Cyber Security & CyberPatriot: Educating and Training for Tomorrow’s Challenges Civil Air Patrol...
-
Upload
tracey-shields -
Category
Documents
-
view
215 -
download
2
Transcript of Cyber Security & CyberPatriot: Educating and Training for Tomorrow’s Challenges Civil Air Patrol...
Cyber Security & CyberPatriot: Educating
and Training for Tomorrow’s Challenges
Civil Air Patrol
CITIZENS SERVING COMMUNITIES
Maj Bill Blatchley, CAPNational Cadet Programs Cyber Team
Colorado Springs Cadet SquadronAerospace Education OfficerCyberPatriot Coach & Mentor
29 August 2015
Who Needs Cyber Security What is CyberPatriot
How to Start a Program
Cadet Opportunities
Training
CAP Initiatives
Questions
Topics
CITIZENS SERVING COMMUNITIES
Individuals
Business
Large & Small
Non Profit
Government
State & Local
Federal
Schools & Universities
Who Needs Cyber Security
CITIZENS SERVING COMMUNITIES
Home Wireless 28% Of Networks Unsecured
Gives Bad Actors a Foothold into YOUR data
Maybe the FBI Will Come Knocking
New York Man Sentenced to 96 Months
Used Unsecured Wireless to Share Child Porn
Another House Raided by SWAT
Individual Security
CITIZENS SERVING COMMUNITIES
Home Wireless Baby Monitor Hacked
Unsecured Wireless
Default Password on Camera Device
Man Screams “Wake Up Baby”
Parents Obviously Upset
Individual Security
CITIZENS SERVING COMMUNITIES
Public Wireless Someone May Be Snooping
Capturing UserIds/Passwords
Seeing Email – Not All Email uses HTTPS
HTTPS Can be Spoofed (secure web browsing)
Social Engineering May be Required
Corporate Network HTTPS
CA Certificate Override
Individual Security
CITIZENS SERVING COMMUNITIES
Defense Mechanisms Do Not Install “Unknown” Software
Be Wary of “Good” Software
Install a Firewall
Know How to Configure It
Public, Work, Home Networks
Know the Setting
Uninstall Unneeded Programs
Individual Security
CITIZENS SERVING COMMUNITIES
Individual Security
CITIZENS SERVING COMMUNITIES
Individual Security
CITIZENS SERVING COMMUNITIES
Computer Hygiene
Do Not Click That Link
Do Not Download
Use Anti-Virus & Anti-Malware Software
Limit Computer Access
Do Not Let Your Children on Your Computer!!!!!
Separate Networks for Children
Individual Security
CITIZENS SERVING COMMUNITIES
All Business Need Security
Target Breach May have Started with Small HVAC Company
Every Company has Sensitive Data
Employees are Usually the Weak Link
Management Sometimes Needs a Poke
Business Security
CITIZENS SERVING COMMUNITIES
www.healthcare.gov
Security Issues Abound
“Rush” to Implement
Money with No Oversight
VA Paid $20M Over Lost Laptops in 2009
Why Did Laptops Have Data Anyway???
Data Should be on Secured Servers
Government Security
CITIZENS SERVING COMMUNITIES
Office of Personnel Management
21 Million People Compromised
Security Clearance Background Data
Fingerprint Data
Possible Nation/State Actors
“If there is anyone to blame, it is the perpetrators” – Former OPM Director
Why don’t we take this seriously?
Government Security
CITIZENS SERVING COMMUNITIES
Everyone!
Too Few People Taking up the Career
Not Enough Education for the Public
Not Enough Awareness for Business & Government
The Need is Great
Who Needs Cyber Security
CITIZENS SERVING COMMUNITIES
Who Needs Cyber Security
What is CyberPatriot How to Start a Program
Cadet Opportunities
Training
CAP Initiatives
Questions
Topics
CITIZENS SERVING COMMUNITIES
History of the Program CP I – 2009 Prototype – 20 Teams
CP II – 2009-2010 – CAP/AFJROTC
CP III – 2010-2011 – All JROTC & High School – 661 Teams
CP IV - 2011-2012 – 1014 Teams
CP V – 2012-2013 - 1222 Teams
CP VI – 2013-2014 – Add Middle School - 1565 Teams
CP VII – 2014-2015 – 2175 Teams
What is CyberPatriot
CITIZENS SERVING COMMUNITIES
The national youth cyber education program.
The national youth cyber defense competition.
Carefully structured to excite, educate, and motivate participants.
Designed to instill in all participants the importance to our nation of cyber, cyber security, and good computer security practices.
Designed to motivate all participants to consider STEM academic disciplines to meet our nation’s needs.
