Civil Air Patrol Cyber Security & CyberPatriot: Educating and Training for Tomorrow’s Challenges Maj Bill Blatchley, CAP National Cadet Programs Cyber Team Colorado Springs Cadet Squadron Aerospace Education Officer CyberPatriot Coach & Mentor 29 August 2015 Citizens Serving Communities

Citizens Serving Communities Topics Who Needs Cyber Security What is CyberPatriot How to Start a Program Cadet Opportunities Training CAP Initiatives Questions Citizens Serving Communities 2

Who Needs Cyber Security Citizens Serving Communities Individuals Business Large & Small Non Profit Government State & Local Federal Schools & Universities Citizens Serving Communities 3

Citizens Serving Communities Individual Security Home Wireless 28% Of Networks Unsecured Gives Bad Actors a Foothold into YOUR data Maybe the FBI Will Come Knocking New York Man Sentenced to 96 Months Used Unsecured Wireless to Share Child Porn Another House Raided by SWAT http://humanevents.com/2012/06/11/how-secure-is-your-neighborhood/ http://www.fbi.gov/buffalo/press-releases/2014/rochester-man-sentenced-on-child-pornography-charges http://o.seattletimes.nwsource.com/html/nationworld/2014867387_wifi25.html Citizens Serving Communities 4

Citizens Serving Communities Individual Security Home Wireless Baby Monitor Hacked Unsecured Wireless Default Password on Camera Device Man Screams “Wake Up Baby” Parents Obviously Upset http://www.nbcnews.com/tech/security/man-hacks-monitor-screams-baby-girl-n91546 Citizens Serving Communities 5

Citizens Serving Communities Individual Security Public Wireless Someone May Be Snooping Capturing UserIds/Passwords Seeing Email – Not All Email uses HTTPS HTTPS Can be Spoofed (secure web browsing) Social Engineering May be Required Corporate Network HTTPS CA Certificate Override http://www.pcworld.com/article/2043095/heres-what-an-eavesdropper-sees-when-you-use-an-unsecured-wi-fi-hotspot.html https://media.blackhat.com/bh-eu-12/Jarmoc/bh-eu-12-Jarmoc-SSL_TLS_Interception-Slides.pdf http://www.zdnet.com/how-the-nsa-and-your-boss-can-intercept-and-break-ssl-7000016573/ Citizens Serving Communities 6

Citizens Serving Communities Individual Security Defense Mechanisms Do Not Install “Unknown” Software Be Wary of “Good” Software Install a Firewall Know How to Configure It Public, Work, Home Networks Know the Setting Uninstall Unneeded Programs Citizens Serving Communities 7

Citizens Serving Communities Individual Security Citizens Serving Communities 8

Citizens Serving Communities Individual Security Citizens Serving Communities 9

Citizens Serving Communities Individual Security Computer Hygiene Do Not Click That Link Do Not Download Use Anti-Virus & Anti-Malware Software Limit Computer Access Do Not Let Your Children on Your Computer!!!!! Separate Networks for Children Citizens Serving Communities 10

Citizens Serving Communities Business Security All Business Need Security Target Breach May have Started with Small HVAC Company Every Company has Sensitive Data Employees are Usually the Weak Link Management Sometimes Needs a Poke http://www.covert.io/research-papers/security/A%20Kill%20Chain%20Analysis%20of%20the%202013%20Target%20Data%20Breach.pdf http://www.covert.io/security-datascience-papers/ Citizens Serving Communities 11

Citizens Serving Communities Government Security www.healthcare.gov Security Issues Abound “Rush” to Implement Money with No Oversight VA Paid $20M Over Lost Laptops in 2009 Why Did Laptops Have Data Anyway??? Data Should be on Secured Servers http://www.pcworld.com/article/2088760/healthcaregov-still-has-major-security-problems-experts-say.html http://www.cnn.com/2009/POLITICS/01/27/va.data.theft/index.html?eref=onion Citizens Serving Communities 12

