On November 12, the 2020 (2nd) “Mutian Cup” cracking competition of the 24th China International Software Expo series was officially launched in Hangzhou.
Enterprises, colleges and universities across the country, as well as private geeks, white hat hackers and other security experts gathered together to discover new infrastructure, intelligent transportation, intelligent terminals, smart homes and other fields through competitions and live performances. safe question. After 4 hours of intense and exciting battles, the players successfully cracked the iPhone 12, Android mobile phone WIFI, smart cameras, and digital devices such as smart street lights, industrial remote controls, and enterprise-level firewalls in the new infrastructure scenario.
Figure 2020 “Mutian Cup” cracking competition kicks off in Hangzhou
Using competition as a substitute for training, actual attack and defense to help the safety construction of new infrastructure and other fields
Compared with the first “Mutian Cup” cracking competition, this cracking competition has won unprecedented attention from relevant authorities and well-known enterprises. Wu Junqing, member of the party group and deputy director of the Zhejiang Provincial Department of Economic and Information Technology, Jiang Yongzhu, deputy director of the Management Committee of Hangzhou High-tech Industrial Development Zone and executive deputy head of Binjiang District, Chen Ximing, deputy general manager of China Electronics and Information Industry Group, and Wu Yunkun, president of Qi’anxin Group Wait for the leaders to come to the scene and give speeches. Experts from universities and famous enterprises such as Tsinghua University, Zhejiang University, Ant Group, Qi Anxin, Hikvision, ByteDance, etc. were invited to attend as judges of the competition.
Picture Wu Junqing, member of the party group and deputy director of the Zhejiang Provincial Department of Economic and Information Technology, delivering a speech
Wu Junqing, a member of the party group and deputy director of the Zhejiang Provincial Department of Economics and Information Technology, highly recognized the introduction of new infrastructure and other fields into the cracking competition. He said that the “Mutian Cup” cracking competition closely follows the national strategic direction, adding new competition topics such as new infrastructure, intelligent transportation, etc., using competition as a substitute for training, actual combat attack and defense, boosting the safe development of my country’s software industry and escorting the network. Power strategy.
Picture Jiang Yongzhu, Deputy Director of the Management Committee of Hangzhou High-tech Industrial Development Zone and Executive Deputy Head of Binjiang District, delivering a speech
“Mutian Cup Cracking Competition can be successfully held in Binjiang without the strong support and help of China International Software Expo 2020.” Jiang Yongzhu, deputy director of the Management Committee of Hangzhou High-tech Industrial Development Zone and executive deputy head of Binjiang District, said that this time From the aspect of talent training and introduction, the cracking competition has helped Binjiang to build the strategic direction of talent ecology.
Figure Chen Ximing, Deputy General Manager of China Electronic Information Industry Group delivering a speech
As the organizer of this cracking competition, Chen Ximing, deputy general manager of China Electronic Information Industry Group, said that the competition has been upgraded on the basis of the first one and joined the field of new infrastructure construction, hoping to promote my country’s new infrastructure construction strategy in a competitive way to adapt to the new security threats brought by the tide of informatization construction.
Wu Yunkun, President of Tuqi Anxin Group, delivered a speech
“New technologies and new infrastructures represented by new infrastructure, smart transportation, and smart homes are accelerating their penetration and popularization in the country, economy, society, and personal life. They are eroding the boundaries between cyberspace and physical space, and cybersecurity has become a digital , the ‘bottom plate’ of the era of intelligence.”
As the organizer of the two “Sky Patching Cup” cracking competitions, Wu Yunkun, president of Qi Anxin Group, said that to ensure network security under the new situation, we must first understand and grasp the security risks of these new facilities and new technologies. It is to discover and master the vulnerabilities and risks of equipment and software in these fields through cracking, and to find ideas, technologies and methods for better protection and protection.
White hat hackers demonstrate hardcore prowess to crack domains from living rooms to urban transportation
The first project of the competition was the smart terminal performance show. The Pangu Stone forensics team from Qi Anxin demonstrated the whole process of the world’s first iPhone 12 breaking. The just-launched iPhone 12 is based on the latest iOS 14 system and has a variety of advanced defense mechanisms, which greatly increases the difficulty of iOS attacks and makes jailbreaking even more difficult. The Pangu Stone forensics team took the lead in cracking the world with its powerful vulnerability mining technology.
The Tupangu Stone forensics team cracked the iPhone 12
Subsequently, the CHM team successfully cracked the smart camera in a very short time. These cracking projects highlight the security threats in the smart home era and help manufacturers pay attention to security vulnerabilities and timely repairs.
Figure 1. The participating teams cracked smart cameras and other smart homes. The new infrastructure field cracking project introduced for the first time has become the biggest attraction of the competition. Among them, the smart street light cracking project allows the audience to witness how white hat hackers use loopholes to launch attacks, remote control massive street lights, blind the whole city overnight, and stage a real-life version of “Mission Impossible”!
The industrial remote control cracking project controls the industrial remote control through intrusion, making large machines and construction sites out of control instantly, and industrial accidents and personal safety are all held by the attackers in the palm of their hands.
At the same time, the enterprise-level firewall widely used in the new infrastructure also accepted the challenge of cracking. The white hat hacker demonstrated how to change the firewall from a “protective barrier” to a virtual, unlocked door, exposing intranet data to the outside world.
Figure participating teams crack the challenge of industrial remote control
In the area of intelligent transportation, members from the Redbud team tackled the challenge of intelligent connected vehicles. The attacker finally took advantage of the vulnerability to remotely control the entire car system, get the driving permission, the key is at home, and the car is driven away! The intense and exciting cracking process enhanced the audience’s safety awareness of smart cars.
The 2020 “Mutian Cup” cracking competition is hosted by China Electronic Information Industry Federation, Zhejiang Provincial Department of Economy and Information Technology, Hangzhou Municipal People’s Government, China Electronic Information Industry Group, Hangzhou Economic and Information Technology Bureau, Hangzhou High-tech Zone (Binjiang) Organized by the Management Committee, the government, Qi Anxin Group, Patch Vulnerability Response Platform, and Ant Group Security Response Center, the competition aims to call on enterprises, colleges and universities, private geeks, white hat hackers, and experts across the country to respond to new infrastructure, The vulnerabilities and network risks of smart devices and software in the fields of intelligent transportation, smart terminals, and smart homes are cracked and challenged, and the security problems of smart devices and software are discovered in a competitive way, which attracts the government and enterprise manufacturers to pay attention to network security. , improve its security capabilities, and at the same time cultivate and select network security talents, enhance the national network security awareness, and escort the security of the digital and intelligent era.