5 days, 1 hour ago
FedCSIS 2023 Challenge: Cybersecurity Threat Detection in the Behavior of IoT Devices
FedCSIS 2023 Challenge: Cybersecurity Threat Detection in the Behavior of IoT Devices is the 9th data science competition organized in association with Conference on Computer Science and Intelligence Systems (https://fedcsis.org/). This year, the task is related to cybersecurity - participants will construct scoring models to detect anomalous operating system behavior of IoT devices under attack. The challenge is sponsored by Łukasiewicz Research Network - Institute of Innovative Technologies EMAG and EFIGO sp. z o.o. companies.
The topic of this year's data science competition is the detection of cybersecurity breaches in log data from IoT devices. The data sets contain 1-minute logs of all related system calls. The task for the competition participants is to develop a model that assesses the chances that a cyber attack was ongoing during the monitored period. Such a model could play a vital role in improving the safety of IoT systems.
Special session at FedCSIS 2023: As in previous years, a special session devoted to the competition will be held at the conference. We will invite authors of selected challenge reports to extend them for publication in the conference proceedings (after reviews by Organizing Committee members) and presentation at the conference. The papers will be indexed by the IEEE Digital Library and Web of Science. The invited teams will be chosen based on their final rank, the innovativeness of their approach, and the quality of the submitted report.
Competition Participation Rules for "FedCSIS 2023 Challenge: Cybersecurity Threat Detection in the Behavior of IoT Devices”
By entering this Competition you accept these official Competition rules.
- The Competition is organized by Polskie Towarzystwo Informatyczne (pti.org.pl), in association with the FedCSIS Conference (fedcsis.org) and QED Software sp. z o. o. The Organizer in the meaning of art. 919 and art. 921 of the Polish Civil Code is Polskie Towarzystwo Informatyczne (the Organiser, PTI), registered at ul. Solec 38/103, 00-394 Warszawa.
- The Competition is sponsored by Łukasiewicz Research Network - Institute of Innovative Technologies EMAG and EFIGO sp. z o.o. (the Sponsors)
- The Competition is organized via the KnowledgePit platform (available at knowledgepit.ai or knowledgepit.ml) and any submissions made outside of the platform will not be admissible.
- The Competition is open to all interested researchers, specialists, and students.
- Members of the Contest Organizing Committee (see the dedicated section on the Competition page) and employees of the Organizer, the Sponsor, and their affiliated entities are not allowed to participate.
- Persons who are residents of, or are affiliated with or employed by or otherwise contractually or legally tied to an organization, educational institution, company, or other entity of the Russian Federation or another state or territory that falls under the scope of international sanctions or controls for reasons of war, terrorism or otherwise, are not allowed to participate. The current list of such legal restrictions in force in the European Union is available at https://sanctionsmap.eu/#/main. If you have any doubt whether such restriction may apply to you, the Organiser reserves the right to verify eligibility and to adjudicate your eligibility at any time.
- Participants must be of legal age of majority (Check your country’s law, in Poland and in most countries it is 18 years of age).
- Registration for the Competition is done via the KnowledgePit platform (knowledgepit.ai or knowlegepit.ml).
- A detailed Competition time schedule is available in the Schedule section (below) of the Competition page.
4. Participants and Teams
- A person may enroll in the Competition with only one KnowledgePit user account. Using multiple accounts constitutes grounds for exclusion from the Competition.
- Participants submit their solutions as members of teams made up of one or more persons.
- Each participant may be a member of only one Team enrolled in the challenge.
- Each Team must designate one of the Team Members as the Team Leader responsible for communication with the Organizer.
- A single KnowledgePit account can only be associated with one Team in a given competition. It is not possible to withdraw from a Team, but Teams can be merged.
- Merging is done between Teams by their respective Team Leaders through the KnowledgePit platform and requires the consent of both Teams.
- Participation in the Competition is free and voluntary.
- Privately sharing elements of the solution such as code or data outside of Teams is not permitted and may result in disqualification of the persons or Teams involved, however, it is permitted to share remarks and ideas with all participants on the Knowledge Pit Competition Forums.
