CMPS 476 - Lab 1

Lab 1 - Team Selection

In this lab, you will form 1-4 person teams for the capture the flag contest. For this lab's "write-up", give me your team name, your team account name, and the names of all of the members of your team. One write-up per team is sufficient.

Each team should have at least one member who has taken CMPS 340 (Digital Forensics) on it since that course has shown people how to use a variety of security tools such as Wireshark, Nessus and so on. Each team will be designing one flag in the contest. You will have the next several lab weeks to work on your team's flag. Possible flag designs will be discussed in class, but it's up to each team to ultimately decide on what flag they wish to design.

For most flags, you will need to create one or more virtual machines that will house the data and network traffic necessary for the flag to be captured. Each team will have an account created on a set of machines in Rm 315 that will allow you to set up virtual machines.

Once your team has its account, you will need to select a time to create you virtual machines. If any team members has a time conflict for the normal lab time, your team can opt to use Rm 315 at another time during the week when it is available. For example, it should be available most Fridays during lab time since we do not have lectures on Fridays (except for weeks when an engineering faculty candidate is giving a talk).

Ground Rules

This is NOT an isolated network (the class is too big). You may NOT use active attacks or require active attacks for your flags. Think passive (e.g. sniffing packets, hiding information in "plain sight", etc.) when designing your team's flag. Port scans are allowed, but only using "safe" scans.
You may not attempt to interfer with any of the workstations in the room. This includes attempting to log in as anything other than your team login (or 'student' login), attacks against the machines, and so forth.
You must follow the professional ethics standards that will be discussed in class. In brief, all skills learned in this course and all research conducted for your final project must be applied in a legal and ethical manner. We want you in the headlines for good reasons, not bad ones.