Hack Competition idea was based on the car crash test concept
It's been really a long time ago that the
Bitrix, Inc. team had been planning to create a
Proactive Protection module. As soon as it was developed and implemented in the Bitrix Site Manager v8.0 product, the Bitrix developers and IT security experts have come up with an idea of testing the system module by the harshest means ever possible – let the Russian hackers try to bring down the security system. The Bitrix team has a reasonable argument to support this idea: every software module or parameter can only be tested by practical implementation and in a real-like environment.
Everyone would agree that this sort of software exams make it possible to identify and get rid of a number of system code blunders and weak spots. These measures do prevent unwanted system break downs in advance, just like a car crash test in the automobile industry performed to detect whether a vehicle is safe for people or not.
The Bitrix’s Russian Representation Office and the "Positive Technologies" team organized a competition at the "
Chaos Constructions CC9" computer technologies festival whose participants were supposed to evade the Bitrix Proactive Protection security system. The security system mechanism was modified in advance, thogh, just to be a bit more "vulnerable". The Festival took place on 29-30 August 2009 in Saint Petersburg, Russia.
The competition was supposed to show how the Proactive Protection security system shield works in action. Also, the hack competition was organized to gain more examples for analyzing common mistakes made by site developers that may occur during a web site creation and customization process.
Read more...