Citizens Serving Communities Government Security Office of Personnel Management 21 Million People Compromised Security Clearance Background Data Fingerprint Data Possible Nation/State Actors “If there is anyone to blame, it is the perpetrators” – Former OPM Director Why don’t we take this seriously? http://www.pcworld.com/article/2088760/healthcaregov-still-has-major-security-problems-experts-say.html http://www.cnn.com/2009/POLITICS/01/27/va.data.theft/index.html?eref=onion Citizens Serving Communities 13

Who Needs Cyber Security Citizens Serving Communities Everyone! Too Few People Taking up the Career Not Enough Education for the Public Not Enough Awareness for Business & Government The Need is Great http://www.pcworld.com/article/2088760/healthcaregov-still-has-major-security-problems-experts-say.html http://www.cnn.com/2009/POLITICS/01/27/va.data.theft/index.html?eref=onion Citizens Serving Communities 14

Citizens Serving Communities Topics Who Needs Cyber Security What is CyberPatriot How to Start a Program Cadet Opportunities Training CAP Initiatives Questions Citizens Serving Communities 15

Citizens Serving Communities What is CyberPatriot History of the Program CP I – 2009 Prototype – 20 Teams CP II – 2009-2010 – CAP/AFJROTC CP III – 2010-2011 – All JROTC & High School – 661 Teams CP IV - 2011-2012 – 1014 Teams CP V – 2012-2013 - 1222 Teams CP VI – 2013-2014 – Add Middle School - 1565 Teams CP VII – 2014-2015 – 2175 Teams http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf Citizens Serving Communities 16

Citizens Serving Communities What is CyberPatriot The national youth cyber education program. The national youth cyber defense competition. Carefully structured to excite, educate, and motivate participants. Designed to instill in all participants the importance to our nation of cyber, cyber security, and good computer security practices. Designed to motivate all participants to consider STEM academic disciplines to meet our nation’s needs. Designed to motivate many participants to become the next generation of cyber defenders and our nation’s “digital workforce.” http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf Citizens Serving Communities 17

Citizens Serving Communities CyberPatriot is NOT “Hacker training” We don’t teach “hacking” tools or techniques, and “hacking” in competition is strictly forbidden. A recruiting tool for the Air Force, the Department of Defense, or the Federal government This is about building a strong national foundation for cyber skills needed throughout our nation. http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf Citizens Serving Communities 18

Citizens Serving Communities CyberPatriot http://www.youtube.com/watch?v=Q_TbXri0XQ0 Citizens Serving Communities 19

Citizens Serving Communities What is CyberPatriot Where is the CAP Mission Aerospace Air Force Space Command Satellites Cyberspace – Newest Mission Cadet Programs Leadership Citizens Serving Communities 20

Citizens Serving Communities CAP Mission Statement "Supporting America's communities with emergency response, diverse aviation and ground services, youth development, and promotion of air, space and cyber power." Citizens Serving Communities 21

Citizens Serving Communities What is CyberPatriot Structure of the Competition - Three Divisions Middle School CAP Can Field a Middle School Team Cost $155 per Team (CAP Free) Open Division High School (9th through 12th grade) Cost $195 per Team Public, Private, Home School Other Organizations (Scouts, etc.) All Service High School Cost - FREE http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf https://www.uscyberpatriot.org/Pages/Get%20Involved/Volunteer-Registration-Form.aspx Citizens Serving Communities 22

Citizens Serving Communities Competition Weekend Competition 6 Hour Time Block – Up to 3 Images 4 Rounds of Competition November, December, January, and February 3 Levels of Competition Platinum, Gold & Silver Levels Decided after 2 Round State and Regional Rounds (Jan & Feb) National Finals Round for Platinum Level http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf https://www.uscyberpatriot.org/competition/competition-timeline Citizens Serving Communities 23

