Home

MITRE eCTF 2024

A picture of the eCTF 2024 MSU team members in one of the engineering building classrooms
Our 2024 eCTF team!

The embedded cybersecurity competition is an annual semester-long CTF run by MITRE Corporation. It is an attack-defense CTF which makes participants dive into cryptography and embedded firmware, and design a secure system that holds up to attack against other universities.


In 2024, the objective was to design firmware for a medical device consisting of three boards - an application processor and two auxillary components which would model devices like an insulin pump. Our goal was to design and implement a protocol for all boards to verify each other before booting, and provide a secure communications layer that provided integrity and authenticity of commands sent between boards. Our design used public key cryptography combined with root certificates to perform a secure handshake before boot, and used symmetric encryption with AEAD for post-boot communications that was resistant to tampering.


Members of the cybersecurity club took part in the competition and placed 9th out of over 95 international teams! We also had the opportunity to present our design at the award ceremony in Boston.


Our design

Design Document
Poster featuring details about our design

Photos

Brainstorming our protocol, and our first successful handshake run!
Team members in Boston at the award ceremony

Team Members

Udbhav Saxena, Felipe Marques Allevato, Riley Cook, Aashish Harishchandre, Aditya Chaudhari, Fatima Saad, Samay Achar, Krishna Patel, Radhe Patel, and Charles Selipsky, Nika Ghasemi Barmi

Advisors: Dr. Qiben (Ben) Yan, Adrian Self