Designed to motivate many participants to become the next generation of cyber defenders and our nation’s “digital workforce.”
What is CyberPatriot
CITIZENS SERVING COMMUNITIES
“Hacker training” We don’t teach “hacking” tools or techniques, and “hacking” in competition is strictly forbidden.
A recruiting tool for the Air Force, the Department of Defense, or the Federal government This is about building a strong national foundation for cyber skills needed throughout our nation.
CyberPatriot is NOT
CITIZENS SERVING COMMUNITIES
CyberPatriot
CITIZENS SERVING COMMUNITIES
Where is the CAP Mission
Aerospace
Air Force Space Command
Satellites
Cyberspace – Newest Mission
Cadet Programs
Leadership
Leadership
Leadership
What is CyberPatriot
CITIZENS SERVING COMMUNITIES
"Supporting America's
communities with emergency
response, diverse aviation and ground
services, youth development, and promotion of air, space and cyber
power."
CAP Mission Statement
CITIZENS SERVING COMMUNITIES
Structure of the Competition - Three Divisions
Middle School
CAP Can Field a Middle School Team
Cost $155 per Team (CAP Free)
Open Division High School (9th through 12th grade)
Cost $195 per Team
Public, Private, Home School
Other Organizations (Scouts, etc.)
All Service High School
Cost - FREE
What is CyberPatriot
CITIZENS SERVING COMMUNITIES
Weekend Competition
6 Hour Time Block – Up to 3 Images
4 Rounds of Competition
November, December, January, and February
3 Levels of Competition
Platinum, Gold & Silver
Levels Decided after 2 Round
State and Regional Rounds (Jan & Feb)
National Finals Round for Platinum Level
Competition
CITIZENS SERVING COMMUNITIES
Competition Platform
Virtual Computer Images using VMWare Player
Virtual Image runs on PC or MAC
Compromised Computer Image
Bad Configuration
Virus & Malware Contamination
Malicious User Accounts
Unnecessary Services & Programs
Competition
CITIZENS SERVING COMMUNITIES
Computer Operating Systems used in Competition
Windows Server 2008
Windows Server 2012
Windows Vista
Windows 7
Windows 8
Ubuntu Linux
CentOS Linux
Mint Linux
Fedora Linux
Competition
CITIZENS SERVING COMMUNITIES
Scoring
10 to 20 Targeted Problems per System
1 to 3 Systems to Configure and Secure
Time to Complete – Tie Breaker
Loose Points for Breaking Something
Loose Points for Critical Service Failure
Cisco Networking Competition in Later Rounds
Competition
CITIZENS SERVING COMMUNITIES
Open Division – 12 Teams
Middle School – 3 Teams
All Service Division – 13 Teams
CAP – 2 Teams
Navy JROTC – 2 Teams
Air Force JROTC – 2 Teams
Army JROTC – 2 Teams
Marine Corps – 2 Teams
Navy Sea Cadets – 2 Teams
Wild Card – 1 Team (Change from Previous Years)
National Finals
CITIZENS SERVING COMMUNITIES
Who Needs Cyber Security
What is CyberPatriot
How to Start a Program Cadet Opportunities
Training
CAP Initiatives
Questions
Topics
CITIZENS SERVING COMMUNITIES
Team Coach
Cyber Knowledge Not Required
Many Coaches are NOT Computer Savvy
Responsible for Cadet Protection
Single Point of Contact to CyberPatriot
Find a Mentor
Coach Multiple Teams
During Competition
No Helping
No Coaching
Where to Start
CITIZENS SERVING COMMUNITIES
Team Captain (Cadet/Student)
Should have Knowledge of Computers
Must be Willing to Learn
Must be an Effective Cadet/Student Leader
Where to Start
CITIZENS SERVING COMMUNITIES
Team Complement
6 Team Member Including Captain (Reduction from Previous Years)
2 Person Minimum
Must be Willing to Learn
No Knowledge Required
Must be Willing to Listen
Must Put in Individual Time
Where to Start
CITIZENS SERVING COMMUNITIES
Team Mentor
Someone Knowledgeable in Cyber Security
Good Opportunity for Senior Squadron Members
Register at www.uscyberpatriot.org
Air Force Association runs Background Check
Selected by Team Coach to Help
Team can have Multiple Mentors
Mentor can Help Multiple Teams
Where to Start
CITIZENS SERVING COMMUNITIES
Cost
Free to CAP Teams for All Service Division
CAPNHQ Funds Travel for Finalist
All Necessary Software Free
Teams Prohibited from Buying Software
Cannot use Donated Software in Competition
Fee $195 for Open Division
