{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,10]],"date-time":"2026-10-10T10:42:29Z","timestamp":1791628949827,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,3,7]],"date-time":"2025-03-07T00:00:00Z","timestamp":1741305600000},"content-version":"vor","delay-in-days":365,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Department of Defense"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,3,7]]},"DOI":"10.1145\/3626252.3630912","type":"proceedings-article","created":{"date-parts":[[2024,3,7]],"date-time":"2024-03-07T18:17:20Z","timestamp":1709835440000},"page":"937-943","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["PWN The Learning Curve: Education-First CTF Challenges"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-6873-8815","authenticated-orcid":false,"given":"Connor","family":"Nelson","sequence":"first","affiliation":[{"name":"Arizona State University, Tempe, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8832-1789","authenticated-orcid":false,"given":"Yan","family":"Shoshitaishvili","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, AZ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,3,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Apple. 2023. Apple Security Bounty Categories. https:\/\/security.apple.com\/bounty\/categories\/"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3197091.3197111"},{"key":"e_1_3_2_1_3_1","volume-title":"Jian Ming Colin Wee, and Boyi Guo","author":"Bashir Masooda","year":"2015","unstructured":"Masooda Bashir, April Lambert, Jian Ming Colin Wee, and Boyi Guo. 2015. An Examination of the Vocational and Psychological Characteristics of Cybersecurity Competition Participants. In 2015 USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE 15)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287324.3287490"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1734263.1734303"},{"key":"e_1_3_2_1_6_1","unstructured":"Jonathan Burket Peter Chapman Tim Becker Christopher Ganas and David Brumley. 2015. Automatic Problem Generation for Capture-the-Flag Competitions. In 2015 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 15)."},{"key":"e_1_3_2_1_7_1","unstructured":"Martin Carlisle Michael Chiaramonte and David Caswell. 2015. Using CTFs for an Undergraduate Cyber Education. In 2015 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 15)."},{"key":"e_1_3_2_1_8_1","unstructured":"Peter Chapman Jonathan Burket and David Brumley. 2014. PicoCTF: A Game-Based Computer Security Competition for High School Students. In 2014 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 14)."},{"key":"e_1_3_2_1_9_1","unstructured":"Kevin Chung and Julian Cohen. 2014. Learning Obstacles in the Capture The Flag Model. In 2014 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 14)."},{"key":"e_1_3_2_1_10_1","unstructured":"Adrian Dabrowski Markus Kammerstetter Eduard Thamm Edgar Weippl and Wolfgang Kastner. 2015. Leveraging Competitive Gamification for Sustainable Fun and Profit in Security Education. In 2015 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 15)."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3159450.3159462"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3299815.3314438"},{"key":"e_1_3_2_1_13_1","unstructured":"Wu-chang Feng. 2015. A Scaffolded Metamorphic CTF for Reverse Engineering. In 2015 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 15)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.112"},{"key":"e_1_3_2_1_15_1","unstructured":"Jinja. 2023. https:\/\/jinja.palletsprojects.com\/."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287324.3287406"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3125659.3125686"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3328778.3366935"},{"key":"e_1_3_2_1_19_1","unstructured":"Jelena Mirkovic and Peter AH Peterson. 2014. Class Capture-the-Flag Exercises. In 2014 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 14)."},{"key":"e_1_3_2_1_20_1","volume-title":"Engaging Novices in Cybersecurity Competitions: A Vision and Lessons Learned at ACM Tapia","author":"Mirkovic Jelena","year":"2015","unstructured":"Jelena Mirkovic, Aimee Tabor, Simon Woo, and Portia Pusey. 2015. Engaging Novices in Cybersecurity Competitions: A Vision and Lessons Learned at ACM Tapia 2015. In 2015 USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE 15)."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3017680.3017720"},{"key":"e_1_3_2_1_22_1","volume-title":"Using Hacking to Teach Computer Science Fundamentals","author":"O'Connor TJ","year":"2010","unstructured":"TJ O'Connor, Ben Sangster, and Erik Dean. 2010. Using Hacking to Teach Computer Science Fundamentals. American Society for Engineering Education, St. Lawrence Section (2010)."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3159450.3159514"},{"key":"e_1_3_2_1_24_1","volume-title":"2017 USENIX Workshop on Advances in Security Education (ASE 17)","author":"Schreuders Z Cliffe","year":"2017","unstructured":"Z Cliffe Schreuders, Thomas Shaw, Mohammad Shan-A-Khuda, Gajendra Ravichandran, Jason Keighley, and Mihai Ordean. 2017. Security Scenario Generator (SecGen): A Framework for Generating Randomly Vulnerable Rich-scenario VMs for Learning Computer Security and Hosting CTF Events. In 2017 USENIX Workshop on Advances in Security Education (ASE 17)."},{"key":"e_1_3_2_1_25_1","unstructured":"Giovanni Vigna Kevin Borgolte Jacopo Corbetta Adam Doupe Yanick Fratantonio Luca Invernizzi Dhilung Kirat and Yan Shoshitaishvili. 2014. Ten Years of iCTF: The Good The Bad and The Ugly. In 2014 USENIX Summit on Gaming Games and Gamification in Security Education (3GSE 14)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3328778.3366893"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2839509.2844646"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2676723.2677290"},{"key":"e_1_3_2_1_29_1","volume-title":"Experiences In Cyber Security Education: MIT Lincoln Laboratory Capture-the-Flag Exercise. In 4th Workshop on Cyber Security Experimentation and Test (CSET 11)","author":"Werther Joseph","year":"2011","unstructured":"Joseph Werther, Michael Zhivich, Tim Leek, and Nickolai Zeldovich. 2011. Experiences In Cyber Security Education: MIT Lincoln Laboratory Capture-the-Flag Exercise. In 4th Workshop on Cyber Security Experimentation and Test (CSET 11)."},{"key":"e_1_3_2_1_30_1","unstructured":"Google Project Zero. 2021. A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution. https:\/\/googleprojectzero.blogspot.com\/2021\/12\/a-deep-dive-into-nso-zero-click.html io"}],"event":{"name":"SIGCSE 2024: The 55th ACM Technical Symposium on Computer Science Education","location":"Portland OR USA","acronym":"SIGCSE 2024","sponsor":["SIGCSE ACM Special Interest Group on Computer Science Education"]},"container-title":["Proceedings of the 55th ACM Technical Symposium on Computer Science Education V. 1"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3626252.3630912","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3626252.3630912","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3626252.3630912","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T04:32:28Z","timestamp":1755750748000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3626252.3630912"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3,7]]},"references-count":30,"alternative-id":["10.1145\/3626252.3630912","10.1145\/3626252"],"URL":"https:\/\/doi.org\/10.1145\/3626252.3630912","relation":{},"subject":[],"published":{"date-parts":[[2024,3,7]]},"assertion":[{"value":"2024-03-07","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}