WEBVTT 00:02.600 --> 00:08.300 Welcome to Space Security Challenge 2020, HackASAT, the final event. 00:08.300 --> 00:17.220 As the democratization of space opens up a new frontier for exploration and innovation, we see new cybersecurity vulnerabilities emerging. 00:18.140 --> 00:29.920 The Space Security Challenge is designed to inspire the world's top cybersecurity talent to develop the skills necessary to secure this last frontier of cybersecurity, space. 00:30.080 --> 00:32.820 And already we've made a ton of progress. 00:32.820 --> 00:34.320 I'll catch you up. 00:34.320 --> 00:44.040 This spring, we hosted over 2,000 teams who worked their way through a set of foundational space cybersecurity challenges in our HackASAT qualification round. 00:44.040 --> 00:48.440 Now, eight finalist teams are stepping up to the ultimate challenge. 00:48.440 --> 00:51.520 They are hacking a satellite. 00:58.890 --> 01:02.990 Welcome to Space Security Challenge 2020, or HackASAT. 01:02.990 --> 01:06.790 I'm your host, Jordan Wines, and I'm very excited to be with you today. 01:06.790 --> 01:20.570 I'm here in Melbourne, Florida at HackASAT HQ, where eight satellites are spinning out of control as the teams do their best to restore functionality, all for a piece of a $100,000 prize pool. 01:20.570 --> 01:34.950 These teams from 11 different countries around the world include not only some that are very familiar to those of us from the Capture the Flag, or CTF community, but also include many newcomers who assembled just to answer the call for HackASAT. 01:34.950 --> 01:36.190 Let's meet our teams. 02:17.570 --> 02:25.850 To get to this final event, individuals on these eight teams had to beat out over 6,000 other competitors for a coveted invitation. 02:25.930 --> 02:41.910 This required mastery not only in traditional CTF hacking skills like reverse engineering and vulnerability research, but also in areas new to the CTF community, including orbital mechanics, astrophysics, space-based communication systems, and many others. 02:41.910 --> 02:50.510 Today and tomorrow, each of our eight teams will race the others through a series of challenges to regain control over their Flatsat. 02:50.510 --> 03:09.390 If you followed our story at HackASAT.com and Launch.com.com, you might know that through some bad code and poor business choices, our defunct Launch.com company has accidentally triggered a satellite intended for the year 2000 to be launched in 2020 with no one in control. 03:09.390 --> 03:18.150 In our fictional storyline, this satellite has been co-opted by nefarious forces, and it's up to our competitors to regain control over the many components. 03:18.150 --> 03:31.750 Since qualifying, each team was shipped a physical Flatsat, and these Flatsats are not only prizes for their qualifying performance, but also allow the teams to become familiar with the hardware and software before this final event. 03:31.750 --> 03:34.710 So what's the difference between a satellite and a Flatsat? 03:34.710 --> 03:43.490 Think of a Flatsat as a bench version for testing components of an actual satellite without necessarily being exactly what you would send into space. 03:43.490 --> 03:47.850 The satellites you can watch in our live webcams are Flatsats. 03:47.850 --> 03:52.390 But don't worry, not all of the competition this weekend will be terrestrial. 03:52.590 --> 04:02.810 The game has actually been underway for one hour now, and our team's first challenge has been to regain control of the ground station that they'll be using to communicate with their Flatsats. 04:02.830 --> 04:06.610 Being good hackers, of course, we call this Challenge Zero. 04:07.410 --> 04:09.070 Challenge Zero. 04:09.830 --> 04:11.210 Here's what we know. 04:11.210 --> 04:14.870 An adversary has obtained access to the satellite's ground station. 04:14.870 --> 04:18.030 Once they obtained access, they kicked us out. 04:18.250 --> 04:19.370 The challenge? 04:19.370 --> 04:22.670 Teams must obtain network access to the ground station. 04:29.680 --> 04:34.760 This is called Challenge Zero because it's required for the teams to even kick the game off. 04:35.240 --> 04:47.620 While most of our challenges will have teams focusing on components that are inside of their Flatsats, Challenge Zero is all about gaining access to the ground station that they'll be using to communicate with their Flatsat. 04:47.620 --> 04:49.320 And again, this is not a simulation. 04:49.320 --> 04:59.120 All of these eight Flatsats may be here on Earth, but they're completely untethered, floating on a cushion of air, and each one being connected wirelessly from a separate radio link. 04:59.540 --> 05:05.000 In the first hour of gameplay, teams have been getting their bearings and working on solving Challenge Zero. 05:05.000 --> 05:12.580 In fact, just before this broadcast went live, we received word that this challenge was actually solved by Team Samurai. 05:12.760 --> 05:14.280 Congratulations to them. 05:14.280 --> 05:17.880 Let's go ahead and see a little bit more about Team Samurai. 05:47.450 --> 05:50.530 Team Samurai is a mainstay in the CTF community. 05:50.530 --> 05:57.650 In fact, one of the fun facts about this community is that I've competed against Samurai about as many times as I've actually competed with them. 05:57.650 --> 06:04.610 This community is tight-knit, people move around between them, and it's good to see them jump into the lead and take a start on the scoreboard. 06:04.710 --> 06:10.830 They're now going to be focusing on Challenge One, which we're going to give you a little bit of a hint on what that entails now. 06:12.270 --> 06:14.270 Challenge number one. 06:14.430 --> 06:15.590 Here's what we know. 06:15.590 --> 06:23.110 Having access to the ground station means we can attempt communication, but the satellite is spinning out of control, which complicates everything. 06:23.310 --> 06:24.230 The challenge. 06:24.230 --> 06:27.170 Teams must regain communication with the satellite. 06:37.490 --> 06:50.630 While this event was originally planned to be in person during DEFCON in the Aerospace Village, thanks to the tireless efforts of dozens of people involved behind the scenes, we're instead streaming to you live throughout the event. 06:50.670 --> 06:59.390 Not only has the game itself been adapted to allow for remote participation from our eight teams over VPN, but the spectator experience has changed as well. 06:59.390 --> 07:03.070 There are many different ways you can now experience HackASAT. 07:03.070 --> 07:12.830 For a simpler interface, just visit hackasat.com with a web-based scoreboard, these periodic live updates streamed and links to other resources. 07:13.010 --> 07:27.910 For a more immersive experience, head over to virtual.hackasat.com where you can get all of the above and more, including watching our satellites live via one of four dedicated webcam feeds, get more technical game data from the 3D octagon scoreboard, 07:27.910 --> 07:38.390 as well as many other resources about our competitors, the flatsats, the technologies involved in space, and even communicate with other viewers in a dedicated chat and have a few social interactions. 07:38.390 --> 07:46.630 No need to remember all that just now though, all you have to remember is that you can find it all on hackasat.com and virtual.hackasat.com. 07:46.990 --> 07:53.990 The HackASAT team is also partnering with the Aerospace Village, one of the many villages you'd normally get to experience in person at DEF CON.