CyberPatriot Trains Kids To Protect America

VIENNA, Virginia — The scene doesn't look all that different from study hall or an after school club meeting. Middle school students, aged 12 to 14, sit huddled around computers. There's light chatter but most kids are silent, intently focused, faces lit by the glow of their screens.

James Henry turns to his teammate Mitchell Yam and says, "Password complexity is enabled." Moments later, the tune from Mario Kart that sounds when a level is complete rings across the room. The students don't pause to celebrate; they just nod at each other and turn back to their screens.

"The goal is to score as many points as you can, and to do that you have to solve these issues that hackers can exploit to get into the computer," Henry explained later.

He and his teammates from Kilmer Middle School in this Washington, D.C. suburb are part of an annual cyber defense competition called CyberPatriot.

Staged in five rounds over six months, CyberPatriot pits teams of middle and high school students against each other as they try to secure their simulated computers against everything from malware and hackers to disgruntled former employees.

More than 25,000 students across the U.S. competed this year.

"Basically the kids get a scenario," Henry's coach and Kilmer Middle School information technology teacher Susie Suchodolski explained. "So they own a business and they have to protect that business from their employees and from people in the outside world that want to gain information about something on their computer system."

It's a skill that's in stark demand right now. As of March of this year, more than 300,000 cybersecurity jobs across the U.S. were unfilled, according to CyberSeek. The Center for Cyber Safety and Education predicts there will be a global shortage of 1.8 million cybersecurity professionals by 2022.

The struggle to attract and maintain top cyber talent was a recurring theme in confirmation hearings for Gen. Paul Nakasone, the new commander of U.S. Cyber Command and director of the National Security Agency, who said talent recruitment would be his first priority going into the job.

Such a priority that Nakasone — a supporter of CyberPatriot — agreed to give NBC News' Cynthia McFadden his first interview since being confirmed.

"In being able to address that shortage, organizations like CyberPatriot are critical," Nakasone told McFadden.

"When we think about the future, think about what these young people are going to do. Whether or not they're in government, they decide to join the military, they're in private sector, this is the strength of our nation," he explained.

It was the same idea that propelled the non-profit Air Force Association (AFA) to start CyberPatriot back in 2009.

The AFA's board members saw a 2008 study from the Congressional Research Service that cited bleak statistics about America's future in math and science.

"We saw us falling behind in STEM education as a national security issue. If China and Russia have better STEM people, then we're going to fall behind in that," CyberPatriot's Deputy Commissioner Rachel Zimmerman explained.

Meant to promote students' interest in STEM fields like cybersecurity and computer science, the AFA launched CyberPatriot with only eight teams in the Orlando, Florida area. Nearly a decade later, it has grown into a competition that draws kids from all 50 states, Puerto Rico, and the U.S. Virgin Islands.

The threats facing America's cyber infrastructure have grown with it.

Data breaches cost American companies $7.35 million on average last year, according to a study sponsored by IBM, and a data breach at Equifax compromised the personal information of more than 147 million Americans.

"Everybody uses a computer, no matter what industry you go into. Knowing how to secure it, and not being that employee who downloads malware onto your company's computer, is going to be beneficial no matter what you go into," Zimmerman said.

That logic appealed to a slew of organizations that agreed to help fund CyberPatriot, from Facebook and Symantec to the U.S. government itself.

Defense contractor Northrop Grumman, CyberPatriot's primary funder, rewards the competition's winners with thousands of dollars in college scholarship money.

To Nakasone, the fact that the program has drawn the interest of both government and the private sector is natural. "I think it speaks to the recognition, not only of the need, but the importance of what we do and what we're going to do in the future in cyberspace."

Ret. Gen. Suzanne Vautrinot even hired a team of CyberPatriot competitors as interns when she was leading the Air Force's cyber command.

"It was actually classified," Vautrinot said, "We got them clearances to be able to do work as a high school student, as an intern. And they learned on the floor. The next year, that team won CyberPatriot."

