PHDays 10 contests: hacking ATMs, security systems, and smart contracts; machine learning capabilities and vulnerabilities

As the pandemic recedes, the PHDays forum returns in May in near pre-Covid format: with interesting talks, The Standoff cyberbattle, and, of course, traditional competitions. Anyone can take part in the open contests—all you need is a laptop, curiosity, and enthusiasm. For security reasons, we suggest taking part in all events online.

There will be an opportunity to practice attacks on banking systems in the Payment Village, where our experts will explain various payment devices and their vulnerabilities. In the special demo zone, guests will be guided through attack scenarios on ATMs and POS terminals. The Payment Village is supported by IsimpleLab, Azbuka Vkusa, and ARinteg.

Blockchain Track will bring together enthusiasts of blockchain security and decentralized finance (DeFi) to talk about how cryptocurrency exchanges get hacked, analyze the subtle vulnerabilities in smart contracts, and share their opinions on security methods. Also up for discussion will be issues of scaling blockchain networks and development prospects for L2 solutions. As a smart contract hacker, you can test your skills in the DeFi Hack online competition (requires a local Ethereum client or browser extension (MetaMask)).

The rapid development of artificial intelligence (AI) technologies and their implementation in information security are bringing new opportunities as well as new threats. In the AI Track section, you can listen to reports on the topic of AI in security. We have invited experts to share their experience of applying machine learning (ML) for security, and researchers to tell about the risks of AI-driven solutions. Meanwhile, the AI CTF competition will introduce infosec specialists to various ML techniques in capture-the-flag gaming and demonstrate the vulnerabilities in services that provide it. The tasks of varying complexity will be of interest not only to experienced CTF players, but also to beginners who want to get a handle on the topic.

The Network Village will provide a platform for expert presentations on the topic of network security. At the stand, fans of security system robustness testing will be able to take part in the IDS Bypass contest. Participants will try to hack five vulnerable nodes and capture all the flags. The task is complicated by the intrusion detection system (IDS), which monitors traffic and blocks attempts to attack the network. The vulnerable services are selected so as to force competitors to focus on bypassing the IDS.

The number of participants in the contests is limited. To register your participation, please fill out the form.

Stay tuned for more details about the contests in the near future. Follow our news and train your brain before battle commences!

This year, PHDays is co-organized by Innostage, which specializes in multidiscipline IT solutions. The forum's business partners are Rostelecom-Solar, a Russian provider of infosec services and technologies, and MONT, which distributes software for any business. PHDays technological partners are Russian supermarket chain Azbuka Vkusa, e-payment service RBC.money, and remote banking software developer iSimpleLab. Represented at the PHDays exhibition will be Axoft, Crosstech Technologies, ICL, OCS Distribution, R-Vision, Security Vision, and Infosystems Jet. The competition program partner is ARinteg.