In this paper, we take a close look at how CTF can be used in cybersecurity education. We divide the CTF competitions into four different categories, which are attack-based CTFs, defense-based CTFs, jeopardy CTFs and gamified and wargames CTFs. We start our analysis by summarizing the main characteristics of different CTF types. We then compare them with each other in both learning objectives and other aspects like accessibility. We conclude that combining all four CTF formats can help participants build one's cybersecurity knowledge. By doing that, we hope that our findings will provide some useful insights for future CTF educators.
翻译:本文深入探讨了CTF如何应用于网络安全教育。我们将CTF竞赛划分为四类:攻击型CTF、防御型CTF、解题型CTF以及游戏化与实战演练型CTF。分析首先总结了不同类型CTF的主要特征,随后从学习目标及可访问性等多维度进行对比研究。研究结论表明,融合四种CTF形式有助于参与者构建完整的网络安全知识体系。通过此项研究,我们期望为未来的CTF教育者提供有价值的实践参考。