CyberPatriot The National High School Defense Competition

1. This briefing will describe an exciting initiative by the Air Force Association (AFA) to inspire today’s youth to become the cyber defenders of tomorrow. From a concept paper less than two years ago, we began with a February 2009 demonstration and immediately went nationwide for the 2009-10 school year competition, which we believe is the largest High School Cyber Defense Competition ever conducted. The next step, full nationwide deployment, has been made possible by a generous grant from Northrop Grumman, who has committed to significant multiyear funding for the initiative. The Center for Infrastructure Assurance and Security (CIAS) at the University of Texas at San Antonio, creator of the National Collegiate Cyber Defense Competition, is a Founding Partner of CyberPatriot, as is Science Applications International Corporation (SAIC), who provides the platform for the competition with their patent-pending commercial cyber defense trainer, Cyber NEXS. Strategic Partners General Dynamics Advanced Information Systems (GD AIS), Raytheon, and Microsoft have also pledged significant multiyear support for the program, and this unique combination of commercial, government, and nonprofit expertise has produced a model for rapid expansion. We are convinced this national competition will excite high school students and motivate them toward careers in cyber defense and other STEM disciplines, all while instilling greater cyber security awareness. CyberPatriot is designed to address a critical NATIONAL need. This briefing will describe an exciting initiative by the Air Force Association (AFA) to inspire today’s youth to become the cyber defenders of tomorrow. From a concept paper less than two years ago, we began with a February 2009 demonstration and immediately went nationwide for the 2009-10 school year competition, which we believe is the largest High School Cyber Defense Competition ever conducted. The next step, full nationwide deployment, has been made possible by a generous grant from Northrop Grumman, who has committed to significant multiyear funding for the initiative. The Center for Infrastructure Assurance and Security (CIAS) at the University of Texas at San Antonio, creator of the National Collegiate Cyber Defense Competition, is a Founding Partner of CyberPatriot, as is Science Applications International Corporation (SAIC), who provides the platform for the competition with their patent-pending commercial cyber defense trainer, Cyber NEXS. Strategic Partners General Dynamics Advanced Information Systems (GD AIS), Raytheon, and Microsoft have also pledged significant multiyear support for the program, and this unique combination of commercial, government, and nonprofit expertise has produced a model for rapid expansion. We are convinced this national competition will excite high school students and motivate them toward careers in cyber defense and other STEM disciplines, all while instilling greater cyber security awareness. CyberPatriot is designed to address a critical NATIONAL need.

2. Our motivation is simple. Today there can be no question that cyber defense is an imperative for national economic prosperity and perhaps our nation’s most important national security concern. The most critical factor in building our defense will not be technology – it will be talented people, educated and motivated to protect the nation. We must promote education in the Science, Technology, Engineering, and Mathematics (STEM) disciplines if we are to remain competitive in a global economy, and exciting students to compete in one technical field has spinoff to the other STEM disciplines. (a majority of our participants thus far have reported they were more likely to go to college due to their CyberPatriot experience). Math/computer science is the STEM discipline with the greatest projected job growth, but it is also a discipline where we lose a large percentage of underrepresented persons and women in the leap from high school to college – CyberPatriot can change that. Moreover, this is one technical area where even those not destined for a four-year college degree can earn a comfortable standard of living with an associate degree – or even a high school diploma with network security certifications. Finally, in addition to CyberPatriot competitors who do pursue formal STEM education, sensitizing a large number of users to the basic elements of computer/network security is certain to increase the security of our national infrastructure. Our motivation is simple. Today there can be no question that cyber defense is an imperative for national economic prosperity and perhaps our nation’s most important national security concern. The most critical factor in building our defense will not be technology – it will be talented people, educated and motivated to protect the nation. We must promote education in the Science, Technology, Engineering, and Mathematics (STEM) disciplines if we are to remain competitive in a global economy, and exciting students to compete in one technical field has spinoff to the other STEM disciplines. (a majority of our participants thus far have reported they were more likely to go to college due to their CyberPatriot experience). Math/computer science is the STEM discipline with the greatest projected job growth, but it is also a discipline where we lose a large percentage of underrepresented persons and women in the leap from high school to college – CyberPatriot can change that. Moreover, this is one technical area where even those not destined for a four-year college degree can earn a comfortable standard of living with an associate degree – or even a high school diploma with network security certifications. Finally, in addition to CyberPatriot competitors who do pursue formal STEM education, sensitizing a large number of users to the basic elements of computer/network security is certain to increase the security of our national infrastructure.

3. Our three core CyberPatriot goals are unchanged from the inception of the program. These goals mandate a competition that is fun to EXCITE, EDUCATE, and MOTIVATE, and includes real academic content to ensure personal growth. Our key strategic deliverable is reaching large numbers, especially underrepresented segments – our nation cannot afford to waste their talent. The emphasis on the complete career path will attract and develop those talented workers we desperately need – talent required in all sectors: industry, government, and the academy.Our three core CyberPatriot goals are unchanged from the inception of the program. These goals mandate a competition that is fun to EXCITE, EDUCATE, and MOTIVATE, and includes real academic content to ensure personal growth. Our key strategic deliverable is reaching large numbers, especially underrepresented segments – our nation cannot afford to waste their talent. The emphasis on the complete career path will attract and develop those talented workers we desperately need – talent required in all sectors: industry, government, and the academy.

