Underhanded C Contest

The Underhanded C Contest is a programming contest to turn out code that is malicious, but passes a rigorous inspection, and looks like an honest mistake. The contest rules define a task, and a malicious component. Entries must perform the task in a malicious manner as defined by the contest, and hide the malice. Contestants are allowed to use C-like compiled languages to make their programs.^[1]

The contest was organized by Dr. Scott Craver^[2] of the Department of Electrical Engineering at Binghamton University (New York State). The contest was initially inspired by Daniel Horn’s Obfuscated V contest in the fall of 2004.^[3] For the 2005 to 2008 contests, the prize was a $100 gift certificate to ThinkGeek. The 2009 contest had its prize increased to $200 due to the very late announcement of winners, and the prize for the 2013 contest is also a $200 gift certificate.

2005 Contest

The 2005 contest had the task of basic image processing, such as resampling or smoothing, but covertly inserting unique and useful "fingerprinting" data into the image. Winning entries from 2005 used uninitialized data structures, reuse of pointers, and an embedding of machine code in constants.

2006 Contest

The 2006 contest required entries to count word occurrences, but have vastly different runtimes on different platforms. To accomplish the task, entries used fork implementation errors, optimization problems, endian differences and various API implementation differences. The winner called strlen() in a loop, leading to quadratic complexity which was optimised out by a Linux compiler but not by Windows.

2007 Contest

The 2007 contest required entries to encrypt and decrypt files with a strong, readily available encryption algorithm such that a low percentage (1% - 0.01%) of the encrypted files may be cracked in a reasonably short time. The contest commenced on April 16 and ended on July 4. Entries used misimplementations of RC4, misused API calls, and incorrect function prototypes.

2008 Contest

The 2008 contest required entries to redact a rectangular portion of a PPM image in a way that the portion may be reconstructed. Any method of "blocking out" the rectangle was allowed, as long as the original pixels were removed, and the pixel reconstruction didn't have to be perfect^[4] (although the reconstruction's fidelity to the original file would be a factor in judging). The contest began on June 12, and ended on September 30. Entries tended to either xor the region with a retrievable pseudo-random mask or append the masked data to the end of the file format. The two placing programs both used improperly defined macros while the winner, choosing to work with an uncommon text based format, zeroed out pixel values while keeping the number of digits intact.

2009 Contest

The 2009 contest required participants to write a program that sifts through routing directives but redirects a piece of luggage based on some innocuous-looking comment in the space-delimited input data file. The contest began December 29, 2009, and was due to end on March 1, 2010.^[5] However, no activity occurred for three years. The winners were only announced on April 1, 2013, with one overall winner and six runners-up.^[6]^[7]

2013 Contest

The 2013 contest was announced on April 1, 2013, and was due July 4, 2013; results were announced on September 29, 2014.^[8] It was about a fictional social website called "ObsessBook". The challenge was to write a function to compute the DERPCON (Degrees of Edge-Reachable Personal CONnection) between two users that "accidentally" computes a too low distance for a special user.

2014 Contest

The 2014 contest was announced on November 2, 2014, and was due January 1, 2015. The results were announced on June 1, 2015.^[9] The object was to write surveillance code for a Twitter-like social networking service, to comply with a secret government surveillance request; but for non-obvious reasons, the code must subtly leak the act of surveillance to a user.

2015 Contest

The 2015 contest was announced on August 15, 2015, and was due November 15, 2015. The results were announced on January 15, 2016. The scenario was a nuclear disarmament process between the Peoples Glorious Democratic Republic of Alice and the Glorious Democratic Peoples Republic of Bob, and the mission was to write a test function for comparing potentially fissile material against a reference sample, which under certain circumstances would label a warhead as containing fissile material when it doesn't.

References

↑ "Underhanded C Contest Revived". I Programmer. 2013-04-06. Retrieved 2014-10-04.
↑ Faculty and Staff page of EE Dept. at Binghamton University
↑ "Underhanded C Contest FAQ". Underhanded C contest. Retrieved 2015-02-28.
↑ 2008 contest rules
↑ The Underhanded C Contest », xcott.com (archived from the original on 2011-07-18)
↑ The Underhanded C Contest » Also, we’re looking for good PhD students
↑ The Underhanded C Contest
↑ Scott Craver (2014-09-29). "2013 Winners". Retrieved 2014-10-01.
↑ Scott Craver (2014-11-02). "The 7th Underhanded C Contest is now Open". Retrieved 2014-12-18.

External links

Binghamton University

Academics	School of Management Colleges and schools Curriculum Rankings and reputation Research

Athletics	Binghamton Bearcats Men's basketball Wrestling Events Center Varsity Field

Campus	City of Binghamton Town of Vestal Cider Mill Playhouse Fernand Braudel Center Harpur Palate Harpur's Ferry History OCC Transport Residential communities Stirrings Still: The International Journal of Existential Literature

People	Harvey G. Stenger (President) Honorary degree recipients

Student life	Binghamton Crosbys Binghamton Review BTV Harpur Harpeggios Pipe Dream Rhythm Method Student Association WHRW Radio

Malware topics

Infectious malware	Computer virus Comparison of computer viruses Computer worm List of computer worms Timeline of computer viruses and worms

Concealment	Trojan horse Rootkit Backdoor Zombie computer Man-in-the-middle Man-in-the-browser Man-in-the-mobile Clickjacking

Malware for profit	Privacy-invasive software Adware Spyware Botnet Keystroke logging Form grabbing Web threats Fraudulent dialer Malbot Scareware Rogue security software Ransomware

By operating system	Linux malware Palm OS viruses Mobile malware Macro virus Macintosh (old) viruses Mac OS X malware iOS malware Android malware

Protection	Anti-keylogger Antivirus software Browser security Internet security Mobile security Network security Defensive computing Firewall Intrusion detection system Data loss prevention software

Countermeasures	Computer and network surveillance Operation: Bot Roast Honeypot Anti-Spyware Coalition

This article is issued from Wikipedia - version of the 9/23/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.