ICCSDFAI 2026 International Hackathon

Editorial card, not a replacement for official terms. The text below is compiled from structured catalog data and explains how to evaluate the possibility of participating from Kazakhstan. Confirmed facts are clearly separated from analytics and practical recommendations. If the official website or legal rules differ from this card, the latest version of the organizer's documents always takes priority.

Brief profile

Topic: AI-generated code security, secure prompting. 100% online; geographic restriction not stated.

Format and location: Online; Online

Period: 25.06.2026 — 27.06.2026

Registration or submission deadline: deadline not confirmed

Current status: Completed

Admission for Kazakhstan: Yes — according to rules

For whom: CS students, researchers, cybersecurity enthusiasts

Age and other criteria: Open

Team: not published in verified materials

Main language: EN

Fee: not published in verified materials

Awards: not published in verified materials

What is this opportunity

ICCSDFAI 2026 International Hackathon is an event in the field of "cybersecurity and system resilience". The recorded thematic formulation is: AI-generated code security, secure prompting. 100% online; geographic restriction not stated.. The practical value of participation should be assessed not only by the size of the prize, but also by the quality of the task, access to experts, suitability of the result for a portfolio, preparation costs, and the probability of completing a strong submission in the available time. The status in the catalog is Completed, and the editorial priority is B — spring 2027. This helps determine the order of work, but is not an organizer rating and does not guarantee selection or victory.

For this topic, the central product question is: what specific threat, attack surface, or gap in the defensive process does the solution address. A strong team will be able to answer it in one sentence and then prove the answer with a working result. The most appropriate type of final artifact: a reproducible stand, a secure prototype, a set of checks, a report with a threat model, and a demonstration of an attack-defense scenario. This is an editorial recommendation derived from the topic; the official mandatory format should only be taken from the event website.

Participation of a team from Kazakhstan

In the card, admission is marked as Yes — according to rules. The basis that was successfully recorded: 100% online; geographic restriction not stated.. These two lines must be read together. The wording "Kazakhstan is not excluded" is weaker than a direct invitation to participants from all over the world, and the word "international" itself does not always mean the absence of restrictions on citizenship, residency, place of study, age, or sanctions compliance. If the meaning contains "conditionally", if the evidence is indirect, or if the legal rules have not yet been published, it is worth getting a written response from the organizer before spending time.

The recommended request to the organizer should state the country of residence and citizenship, the proposed team composition, age or student status, the method of receiving the prize, and the chosen format of participation. It is better to save the response together with a snapshot of the rules version. Separately, check whether the platform applies its own restrictions, whether a Kazakhstani bank can receive payment, whether a tax form is required, and whether it is allowed to participate on behalf of a company. These are not additional rules for this hackathon, but a standard risk check for an international application.

Who it is suitable for and how to assemble a team

Target audience: CS students, researchers, cybersecurity enthusiasts. Defined criteria: Open. Team composition information: not published in verified materials. Before registration, each participant must independently confirm their compliance with age, student status, residency, and other personal conditions. Unless permission for individual participation is explicitly stated, do not assume it is allowed. If the maximum team size is unknown, do not register extra people until you receive an answer from the organizer.

For a task in the field of "cybersecurity and system resilience," the rational distribution of roles is as follows: security researcher, backend/infra engineer, threat analyst, and a person responsible for the report and demonstration. One person can combine several functions, but there must be clear owners for the product, technical result, quality assurance, and final submission. It is useful to agree in writing in advance on contributions, the right to present the project, access to the repository, use of the result after the event, and the distribution of any potential prize. Such an internal agreement is a recommendation and does not replace the platform's terms.

The working language is specified as EN. Even if the team communicates in Russian or Kazakh, prepare a unified glossary of terms in advance and designate a person capable of confidently answering the jury's questions in the required language. For an English-language submission, it is better to use short sentences, labels on diagrams, and subtitles for the demonstration. The goal is precision, not complex style.