- Participants must use their own resources, particularly software and other necessary tools and equipment needed to prepare a solution to be submitted.
- Participants submit their solutions through the Knowledge Pit platform.
- The submitted solution is checked for errors, and if none is found, the solution is immediately included on the public Leaderboard.
- There is a strict limit on the total number of solutions that can be submitted by a Team during the Competition and also, on the number of solutions that can be submitted daily.
- For this Competition, those limits are set to 400 and 10, respectively.
- The daily submission limit resets at 11:59 PM GMT.
- When two Teams merge, their solutions accumulate, but the limits for the resulting Team remain unchanged.
- If a Team exceeds the limit for the total number of submissions, the Team will be unable to submit new solutions until the Competition ends.
- Team can select up to three solutions for the final evaluation, and the best of them will constitute the Team’s final score (Final Solution).
- If a Team fails to select its 3 solutions for final evaluation, then this team’s solution with the highest score on the public Leaderboard is automatically selected as the Team’s Final Solution.
- Each Team is obliged to provide a short Report describing their Final Solution. The Report must contain information such as the name of the Team, the names of all Team Members, and a brief overview of the approach used in the solution. The description should explain all data pre-processing steps and model construction steps. It should be submitted in the KnowledgePit platform submission system by the Report Submission Date specified in the Schedule section of the Competition page (below).
- The final evaluation takes place after the expiry of the Report Submission Date.
- After the Final Evaluation, three top-ranked Teams and a Team recommended for the award for the most practical solution (see point 6 below) will be asked to provide the source codes that can be used to reproduce their Final Solutions and Documentation that would allow running the code. If the code requires to be run within a complex environment (e.g. distributed Hadoop cluster), a detailed setup explanation should be provided as well. The source codes will be used to verify the legitimacy of the solutions and will be shared with the Competition Sponsor in accordance with the provisions of Section 9 below.
- For a Team to be eligible for an Award in this Competition, a Team must be one of the three top-ranked teams or be recommended for the award for the most practical solution (see point 6 below). Moreover, a Team must provide the report and source codes upon request for the verification of their legitimacy.
- In this Competition, the teams are eligible for monetary prizes only if their final solution improves the baseline.
- Additionally, the Organiser reserves the right to award an additional prize to the Team that presented the solution assessed by the Contest Organising Committee as the most practical of all submitted solutions. Such Team will be asked to provide the source codes that can be used to reproduce their Final Solutions and Documentation that would allow running the code. If the code requires to be run within a complex environment (e.g. distributed Hadoop cluster), a detailed setup explanation should be provided as well. The source codes will be used to verify the legitimacy of the solutions and will be shared with the Competition Sponsor in accordance with the provisions of Section 9 below.
- If the Contest Organising Committee refrains from indicating such a solution in its announcement of winners, the additional prize will not be awarded. This additional prize may be awarded to any team, including one of the winners of the main prizes.
- The Organizer holds the right to extend the deadlines for submitting solutions and/or reports. In such a case, participants will be informed about such an extension through the KnowledgePit platform Competition Forum.
- The Organizer is not responsible for any consequences of technical issues related to the participant’s ability to access or submit to the KnowledgePit platform, especially for issues relating to Internet connectivity. If due to technical problems within the Organizer’s control, the resulting delays or temporary unavailability of the platform or its components are likely to impact the participant’s ability to timely submit the Team’s solution, the challenge deadline will be extended by the Organizer by the time of such unavailability, and participants will be informed of such extension by email.
- The final ranking of the competing Teams will be published based on the final evaluation results.
- In the case of draws in the evaluation scores, the time of the submission will be taken into account.
- The Prizes are listed in the dedicated section of the Competition page.
- Each prize comprises two components: a monetary amount and the ability for a selected Team Member to participate in the FedCSIS 2023 conference. The Organiser shall cover a maximum of one registration fee per winning team. The registration fee is a prize component that is non-monetary, and cannot be converted into a monetary value.
- Each winning Team must select their representative Team Member to participate in the FedCSIS 2023 conference and notify their selection to the Organizer. If no Team Member is selected by his or her Team to participate in the conference, the registration fee shall be deemed forfeited and not constitute part of the prize.
