The grand finale.
✅ This week — what to do
- Before class — project ready to demo; team ready for the CTF.
- In class (240 min) — Capstone CTF tournament (
ctf.md, whole term) + project demos. - Submit — final project + report (see project/README.md).
Time breakdown: AGENDA.md (../../AGENDA.md).
🏆 Capstone CTF Tournament
A full capture-the-flag covering the whole term — web, API, supply chain, cloud, memory safety, and LLM/agentic challenges. Team-based, leaderboard, prizes.
Final Project Demos
Each team presents their secured build end-to-end:
- Threat model → vulnerabilities found → remediation
- SBOM + signed artifact
- Security CI/CD pipeline
- Submit a recorded video walkthrough before the session (graded asynchronously on the rubric); 3-minute live Q&A per team on the day (not a live demo slot)
Bring
Everything from the term project: threat model, vuln report (CWE/OWASP mapped), fixed code, SBOM, signed artifact, CI pipeline.
References
- All prior weeks + https://owasp.org/Top10/2025/