Citizens Serving Communities Competition Competition Platform Virtual Computer Images using VMWare Player Virtual Image runs on PC or MAC Compromised Computer Image Bad Configuration Virus & Malware Contamination Malicious User Accounts Unnecessary Services & Programs http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf https://www.uscyberpatriot.org/competition/competition-timeline Citizens Serving Communities 24

Citizens Serving Communities Competition Computer Operating Systems used in Competition Windows Server 2008 Windows Server 2012 Windows Vista Windows 7 Windows 8 Ubuntu Linux CentOS Linux Mint Linux Fedora Linux http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf https://www.uscyberpatriot.org/competition/competition-timeline Citizens Serving Communities 25

Citizens Serving Communities Competition Scoring 10 to 20 Targeted Problems per System 1 to 3 Systems to Configure and Secure Time to Complete – Tie Breaker Loose Points for Breaking Something Loose Points for Critical Service Failure Cisco Networking Competition in Later Rounds http://www.uscyberpatriot.org/Documents/Fact%20Sheets/CyberPatriot%20Outreach%20140409.pdf https://www.uscyberpatriot.org/competition/competition-timeline Citizens Serving Communities 26

Citizens Serving Communities National Finals Open Division – 12 Teams Middle School – 3 Teams All Service Division – 13 Teams CAP – 2 Teams Navy JROTC – 2 Teams Air Force JROTC – 2 Teams Army JROTC – 2 Teams Marine Corps – 2 Teams Navy Sea Cadets – 2 Teams Wild Card – 1 Team (Change from Previous Years) Citizens Serving Communities 27

Citizens Serving Communities Topics Who Needs Cyber Security What is CyberPatriot How to Start a Program Cadet Opportunities Training CAP Initiatives Questions Citizens Serving Communities 28

Citizens Serving Communities Where to Start Team Coach Cyber Knowledge Not Required Many Coaches are NOT Computer Savvy Responsible for Cadet Protection Single Point of Contact to CyberPatriot Find a Mentor Coach Multiple Teams During Competition No Helping No Coaching Citizens Serving Communities 29

Citizens Serving Communities Where to Start Team Captain (Cadet/Student) Should have Knowledge of Computers Must be Willing to Learn Must be an Effective Cadet/Student Leader Citizens Serving Communities 30

Citizens Serving Communities Where to Start Team Complement 6 Team Member Including Captain (Reduction from Previous Years) 2 Person Minimum Must be Willing to Learn No Knowledge Required Must be Willing to Listen Must Put in Individual Time Citizens Serving Communities 31

Citizens Serving Communities Where to Start Team Mentor Someone Knowledgeable in Cyber Security Good Opportunity for Senior Squadron Members Register at www.uscyberpatriot.org Air Force Association runs Background Check Selected by Team Coach to Help Team can have Multiple Mentors Mentor can Help Multiple Teams Citizens Serving Communities 32

Citizens Serving Communities Where to Start Cost Free to CAP Teams for All Service Division CAPNHQ Funds Travel for Finalist All Necessary Software Free Teams Prohibited from Buying Software Cannot use Donated Software in Competition Fee $195 for Open Division Fee $155for Middle School Division (Free for CAP Middle School Teams) Need Computers for Competition Citizens Serving Communities 33

Citizens Serving Communities Where to Start Hardware Requirements Computers – Minimum 3 Desktop/Laptop I3 Processor or Better 4Gb Memory (2Gb Marginal) 20 Gb Free Space on Each System Internet 1.5 Mbps Reliable DSL No Proxy Connection AT&T Air Cards May Be Available Citizens Serving Communities 34

Citizens Serving Communities Where to Start Software Requirements VMWare Player (Free for Windows & Linix) Microsoft Academic Licenses (Provided) Linux (Free) Cadet Written Scripts/Programs Cannot be used at National Competition Any Other Tool You Can Find Must be Free Cannot Require Paid Membership Citizens Serving Communities 35