Format, calendar, and logistics

The confirmed format is Online, location is Online. Start: 25.06.2026; end: 27.06.2026; deadline: deadline not confirmed. Transport information: Not required. Presence of an online component per card: yes; signs of mandatory in-person presence: no. These signs are derived only from the field text and do not override event-specific rules.

For an online format, it is important for a team from Kazakhstan to convert the deadline to their time zone, check the time of mandatory sessions, the upload speed for large videos, and the availability of all APIs. Create a technical buffer of at least a few hours and do not leave registration until the moment of submission. For an in-person or hybrid format, first calculate the full budget: visa, flights, accommodation, insurance, local transport, food, and refundable deposits. The wording "travel support" does not mean automatic coverage of all expenses. The value recorded for this event: Not required.

Fees, prizes, and real value

Participation cost is recorded as not published in verified materials. Prize information: not published in verified materials. Before making a decision, separate cash payments, grants, cloud platform credits, subscriptions, equipment, mentorship, and marketing wording about total value. Clarify the number of awarded teams, currency, deadlines, taxes, restrictions on receipt, and the necessity to be present at the ceremony. If TBA appears in a field, there is a discrepancy between pages, or a re-verification is required, the amount cannot be used as guaranteed income.

Even without a cash prize, an event can be useful if it provides a strong case, a public demonstration, feedback, or access to a community. However, paid services, travel, and several weeks of work have an opportunity cost. It is better to make the decision to participate based on three questions: can the mandatory requirements be met; can a convincing result be assembled on time; will the created artifact be useful after the winners are announced?

Recommended project strategy

For this direction, the following sequence is useful:

Research. First, describe assets, trust boundaries, the attacker, and the permissible testing perimeter; then choose one measurable security hypothesis. Do not start with a list of technologies: first formulate the user, the problem, the base process, and the observable success criterion.
Project scope. Choose one end-to-end scenario that can be run from start to finish. Write down the features deliberately left out of the hackathon version.
Proof. Key metrics: scenario coverage, share of detected threats, reaction time, number of false positives, and reproducibility of the result. Record the baseline value before improvement and the test conditions so that the result does not look accidental.
Reliability. Check empty, erroneous, and edge inputs, unavailability of an external service, and understandable recovery. Do not test third-party systems without permission, do not publish working exploits or secrets, and use only targets authorized by the organizer.
Demonstration. Show a secure initial scenario, a controlled problem, the operation of the protection, and a log of evidence without disclosing sensitive data. Keep a local backup recording in case of a network error, if the rules allow it.
Submission. Link each claimed advantage to a screen, measurement, source, or feedback. Clearly separate what works now from plans after the hackathon.

This strategy is not an official evaluation criterion. Its purpose is to help turn a broad topic like AI-generated code security, secure prompting. 100% online; geographic restriction не заявлен. into an honest, verifiable, and completed prototype.

Known risks and gaps

Recorded risk: Team/language/prize details were incomplete.. Next recommended step: Monitor along with ICCSDFAI 2027.

The current card does not sufficiently confirm: the exact time and time zone of the deadline; the limit and rules for team formation; the cost of participation and mandatory payments; the structure, currency, and procedure for paying out prizes. These points should be considered open questions, not permission to act on the most convenient assumption.

Practical go/no-go criterion: it is worth applying if the team documentarily meets eligibility, has access to the mandatory stack, has time to complete the verifiable scenario, and accepts financial and logistical risks. Participation should be paused if the admission of Kazakhstan, submission rights, mandatory in-person presence, cost of critical services, or the procedure for paying out a significant prize are unclear.

Sources and confidence level

Official event page.
Rules or additional source.
Recorded proof of admission: 100% online; geographic restriction не заявлен..
The date and version of the documents may change; open both links again before taking action.

Summary: ICCSDFAI 2026 International Hackathon looks like an opportunity on the topic of "cybersecurity and system resilience" with the status Completed and an assessment of Kazakhstan's participation as Yes — according to the rules. The recommended action is Monitor along with ICCSDFAI 2027. The decision should be made after closing the listed gaps, not just based on the attractiveness of the topic or the prize headline.