I n t e g r i t y - S e r v i c e - E x c e l l e n c e 1 CyberPatriot Concept Demonstration: National High School Cyber Defense Competition Orlando, FL, February 2009 This briefing will describe an exciting new initiative by the Air Force Association (AFA) to inspire today’s youth to become the cyber defenders of tomorrow … The proof of concept in Orlando demonstrated a viable formula to build a national competition that will excite high school students, instill cyber security awareness, and create career interest. CyberPatriot II will take the concept nationwide.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 2 Call 2008 the year that cyberspace — its vulnerability, its defense, and its exploitation — passed the point of no return as a major issue for national security officials.  Rebecca Grant, Director, Mitchell Institute The United States is the most vulnerable nation on the face of the Earth to cyber attack for a simple reason — we are the most dependent.  Michael McConnell, Director of National Intelligence Why is a High School Cyber Defense Competition Needed? The rationale for this initiative is simple: cyber defense is one of our nation’s most important national security concerns and the critical factor in building the defense is not technology — it is talented PEOPLE, educated and motivated to serve. The success of many business enterprises will depend on the degree to which the available pool of workers possesses the right combination of science, technology, and engineering skills.  Bill Gates, Congressional Testimony

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 3  The Air Force needs the cyber warriors who can secure the domain as the indispensible prerequisite for air and space dominance   The nation, especially American industry, needs secure networks to compete and security providers reasonably expect an expanding, lucrative market  The linchpin of future network security is education of enough U.S. professionals to meet the expanding requirement — the source of that educated workforce must be students motivated to pursue a career in information assurance and computer security  The Air Force Association: Educates the public, Advocates for and Supports the USAF, the Air Force family and aerospace education Aerospace is Air, Space, and Cyberspace! A Convergence of Interests This environment produced a remarkable convergence of interests …

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 4 Center for Infrastructure Assurance & Security (CIAS) Academic perspective; Network security education; Collegiate competition; Director’s AF relationship (USAFR Colonel) Science Applications International Corporation (SAIC) Diverse industrial perspective (customer & supplier); Proven Cyber Defense Trainer (CyberNEXS); Corporate commitment Air Force Junior ROTC (AFJROTC)/Civil Air Patrol (CAP) High School perspective; Local groups with national breadth; Accepted by HS administration; “Built-in” commitment to citizenship/service Air Force Association (AFA) Nonprofit perspective; Relationships with all of the above; Field organization with national breadth; Education mission & national security interest Founding Partners Common interests created a team of capable and committed partners …

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 5 CyberPatriot is a cyber defense competition that tests the ability of the students to defend a simulated corporate network from external hostile attacks. CyberPatriot is more than just a competition – it will help educate and motivate the next generation of students to become the cyber defenders the nation needs. What is CyberPatriot? CyberPatriot is for the students, but also for our nation Three Phases: I.Concept Demo. Proves: Viable premise ─ excites & educates II.National Deployment. To prove: Scalability, academic ─ competition integration, management scope & process III.Institutionalize. Full integration with academia, government & industry; self-sustaining path from 9 th grade to career.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 6 Phase I, Proof of Concept Demo (26-27 February 2009):  Online education/preparation  Eight 5-person teams (AFJROTC & CAP)  SAIC’s CyberNEXS Cyber Defense Trainer  Competed at AFA’s Air Warfare Symposium  Winner to National Collegiate CDC at UTSA, TX What is CyberPatriot? Phase I was a “Home Run!”

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 7 The Competition Environment attempts to ensure the smooth operation of all competition equipment. is the scoring engine that awards points to the team for successfully patching vulnerable systems and for effectively addressing attacks on their network. simulates the hostile Internet environment and attempts to gain unauthorized access to the Blue systems or to disrupt their service. The Blue Team The Red Team Scorebot

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 8 The Flow of the Competition Thursday Morning: Teams 1 & 2 competed Afternoon: Teams 3 & 4 competed Evening: The winning team from Thursday was announced Friday Morning: Teams 5 & 6 competed Afternoon: Teams 7 & 8 competed Evening: The winning team from Friday was announced Awards Ceremony: The overall winning team – the National Champion – was announced Day 1 Winner: Team Spaatz, Osceola HS We were sure this was a winning formula when the first day winner was announced!

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 9 The Venue 9 AFA’s 25 th Annual Air Warfare Symposium The Symposium was an ideal venue to showcase the competition and enrich the experience for the competitors

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 10 Distinguished Visitors to CP I 10 Visitors to CyberPatriot I Included:  Gen Norton Schwartz, CSAF  Gen Kevin Chilton, CDR USSTRATCOM  Gen Stephen Lorenz, AETC/CC  Gen Donald Hoffman, AFMC/CC  Mr. Charles Beard, SAIC CIO  Lt Gen Ted Bowlds, ESC/CC  Maj Gen William Lord, AFCYBER (P)/CC  Brig Gen Teresa Djuric, Holm Center/CC

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 11 Competitors were engaged & “All In” 11 And Excited!!!