- If the same Team is announced as one of the winners of the main prize (1st, 2nd or 3rd), and also as the winner of the additional prize for the most practical solution, such Team will receive both monetary prizes and one registration for the FedCSIS 2023 conference.
- Following the announcement of the winners, The Organiser shall pay the monetary prizes to the winning teams. Each winning team shall notify the Organizer within 21 days following the announcement of how the Team wishes the monetary prize to be paid out (single payment, split payments, etc.).
- In order to receive the Prize, each prize recipient is required to submit to the Organizer all documents necessary for the remittance of such prizes, such as their personal detail, including bank account number, their certificate of tax residency issued by the tax authority of their place of residence or other documents required by law. If such necessary documents are not submitted within the time limit indicated in the notification of the award, the monetary prize cannot be paid out and is deemed to have been forfeited by the winner.
- The winning participant who fails or refuses to provide the necessary legal documentation such as defined above will be deemed to have forfeited the monetary prize, and such prize will not be paid out. In such a case, the winning Team may select another of its members as the recipient of such a prize.
- In accordance with the law, the Organizer shall cover the tax payments required on the awarded prizes at the rates and on terms prescribed by law in the country of the Organizer (Poland).
- The Organizer is not responsible in any way for any duties, levies, fees, or taxes that the winning participant may be subject to in his or her country of residence. It is the sole responsibility of the winning participant to inquire at the appropriate authorities about applicable documentation and/or tax payments that she or he may be required to submit.
- Submissions are not admissible if they are in whole or part illegible, incomplete, damaged, altered, counterfeit, obtained through fraud, or late, or made or submitted in breach of these Rules.
- Participant may be disqualified if the Organizer reasonably believes that the participant has attempted to undermine the legitimate operation of the Competition by using multiple accounts, cheating, deception, or other unfair playing practices or abuses, threats, or harassment towards other participants or the Organizer.
- Organizer may at its discretion reject any submission or disqualify any participant if the Organizer reasonably believes that it was – respectively - produced in an unfair or illegitimate way or submitted by a person who has broken the challenge rules without providing any additional explanation.
- If you think you were excluded without reason, or have any questions, please contact the Organizer at firstname.lastname@example.org.
9. Data security, Privacy and Copyright
- Each participant agrees to use reasonable and suitable measures to prevent persons who have not formally agreed to these Rules from gaining access to the Competition data.
- You agree not to transmit, duplicate, publish, redistribute or otherwise provide or make available the Competition data to any party not participating in the Competition. You agree to notify the Organizer immediately upon learning of any possible unauthorized transmission of or unauthorized access to the Competition data and agree to work with the Organizer to rectify any unauthorized transmission or access.
- Each report, paper, and any other type of publication based on the team’s or participant’s research where data from this Competition is used should accredit KnowledgePit, Organiser and Sponsors as the institutions that provided data for the study.
- The fact of accepting the award is equivalent to granting to the Organizers and Sponsors a worldwide, non-exclusive, sub-licensable, transferable, royalty-free, perpetual, and irrevocable right to use, reproduce, distribute, create derivative works of, publicly perform, publicly display, digitally perform, make, have made, sell, offer for sale and/or import, the winning solution submitted and the source code used to generate it, in any media now known or hereafter developed, for any purpose whatsoever, commercial or otherwise, without further approval, and without any payment to the participant or participants who authored or co-authored it. By accepting the award the participants also acknowledge that they have full and unrestricted rights to grant the aforementioned rights.
- By enrolling in this Competition, the participant grants his/her consent for the processing of her/his registration data and the submissions and reports, and grants the Organizer the rights to use such data and submissions for the purpose of evaluation of solutions, competition administrative purposes and in post-competition research.
- By accepting the award the winning participant grants the Organiser the right to process his or her personal data such as name, address, personal identification or security number, bank account or credit card number, and other necessary details provided for the purposes of prize processing and payment, including the payment of applicable taxes.
- By accepting the award the participant grants the Organizer the right to use the participant's name, affiliation, and/or prize information for the purpose of informational and promotional purposes of the Competition and the KnowledgePit platform in any medium without additional compensation.
