CyberPatriot Trains Kids To Protect America

VIENNA, Virginia — The scene doesn't look all that different from study hall or an after school club meeting. Middle school students, aged 12 to 14, sit huddled around computers. There's light chatter but most kids are silent, intently focused, faces lit by the glow of their screens.

James Henry turns to his teammate Mitchell Yam and says, "Password complexity is enabled." Moments later, the tune from Mario Kart that sounds when a level is complete rings across the room. The students don't pause to celebrate; they just nod at each other and turn back to their screens.

"The goal is to score as many points as you can, and to do that you have to solve these issues that hackers can exploit to get into the computer," Henry explained later.

He and his teammates from Kilmer Middle School in this Washington, D.C. suburb are part of an annual cyber defense competition called CyberPatriot.

Staged in five rounds over six months, CyberPatriot pits teams of middle and high school students against each other as they try to secure their simulated computers against everything from malware and hackers to disgruntled former employees.

More than 25,000 students across the U.S. competed this year.

"Basically the kids get a scenario," Henry's coach and Kilmer Middle School information technology teacher Susie Suchodolski explained. "So they own a business and they have to protect that business from their employees and from people in the outside world that want to gain information about something on their computer system."

It's a skill that's in stark demand right now. As of March of this year, more than 300,000 cybersecurity jobs across the U.S. were unfilled, according to CyberSeek. The Center for Cyber Safety and Education predicts there will be a global shortage of 1.8 million cybersecurity professionals by 2022.

The struggle to attract and maintain top cyber talent was a recurring theme in confirmation hearings for Gen. Paul Nakasone, the new commander of U.S. Cyber Command and director of the National Security Agency, who said talent recruitment would be his first priority going into the job.

Such a priority that Nakasone — a supporter of CyberPatriot — agreed to give NBC News' Cynthia McFadden his first interview since being confirmed.

"In being able to address that shortage, organizations like CyberPatriot are critical," Nakasone told McFadden.

"When we think about the future, think about what these young people are going to do. Whether or not they're in government, they decide to join the military, they're in private sector, this is the strength of our nation," he explained.

It was the same idea that propelled the non-profit Air Force Association (AFA) to start CyberPatriot back in 2009.

The AFA's board members saw a 2008 study from the Congressional Research Service that cited bleak statistics about America's future in math and science.

"We saw us falling behind in STEM education as a national security issue. If China and Russia have better STEM people, then we're going to fall behind in that," CyberPatriot's Deputy Commissioner Rachel Zimmerman explained.

Meant to promote students' interest in STEM fields like cybersecurity and computer science, the AFA launched CyberPatriot with only eight teams in the Orlando, Florida area. Nearly a decade later, it has grown into a competition that draws kids from all 50 states, Puerto Rico, and the U.S. Virgin Islands.

The threats facing America's cyber infrastructure have grown with it.

Data breaches cost American companies $7.35 million on average last year, according to a study sponsored by IBM, and a data breach at Equifax compromised the personal information of more than 147 million Americans.

"Everybody uses a computer, no matter what industry you go into. Knowing how to secure it, and not being that employee who downloads malware onto your company's computer, is going to be beneficial no matter what you go into," Zimmerman said.

That logic appealed to a slew of organizations that agreed to help fund CyberPatriot, from Facebook and Symantec to the U.S. government itself.

Defense contractor Northrop Grumman, CyberPatriot's primary funder, rewards the competition's winners with thousands of dollars in college scholarship money.

To Nakasone, the fact that the program has drawn the interest of both government and the private sector is natural. "I think it speaks to the recognition, not only of the need, but the importance of what we do and what we're going to do in the future in cyberspace."

Ret. Gen. Suzanne Vautrinot even hired a team of CyberPatriot competitors as interns when she was leading the Air Force's cyber command.

"It was actually classified," Vautrinot said, "We got them clearances to be able to do work as a high school student, as an intern. And they learned on the floor. The next year, that team won CyberPatriot."

"You're not babysitting them," she explained, "You're injecting them with something that is going to make them a superhero in the future."

For Kaylee Kirkwood, 16, and her all-female team from Highlands Ranch, Colorado, cybersecurity wasn't an interest — let alone a passion — before they joined their high school's CyberPatriot club.

