Attack and Defend Exercises

Purpose
These exercises teach:
- attacker thinking
- defender response
- communication and documentation
Classroom-safe structure
- simplified red team actions
- defensive observation and response
- no real exploitation
Example exercise patterns
- “Find the weakness” scenario
- “What would an attacker try next?”
- “Which control stops this?”
CTF-style problem solving
CTFs emphasize:
- logic
- pattern recognition
- persistence
- teamwork
Teaching guidance
- reward reasoning, not speed
- require written explanations
- debrief after each exercise
Activity
Design a 10-minute attack/defend exercise using:
- CIA
- threat/vulnerability/control