4. This remarkably young program is rapidly gaining momentum. We started with our February 2009 Concept Demo to discover if students really would be excited by a network security competition – we were amazed just how enthusiastic and engaged they were – with the first cheers and fist pumps, we knew we had a winning concept. CyberPatriot II demonstrated nationwide reach to thousands of students with only modest resources. This is the model that will allow expansion to CyberPatriot III for the 2010-11 school year.This remarkably young program is rapidly gaining momentum. We started with our February 2009 Concept Demo to discover if students really would be excited by a network security competition – we were amazed just how enthusiastic and engaged they were – with the first cheers and fist pumps, we knew we had a winning concept. CyberPatriot II demonstrated nationwide reach to thousands of students with only modest resources. This is the model that will allow expansion to CyberPatriot III for the 2010-11 school year.

5. CyberPatriot III(timeline 2010-11) CyberPatriot III begins in the spring 2010 to allow coach preparation over the summer. A “two-division” approach to the expansion maintains an important feature of the project. A single competition open to non-JROTC teams will likely attract college prep computer science classes first; retaining the All-Service Division will naturally reach a more diverse audience numbering over 500,000 in the nation’s JROTC detachments of all services. The All-Service Division features two in-person competitions; the first in February 2011 in Orlando will select the top team in each service and CAP to compete for the Commander-in-Chief’s Trophy in April 2011. The Open Division will proceed through a similar, but distinct, series of online qualification rounds to select finalists for the same conference at the Gaylord National, 1-2 April 2011. The April CyberFutures Conference will include the in-person championships (not unlike the Scripps Spelling Bee), along with a cyber policy symposium and a technology exhibition.CyberPatriot III begins in the spring 2010 to allow coach preparation over the summer. A “two-division” approach to the expansion maintains an important feature of the project. A single competition open to non-JROTC teams will likely attract college prep computer science classes first; retaining the All-Service Division will naturally reach a more diverse audience numbering over 500,000 in the nation’s JROTC detachments of all services. The All-Service Division features two in-person competitions; the first in February 2011 in Orlando will select the top team in each service and CAP to compete for the Commander-in-Chief’s Trophy in April 2011. The Open Division will proceed through a similar, but distinct, series of online qualification rounds to select finalists for the same conference at the Gaylord National, 1-2 April 2011. The April CyberFutures Conference will include the in-person championships (not unlike the Scripps Spelling Bee), along with a cyber policy symposium and a technology exhibition.

6. CyberPatriot III features an expanded and refined online education element suitable for both general security awareness training for all students as well as preparation of the team for the competition (coaches are expected to incorporate this training for all their students). All CyberPatriot III coaches will be provided licenses for the Microsoft “Developer AA” software package, a $499 value (see: http://msdn.microsoft.com/en-us/academic/bb676724.aspx). A unique “Competitor Relationship Management (CRM)” will provide the platform for coaches and students to learn in a protected space and for the CyberPatriot Management Team to maintain contact and provide enduring benefit to the competitors. Volunteer mentors will also be accessible to assist in coach and competitor preparation. A combined division championship, along with a world class symposium and technology exhibition will bring together government, industry, and academia for 2011’s “culminating event.” The only cost to Open Division participants is a $350 entry fee which provides access to the software, participant materials ($150-200/team), and all expenses for teams qualifying for the in-person competitions. (NOTE: the entry fee is waived for CAP/JROTC teams whose headquarters have agreed to fund travel.) CyberPatriot III features an expanded and refined online education element suitable for both general security awareness training for all students as well as preparation of the team for the competition (coaches are expected to incorporate this training for all their students). All CyberPatriot III coaches will be provided licenses for the Microsoft “Developer AA” software package, a $499 value (see: http://msdn.microsoft.com/en-us/academic/bb676724.aspx). A unique “Competitor Relationship Management (CRM)” will provide the platform for coaches and students to learn in a protected space and for the CyberPatriot Management Team to maintain contact and provide enduring benefit to the competitors. Volunteer mentors will also be accessible to assist in coach and competitor preparation. A combined division championship, along with a world class symposium and technology exhibition will bring together government, industry, and academia for 2011’s “culminating event.” The only cost to Open Division participants is a $350 entry fee which provides access to the software, participant materials ($150-200/team), and all expenses for teams qualifying for the in-person competitions. (NOTE: the entry fee is waived for CAP/JROTC teams whose headquarters have agreed to fund travel.)

7. Hardware requirements are relatively modest and the required software is typically resident on competitors’ machines or can be downloaded for free.Hardware requirements are relatively modest and the required software is typically resident on competitors’ machines or can be downloaded for free.

8. The Coach [Teacher] is a key player in this program. Coaches must agree to act in two distinct roles: during preparation, they assist and instruct the competitors ? during the online competition, they become a member of the CyberPatriot Management Team to ensure the integrity of the competition. The coach is also the point of contact to receive the Microsoft software license and approve mentors from a CyberPatriot data bank for the teams. Coaches also have the option of choosing a mentor not on the CyberPatriot list or electing to forego a mentor. In any case, the Coach remains responsible for ensuring proper interaction with any adults with the minors on the team.The Coach [Teacher] is a key player in this program. Coaches must agree to act in two distinct roles: during preparation, they assist and instruct the competitors ? during the online competition, they become a member of the CyberPatriot Management Team to ensure the integrity of the competition. The coach is also the point of contact to receive the Microsoft software license and approve mentors from a CyberPatriot data bank for the teams. Coaches also have the option of choosing a mentor not on the CyberPatriot list or electing to forego a mentor. In any case, the Coach remains responsible for ensuring proper interaction with any adults with the minors on the team.

9. The pace of expansion of this program has been remarkable, and we expect to encounter questions and unanticipated issues as we learn-while-doing. A more gradual expansion was possible, but the threat is in no way “gradual,” and our sense of urgency is driven by the need. The pace of expansion of this program has been remarkable, and we expect to encounter questions and unanticipated issues as we learn-while-doing. A more gradual expansion was possible, but the threat is in no way “gradual,” and our sense of urgency is driven by the need.