2015 CyberPatriot Conference

Transcription

1 Air Force Association Educate - Advocate - Support 2015 CyberPatriot Conference September 12,

2 Agenda 8:00 9:00 Conference Check-in and Refreshments 9:00 10:00 Conference Welcomes (Dick Jeffreys & Deb Pint) Conference Objectives (Dick Jeffreys) Key Note Presentation (Chris Simpson) National Cyber Youth Education Program (Larry Torres) CyberPatriot in San Diego Student Experience Presentation (Ian Rodney) 10:00 11:45 11:45 12:00 12:00 LAUSD Beyond the Bell Presentation & Demonstration Wrap-up: What Can We Do For You? Conference Ends 2

3 Air Force Association Professional Aerospace Organization 501(c)(3) Non-Profit Open to Anyone Membership: National 95,000 & Chapter Missions: Educate Advocate Support Educational Focus: STEM (Science, Technology, Engineering, & Math) National Youth Cyber Education Program 3

4 Conference Objectives Get the word out. Introduce the CyberPatriot National Youth Cyber Education Program & National Youth Cyber Defense Competition. Present How does the competition work? through personal experiences. Answer competition questions & determine how we can help. 4

5 Air Force Association Educate - Advocate - Support National Youth Cyber Education Program Larry Torres Vice President, Programs September 12,

6 CyberPatriot Is The national youth cyber education program. The national youth cyber defense competition. Carefully structured to excite, educate, and motivate participants. Designed to instill in all participants the importance to our nation of cyber, cyber security, and good computer security practices. Designed to motivate all participants to consider STEM academic disciplines to meet our nation s needs. Designed to motivate many participants to become the next generation of cyber defenders and our nation s digital workforce. 6

7 CyberPatriot Is NOT Hacker training. Cyber ethics discussions are an important (and early) component in our curriculum. We don t teach hacking tools or techniques. Hacking in competition is strictly forbidden. A recruiting tool for the Air Force, the Department of Defense, or the Federal government. This is about building a strong national foundation for cyber skills throughout our high & middle schools. 7

8 Original Construct National High School Cyber Defense Competition 8

9 New Construct The National Youth Cyber Education Program National Youth Cyber Defense Competition AFA CyberCamp Program Elementary School Cyber Education Program 9

10 National Youth Cyber Defense Competition Puts teams of high & middle school students in the position of newly hired IT professionals tasked to manage the network of a small company. Teams are given a set of virtual images that represent an OS & are tasked with finding cybersecurity vulnerabilities within the images & hardening the system while maintaining critical services. Teams compete for top placement within their state & region. Top teams in the nation earn all-expense paid trips to Washington, DC for the National Finals Competition where they can earn national recognition & scholarship money (1st place - $2,000/competitor, 2d place - $1,500/competitor, 3d place - $1,000/competitor). Competitions take place on specified weekends throughout the school year. Teams must complete all their work during one (1) six consecutive-hour period on the Friday, Saturday, or Sunday of the competition windows. Cost: Open Division team is $195. Middle School Division team is $155. All Service Division teams and Civil Air Patrol teams are exempt. 10

11 Skills Participants Learn Leadership & teamwork Creative and analytical problem solving Non-technical cyber principles (e.g., social engineering, phishing, vishing, spear-phishing, etc.) Netiquette Cyber safety Cyber hygiene Computing & networking principles Operating systems Network topologies & cabling Foundational cyber security principles Cyber and system vulnerabilities Network security Vulnerability remediation Technical threats 11

12 Two High School Competition Divisions Open Division Open to any high school or middle school Public, private, parochial, magnet, home school 4H, Boys and Girls Clubs, Scouting units, other youth organizations Highly valued CyberPatriot competition attributes: Technical/STEM education Career preparation/development Teamwork All Service Division Open to any JROTC unit Air Force, Army, Navy, & Marine Corps Open to Civil Air Patrol squadrons and Naval Sea Cadet Corps units Highly valued CyberPatriot competition attributes: Teamwork Goal achievement Leadership 12

13 Middle School Division (CP-VI): Middle school pilot program highly successful (CP-VII): Full integration of middle school teams into competition. Competing in separate Middle School Division. Competition system modified to provide slightly less daunting network images (problem sets). Broad positive response from middle school educators. 13

14 Team Organization Coach(es) Teachers, JROTC instructors, staff members, etc. approved by a participating school or organization to act as the administrative lead of the team. Coaches are responsible for the following: Competitors Ensuring competitor safety. Protecting the competition's integrity & upholding rules, time limits, & download limits. Acting as the main point of contact for the team. Each team must consist of between 2 and 6 competitors enrolled in the participating school or organization; a maximum of five students are permitted to compete at any one time. Technical Mentor(s) Volunteer industry professionals, students, academics, & IT -experienced adults. Required to register on the CyberPatriot website & pass a background check. Can mentor multiple teams. Team Assistant(s) Provide non-technical support & encouragement. Required to register on the CyberPatriot website and pass a background check. 14

15 Train Train for the competition. Download updated training materials. Mentors provide advanced training. Prepare How it Works Before the Round Ensure all required hardware, software, & network capabilities are in place. Technical requirements are kept to a minimum. Download Review round instructions & links to download the virtual machine images (sent by the Program Office a week prior to comp). Download and ensure successful download of competition images before the round begins Usually two or three images per round. 15

16 How it Works During the Round (1/2) Extract Teams receive password to extract virtual machine images Friday morning of competition weekend. Load images in VMware Player & begin competing. Identify Fix Once images are opened, teams are prompted to enter a Team ID (ten-digit alphanumeric code). Find and fix vulnerabilities in their images. Some rounds include networking challenges (e.g., quizzes & Cisco Packet Tracer activities). 16