"You're not babysitting them," she explained, "You're injecting them with something that is going to make them a superhero in the future."

For Kaylee Kirkwood, 16, and her all-female team from Highlands Ranch, Colorado, cybersecurity wasn't an interest — let alone a passion — before they joined their high school's CyberPatriot club.

"It's mostly marketed towards boys. And they make the stereotype that it's like, 'Oh, well boys love videogames. Boys will be boys,' you know? And it makes it so girls, like even for me, I didn't even consider this to be a thing that I could be doing," Kirkwood said.

Despite being first-time competitors, Kirkwood and her team were among the less than one percent of CyberPatriot participants who made it to the final round held in Baltimore, Maryland.

One of the perks of making it that far is exposure to some of the biggest employers in technology and a tour of Northrop Grumman.

"They have people, they come in, to try to infiltrate the company, you know?" Kirkwood recalled, "It was just interesting to see how it's applied from a business standpoint."

"We get to connect with these people in more of a professional setting before we've even gotten to college or thought a lot about college, so it's really a game changer for a lot of us making our decisions," Kirkwood's teammate Katherine Rocha said.

It was certainly a game changer for Kirkwood, who has decided that she wants to pursue cybersecurity at the Air Force Academy after high school.

"I didn't really know what I wanted to do until I joined this club," Kirkwood went on, "Right now, you know, I do kind of want to go and pursue this as a career."

NBC News:

US Air Force Hacked By Teenager:

« US Builds The Fastest Supercomputer. For Now.
The Five Most In-Demand Cybersecurity Roles »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Cloud53

Cloud53

Cloud53 specialise in improving operational IT through strategic use of Cloud technologies and services.

macmon secure

macmon secure

macmon secure develops network security software, focussing on Network Access Control.

Cloudentity

Cloudentity

Cloudentity combines Identity for all things with API and Application security in a unique deployment model, combining cloud-transformation and legacy systems.

Camel Secure

Camel Secure

Camel Secure is a company specialized in the development of products for information security and technology risk management.

DatChat

DatChat

DatChat Inc. is a blockchain, cybersecurity, and social media company that focuses on protecting privacy on our devices and also protecting our information after we have shared it with others.

Telstra

Telstra

Telstra is one of the world's leading telecommunications and technology companies, offering a wider range of services from networks and cloud solutions to mobility and enterprise collaboration tools.

HackNotice

HackNotice

HackNotice Teams is an all-in-one encompassing tool that monitors threats within your organization, different vendors, and third parties whose services you use.

Bosch Global Software Technologies (BGSW)

Bosch Global Software Technologies (BGSW)

Bosch Global Software Technologies offer an advanced innovation for AI security. The Bosch AIShield is the definite answer to safeguard your business against model extraction attacks.

Winmill Software

Winmill Software

Winmill is a technology services company that provides expert consulting services in Application Development, Application Security and Cyber Security.

RightCue Assurance

RightCue Assurance

RightCue Assurance identify opportunities for improvement in the Information Security for your organisation and work with you to reduce cyber risk.

Star Lab

Star Lab

Star Lab specializes in the development and productization of embedded security technologies.

Oxford Information Labs (OXIL)

Oxford Information Labs (OXIL)

Oxford Information Labs brings together world-class software programmers and policy experts to provide a unique mix of expertise and hands on technical solutions.

Vortacity Cyber

Vortacity Cyber

Vortacity is a boutique cybersecurity provider specializing in associations, nonprofits, and mission-based organizations.

CorePLUS Technologies

CorePLUS Technologies

CorePlus solutions are designed to empower organizations with the tools they need to ensure the utmost protection for their assets, people, and information.

Tanzania Industrial Research and Development Organization (TIRDO)

Tanzania Industrial Research and Development Organization (TIRDO)

TIRDO is a multi-disciplinary research and development organization.

Zyxel Networks

Zyxel Networks

Zyxel Networks is a leading provider of secure, AI-powered networking solutions for small to medium businesses (SMBs) and the enterprise edge.