I n t e g r i t y - S e r v i c e - E x c e l l e n c e

1

CyberPatriot

Concept Demonstration:National High School

Cyber Defense CompetitionOrlando, FL, 26-27 February 2009

This briefing will describe an exciting new initiative by the Air Force Association(AFA) to inspire today’s youth to become the cyber defenders of tomorrow …

The proof of concept in Orlando demonstrated a viable formula to build a nationalcompetition that will excite high school students, instill cyber security awareness,and create career interest. CyberPatriot II will take the concept nationwide.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 2

Call 2008 the year that cyberspace —its vulnerability, its defense, and its exploitation—passed the point of no return as a major issuefor national security officials.

Rebecca Grant, Director, Mitchell Institute

The United States is the most vulnerable nationon the face of the Earth to cyber attack for asimple reason — we are the most dependent.

Michael McConnell, Director of National Intelligence

Why is a High School CyberDefense Competition Needed?

The rationale for this initiative is simple: cyber defense is one of our nation’s mostimportant national security concerns and the critical factor in building the defenseis not technology — it is talented PEOPLE, educated and motivated to serve.

The success of many business enterprises will depend on the degreeto which the available pool of workers possesses the right combinationof science, technology, and engineering skills.

Bill Gates, Congressional Testimony

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 3

The Air Force needs the cyber warriors who can secure the domain as theindispensible prerequisite for air and space dominance

The nation, especially American industry, needs secure networks to compete andsecurity providers reasonably expect an expanding, lucrative market

The linchpin of future network security is education of enough U.S. professionals tomeet the expanding requirement—the source of that educated workforce must bestudents motivated to pursue a career in information assurance and computer security

The Air Force Association: Educates thepublic, Advocates for and Supports theUSAF, the Air Force family and aerospaceeducation

Aerospace is Air, Space, and Cyberspace!

A Convergence of InterestsThis environment produced a remarkable convergence of interests …

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 4

Center for Infrastructure Assurance & Security (CIAS)Academic perspective; Network security education; Collegiatecompetition; Director’s AF relationship (USAFR Colonel)

Science Applications International Corporation (SAIC)Diverse industrial perspective (customer & supplier); ProvenCyber Defense Trainer (CyberNEXS); Corporate commitment

Air Force Junior ROTC (AFJROTC)/Civil Air Patrol (CAP)High School perspective; Local groups with national breadth;Accepted by HS administration; “Built-in” commitment tocitizenship/service

Air Force Association (AFA)Nonprofit perspective; Relationships with all of the above; Fieldorganization with national breadth; Education mission & nationalsecurity interest

Founding PartnersCommon interests created a team of capable and committed partners …

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 5

CyberPatriot is a cyber defense competition that teststhe ability of the students to defend a simulatedcorporate network from external hostile attacks.CyberPatriot is more than just a competition – it willhelp educate and motivate the next generation ofstudents to become the cyber defenders the nationneeds.

What is CyberPatriot?CyberPatriot is for the students, but also for our nation

Three Phases:I.Concept Demo. Proves: Viable premise ─ excites & educatesII.National Deployment. To prove: Scalability, academic ─competition integration, management scope & processIII.Institutionalize. Full integration with academia, government &industry; self-sustaining path from 9th grade to career.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 6

Phase I, Proof of Concept Demo (26-27 February 2009): Online education/preparation Eight 5-person teams (AFJROTC & CAP) SAIC’s CyberNEXS Cyber Defense Trainer Competed at AFA’s Air Warfare Symposium Winner to National Collegiate CDC at UTSA, TX

What is CyberPatriot?Phase I was a “Home Run!”

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 7

The Competition Environment attempts to ensure the smooth operation of all competition equipment.

is the scoring engine that awards points to theteam for successfully patching vulnerable systems and foreffectively addressing attacks on their network.

simulates the hostileInternet environment and attempts togain unauthorized access to the Bluesystems or to disrupt their service.

The Blue Team

The Red Team

Scorebot

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 8

The Flow of the Competition

Thursday Morning: Teams 1 & 2 competed Afternoon: Teams 3 & 4 competed Evening: The winning team fromThursday was announced

Friday Morning: Teams 5 & 6 competed Afternoon: Teams 7 & 8 competed Evening: The winning team from Friday was announced Awards Ceremony: The overall winning team – the

National Champion – was announced

Day 1 Winner: Team Spaatz, Osceola HS

We were sure this was a winning formula whenthe first day winner was announced!

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 9

The Venue

9

AFA’s 25th Annual Air Warfare Symposium

The Symposium was an ideal venue toshowcase the competition and enrich the

experience for the competitors

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 10

Distinguished Visitors to CP I

10

Visitors to CyberPatriot I Included: Gen Norton Schwartz, CSAF Gen Stephen Lorenz, AETC/CC Gen Donald Hoffman, AFMC/CC Mr. Charles Beard, SAIC CIO Lt Gen Ted Bowlds, ESC/CC Maj Gen William Lord, AFCYBER (P) Brig Gen Teresa Djuric, Holm Center/CC

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 11

Competitors were engaged & “All In”

11

And Excited!!!

