Challenge authors were asked to supply difficulty information for challenges they developed. The following information indicates the difficulty level as intended by the challenge author in one of three key areas that a CRS would need to address within CGC:

• Discovery of the vulnerabilities
• Mitigating the vulnerabilities
• Proving the vulnerabilities

Challenges with multiple vulnerabilities at listed at level of difficulties for each vulnerability.

Discovery

Easy

CROMU_00051, CROMU_00051, CROMU_00055, CROMU_00057, CROMU_00057, CROMU_00064, CROMU_00064, CROMU_00065, CROMU_00065, CROMU_00065, CROMU_00073, CROMU_00073, CROMU_00073, CROMU_00077, CROMU_00082, CROMU_00082, CROMU_00083, CROMU_00083, CROMU_00088, CROMU_00088, CROMU_00092, CROMU_00093, CROMU_00093, CROMU_00093, CROMU_00094, CROMU_00094, CROMU_00097, CROMU_00097, KPRCA_00064, KPRCA_00069, KPRCA_00071, KPRCA_00073, KPRCA_00077, KPRCA_00081, KPRCA_00087, KPRCA_00093, KPRCA_00094, KPRCA_00099, KPRCA_00110, KPRCA_00111, KPRCA_00112, KPRCA_00120, NRFIN_00045, NRFIN_00051, NRFIN_00053, NRFIN_00053, NRFIN_00056, NRFIN_00056, NRFIN_00059, NRFIN_00061, NRFIN_00061, NRFIN_00063, NRFIN_00063, NRFIN_00064, NRFIN_00064, NRFIN_00065, NRFIN_00066, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00069

Medium

CROMU_00048, CROMU_00051, CROMU_00054, CROMU_00061, CROMU_00063, CROMU_00063, CROMU_00064, CROMU_00066, CROMU_00072, CROMU_00078, CROMU_00079, CROMU_00084, CROMU_00095, CROMU_00095, KPRCA_00062, KPRCA_00064, KPRCA_00065, KPRCA_00068, KPRCA_00075, KPRCA_00079, KPRCA_00086, KPRCA_00088, KPRCA_00091, KPRCA_00100, KPRCA_00101, KPRCA_00102, KPRCA_00119, NRFIN_00043, NRFIN_00044, NRFIN_00046, NRFIN_00049, NRFIN_00049, NRFIN_00052, NRFIN_00054, NRFIN_00065, NRFIN_00065, NRFIN_00065, NRFIN_00066, NRFIN_00072

Hard

CROMU_00047, CROMU_00061, CROMU_00065, CROMU_00084, CROMU_00096, KPRCA_00074, KPRCA_00079, KPRCA_00079, KPRCA_00097, NRFIN_00055, NRFIN_00055, NRFIN_00071

Mitigation

Easy

CROMU_00047, CROMU_00047, CROMU_00048, CROMU_00048, CROMU_00051, CROMU_00051, CROMU_00051, CROMU_00051, CROMU_00054, CROMU_00054, CROMU_00055, CROMU_00055, CROMU_00055, CROMU_00057, CROMU_00063, CROMU_00063, CROMU_00063, CROMU_00063, CROMU_00064, CROMU_00064, CROMU_00065, CROMU_00065, CROMU_00065, CROMU_00066, CROMU_00066, CROMU_00072, CROMU_00072, CROMU_00073, CROMU_00073, CROMU_00078, CROMU_00078, CROMU_00079, CROMU_00079, CROMU_00082, CROMU_00082, CROMU_00082, CROMU_00082, CROMU_00083, CROMU_00083, CROMU_00084, CROMU_00084, CROMU_00088, CROMU_00088, CROMU_00092, CROMU_00092, CROMU_00093, CROMU_00093, CROMU_00093, CROMU_00094, CROMU_00094, CROMU_00097, CROMU_00097, KPRCA_00064, KPRCA_00064, KPRCA_00065, KPRCA_00065, KPRCA_00069, KPRCA_00069, KPRCA_00075, KPRCA_00075, KPRCA_00077, KPRCA_00077, KPRCA_00079, KPRCA_00079, KPRCA_00081, KPRCA_00081, KPRCA_00086, KPRCA_00086, KPRCA_00087, KPRCA_00087, KPRCA_00094, KPRCA_00094, KPRCA_00099, KPRCA_00099, KPRCA_00100, KPRCA_00100, KPRCA_00101, KPRCA_00101, KPRCA_00110, KPRCA_00110, KPRCA_00111, KPRCA_00111, KPRCA_00112, KPRCA_00112, KPRCA_00120, KPRCA_00120, NRFIN_00043, NRFIN_00043, NRFIN_00044, NRFIN_00044, NRFIN_00044, NRFIN_00044, NRFIN_00045, NRFIN_00045, NRFIN_00049, NRFIN_00049, NRFIN_00049, NRFIN_00049, NRFIN_00049, NRFIN_00049, NRFIN_00049, NRFIN_00049, NRFIN_00052, NRFIN_00052, NRFIN_00053, NRFIN_00053, NRFIN_00053, NRFIN_00053, NRFIN_00055, NRFIN_00055, NRFIN_00055, NRFIN_00055, NRFIN_00056, NRFIN_00056, NRFIN_00056, NRFIN_00056, NRFIN_00061, NRFIN_00061, NRFIN_00061, NRFIN_00061, NRFIN_00063, NRFIN_00063, NRFIN_00063, NRFIN_00063, NRFIN_00063, NRFIN_00063, NRFIN_00063, NRFIN_00063, NRFIN_00064, NRFIN_00064, NRFIN_00064, NRFIN_00064, NRFIN_00065, NRFIN_00065, NRFIN_00066, NRFIN_00066, NRFIN_00066, NRFIN_00066, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00069, NRFIN_00069, NRFIN_00072, NRFIN_00072