"It's mostly marketed towards boys. And they make the stereotype that it's like, 'Oh, well boys love videogames. Boys will be boys,' you know? And it makes it so girls, like even for me, I didn't even consider this to be a thing that I could be doing," Kirkwood said.

Despite being first-time competitors, Kirkwood and her team were among the less than one percent of CyberPatriot participants who made it to the final round held in Baltimore, Maryland.

One of the perks of making it that far is exposure to some of the biggest employers in technology and a tour of Northrop Grumman.

"They have people, they come in, to try to infiltrate the company, you know?" Kirkwood recalled, "It was just interesting to see how it's applied from a business standpoint."

"We get to connect with these people in more of a professional setting before we've even gotten to college or thought a lot about college, so it's really a game changer for a lot of us making our decisions," Kirkwood's teammate Katherine Rocha said.

It was certainly a game changer for Kirkwood, who has decided that she wants to pursue cybersecurity at the Air Force Academy after high school.

"I didn't really know what I wanted to do until I joined this club," Kirkwood went on, "Right now, you know, I do kind of want to go and pursue this as a career."

NBC News:

US Air Force Hacked By Teenager:

« US Builds The Fastest Supercomputer. For Now.
The Five Most In-Demand Cybersecurity Roles »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

FT Cyber Resilience Summit: Europe

FT Cyber Resilience Summit: Europe

27 November 2024 | In-Person & Digital | 22 Bishopsgate, London. Business leaders, Innovators & Experts address evolving cybersecurity risks.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

UK Cyber Security Forum

UK Cyber Security Forum

UK Cyber Security Forum is a community interest group for cyber security companies in the UK.

inBay Technologies

inBay Technologies

inBay Technologies' idQ Trust as a Service (TaaS) is a unique and innovative SaaS that eliminates the need for user names and passwords.

Industrial Cybersecurity Center (CCI)

Industrial Cybersecurity Center (CCI)

CCI is the first center of its kind that comes from industry without subsidies, independent and non-profit, to promote and contribute to the improvement of Industrial Cybersecurity.

Belle de Mai Incubator

Belle de Mai Incubator

Belle de Mai Incubator supports and funds innovative startup ideas in digital industries.

BetaDen

BetaDen

BetaDen provides a revolutionary platform for businesses to develop next-generation technology, such as the internet of things and industry 4.0.

Cypherix

Cypherix

Cypherix is tightly focused on cryptography and data security. We leverage our expertise to deliver state-of-the-art, world-class encryption software packages.

HacWare

HacWare

HacWare is a data driven cybersecurity awareness product that leverages machine learning and behavior analytics help IT professionals combat phishing.

Visible Statement

Visible Statement

Visible Statement is a computer-based delivery system designed to insure the retention and recall of your most important security training messages.

C3i Hub

C3i Hub

C3i Hub aims to address the issue of cyber security of cyber physical systems in its entirety, from analysing security vulnerabilities to developing tools and technologies.

FiVerity

FiVerity

FiVerity provides financial institutions with cyber fraud defense to combat a dangerous and growing threat - the convergence of fraud-related theft with sophisticated, high-volume cyber attacks.

DeNexus

DeNexus

DeNexus is the leading provider of cyber risk modeling for industrial networks. Our Mission is to build the Global Standard for Industrial Cyber Risk Quantification.

Fibernet

Fibernet

Fibernet's innovative solutions in the fields of cybersecurity and fiber optics range from telecommunications infrastructure to small business cybersecurity.

inWebo

inWebo

inWebo is the specialist in multi-factor strong authentication (MFA). We guarantee the security of data and identities in a digital world with increasingly important economic and political stakes.

Phriendly Phishing

Phriendly Phishing

Phriendly Phishing offers phishing awareness training programs designed to ward off potential security threats and minimise the impact of cyber attacks.

RightSec

RightSec

RightSec is an emerging market leader and solution provider for cybersecurity and digital resiliency. We provide end to end solutions to suit your specific business lifecycle.

Airbus Protect

Airbus Protect

Airbus Protect is an Airbus subsidiary bringing together the Company’s expertise in cybersecurity, safety and sustainability-related services.