Contest Format

Jeopardy-Style CTF Challenges

DAY 1 AI4CTF
+
DAY 2 CTF4AI

Competition Format

ICOA 2026 features a dual-track format: Day 1 AI4CTF across 5 cybersecurity domains with AI-assisted solving, and Day 2 CTF4AI — a dedicated AI security competition track. View the full Technical Syllabus →

Day 1: AI4CTF

5 hours of jeopardy-style CTF across 5 cybersecurity domains. AI assistance via competition-provided API gateway with token limits — testing human-AI collaboration.

  • Binary Exploitation
  • Cryptography
  • Digital Forensics
  • Reverse Engineering
  • Web Security

Day 2: CTF4AI

5 hours dedicated to AI security -- the first dedicated AI security track at an international youth olympiad.

  • AI Attack Surface -- prompt injection, model extraction, adversarial ML
  • AI Defence & Detection -- guardrail testing, output verification, red-teaming
  • AI Forensics -- deepfake detection, code audit, model fingerprinting

Scoring System

Transparent and fair scoring across both competition days

Flag-Based Scoring

Challenges are scored by correct flag submissions. Points vary by difficulty. Both AI4CTF and CTF4AI days contribute to the final total.

Tie-Breaking

Ties are broken by the sum of last point-increase times per day, in ascending order. No bonus points for first solves.

Individual Ranking

Contestants are ranked individually based on the sum of points across both competition days.

Medals

Gold, Silver, and Bronze medals awarded based on final individual rankings (exact ratios subject to confirmation).

Fair Play

Strict anti-cheating measures enforced. All solutions verified by the Scientific Committee.

Equal Opportunity

Same challenges, same timing, same resources for all contestants.

Participant Requirements

Team Composition

  • 1 to 4 contestants per team
  • 1 Leader and a Deputy Leader
  • Contestants must not be older than 20 on 1st of July 2026
  • Must represent their country/territory

Technical Skills

  • Proficiency in at least one programming language
  • Understanding of networking fundamentals
  • Basic knowledge of operating systems
  • Familiarity with common security tools

Competition Environment

  • Contestants must bring their own laptop (one each)
  • Cloud-hosted platform accessed via Wireguard VPN
  • No additional devices in the arena (including mobile phones)
  • No external monitors or desktop computers

Preparation Resources

  • Practice on CTF platforms (CTFtime, PicoCTF)
  • Study OWASP Top 10 vulnerabilities
  • Learn incident response procedures
  • Practice with security tools (Wireshark, Burp Suite)

Ready to Compete?

Register your team for ICOA 2026 Australia