Cyber Security & CyberPatriot: Educating and Training for Tomorrow’s Challenges Civil Air Patrol CITIZENS SERVING COMMUNITIES Maj Bill Blatchley, CAP National

Cyber Security & CyberPatriot: Educating

and Training for Tomorrow’s Challenges

Civil Air Patrol

CITIZENS SERVING COMMUNITIES

Maj Bill Blatchley, CAPNational Cadet Programs Cyber Team

Colorado Springs Cadet SquadronAerospace Education OfficerCyberPatriot Coach & Mentor

29 August 2015

Who Needs Cyber Security What is CyberPatriot

How to Start a Program

Cadet Opportunities

Training

CAP Initiatives

Questions

Topics


Individuals

Business

Large & Small

Non Profit

Government

State & Local

Federal

Schools & Universities

Who Needs Cyber Security


Home Wireless 28% Of Networks Unsecured

Gives Bad Actors a Foothold into YOUR data

Maybe the FBI Will Come Knocking

New York Man Sentenced to 96 Months

Used Unsecured Wireless to Share Child Porn

Another House Raided by SWAT

Individual Security


Home Wireless Baby Monitor Hacked

Unsecured Wireless

Default Password on Camera Device

Man Screams “Wake Up Baby”

Parents Obviously Upset

Individual Security


Public Wireless Someone May Be Snooping

Capturing UserIds/Passwords

Seeing Email – Not All Email uses HTTPS

HTTPS Can be Spoofed (secure web browsing)

Social Engineering May be Required

Corporate Network HTTPS

CA Certificate Override

Individual Security


Defense Mechanisms Do Not Install “Unknown” Software

Be Wary of “Good” Software

Install a Firewall

Know How to Configure It

Public, Work, Home Networks

Know the Setting

Uninstall Unneeded Programs

Individual Security


Individual Security


Individual Security


Computer Hygiene

Do Not Click That Link

Do Not Download

Use Anti-Virus & Anti-Malware Software

Limit Computer Access

Do Not Let Your Children on Your Computer!!!!!

Separate Networks for Children

Individual Security


All Business Need Security

Target Breach May have Started with Small HVAC Company

Every Company has Sensitive Data

Employees are Usually the Weak Link

Management Sometimes Needs a Poke

Business Security


www.healthcare.gov

Security Issues Abound

“Rush” to Implement

Money with No Oversight

VA Paid $20M Over Lost Laptops in 2009

Why Did Laptops Have Data Anyway???

Data Should be on Secured Servers

Government Security


http://www.healthcare.gov/

Office of Personnel Management

21 Million People Compromised

Security Clearance Background Data

Fingerprint Data

Possible Nation/State Actors

“If there is anyone to blame, it is the perpetrators” – Former OPM Director

Why don’t we take this seriously?

Government Security


Everyone!

Too Few People Taking up the Career

Not Enough Education for the Public

Not Enough Awareness for Business & Government

The Need is Great




What is CyberPatriot How to Start a Program

Cadet Opportunities

Training

CAP Initiatives

Questions

Topics


History of the Program CP I – 2009 Prototype – 20 Teams

CP II – 2009-2010 – CAP/AFJROTC

CP III – 2010-2011 – All JROTC & High School – 661 Teams

CP IV - 2011-2012 – 1014 Teams

CP V – 2012-2013 - 1222 Teams

CP VI – 2013-2014 – Add Middle School - 1565 Teams

CP VII – 2014-2015 – 2175 Teams

What is CyberPatriot


The national youth cyber education program.

The national youth cyber defense competition.

Carefully structured to excite, educate, and motivate participants.

Designed to instill in all participants the importance to our nation of cyber, cyber security, and good computer security practices.

Designed to motivate all participants to consider STEM academic disciplines to meet our nation’s needs.

Designed to motivate many participants to become the next generation of cyber defenders and our nation’s “digital workforce.”



“Hacker training” We don’t teach “hacking” tools or techniques, and “hacking” in competition is strictly forbidden.

A recruiting tool for the Air Force, the Department of Defense, or the Federal government This is about building a strong national foundation for cyber skills needed throughout our nation.

CyberPatriot is NOT


CyberPatriot


Where is the CAP Mission

Aerospace

Air Force Space Command

Satellites

Cyberspace – Newest Mission

Cadet Programs

Leadership

Leadership

Leadership



"Supporting America's

communities with emergency

response, diverse aviation and ground

services, youth development, and promotion of air, space and cyber

power."

CAP Mission Statement


Structure of the Competition - Three Divisions

Middle School

CAP Can Field a Middle School Team

Cost $155 per Team (CAP Free)

Open Division High School (9th through 12th grade)

Cost $195 per Team

Public, Private, Home School

Other Organizations (Scouts, etc.)

All Service High School

Cost - FREE



Weekend Competition

6 Hour Time Block – Up to 3 Images

4 Rounds of Competition

November, December, January, and February

3 Levels of Competition

Platinum, Gold & Silver

Levels Decided after 2 Round

State and Regional Rounds (Jan & Feb)

