CTF Competitions Gain Importance as AI Reshapes Cybersecurity Training
Summary
The article explains how CTFs provide hands-on cybersecurity training as AI affects entry-level jobs and bug bounties, and describes how organizers are adapting competition rules and challenges.
Key points
- CTFs offer hands-on practice with security tools and problems that practitioners may not encounter in routine work.
- Jeopardy-style competitions present standalone challenges; attack-defense events have teams defend their networks while attacking others.
- Organizers differ on AI use: RITSEC bans autonomous solving, NYU CSAW added an LLM-focused track, and DEF CON allows human-led AI use.
- A study of Hack The Box machines found solve times declined about 16% per year, with the steepest drops after 2022.
- A live CTF study with 41 participants found four autonomous AI agents placed second overall, ahead of most human teams.
- The article cites declining entry-level security roles and AI-assisted low-quality bug bounty submissions as challenges to cybersecurity career progression.
Article Details
- Topic
- The role of CTF competitions in cybersecurity skills development as AI changes entry-level work and bug bounty programs.
People
Jacob KrellPenetration tester at Suzu Labs who analyzed solve times for Hack The Box machines and reported that challenges had become faster to solve.Jason WalkerSecurity engineer and CTF competitor who discussed how competitions help practitioners build hands-on experience and stay current.Ryan O'GradySentinelOne director of SE operations who discussed the company's CTF program and how organizers can adapt competitions to AI.