Contest Format

Jeopardy-Style CTF Challenges

DAY 1 CLASSIC CTF
+
DAY 2 CTF4AI

Competition Format

ICO 2026 features a dual-track format: Day 1 Classic CTF across 5 cybersecurity domains, and Day 2 CTF4AI -- a dedicated AI security competition track. View the full Technical Syllabus →

Day 1: Classic CTF

5 hours of jeopardy-style CTF across 5 cybersecurity domains. AI tools permitted with usage limits -- testing human-AI collaboration.

  • Binary Exploitation
  • Cryptography
  • Digital Forensics
  • Reverse Engineering
  • Web Security

Day 2: CTF4AI

5 hours dedicated to AI security -- the first dedicated AI security track at an international youth olympiad.

  • AI Attack Surface -- prompt injection, model extraction, adversarial ML
  • AI Defence & Detection -- guardrail testing, output verification, red-teaming
  • AI Forensics -- deepfake detection, code audit, model fingerprinting

Scoring System

Transparent and fair scoring across both competition days

Task Points

Each task is worth 100 points, split into subtasks. Submit the correct flag for a subtask to earn its points.

Tie-Breaking

Ties are broken by the sum of last point-increase times per day, in ascending order. No bonus points for first solves.

Individual Ranking

Contestants are ranked individually based on the sum of points across both competition days.

Medals

Gold, Silver, and Bronze medals awarded based on final individual rankings (exact ratios subject to confirmation).

Fair Play

Strict anti-cheating measures enforced. All solutions verified by the Scientific Committee.

Equal Opportunity

Same challenges, same timing, same resources for all contestants.

Participant Requirements

Team Composition

  • 1 to 4 contestants per team
  • 1 Leader and a Deputy Leader
  • Contestants must not be older than 20 on 1st of July 2026
  • Must represent their country/territory

Technical Skills

  • Proficiency in at least one programming language
  • Understanding of networking fundamentals
  • Basic knowledge of operating systems
  • Familiarity with common security tools

Competition Environment

  • Contestants must bring their own laptop (one each)
  • Cloud-hosted platform accessed via Wireguard VPN
  • No additional devices in the arena (including mobile phones)
  • No external monitors or desktop computers

Preparation Resources

  • Practice on CTF platforms (CTFtime, PicoCTF)
  • Study OWASP Top 10 vulnerabilities
  • Learn incident response procedures
  • Practice with security tools (Wireshark, Burp Suite)

Ready to Compete?

Register your team for ICO 2026 Australia