Citizens Serving Communities Where to Start Training Material Modules at www.uscyberpatriot.org Module #3 is a Good Starting Point CAP CyberPatriot Play Book (Draft available) Find an Expert Books Seminars Internet Citizens Serving Communities 36

Citizens Serving Communities Topics Who Needs Cyber Security What is CyberPatriot How to Start a Program Cadet Opportunities Training CAP Initiatives Questions Citizens Serving Communities 37

Citizens Serving Communities Cadet Opportunities National Cadet Special Activities Advanced Technologies Academy Cyber Presented the last 5Years 8 Hours over 2 Days Air Force Space Command Familiarization – Colorado 2 to 3 hours lecture/lab Cyber Defense Training Academy Lackland JB, San Antonio, TX Second Class Graduated in June Citizens Serving Communities 38

Cyber Defense Training Academy

Cyber Defense Training Academy

Cyber Defense Training Academy

Cyber Defense Training Academy

Citizens Serving Communities Cadet Opportunities Internships Presenting Sponsor Northrop Grumman High School and College Opportunities for CyberPatiots Many Companies need System Admin Help Perfect Entry Level or Part Time Job Jobs Emerging Occupation University Programs & Certificate Programs Much Different than Computer Programming Citizens Serving Communities 43

Citizens Serving Communities Cadet Opportunities What Cadet Would Like $100,000? Participate in CyberPatriot as a Competitor Continue to Help While in College Look for Part Time Jobs for Experience Obtain Certifications While in College Differentiate Yourself to Employers This Can Add $100,000 to your earnings over the first years of your career over those that don’t. Citizens Serving Communities 44

Citizens Serving Communities Cadet Opportunities Colorado Springs Cadet Squadron Cadets Lockheed Martin Internship – 4th Year – Full Time After Graduation Denver Mortgage Loan Processor – Full Time 2 years Denver Oil Company – Summer Full Time Northrop Grumman Internship High School – 2 Summers High School Graduate(s) – Turned into Full Time Employment Citizens Serving Communities 45

Citizens Serving Communities Topics Who Needs Cyber Security What is CyberPatriot How to Start a Program Cadet Opportunities Training CAP Initiatives Questions Citizens Serving Communities 46

Citizens Serving Communities Training Develop Check Lists Passwords & Users Computer Policies Password Length Password Reuse Sharing Read the Instructions Remove Unneeded Programs Stop Unnecessary Services Citizens Serving Communities 47

Citizens Serving Communities Training Computer Policies Control Panel > Administrative Tools > Local Security Policy Citizens Serving Communities 48

Citizens Serving Communities Training Sharing Control Panel > Administrative Tools > Computer Management Citizens Serving Communities 49

Citizens Serving Communities Training Stop Unnecessary Services Control Panel > Administrative Tools > Services Citizens Serving Communities 50

Citizens Serving Communities Training Learn to Use Google Cadets Think they are Google Experts Example Queries How do I stop nfs Stop nfs How do I stop and disable nfs? Disable nfs windows 2008 Last Example is Only One with Sufficient Clarity to Get a Good Answer Citizens Serving Communities 51

Citizens Serving Communities CyberPatriot IV Citizens Serving Communities 52

Citizens Serving Communities Topics Who Needs Cyber Security What is CyberPatriot How to Start a Program Cadet Opportunities Training CAP Initiatives Questions Citizens Serving Communities 53

Citizens Serving Communities CAP Initiatives CyberPatriot Play Book Draft Version Available Help for Coaches to Get Started Cadet CyberPatriot Ribbon Cadet Cyber Badge Region/Wing Director of Cyber Programs Cyber Weekends Citizens Serving Communities 54

Citizens Serving Communities Topics Who Needs Cyber Security What is CyberPatriot How to Start a Program Cadet Opportunities Training Questions Citizens Serving Communities 55

Civil Air Patrol Please complete the 2015 survey online for a chance to have your conference registration fee refunded https://www.surveymonkey.com/r/15NatCon Citizens Serving Communities 56