Trainings & CTFs

Security gets easier when the people building your product know what attackers look for. Training gives your engineers that perspective, so they catch problems while they’re still cheap to fix.

I build custom trainings, workshops and CTFs (gamified hacking challenges that teach specific skills) tailored to your team and your technology. Past topics include embedded systems security, web hacking, PCB design, and truck hacking.

Formats

• Talks and lunch-and-learns (about 1 hour): an introduction to a security topic for a broad audience, such as your whole engineering org.
• Workshops (half or full day): hands-on labs for a smaller group, using hardware, code, or tools relevant to your products.
• Multi-day courses: deeper training that builds skills over several sessions, like a bootcamp.
• CTF events: a hacking competition for your team, a conference, or a student program, with challenges built to match the skills you want to practice.
• Custom challenge development: challenges written for your existing CTF platform or training program.

Trainings are tailored to your team’s experience level and technology.

CTFs

Hands-on practice is how security skills stick, and CTFs make that practice safe, legal and fun. They’re also a big part of how I moved from engineering and software into security.

I have developed and run a number of CTFs, including:

• Every year since 2020, I’ve run US Cyber Challenge’s “CyberBowl” CTF for CIS, plus two additional CTFs for hundreds of remote students.
• Built CTF challenges professionally for several platforms, covering web, pwn, reverse engineering, specialized hardware and more.
• Developed the capstone CTF for the first community college ICS security curriculum in the US.
• Ran a remote car hacking CTF with Car Hacking Village in 2021, and contributed challenges and mentorship to The Diana Initiative’s CTF.

Want a CTF for your team or event? Let’s talk about what skills it should build.

Past Trainings

I’ve created custom trainings, workshops and presentations for companies, universities and non-profits, including:

• Developed and taught Web Hacking Fundamentals at US Cyber Challenge’s 2023 summer bootcamp, alongside SANS instructors.
• Developed and taught an 8-hour Intro to PCB Design workshop.
• Presented “What Embedded Engineers Need to Know About Security” for an engineering consultancy.
• Mentored at several CyberTruck Challenge events, presenting on the RP1210 protocol and DLL shimming.

Need training built around your team’s technology? Let’s talk.