17 Score How it Works During the Round (2/2) Fix a vulnerability that is being checked = receive points. Take an action that makes a system less secure = lose points. Teams can also gain points by answering forensics questions about actions they took to solve their vulnerabilities. Teams can check their progress throughout competition. Compare Ask Live scoreboard is available for teams to see how they stack up against others in the country. Scores are unofficial & undergo review by CyberPatriot staff following the competition. Staff is available to answer technical support questions during the round by chat & by phone. Teams may not ask questions about vulnerabilities. 17

18 How it Works After the Round Delete All virtual machine images should be deleted after the round is over to maintain the integrity of the competition. Wait Staff reviews all the scores following the competition & releases official scores & standings to teams within a week after the round is over. 18

19 CP-VIII Competition Timeline 19

20 CP-VIII Competition Timeline Key Dates & Advancement (1/2) Open Division All Service Division 20

21 CP-VIII Competition Timeline Key Dates & Advancement (2/2) 21

22 Elementary School Cyber Education Initiative (ESCEI) Purpose: Educate on ubiquity of cyber systems. Teach cyber safety basics. Introduce concept cyber security. ~ 45 minute thing. Not a competition. Not purely a game. On-track for nationwide fielding On-line and hard copy distribution. Full instructions for AFA Chapters, educators, & parents. 22

23 ESCEI Program Details Interactive learning modules & associated curriculum are intended for instruction with all elementary school-level students. Interactive learning modules: Security Showdown is intended for K-3 graders. Introduction to basic personal security practices. Key Topics: Personal information. Students have the option to complete this module in English or Spanish. Clean_Up and DangerBots are intended for 4th-6th graders. Clean_Up is the cyber defense module. Clean_Up Key Topics: Phishing, Malware, Firewalls. DangerBots is another cyber defense module. DangerBots Key Topics: Malware, Defenses, Passwords. Modules may be used in the classroom, other group activities, or as an independent activity. Cost: FREE! Order online at 23

24 What Comes in an ESCEI Kit? Both digital and a hard-copy versions are available. Digital version is available instantly after completing the request form and includes the following materials: Three interactive learning modules. Curriculum slides to supplement the modules. Instructor's Guide containing installation instructions, module information, and instructor's notes for the curriculum. Cover letters that describe the ESCEI to parents, guardians, and educators. Brochure, social media guide, and press release template that can be used to promote the ESCEI. Template certificates to award students upon completion of the modules. The hard-copy version of the kit includes the following: All of the above on a DVD. Printed copies of the Instructor's Guide, ESCEI brochure, and stickers to be awarded to students. Everyone who orders the hard-copy also receives the digital kit immediately after completing the request form. 24

25 CyberCamp Program Conceived to supplement CyberPatriot's annual National Youth Cyber Defense Competition & allow educational institutions to engage students in cybersecurity education throughout the year. The AFA CyberCamp Program includes two distinct kit offerings. CyberCamp Kit is designed to be executed over five days. Includes instruction modules, access to accompanying demonstration software, and access to novice Windows 7 & novice Ubuntu competition images on approved camp's scheduled competition day. CyberCamp Competition Kit is designed to supplement locally developed curriculum or support one-off competition events. Cost: $1050. Consists only of access to one or more competition images on an approved competition date. Order online at 25

26 CyberCamp Kit Curriculum kit consists of five four-hour instruction modules, accompanying instructor's guides, student workbooks, demonstration software, & competition software that will teach students important skills in cyber safety & cybersecurity. 20-hour curriculum is designed to be completed over five days, with the fifth day serving as a day of mock competition. CyberCamp Kit curriculum is organized as follows: Module 1: Introduction to the CyberPatriot National Youth Cyber Defense Competition, cybersecurity career opportunities, cyber ethics, online safety, how computers work, & cyber threats. Module 2: Cybersecurity principles, virtual machines, basic Windows security policies & tools, & account management. Module 3: Windows file protections, auditing and monitoring, introduction to Server 2008 & introduction to Linux. Module 4: Ubuntu terminology & concepts, basic graphical user interface security, basic command line security, & intermediate Ubuntu security. Module 5: Mock CyberPatriot competition. 26

27 CyberCamp Competition Kit Competition Kit is designed to complement locally developed curriculum or training regimens for the CyberPatriot National Youth Cyber Defense Competition. CyberCamp Competition Kit consists of the following: Mandatory thirty-minute cyber ethics module. Instructor's guide. Access to one or more CyberPatriot competition images on the requesting organization's scheduled competition day: novice Windows 7, novice Ubuntu, intermediate Windows 7. 27

28 Air Force Association Educate - Advocate - Support CyberPatriot in San Diego Dick Jeffreys Chapter President September 12,

29 The San Diego Experience Participation Competition National Local CyP I (2009) 8 N/A CyP II ( ) 200 N/A CyP III ( ) CyP IV ( ) 1, CyP V ( ) 1, CyP VI ( ) 1, CyP VII ( ) 2, CyP VIII ( )?

30 The San Diego Experience Successes Competition CyP III CyP V CyP VI CyP VII School/Organization Westview H. S. (2 nd Place, Open) Ramona H. S. NJROTC (Finalist, All Service) Naval Sea Cadet Corps (NSCC), Fort Fisher Division (Finalist, All Service) Patrick Henry H. S. NJROTC (3 rd Place, All Service)* NSCC Fort Fisher Division (Finalist, AS) NSCC Fort Fisher Division (3 rd Place, AS)* * Won 1 of 2 Cisco Networking Awards 30

31 CP-VIII San Diego County Registered Teams 31 Teams 31

32 Wrap-Up What can we do for you? Survey Points of contact: Dick Jeffreys at Larry Torres at Websites:

33 Discussion 33