Method and system for generating ctf dynamic flag based on transparent proxy

Abstract

The invention discloses a method and system for generating a CTF dynamic Flag based on a transparent proxy. The method plantes the user's unique Token in the user browser, and the online competition platform guides the user's access to the competition address to the proxy server, and the proxy server forwards the request Go to the competition server, and after receiving the content of the competition returned by the competition server, replace the Flag in the content of the competition with the new Flag generated after reversible encryption of the original Flag and the user Token; after the online competition platform receives the Flag submitted by the user, The Flag submitted by the user and the Flag of the original question are subjected to reversible encrypted inverse calculation, and the result of the user's answer is obtained according to the result of the inverse calculation. Compared with the existing technology, the present invention does not need to deploy multiple sets of environment for the same game, and can realize the dynamic Flag in one environment, and can realize anti-cheating and log recording in the situation where the user is not aware of the whole process, which can greatly reduce the Contest resource consumption and operation and maintenance workload.

Description

technical field [0001] The invention relates to a method and system for generating a CTF dynamic Flag based on a transparent agent, and belongs to the technical field of information processing. Background technique [0002] CTF (Capture The Flag) is generally translated as capture the flag in Chinese, which is a popular form of information security competition. The general process is that participating teams first obtain a string of strings or other content with a certain format from the competition environment given by the organizer through offensive and defensive confrontation, program analysis, etc., and submit it to the organizer. thereby earning points. For the convenience of calling, we call such content "Flag". There are three main types of CTF competition modes, problem solving mode, attack and defense mode and mixed mode. [0003] 1. Problem-solving mode (Jeopardy) [0004] In the problem-solving mode CTF competition system, participating teams can participate t...

AI Technical Summary

Problems solved by technology

The existing method can effectively alleviate cheating when the team members are limited and resources are sufficient, but the disadvantage is that it cannot support a large number of users, consumes a lot of resources, and doubles the workload of operation and maintenance.

Images