Seven months into the Air Force Associations US CyberPatriot Program Effingham County School District CyberPatriot 0.7

What is CyberPatriot? High School Cyber Defense Competition. NOT a h*** competition Teaches defensive measures for fixing vulnerabilities and hardening systems.

CyberPatriot Origins. Air Force Association. Northrop Grumman. Science Applications International Corporation (SAIC) and the Center for Infrastructure Assurance and Security (CIAS) at the University of Texas at San Antonio.

How Does CyberPatriot Work? There are two Divisions in the CyberPatriot competition: Open Division All Service Division

How Does CyberPatriot Work? Series of online rounds One to three virtual images Windows/Linux Competitors fix vulnerabilities Timed competition Highest scores go to semi finals Other go to state/region recognition

What does a CP team look like? Two to five Competitors with up to five Alternates. Competitors and Alternates must be enrolled in grades One Coach, normally a teacher or JROTC, CAP, or Sea Cadet Leader. Coaches do not have to have any technical expertise and generally serve as an administrator for the team. One or more Mentors or technical advisors to help Competitors. The CyberPatriot Program Office will work with Coaches to find Mentors if they require assistance.

Initial Steps – May 2013 Discussed with Department of Instructional & Information Technology (DoIIT) Personnel Instructional Technology Specialists agreed to coach. ◦Gregg Miles, Effingham County High School ◦Justin Keith, South Effingham High School

Initial Steps – May 2013 Posted Flyers around schools:

Initial Steps – May 2013 An article was placed on the district website.

Initial Steps – May 2013 Teachers (science and technology in grades 8-12) were asked to announce in their classes. Applications were provided to students who were interested; applications included parental consent and teacher recommendation

Initial Steps – May 2013 Informational meeting was held for both high schools. Video conferencing equipment was utilized to present to both groups at once. Coaches and mentors were present at each school facilitating the meeting.

Initial Steps – June 2013 Effingham County High School (ECHS) ◦Coach – Gregg Miles ◦Mentor - AF MSgt Judd Martins, Instructor, Cyber Defense/Offense CRTC South Effingham High School (SEHS) ◦Coach – Justin Keith ◦Mentor - Dave Rutz, FDRESA ETC, Computer Forensic Analyst & IT Specialist

Initial Steps – Fall 2013 Effingham County High School ◦AFJROTC – Maj Danny Burgstiner ◦Most participants were AFJROTC cadets ◦One team – Open Division South Effingham High School ◦NJROTC – Lt Col Terry Stautberg ◦Two teams  All Service Division cadets only  Open Division - non cadets

Initial Steps—Fall 2013 SPONSORS Sponsor letters submitted to local organizations – one sponsor responded with a $500 donation, one sponsor did not respond. Additionally, SEHS formed an All Service Division Team which afforded on FREE Open Division Team and a refund of $385 for the initial registration of the Open Division Team.

Exhibition Round – 17 Jul

Practice Round 1 – 23 Aug

Practice Round 2 – 02 Oct

Scoring Report

Vulnerabilities Unnecessary Services No firewall No Antivirus Unauthorized personnel with system accounts Accounts with elevated privileges Unauthorized file types Password complexity Automatic updates disabled

Timeline

Challenges Building Awareness Recruiting and Selection Mentors Training Schedule Sponsors Competition Schedule

Questions? ?

We hope you enjoyed this GaETC session. Please give your feedback at