Computer & Information Sciences
Cyber Security Challenges
Real cyber-security challenges on Ewance — assess risk, harden systems, and respond to threats the way a working security professional does. Solve them to build a portfolio of verified, recruiter-checkable proof you can do the work — not just describe it.
Recommended challenges
- CodeIntermediateNew
Add Differential Privacy to a Mental-Health App's Analytics Dashboard
Wrap the analytics module in `analytics_module.py` (provided) with a differential-privacy layer built on OpenDP. Implement epsilon-delta accounting: add Laplace noise to counts …
- Differential Privacy
- Privacy Budget
- Python Programming
Open coursework - ResearchSeniorNew
Audit a Custom Cryptographic Protocol
Read the 22-page protocol spec, the Go reference implementation (around 4,000 lines), and the test vectors. Run a structured review covering: primitive choices (which cipher, MA…
- Applied Cryptography
- Cryptographic Audit
- Protocol Analysis
Applied Cryptography - AnalysisSeniorNew
Forensic Reconstruction of an Anonymized Energy-Grid Incident
Treat this as a case file and work timeline-first. From the incident intake record (intake-file), establish the known facts and the 19-minute window. Reconcile the remote-termin…
- Digital Forensics
- Incident Response
- Ics Security
Open coursework - AnalysisIntermediateNew
Penetration-Test the TLS Configuration of an Edge Fleet
Receive read-only access to a 50-node representative sample (anonymized). Scan with testssl.sh + Qualys SSL Labs (where reachable) + a custom Go tool you write to test specific …
- Tls
- Applied Cryptography
- Penetration Testing
Applied Cryptography Develop in-demand professional skills.
Each challenge names the skills it strengthens. Over time, your profile fills with the competences a hiring manager would actually look for.
Why Ewance
- CodeSeniorNew
Implement Threshold Signatures for a Multi-Sig Custody Service
Read the FROST IETF draft (draft-irtf-cfrg-frost) and the underlying Schnorr signature scheme on the secp256k1 curve. Implement the FROST distributed key generation (DKG) and 3-…
- Applied Cryptography
- Threshold Signatures
- Rust
Open coursework - DesignIntermediateNew
Design a Secure-by-Default IoT Device Provisioning Flow
Design end-to-end provisioning: factory bootstrap (per-device key pair burned at manufacture), installer flow (BLE-driven activation, Wi-Fi handoff), cloud-side enrollment (mTLS…
- Iot Security
- Secure Provisioning
- Mutual Tls
Cyber-Physical and Cybercrime Topics - CodeSeniorNew
Assess Secure Cross-Bank Fraud Computation for a Four-Bank Consortium
Using the de-identified situation in the consortium case file and the two synthetic per-bank datasets (the bank suspicious-account lists and the merchant fraud-marker tallies), …
- Secure Computation
- Mpc
- Cryptography
Open coursework - CodeIntermediateNew
Secure the Software Supply Chain of an Open-Source SDK
Audit the current state: dependency tree, publish process, GitHub Actions workflows, signing posture. Generate an SBOM (CycloneDX format) using Syft. Run OpenSSF Scorecard and t…
- Supply Chain Security
- Slsa
- Sbom
Open coursework - Browse challenges
Explore role
Strategy Analyst
Frame the business question, model the options, build the recommendation. From market sizing to competitive analysis, this role is where strategy consulting meets in-house decision-making.
- DesignIntermediateNew
Passive Intrusion Detection for an Auto Supplier's Plant Network
Using the provided plant network diagram, design a passive (listen-only) sensor architecture that pairs Zeek and Suricata at the office-to-factory boundary plus three production…
- Intrusion Detection
- Ot Security
- Zeek
Open coursework - AnalysisIntermediateNew
Clear a Fortune-100 Privacy Review for an HR-Tech Vendor
Using the product fact-sheet, the stakeholder interview notes, the buyer's 14-concern brief, and the official texts of the General Data Protection Regulation and the EU Artifici…
- Compliance
- Privacy Regulation
- GDPR
Open coursework - DesignIntermediateNew
Threat Model a HealthTech Patient-Portal Web App
Read the 25-page redesign architecture document (auth via Clerk, Next.js front-end, FastAPI backend, Postgres, S3 for documents, webhook integration with EMRs). Build data-flow …
- Threat Modeling
- STRIDE
- Secure Design
Software Security - AnalysisIntermediateNew
Secure-by-Design Review of a Microservices Auth Subsystem
Read the 18-page proposed auth-service design (Next.js BFF, FastAPI auth-service, Postgres for sessions + refresh, Redis for short-lived tokens, integration with Auth0 for OIDC)…
- Secure Design
- OWASP Asvs
- Oauth2
Software Security Get recognized by recruiters and employers.
Credentials are blockchain-anchored via LearnCoin — tamper-evident, portable, link-shareable on LinkedIn and beyond.
Why Ewance
- CodeBeginnerNew
Build a Secure-Coding Linter Ruleset for a Backend Team
Using the findings log, study the twelve documented security-review findings and confirm the three repeat patterns. Then build a custom linter ruleset — choose Semgrep or custom…
- Secure Coding
- Static Analysis
- Semgrep
Open coursework - CodeSeniorNew
Build a Kernel-Module Sandbox for an Untrusted Code Service
Receive the current Docker-based sandbox configuration, post-incident reports for both escapes, and the runtime requirements for Python and C++ (compilers, package availability,…
- Sandboxing
- Seccomp Bpf
- Gvisor
Computer Systems Security - CodeIntermediateNew
Fuzz a Memory-Unsafe Image-Parsing Library
Identify 3 critical parser entry points (DICOM dataset parser, JPEG 2000 decoder, TIFF directory parser) and write a libFuzzer harness + an AFL++ harness for each. Build with AS…
- Fuzzing
- Memory Safety
- Address Sanitizer
Open coursework - DesignBeginnerNew
Propose a Cryptographic Target State for a Checkout Stack
Working solely from the four supplied materials — the stack architecture case file, the testssl.sh export corpus, the cryptographic configuration specification, and the best-pra…
- Cryptography
- Tls
- Pci Dss
Open coursework
How it works
From brief to credential, in six steps.
Step 01
Browse challenges aligned to your studies.
Step 02
Accept the one that fits your goals.
Step 03
Work through it with AI Copilot guidance.
Step 04
Submit for structured evaluation.
Step 05
Earn a verified credential.
Step 06
Add it to LinkedIn with one click.
Industry teams behind a decade of practitioner briefs
Hiring from this pool?
Sponsor a challenge and meet candidates through actual work.
Industry teams can shape briefs around the skills they hire for, then evaluate students on rubric-scored deliverables — not resumes.