National Finals Round for Platinum Level

Competition


Competition Platform

Virtual Computer Images using VMWare Player

Virtual Image runs on PC or MAC

Compromised Computer Image

Bad Configuration

Virus & Malware Contamination

Malicious User Accounts

Unnecessary Services & Programs

Competition


Computer Operating Systems used in Competition

Windows Server 2008

Windows Server 2012

Windows Vista

Windows 7

Windows 8

Ubuntu Linux

CentOS Linux

Mint Linux

Fedora Linux

Competition


Scoring

10 to 20 Targeted Problems per System

1 to 3 Systems to Configure and Secure

Time to Complete – Tie Breaker

Loose Points for Breaking Something

Loose Points for Critical Service Failure

Cisco Networking Competition in Later Rounds

Competition


Open Division – 12 Teams

Middle School – 3 Teams

All Service Division – 13 Teams

CAP – 2 Teams

Navy JROTC – 2 Teams

Air Force JROTC – 2 Teams

Army JROTC – 2 Teams

Marine Corps – 2 Teams

Navy Sea Cadets – 2 Teams

Wild Card – 1 Team (Change from Previous Years)

National Finals




How to Start a Program Cadet Opportunities

Training

CAP Initiatives

Questions

Topics


Team Coach

Cyber Knowledge Not Required

Many Coaches are NOT Computer Savvy

Responsible for Cadet Protection

Single Point of Contact to CyberPatriot

Find a Mentor

Coach Multiple Teams

During Competition

No Helping

No Coaching

Where to Start


Team Captain (Cadet/Student)

Should have Knowledge of Computers

Must be Willing to Learn

Must be an Effective Cadet/Student Leader

Where to Start


Team Complement

6 Team Member Including Captain (Reduction from Previous Years)

2 Person Minimum

Must be Willing to Learn

No Knowledge Required

Must be Willing to Listen

Must Put in Individual Time

Where to Start


Team Mentor

Someone Knowledgeable in Cyber Security

Good Opportunity for Senior Squadron Members

Register at www.uscyberpatriot.org

Air Force Association runs Background Check

Selected by Team Coach to Help

Team can have Multiple Mentors

Mentor can Help Multiple Teams

Where to Start


http://www.uscyberpatriot.org/

Cost

Free to CAP Teams for All Service Division

CAPNHQ Funds Travel for Finalist

All Necessary Software Free

Teams Prohibited from Buying Software

Cannot use Donated Software in Competition

Fee $195 for Open Division

Fee $155for Middle School Division (Free for CAP Middle School Teams)

Need Computers for Competition

Where to Start


Hardware Requirements

Computers – Minimum 3 Desktop/Laptop

I3 Processor or Better

4Gb Memory (2Gb Marginal)

20 Gb Free Space on Each System

Internet

1.5 Mbps Reliable DSL

No Proxy Connection

AT&T Air Cards May Be Available

Where to Start


Software Requirements

VMWare Player (Free for Windows & Linix)

Microsoft Academic Licenses (Provided)

Linux (Free)

Cadet Written Scripts/Programs

Cannot be used at National Competition

Any Other Tool You Can Find

Must be Free

Cannot Require Paid Membership

Where to Start


Training Material

Modules at www.uscyberpatriot.org

Module #3 is a Good Starting Point

CAP CyberPatriot Play Book (Draft available)

Find an Expert

Books

Seminars

Internet

Where to Start


http://www.uscyberpatriot.org/




Cadet Opportunities Training

CAP Initiatives

Questions

Topics


National Cadet Special Activities

Advanced Technologies Academy

Cyber Presented the last 5Years

8 Hours over 2 Days

Air Force Space Command Familiarization – Colorado

2 to 3 hours lecture/lab

Cyber Defense Training Academy

Lackland JB, San Antonio, TX

Second Class Graduated in June

Cadet Opportunities






Internships

Presenting Sponsor Northrop Grumman

High School and College Opportunities for CyberPatiots

Many Companies need System Admin Help

Perfect Entry Level or Part Time Job

Jobs

Emerging Occupation

University Programs & Certificate Programs

Much Different than Computer Programming

Cadet Opportunities


What Cadet Would Like $100,000?

Participate in CyberPatriot as a Competitor

Continue to Help While in College

Look for Part Time Jobs for Experience

Obtain Certifications While in College

Differentiate Yourself to Employers

This Can Add $100,000 to your earnings over the first years of your career over those that don’t.

Cadet Opportunities


Colorado Springs Cadet Squadron Cadets

Lockheed Martin Internship – 4th Year – Full Time After Graduation

Denver Mortgage Loan Processor – Full Time 2 years

Denver Oil Company – Summer Full Time

Northrop Grumman Internship

High School – 2 Summers

High School Graduate(s) – Turned into Full Time Employment

Cadet Opportunities





Cadet Opportunities

Training CAP Initiatives

Questions

Topics


Develop Check Lists

Passwords & Users

Computer Policies

Password Length

Password Reuse

Sharing

Read the Instructions

Remove Unneeded Programs

Stop Unnecessary Services

Training


Computer Policies

Control Panel > Administrative Tools > Local Security Policy

Training


Sharing

Control Panel > Administrative Tools > Computer Management

Training


Stop Unnecessary Services

Control Panel > Administrative Tools > Services

Training


Learn to Use Google

Cadets Think they are Google Experts

Example Queries

How do I stop nfs

Stop nfs

How do I stop and disable nfs?

Disable nfs windows 2008

Last Example is Only One with Sufficient Clarity to Get a Good Answer

Training


CyberPatriot IV





Cadet Opportunities

Training

CAP Initiatives

Questions

Topics


CyberPatriot Play Book

Draft Version Available

Help for Coaches to Get Started

Cadet CyberPatriot Ribbon

Cadet Cyber Badge

Region/Wing Director of Cyber Programs

Cyber Weekends

CAP Initiatives





Cadet Opportunities

Training

Questions

Topics


Documents

Cyber Security & CyberPatriot: Educating and Training for Tomorrow’s Challenges Civil Air Patrol CITIZENS SERVING COMMUNITIES Maj Bill Blatchley, CAP National