Article 1 (Purpose)
The purpose of these Terms of Service (hereinafter "Terms") is to define the rights, obligations, responsibilities, and other necessary matters between CyberGround (hereinafter the "Site") and the "Member" regarding the use of the online Incident Response (IR) training service and CTF (Capture The Flag) challenges (hereinafter collectively referred to as the "Service").
Article 2 (Definitions)
- "Member": Refers to a person who accesses the "Site," agrees to these "Terms," creates an account via email verification, and uses the "Service."
- "Service": Refers to all hands-on scenario training content, CTF challenges, related learning materials, and community functions provided by the "Site" to the "Member."
- "Account": Refers to the combination of an email address and password selected by the "Member" and approved by the "Site" for "Member" identification and "Service" use.
Article 3 (Membership Registration and Account)
- Membership registration is completed when a person wishing to use the "Service" fills out the registration form provided by the "Site" and agrees to these "Terms."
- The "Site" may refuse to approve registration or may terminate the contract afterward in any of the following cases:
- If the applicant used another person's name or provided false information.
- If, due to technical or operational judgment, providing the "Service" is deemed difficult.
- If approval is not possible due to reasons attributable to the "Member" or if the "Member" has violated these "Terms."
Article 4 (Provision and Use of Service)
- The "Site" provides the following "Services" to the "Member":
- Incident Response (IR) training scenarios based on real-world cyber attacks (e.g., APT, Ransomware).
- Attack technique classification and learning content based on the MITRE ATT&CK framework.
- CTF challenges organized by difficulty level (e.g., Easy to Expert).
- Learning progress management and ranking systems.
- Other educational services developed by the "Site" or provided through partnerships.
- The "Service" is provided 24 hours a day, 365 days a year, in principle. However, the "Service" may be temporarily suspended for operational needs, such as regular system maintenance, server expansion, or network failures.
Article 5 (Member's Obligations and Prohibited Conduct)
- The "Member" must use the "Service" solely for the purpose of learning and skill enhancement.
- The "Member" shall not engage in any of the following acts in connection with the use of the "Service":
- Using the knowledge, skills, or code (e.g., attack code) learned from the "Service" for any illegal purpose (including but not limited to real-world hacking, system attacks, or cracking) or distributing such to third parties.
- Attacking the "Site's" servers, infrastructure, or other "Members'" systems (e.g., DDoS, scanning, unauthorized access) beyond the scope of the provided learning environment (virtual machines, networks, etc.).
- Publishing the answers (Flags) or solutions (Write-ups) for the "Service's" CTF challenges in public forums (other communities, blogs, etc.) without the "Site's" explicit permission.
- Illegally copying, distributing, selling, or commercially using the content provided by the "Site" (scenarios, problems, training materials).
- Stealing another "Member's" "Account" or transferring or lending one's own "Account" to a third party.