Lab rules
IDCC teaches how attackers work so you can defend against them. These rules keep the labs, and what you learn in them, safe and legal. They are part of our terms of service.
1. The basic rule
Try offensive techniques only inside the lab environments IDCC gives you. Never use what you learn here against a system outside the labs without its owner's permission. In Japan, unauthorized access is a crime under the Unauthorized Computer Access Act, and so is creating, supplying or keeping malware without a legitimate reason (Penal Code, crimes relating to unauthorized command records).
2. What you can do in the labs
- Investigate, write detections and practise using the systems, logs and samples provided in the lab.
- Reproduce attack techniques as the exercise instructs, inside the lab only.
- Use the detection rules and notes you write in the labs to defend your own or your company's systems.
3. What you must not do
- Scan, attack or access anything outside your lab from inside it. That includes servers on the internet, other learners' labs and IDCC itself.
- Use a lab for anything other than the exercises, such as sending spam, mining cryptocurrency, running a proxy or VPN, or hosting files or websites.
- Bring into a lab any malware other than the samples provided, or any real personal or confidential data.
- Try to break out of a lab's isolation. If you notice a way to escape a lab, don't test it; report it to our security contact.
- Share your lab's sign-in details or address with anyone.
- Use techniques learned here against anyone else's systems without their written permission.
4. Logging and monitoring
To prevent misuse, we record when each lab starts and stops, how long it runs and its network connections. We keep these records for the periods in our privacy policy. Everything inside a lab is deleted when the lab stops, so save anything you need first.
5. If the rules are broken
If we believe these rules have been broken, or may be, we may stop the lab at once and suspend or close the account. Where we suspect a crime, we will report it to the authorities and cooperate with any investigation. You are responsible for any loss your breach causes us or anyone else.
6. Reporting
If you see another learner misusing the labs, or a problem with a lab, email security@idcc.center.