The Standoff Cyberbattle is a hyper-realistic competition where infosec specialists challenge the security of systems across various industries using a virtual state as the testing ground.

Red teams (white-hat hackers) search for vulnerabilities and launch attacks on systems in State F. They might try to steal bank customer data, hack the traffic light control system, or halt the operation of an oil refinery.

Points are earned for successful attacks, with the top-scoring team crowned the winner.

On the other hand, blue teams (cybersecurity specialists) detect, investigate, and respond to attacks, compiling incident reports throughout the event.

State F is a virtual space emulating the infrastructure and security systems of vital industries, including an oil refinery, airport, power plants, banks, and transportation.

These systems are deployed using realistic virtual machines and software.

State F’s infrastructure is displayed on 3D models. Each industry has a physical 3D model with buildings and facilities affected by attacks as they look in real life: luggage piles up on the conveyor belt at the airport, trains derail, blackouts occur, and oil tanks overflow.

Cybersecurity is essential for protecting users, companies, and entire countries, ensuring the continuous operation of all economic sectors.

The Standoff Cyberbattle illustrates how inadequate protection of businesses and critical facilities can lead to catastrophic outcomes.

Participants get hands-on experience with industry infrastructure and test their ability to find security flaws under the pressure of realistic cyberattacks.

Red teams are hackers trying to hunt down security flaws in company systems and conduct attacks. At Standoff, they compete against each other, with the winners receiving prizes.

Blue teams are cybersecurity specialists from security operations centers.

They detect and investigate attacks to gain insights into the mindset of attackers and hone their skills for real-world application. Blue teams don’t compete against red teams or each other.

A critical event is a cyberattack-induced incident that harms an organization and impacts its operations.

At Standoff 14, attackers can trigger around 110 unique critical events, such as disrupting passenger check-in systems, leaking employee data, or intercepting CCTV feeds.