CybersecurityFirst Cyber Security Challenge winner announced

Published 2 August 2010

The United Kingdom suffers from a dearth of cybersecurity experts; several private and public organizations have launched the Cyber Security Challenge competition — a series of challenges and games that would test the talent and skills of people; the challenges is built around eight key skill areas which include digital forensics, network analysis, and logical thinking

And the winner is... // Source: securityactive.co.uk

The U.K. Cyber Security Challenge has announced the winner of its prologue crypto puzzle, as well as the solution — for anyone still struggling to find an answer.

Successful code crackers had to solve a three-stage puzzle of increasing complexity (“First puzzle of U.K Cyber Security Challenge competition cracked,” 27 July 2010 HSNW). The task tested basic cryptoanalysis skills, as well as the ability to apply lateral thinking and “read between the lines” to figure out how to proceed from one stage of the puzzle to the next. The first stage involved recognizing that the initial ciphertext took the form of a .jpg image, encoded in the base64 system. This .jpg image cartoon contained a binary string on its border, encoded using a simple substitution cipher.

John Leyden writes that having solved that stage of the puzzle, would-be codebreakers recovered a message inviting them to visit a specified Web site. The third phase of the challenge was based on making sense of a bitshift operation applied to a string hosted on this site.

More than 1,000 contestants submitted responses to the puzzle with 152 hitting on the right answer. Winner Paul Mutton cracked the code before anyone else and wins a season ticket for Bletchley Park and a personal tour of the refurbished WWII-era Colossus code-breaking computer.

Cyber Security Challenge said it planned to run another code-cracking puzzle at an unspecified time over the coming months, following the success and obvious interest generated by its initial brain teaser.

Leyden writes that the cipher challenge was essentially a bit of fun designed to publicize the wider ambitions of the U.K. Cyber Security Challenge, which aims to recruit would-be information security experts and stimulate interest in the topic. The scheme, launched last Monday, aims to address a looming skills shortage by inspiring under-graduates and teenagers to consider a career in cybersecurity.

More than thirty prizes will be awarded during the competition, including internships at net security companies and university bursaries. The scheme has the support of private security firms such as Sophos and Qinetiq, as well as the UK government.