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 1212

CyberPatriot I ― Day 2 WinnerTeam WilsonCivil Air Patrol

Florida Composite Wing

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 1313

CyberPatriot I ― Champion

Team SpaatzAFJROTC FL-921

Osceola H.S.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 1414

Feedback from the Competition

Participants and advisors were asked to provide feedbackafter they finished competing. Some highlights (based ona scale of 1 to 5, Strongly Disagree to Strongly Agree): Advisors (8):

My team enjoyed the competition: 4.75 We would like to participate again: 4.75 As a result of this competition, my students learned

more about securing a network: 4.75 Participants (37):

I enjoyed the competition: 4.78 I would like to participate again: 4.78 As a result of the competition, I learned more about

securing a network: 4.78

54% of the students stated that they are more likely toattend college as a result of this competition

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 15

Phase II, National Deployment (2009-10 School Year): National AFJROTC/CAP competition; Enhanced academics; Prelim. rounds select regional competitors; 18-19 Feb 2010 Orlando Finals; Champion to April 2010 NCCDC

Phase III, Grow to the Need (2010-11 on): Expand to non-JROTC/CAP; Integrate with NCCDC & Institutionalize

What is the Future ofCyberPatriot?

The Vision for the competition is to grow to the point that anyhigh school in the nation that desires to field a team will beable to participate in the program.

This will require a multi-tiered competition leading to thenational championship event:

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 16

Future:Integration with the NCCDC

Future “CyberPatriots” will not simply go to theNCCDC as a first prize ….

We’ll see a generation of NCCDC winners whowent to college and studied CompSci because

they were “CyberPatriots”

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 17

CyberPatriot II Structure(dates approximate except Finals)

Apr-Jun 09: Publicity and competitor identification and unitregistration: Goal: 50-300 units

Jun-Aug 09: Instructor/Advisor (Team Coach) Preparation:Information push, feedback/questions through assigned AFAArea Participant Coordinator (APC) to “community of interest,”modest time required, student preparation permitted ─ notrequired. Goal: ready to go on school day one.

Sep-mid Oct 09: Basic academics/competition preparation,primary/alternate team members selected – all can participate.Goal: ready for Round 1.

Late Oct: Round 1: DVD “Image” of virtual windows networkdownloaded on any computer, six-hour, Saturday exercise todiagnose. Log into the scoring host at SAIC. Goal: 30 teamsgraduate to “medalist flight;” all others in “consolation flight”competition. Feedback through “task solution” presentation.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 18

CyberPatriot II Structure(dates approximate except Finals)

Mid-Nov 09: Consolation Flight competition: intervening tailoredpreparation. DVD six-hour exercise similar to round one; 1st, 2nd,3rd place awarded. Goal: all receive feedback and areencouraged to follow medalist competition.

Early/mid-Dec 09: Medalist Flight competition: Tailoredpreparation for more complex virtual network image (Windows +UNIX). Six-hour exercise similar to round one. Goal: eightfinalists identified; all receive feedback and are encouraged tofollow competition.

Jan 10: Prep. for finals. Goal: Finalists at peak of their game. 18-19 Feb 10: Orlando CyberPatriot II Finals in conjunction with

AFA’s 26th Air Warfare Symposium. Goal: competitorsdemonstrate learning, capability, and HAVE FUN!

Apr 10: CyberPatriot II Champions travel to San Antonio, TX, forNCCDC and participate as White/Red Team members.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 19

CyberPatriot II Structure(timeline)

AprMarFebJanDecNovOctSepAugJulJunMay

Medalist Flight(30)

Consolation Flight(n - 30)

Finalists(8)

1st, 2nd, 3rd Place AwardsAll follow competition

Medalist Flight Competition CyberPatriot II Finals

(22)Champion to

NCCDC

Sign-Up CP II(n = 50-300+) Instructor/Advisor

Prepare

Academics

Student Prep.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 20

CyberPatriot II Structure(considerations)

Team Coach need not be “computer whiz” (students are alreadysmarter about this stuff). Coach must be committed to someadditional effort and communication.

Competitors (students) must be enrolled in an accredited highschool program in grades 9-12.

No additional computer/network equipment is required (somepermissions from school SysAdmin for Internet connection maybe necessary).

Entire class may prepare and learn, but Coach must choosecompetitors (five maximum).

No additional cost beyond incidentals for personal items forthose eight teams that travel to the finals (traveling teams will belimited to: five competitors (students), one Coach, and onegender chaperone).

I n t e g r i t y - S e r v i c e - E x c e l l e n c e

SIGN UP NOW!!!

Online registration is now open! Prospective Coaches only(JROTC SASI/ASI or CAP COs) should sign up now, but no laterthan 29 May 2009. Please provide your contact information,including an e-mail and phone number for contact throughout thesummer.

There is no obligation in registering. You will be asked to make afirm commitment only after you have reviewed additionalinformational materials and a more detailed description ofparticipant expectations.

After registering at:https://registration.afa.org/reg/Reg1.aspx?RegType=cyberpatriotyou may expect additional information within two weeks.

21

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 22

CyberPatriot II 18-19 February 2010Orlando, FL

IIIIBEBE

THERE!THERE!