CSAW 2022 Embedded Security Challenge (ESC)

The winners for all regions have been posted here. We look forward to everyone's submissions for next year's challenge!

Quick Links

Overview

The Embedded Security Challenge (ESC) returns in 2022 for the 15^th time, and we are proud to announce another exciting and educational global competition! ESC is part of CSAW, which is founded by the department of Computer Science and Engineering at NYU Tandon School of Engineering, and is the most comprehensive student-run cyber security event in the world, featuring international competitions, workshops, and industry events.

ESC 2022 will be held in four regions: US-Canada, Europe, Middle East & North Africa, and India, with the finals taking place on 9-12 November 2022.

CSAW US-Canada: NYU Tandon School of Engineering, Brooklyn, USA.
CSAW Europe: Grenoble Institute of Technology - ESISAR, Grenoble, France.
CSAW MENA: NYU Abu Dhabi, Abu Dhabi, UAE.
CSAW India: Indian Institute of Technology Kanpur, Kanpur, India.

The competition is organized in all regions under the supervision of Professor Nektarios Tsoutsos (University of Delaware), and the global challenge leads are Lars Folkerts, Charles Gouert, and Dimitris Mouris, who are also the US-Canada region challenge leads. In Europe, the competition is organized by Professor Vincent Beroulle (Univ. Grenoble Alpes), while in the MENA region the competition is coordinated by Professor Michail Maniatakos (NYUAD). In India, ESC is supervised by Professors Debapriya Basu Roy and Urbi Chatterjee (IIT Kanpur), with Mridul Chamoli as the regional challenge lead.

Challenge Summary

This year's ESC focuses on machine learning based attacks in both edge devices and cloud computing. Machine learning cloud services are used by millions of users everyday, and special care needs to be taken to ensure trained models are protected from malicous users. This year, teams will investigate a range of attacks (such as model leakage) of the machine learning models hosted on a cloud server using a remote Respberry Pi virtual device.

The event comprises a qualification and a final phase where teams will be able to acquire and demonstrate their skills in mitigating/launching these powerful types of attacks in a controlled and safe environment.

Registration

Students of all university levels are invited to compete. Each team must have a team leader and up to 3 additional team members (a total of 4 participants per team). Each team leader is responsible for coordinating with other members of their team and will be the point of contact for the entire team. Each team should also have a university faculty advisor.

The team leaders need to register their team members and faculty advisor electronically at https://hotcrp.engineering.nyu.edu/, using their team name as the 'Submission Title'. ESC uses a HotCRP-based registration and submission system for both the qualification and final rounds, and teams must register before finalizing their report and computer file submissions by the posted deadlines.

Each team is eligible to register for only one region based on university affiliation: Europe, India, MENA, or US-Canada, as defined below. While team members do not need to attend the same university, all team members must be a part of the same region.

US-Canada: Hosting students from universities located within the United States or Canada.
Europe: Hosting students from universities located in the European Union, Switzerland, Norway, Armenia, United Kingdom.
India: Hosting students from universities located in India.
MENA: Hosting students from universities located in Algeria, Azerbaijan, Bahrain, Chad, Djibouti, Egypt, Eritrea, Georgia, Iran, Iraq, Israel, Jordan, Kuwait, Lebanon, Libya, Mauritania, Morocco, Oman, Pakistan, Palestine, Qatar, Saudi Arabia, South Sudan, Sudan, Syria, Tunisia, Turkey, United Arab Emirates, or Yemen.

To be able to qualify to the final round, each team must register for the correct region based on the university affiliations of its members.

After registration closes, making changes to the existing members of a team (e.g., replacing a team member) or adding new team members, requires explicit permission from the organizers. This is also necessary for teams replacing team members or adding new team members during the final round of the competition.

For more registration information, policies, deadlines, and for information for contacting CSAW organizers, visit the logistics page. For information about final phase submissions, please visit the deliverables page.

Teams are encouraged to start investigating the challenge as early as possible.

It is also recommended to periodically visit this repository on GitHub, as the details may be updated.