400-718-5868
BIG Cloud Security Operations Center


Offensive and defensive event servicesSolution

Use competition to promote learning and competition to promote defense, and create a practical network security talent training ecosystem

Service background

📊 Industry status quo

As cloud native, IoT, and mobile Internet flourish, security boundaries continue to blur. In 2024, domestic companies will encounter an average of four major cybersecurity incidents per quarter, with data leaks and ransomware attacks occurring frequently.

👨‍💻 Talent gaps

According to a report from the Ministry of Industry and Information Technology, my country's network security talent gap is as high as 1.4 million, and high-end offensive and defensive countermeasures talents are particularly scarce.

🏛️ Policy driven

The national "Cybersecurity Talent Development Action Plan (2021–2025)" proposes to use actual combat drills as the starting point to accelerate the cultivation of composite and innovative cybersecurity teams.

Competition Mode

🏁 CTF Capture the Flag Competition

Answers to questions (Web, reverse engineering, passwords, forensics, steganography, etc.)

  • Environment: static/dynamic FLAG, one person per container
  • Features: Submit ratings in real time
  • Results: Test theoretical knowledge, problem-solving ideas and speed

⚔️ AWD Attack and Defense Game

Attack With Defense, attack and defense simultaneously

  • Environment: Exclusive target drone, SSH remote connection
  • Features: Multiple rounds of offensive and defensive scoring
  • Results: Comprehensive examination of vulnerability discovery, repair, and defense strategies

🛡️ RDG real-life defense game

Real Defense Game, focusing on repair and reinforcement

  • Environment: Simulate enterprise network topology
  • Features: Vulnerability detection-reinforcement-retest closed loop
  • Results: Improved operation and maintenance reinforcement capabilities and emergency response capabilities

📚 Theoretical Knowledge Contest

Single-choice/multiple-choice/false-false questions combined with situational questions

  • Environment: The question bank covers regulations, application security, etc.
  • Feature: Standardized scoring
  • Results: Evaluate the mastery of safety regulations and basic theories

Service Necessity

🔍

Actual verification

Put security construction results into a real confrontation environment, and promptly discover weak links such as configurations, strategies, and emergency plans.

👨‍🎓

Talent development

Through the graded competition system, we provide continuous incentives from entry-level to advanced levels, and build a competency ladder from newcomers to experienced players to experts.

🚨

Risk warning

The security logs and attack source tracing generated during the event can provide important intelligence for the enterprise security operation center.

🏆

Brand Endorsement

Organizing competitions in conjunction with authoritative platforms, universities, and industry associations will help enhance the organization's influence and credibility in the industry.

Pain points and solutions

Pain points Solution
Insufficient visualization 3D large screen situation + Web dashboard, supporting real-time viewing and playback
Event organization costs are high Modular solution, providing one-stop delivery of competition questions, platform, operation and maintenance, and training
Information is scattered and difficult to manage Centralized management backend: registration, review, results, and unified resource scheduling
Fairness is difficult to guarantee Dynamic FLAG + container isolation + multiple audit logs, full-link anti-cheating
Slow question updates and difficult docking scenarios The question bank continues to iterate: self-research + cloud updates + customer customization, covering 30+ technical directions

Service content

Solution design

  • Holding format: online, offline or mixed multiple scenes
  • Process planning: registration → review → pre-match drill → formal competition → review
  • Rule customization: scoring rules, bonus points mechanism, reward and punishment details

Customization of competition questions

  • Requirements collection: Research business scenarios, compliance requirements, attack and defense priorities
  • Question design: Web vulnerabilities, binary reverse engineering, red-blue confrontation, etc.
  • Environment deployment: Docker/K8s automation to ensure environment consistency

Pre-match training

  • Training target: participants and event organizers
  • Training content: platform use, question classification, offensive and defensive skills
  • Practical drill: small-scale rehearsal to familiarize yourself with the process and tools

Field work

  • Devices and networks: servers, network topology, VPN/FRP deployment
  • Personnel coordination: check-in, grouping, fault response, volunteer management
  • Security: social engineering protection, on-site network isolation

Event operation and maintenance

  • Platform monitoring: real-time monitoring and alarming of load, network, and logs
  • Emergency response: one-click rollback, container reconstruction, fault isolation
  • Data backup: real-time database writing and automatic snapshots to ensure data security

Event Promotion

  • Media release: press releases, professional media linkage
  • Social operations: official WeChat, Weibo, technical community promotion
  • Brand cooperation: linkage with universities and industry associations

Post-match review

  • Score report: score ranking, question passing rate and other dimensional analysis
  • Vulnerability explanation: anatomy of key questions, sharing of attack and defense ideas
  • Improvement suggestions: Security improvement suggestions based on logs and traceability

Our advantages

🖥️ Self-developed platform

Supports 300+ concurrent, one-click multi-mode switching

🚀 Leading technology

Dynamic FLAG, traffic mirroring, 3D visualization large screen

🏅 Rich cases

A total of 200+ events, covering universities, government, telecommunications, medical and other industries

📝 Question bank ecology

1000+ questions, cloud updates in seconds, multi-terminal interoperability

👥 Professional team

50+ security experts, 30+ operation and maintenance engineers, event management consultants

🔧 Flexible customization

The process, question type, difficulty, and operation and maintenance services can all be customized as needed