Medium

CROMU_00051, CROMU_00051, CROMU_00057, CROMU_00057, CROMU_00061, CROMU_00061, CROMU_00064, CROMU_00064, CROMU_00077, CROMU_00077, CROMU_00095, CROMU_00095, CROMU_00096, KPRCA_00062, KPRCA_00062, KPRCA_00068, KPRCA_00068, KPRCA_00071, KPRCA_00071, KPRCA_00073, KPRCA_00073, KPRCA_00088, KPRCA_00088, KPRCA_00091, KPRCA_00091, KPRCA_00093, KPRCA_00093, KPRCA_00097, KPRCA_00097, KPRCA_00102, KPRCA_00102, KPRCA_00119, KPRCA_00119, NRFIN_00046, NRFIN_00046, NRFIN_00054, NRFIN_00054, NRFIN_00059, NRFIN_00059, NRFIN_00065, NRFIN_00065, NRFIN_00065, NRFIN_00065, NRFIN_00065, NRFIN_00065

Hard

CROMU_00065, CROMU_00084, CROMU_00084, KPRCA_00074, KPRCA_00074, NRFIN_00051, NRFIN_00051, NRFIN_00071, NRFIN_00071

Prove

Easy

CROMU_00047, CROMU_00051, CROMU_00051, CROMU_00054, CROMU_00061, CROMU_00064, CROMU_00064, CROMU_00064, CROMU_00078, CROMU_00082, CROMU_00093, CROMU_00093, CROMU_00093, CROMU_00094, CROMU_00094, KPRCA_00062, KPRCA_00075, KPRCA_00094, KPRCA_00110, KPRCA_00111, NRFIN_00051, NRFIN_00056, NRFIN_00066

Medium

CROMU_00051, CROMU_00057, CROMU_00058, CROMU_00077, CROMU_00084, CROMU_00092, CROMU_00095, CROMU_00096, CROMU_00097, KPRCA_00064, KPRCA_00068, KPRCA_00069, KPRCA_00071, KPRCA_00074, KPRCA_00077, KPRCA_00079, KPRCA_00081, KPRCA_00086, KPRCA_00088, KPRCA_00091, KPRCA_00099, KPRCA_00102, KPRCA_00112, KPRCA_00119, KPRCA_00120, NRFIN_00044, NRFIN_00045, NRFIN_00046, NRFIN_00051, NRFIN_00053, NRFIN_00053, NRFIN_00055, NRFIN_00055, NRFIN_00059, NRFIN_00061, NRFIN_00063, NRFIN_00063, NRFIN_00064, NRFIN_00064, NRFIN_00065, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00067, NRFIN_00069, NRFIN_00071

Hard

CROMU_00048, CROMU_00055, CROMU_00058, CROMU_00063, CROMU_00063, CROMU_00065, CROMU_00066, CROMU_00072, CROMU_00073, CROMU_00079, CROMU_00082, CROMU_00083, CROMU_00084, CROMU_00084, CROMU_00088, KPRCA_00064, KPRCA_00065, KPRCA_00073, KPRCA_00087, KPRCA_00093, KPRCA_00097, KPRCA_00100, KPRCA_00101, NRFIN_00043, NRFIN_00046, NRFIN_00049, NRFIN_00049, NRFIN_00052, NRFIN_00054, NRFIN_00056, NRFIN_00061, NRFIN_00065, NRFIN_00065, NRFIN_00065, NRFIN_00066, NRFIN_00072