10. Final arrangements
- The Organizer reserves the right to modify the Rules of this Competition, including without limitation for the purpose of clarification, correcting obvious editing mistakes, extending the deadlines for the benefit of participants, or other minor amendments. In the event of any change to the Rules, participants will be informed of them via the Competition forum.
- Unless otherwise provided in the Competition Rules above, all claims arising out of or relating to these Rules will be governed by Polish law and will be litigated in Poland. Participant consent to personal jurisdiction in those courts.
- If any provision of these Rules is held to be invalid or unenforceable, all remaining provisions of the Rules will remain in full force and effect.
The task in this challenge is to design an accurate method for predicting if logs from an IoT system indicate whether a cyberattack was performed on the system or not. The available training data contains 15027 log files in a
.csv table format (to be found in the directory
train_data/) a small fraction of which indicates that a cyberattack was performed (the list of all files indicating a cyberattack can be found in file
train_files_containing_attacks.txt). All files have uuid4 random names. All timestamps have been replaced with one single timestamp relating to the datetime 2023-04-12-00:00:00.
Solution format: the test data, containing 5017 files, is to be found in the directory
test_data/. The test files have the same format and naming scheme as the training files.
Solutions in this competition should be submitted to the online evaluation system as text files with predictions for test instances. The solution file should consist of exactly 5017 lines, each with a single number from the [0, 1] interval that indicates a chance for a cyberattack. The ordering of predictions should correspond to the lexicographic ordering of log files from the test set.
Evaluation: the quality of submissions will be evaluated using the ROC AOC measure. Solutions will be evaluated online, and the preliminary results will be published on the public leaderboard. The preliminary score will be computed on a small subset of the test records, fixed for all participants. The final evaluation will be performed after the completion of the competition using the remaining part of the test records. Those results will also be published online. It is important to note that only teams which submit a report describing their approach before the end of the challenge will qualify for the final evaluation.
|Rank||Team Name||Score||Submission Date|
The Fellowship of the Cybersecurity
- June 2, 2023 (23:59 GMT): deadline for submitting the predictions
- June 4, 2023 (23:59 GMT): deadline for sending the reports, end of the competition
- June 09, 2023: online publication of the final results, sending invitations for submitting short papers for the special session at FedCSIS'23
- July 09, 2023: deadline for submitting invited papers
- July 16, 2023: notification of paper acceptance
- July 28, 2023: camera-ready of accepted papers, and registration for the conference are due
Authors of the top-ranked solutions (based on the final evaluation scores) will be awarded prizes funded by the Sponsors:
- 1000 USD for the winning solution + 600 EUR for one FedCSIS 2023 registration
- 500 USD for the 2nd place solution + 600 EUR for one FedCSIS 2023 registration
- 250 USD for the 3rd place solution + 600 EUR for one FedCSIS 2023 registration
- Andrzej Janusz, QED Force / University of Warsaw
- Artur Kozłowski, Łukasiewicz Research Network – Institute of Innovative Technologies EMAG
- Błażej Adamczyk, EFIGO sp. z o.o.
- Daniel Iwanicki, QED Software
- Maksym Brzęczek, EFIGO sp. z o.o.
- Marcin Michalak, Łukasiewicz Research Network – Institute of Innovative Technologies EMAG
- Marcin Tynda, EFIGO sp. z o.o.
- Michał Czerwiński, QED Software
- Piotr Biczyk, QED Software
The challenge is sponsored by Łukasiewicz Research Network - Institute of Innovative Technologies EMAG and EFIGO sp. z o.o. companies. (co-financed by the Polish National Centre for Research and Development as part of the fourth CyberSecIdent–Cybersecurity and e–Identity competition; agreement number: CYBERSECIDENT/489240/IV/NCBR/2021).
|the evaluation system is temporarily unavailable||Andrzej||6||by M
Sunday, May 21, 2023, 21:55:06
|data files||Utkarsh||1||by Andrzej
Sunday, April 23, 2023, 16:50:49
|Explicit Submission Order.||Carlos||1||by Andrzej
Thursday, April 20, 2023, 10:28:20