results, and relying on basic research to support key technologies in the industry.

"I believe that more and more talents will join our team." Zhang Yuan looks forward to this guarding network security team that can continue to grow, sending more "solid theoretical foundations, excellent offensive and defensive practice, innovative, courageous responsibility for the country "The top talents in the field of network security also allowed more research results to get out of the laboratory and escort network security.

Payment: School Rong Media Center