MIT Open Courseware: Computer Systems Security

Lectures cover threat models, attacks that compromise security, and techniques for achieving security, based on recent research papers. Topics include operating system (OS) security, capabilities, information flow control, language security, network protocols, hardware security, and security in web applications.

A number of practical games are delivered through cards. Here is our list of card-based digital TIPS exercises.

Riskio

Riskio is designed for players from IT technology and non-technical backgrounds. Riskio will teach players to identify security vulnerabilities and appropriate defences.

Crypto Go

Crypto Go teaches you the basics of cryptography, security, and the CIA pillars: Confidenciality, Integrity and Authentication. Recommended for ages 14+, with 4-6 players.

Cyber Threat Defender (CTD)

CTD is a card game which also has a video game form (Windows and Mac). It is designed to teach cybersecurity principles and a wide range of security issues.

Decisions & Disruptions

A tabletop/role-playing game about security in industrial control systems. D-D players are challenged with managing the security of a small utility company.

Games you can play right in your browser that cover some aspects of digital TIPS.

Cybersecurity Lab

In this Lab, you’ll defend a company that is the target of increasingly sophisticated cyber attacks.

What.Hack

You take a role as an "Cyber Ninja" defending BigRed Uni form various threats. A bit like Papers, Please, but with security skills in mind.

CTFs are a popular way to test your hacking skills. You are given a prompt, and your job is to recover a "flag" - usually a string of letters and numbers hidden within your target, be it a vulnerable computer, a website, or an encrypted piece of text. Below is a selection of CTFs available at any time.

Check CTF Time for which time-sensitive competitions are happening now.

CTF Field Guide

Learn to win at Capture The Flag (CTF). These competitions distill major disciplines of professional computer security work into short, objectively measurable exercises. The focus areas that CTF competitions tend to measure are vulnerability discovery, exploit creation, toolkit creation, and operational tradecraft.

Root Me

Challenge your hacking skills.

Hack the Box

Penetration testing labs.

Defend the Web

An Interactive Cyber Security Platform.

W3Challs

Challenges here range from cryptography to forensics to web.

picoCTF

picoCTF is a free computer security game targeted at middle and high school students, created by security experts at Carnegie Mellon University.

Over the Wire

The wargames offered by the OverTheWire community can help you to learn and practice security concepts in the form of fun-filled games.

Google Capture the Flag

Google runs a CTF competition in two rounds: an online qualification round and an onsite final round.

XSS Game Area

Practice your Cross-site scripting (XSS) attacks and defences.

Metasploit Unleashed (MSFU)

This course is a good starting point for Information Security Professionals who want to learn penetration testing and ethical hacking.

If you would like to get into even more challenges, and see the current CTFs taking place, here are two sources for that.

WeChall

The site lists a number of other challenge sites you can visit.

CTF Time

This sites tracks which CTFs are currently live, and has a leaderboard for top teams.