Abstract

An Indonesian 2023 Capture the Flag competition for 18-year-olds is looked at for the first time. It engaged a diverse participant profile, encompassing high school students and the general public from various regions. Java Island saw the most participation, especially in East Java, with little interest from Jakarta's youth, possibly due to the abundance of distractions. Despite varied educational backgrounds, vocational institutes, notably in East Java, featured prominently. Gender diversity was limited, with no female participants progressing to the final stage. Analysis of problem categories indicated diverse performance, highlighting challenges in digital signature, online hacking, network analysis, and database assault. Normalization emphasized problems within high school students' capabilities, suggesting the integration of cybersecurity education into curricula. Finalists predominantly hail from Central and East Java, indicating a regional concentration. Younger, non-Javanese participants underscored passion's role in success. Successful profiles revealed independent skill acquisition through online platforms, especially John Hammond's YouTube channel, emphasizing the need for accessible cybersecurity education resources. The study advocates prioritizing ICT education, particularly in networking, online hacking, OSINT, and cryptography, to enhance high school CTF participation and performance. The findings showcase the significance of passion-driven, self-directed learning in fostering ethical hacking skills among Indonesian youth.