- Registration with HotCRP system and questionnaire submission deadline:
15 September 201927 September 2019 - Qualification reports due in HotCRP:
22 September, 201927 September 2019 - Announcement of teams qualified to the final phase:
27 September, 201929 September, 2019 - Final reports and associated computer files due in HotCRP:
1 November 20194 November 2019
For the live finals of the competition in each region, the teams will be asked to present, discuss, and demonstrate their challenge solutions on the RFIF board and original firmware that are provided to the finalists by the organizers. Teams are responsible for acquiring and transporting any additional equipment their techniques require.
The RFID boards and firmware will be released and provided to the finalist teams after the conclusion of the qualification round.
For the qualification phase, each participating team must upload a written report to the HotCRP system in PDF file format following the standard IEEE conference format (10pt font, double column, letter size paper, not compsoc mode); templates are available here (LaTeX template is preferred). The qualification phase PDF report can be up to 4 pages, including references and appendices.
For the final phase, each qualified team must upload a final PDF report to the HotCRP system, along with a TAR.GZ file that includes all associated computer files and documentation for the implemented exploits. Final reports should follow the format of a technical paper, discussing attack implementation, findings, and any relevant documentation of all the approaches/techniques and exploits that will be demonstrated during the finals. Information pertaining to any assumptions the contestants make, thorough technical discussion, and points that address all the grading criteria must be included in the reports, in a structured manner. We encourage contestants to also include failed attempts and how/why they were unsuccessful, in addition to their successful approaches and attempts. The final report is limited to 8 pages including references and appendices, following the same template as the qualification report. In addition to the final reports, each team should prepare a PowerPoint presentation (up to 8 slides, 5 minutes) and a short video (2 to 3 minutes) demonstrating their work, to be presented on the day of the live finals at CSAW events.
We stress that final reports must be submitted in PDF format and that they MUST NOT be published or otherwise made publicly available before announcement of ALL winners in ALL global CSAW ESC regions/time zones (i.e., after 11 November 2019).
Participation in CSAW Finals is contingent upon competitors' ability to enter the given country where CSAW is being hosted. Each region has different team sponsorship, prize policies, and travel awards for the Final Round competition. Please visit https://csaw.engineering.nyu.edu/esc/prizes for more details.
Each CSAW region will announce separate winners for the first, second and third place.
All ESC participants in all regions are subject to the NYU Tandon School of Engineering student code of conduct. Any act of academic dishonesty, including but not limited to plagiarism, cheating, fabrication, unauthorized collaboration across different teams, work duplication, will not be tolerated and the offenders will be automatically disqualified from the competition.
Teams can contact their regional organizers at the following email address: [email protected]. To properly route each message and avoid delays in the response, each message must prepend the tag [US-Canada], [Europe], [MENA], or [India] in the subject line, depending on the region of the participating team.
In the event that ESC19 contestants find critical, previously undisclosed vulnerabilities in the microcontrollers during the competition's final phase, we ask that they contact CSAW ESC19 organizers so we can assist and jointly coordinate responsible disclosure procedures, if any such procedures are deemed necessary.