The WaveGame is a four-event cybersecurity competition organized annually by Wavestone. One event consists of automatically deploying secure infrastructure on AWS using Terraform. We won this event three years in a row, and you can find my code here: https://github.com/Kkameleon/Secure-AWS-architecture-Terraform. Below, I display the infrastructure implemented for each year of the AWS event.

WaveGame 2022 - (1^st/42)

For the second year in a row, my team and I (418 I’m a teapot) won the Wavegame.

Summary

This year the WaveGame events were:

• Pentesting on a custom website hosted on AWS
• Automatic deployment of secure infrastructure on AWS with Terraform (Infrastructure as Code)
• Pentesting on a custom cluster of servers
• (Finale) Digital forensics (tracing the steps taken by an attacker to compromise an information system) and pitching the results of the investigation to management

The first three events lasted one week each. For each of these events, in addition to the background work, we had to produce a report to present our results. At the conclusion of these events, the top 5 teams (out of 42 student teams from France and Switzerland) were invited a final event in the headquarters of Wavestone (La Défense, Paris) lasting a few hours. The five of us came on top and won 2500€.

AWS Deployment:

WaveGame 2021 - (1^st/39)

We were Télécom Imp’hackt.

Summary

This year the WaveGame events were:

• Pentesting on a custom WordPress site on AWS
• Digital forensics (tracing the steps taken by an attacker to compromise an information system)
• Real-time threat detection through log analysis with Splunk
• Automatic deployment of secure infrastructure on AWS with Terraform (Infrastructure as Code)

For each of these events, in addition to the background work, we had to produce a report to present our results. There was a prize only for the first team: the six of us won 4800€.

AWS Deployment:

WaveGame 2020 - (5^th/60) (finale cancelled)

We, NoFlawsOnlyFlag, were qualified for the finale in June, which got cancelled because of covid.

Summary

This year the WaveGame events were:

• Pentesting on a custom WordPress site on AWS
• Automatic deployment of secure infrastructure on AWS with Terraform (Infrastructure as Code)
• A custom forensic CTF

AWS Deployment:

(This diagram was made by Wavestone)