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 12 CyberPatriot I ― Day 2 Winner Team Wilson Civil Air Patrol Florida Composite Wing

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 13 CyberPatriot I ― Champion Team Spaatz AFJROTC FL-921 Osceola H.S.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 14 Feedback from the Competition Participants and advisors were asked to provide feedback after they finished competing. Some highlights (based on a scale of 1 to 5, Strongly Disagree to Strongly Agree):  Advisors (8):  My team enjoyed the competition: 4.75  We would like to participate again: 4.75  As a result of this competition, my students learned more about securing a network: 4.75  Participants (37):  I enjoyed the competition: 4.78  I would like to participate again: 4.78  As a result of the competition, I learned more about securing a network: 4.78  54% of the students stated that they are more likely to attend college as a result of this competition

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 15  Phase II, National Deployment ( School Year): National AFJROTC/CAP competition; Enhanced academics; Prelim. rounds select regional competitors; Feb 2010 Orlando Finals; Champion to April 2010 NCCDC  Phase III, Grow to the Need ( on): Expand to non-JROTC/CAP; Integrate with NCCDC & Institutionalize What is the Future of CyberPatriot? The Vision for the competition is to grow to the point that any high school in the nation that desires to field a team will be able to participate in the program. This will require a multi-tiered competition leading to the national championship event:

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 16 Future: Integration with the NCCDC Future “CyberPatriots” will not simply go to the NCCDC as a first prize …. We’ll see a generation of NCCDC winners who went to college and studied CompSci because they were “CyberPatriots”

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 17 CyberPatriot II Structure (dates approximate except Finals) Apr-Jun 09: Publicity and unit registration: Goal: units Jun-Aug 09: Coach Prep.: Goal: ready to go on school day one. Sep-mid Oct 09: Basic academics/prep.: Goal: ready for Round 1. Late Oct: Round 1: DVD “Image” of virtual network; six-hour, exercise to diagnose; remote scoring. Goal: 30 teams graduate to “medalist flight;” all others in “consolation flight.” Mid-Nov 09: Consolation Flight competition: DVD six-hour exercise; 1 st, 2 nd, 3 rd place awarded. Goal: all receive feedback and are encouraged to follow medalist competition. Early/mid-Dec 09: Medalist Flight competition: More complex virtual network image; six-hour exercise similar to round one. Goal: eight finalists identified Feb 10: Orlando CyberPatriot II Finals in conjunction with AFA’s 26 th Air Warfare Symposium. Goal: competitors demonstrate learning, capability, and HAVE FUN!

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 18 CyberPatriot II Structure (timeline) MayJunJulAugSepOctNovDecJanFebMarApr Medalist Flight (30) Consolation Flight (n - 30) Finalists (8) 1 st, 2 nd, 3 rd Place Awards All follow competition Medalist Flight Competition CyberPatriot II Finals (22) Champion to NCCDC Sign-Up CP II (n = ) Instructor/Advisor Prepare Academics Student Prep.

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 19 CyberPatriot II Structure (considerations) Team Coach need not be “computer whiz” (students are already smarter about this stuff). Coach must be committed to some additional effort and communication. Competitors (students) must be enrolled in an accredited high school program in grades No additional computer/network equipment is required (some permissions from school SysAdmin for Internet connection may be necessary). Entire class may prepare and learn, but Coach must choose competitors (five maximum). No additional cost beyond incidentals for personal items for those eight teams that travel to the finals (traveling teams will be limited to: five competitors (students), one Coach, and one gender chaperone).

I n t e g r i t y - S e r v i c e - E x c e l l e n c e Funding for CyberPatriot CyberPatriot I was a success only through the generous donation of time, resources, and funds by AFA, CIAS, and SAIC. It could not have occurred without the support of the Air Force Junior ROTC program and the Civil Air Patrol that provided the teams for the competition. Sponsorship is being sought for future CyberPatriot events. With the expansion of the competition, there are even more opportunities for organizations to play meaningful roles in making this a success. Contact: AFA/EVP Buck Buckwalter, ( ) or AFA Dir. of Programs Mary Ellen Dobrowolski, ( ) for more information. 20

I n t e g r i t y - S e r v i c e - E x c e l l e n c e 21 CyberPatriot II February 2010 Orlando, FL II BE THERE!