Fee $155for Middle School Division (Free for CAP Middle School Teams)
Need Computers for Competition
Where to Start
CITIZENS SERVING COMMUNITIES
Hardware Requirements
Computers – Minimum 3 Desktop/Laptop
I3 Processor or Better
4Gb Memory (2Gb Marginal)
20 Gb Free Space on Each System
Internet
1.5 Mbps Reliable DSL
No Proxy Connection
AT&T Air Cards May Be Available
Where to Start
CITIZENS SERVING COMMUNITIES
Software Requirements
VMWare Player (Free for Windows & Linix)
Microsoft Academic Licenses (Provided)
Linux (Free)
Cadet Written Scripts/Programs
Cannot be used at National Competition
Any Other Tool You Can Find
Must be Free
Cannot Require Paid Membership
Where to Start
CITIZENS SERVING COMMUNITIES
Training Material
Modules at www.uscyberpatriot.org
Module #3 is a Good Starting Point
CAP CyberPatriot Play Book (Draft available)
Find an Expert
Books
Seminars
Internet
Where to Start
CITIZENS SERVING COMMUNITIES
Who Needs Cyber Security
What is CyberPatriot
How to Start a Program
Cadet Opportunities Training
CAP Initiatives
Questions
Topics
CITIZENS SERVING COMMUNITIES
National Cadet Special Activities
Advanced Technologies Academy
Cyber Presented the last 5Years
8 Hours over 2 Days
Air Force Space Command Familiarization – Colorado
2 to 3 hours lecture/lab
Cyber Defense Training Academy
Lackland JB, San Antonio, TX
Second Class Graduated in June
Cadet Opportunities
CITIZENS SERVING COMMUNITIES
Cyber Defense Training Academy
Cyber Defense Training Academy
Cyber Defense Training Academy
Cyber Defense Training Academy
Internships
Presenting Sponsor Northrop Grumman
High School and College Opportunities for CyberPatiots
Many Companies need System Admin Help
Perfect Entry Level or Part Time Job
Jobs
Emerging Occupation
University Programs & Certificate Programs
Much Different than Computer Programming
Cadet Opportunities
CITIZENS SERVING COMMUNITIES
What Cadet Would Like $100,000?
Participate in CyberPatriot as a Competitor
Continue to Help While in College
Look for Part Time Jobs for Experience
Obtain Certifications While in College
Differentiate Yourself to Employers
This Can Add $100,000 to your earnings over the first years of your career over those that don’t.
Cadet Opportunities
CITIZENS SERVING COMMUNITIES
Colorado Springs Cadet Squadron Cadets
Lockheed Martin Internship – 4th Year – Full Time After Graduation
Denver Mortgage Loan Processor – Full Time 2 years
Denver Oil Company – Summer Full Time
Northrop Grumman Internship
High School – 2 Summers
High School Graduate(s) – Turned into Full Time Employment
Cadet Opportunities
CITIZENS SERVING COMMUNITIES
Who Needs Cyber Security
What is CyberPatriot
How to Start a Program
Cadet Opportunities
Training CAP Initiatives
Questions
Topics
CITIZENS SERVING COMMUNITIES
Develop Check Lists
Passwords & Users
Computer Policies
Password Length
Password Reuse
Sharing
Read the Instructions
Remove Unneeded Programs
Stop Unnecessary Services
Training
CITIZENS SERVING COMMUNITIES
Computer Policies
Control Panel > Administrative Tools > Local Security Policy
Training
CITIZENS SERVING COMMUNITIES
Sharing
Control Panel > Administrative Tools > Computer Management
Training
CITIZENS SERVING COMMUNITIES
Stop Unnecessary Services
Control Panel > Administrative Tools > Services
Training
CITIZENS SERVING COMMUNITIES
Learn to Use Google
Cadets Think they are Google Experts
Example Queries
How do I stop nfs
Stop nfs
How do I stop and disable nfs?
Disable nfs windows 2008
Last Example is Only One with Sufficient Clarity to Get a Good Answer
Training
CITIZENS SERVING COMMUNITIES
CyberPatriot IV
CITIZENS SERVING COMMUNITIES
Who Needs Cyber Security
What is CyberPatriot
How to Start a Program
Cadet Opportunities
Training
CAP Initiatives
Questions
Topics
CITIZENS SERVING COMMUNITIES
CyberPatriot Play Book
Draft Version Available
Help for Coaches to Get Started
Cadet CyberPatriot Ribbon
Cadet Cyber Badge
Region/Wing Director of Cyber Programs
Cyber Weekends
CAP Initiatives
CITIZENS SERVING COMMUNITIES
Who Needs Cyber Security
What is CyberPatriot
How to Start a Program
Cadet Opportunities
Training
Questions
Topics
CITIZENS SERVING COMMUNITIES