CyberPatriot Trains Kids To Protect America

VIENNA, Virginia — The scene doesn't look all that different from study hall or an after school club meeting. Middle school students, aged 12 to 14, sit huddled around computers. There's light chatter but most kids are silent, intently focused, faces lit by the glow of their screens.

James Henry turns to his teammate Mitchell Yam and says, "Password complexity is enabled." Moments later, the tune from Mario Kart that sounds when a level is complete rings across the room. The students don't pause to celebrate; they just nod at each other and turn back to their screens.

"The goal is to score as many points as you can, and to do that you have to solve these issues that hackers can exploit to get into the computer," Henry explained later.

He and his teammates from Kilmer Middle School in this Washington, D.C. suburb are part of an annual cyber defense competition called CyberPatriot.

Staged in five rounds over six months, CyberPatriot pits teams of middle and high school students against each other as they try to secure their simulated computers against everything from malware and hackers to disgruntled former employees.

More than 25,000 students across the U.S. competed this year.

"Basically the kids get a scenario," Henry's coach and Kilmer Middle School information technology teacher Susie Suchodolski explained. "So they own a business and they have to protect that business from their employees and from people in the outside world that want to gain information about something on their computer system."

It's a skill that's in stark demand right now. As of March of this year, more than 300,000 cybersecurity jobs across the U.S. were unfilled, according to CyberSeek. The Center for Cyber Safety and Education predicts there will be a global shortage of 1.8 million cybersecurity professionals by 2022.

The struggle to attract and maintain top cyber talent was a recurring theme in confirmation hearings for Gen. Paul Nakasone, the new commander of U.S. Cyber Command and director of the National Security Agency, who said talent recruitment would be his first priority going into the job.

Such a priority that Nakasone — a supporter of CyberPatriot — agreed to give NBC News' Cynthia McFadden his first interview since being confirmed.

"In being able to address that shortage, organizations like CyberPatriot are critical," Nakasone told McFadden.

"When we think about the future, think about what these young people are going to do. Whether or not they're in government, they decide to join the military, they're in private sector, this is the strength of our nation," he explained.

It was the same idea that propelled the non-profit Air Force Association (AFA) to start CyberPatriot back in 2009.

The AFA's board members saw a 2008 study from the Congressional Research Service that cited bleak statistics about America's future in math and science.

"We saw us falling behind in STEM education as a national security issue. If China and Russia have better STEM people, then we're going to fall behind in that," CyberPatriot's Deputy Commissioner Rachel Zimmerman explained.

Meant to promote students' interest in STEM fields like cybersecurity and computer science, the AFA launched CyberPatriot with only eight teams in the Orlando, Florida area. Nearly a decade later, it has grown into a competition that draws kids from all 50 states, Puerto Rico, and the U.S. Virgin Islands.

The threats facing America's cyber infrastructure have grown with it.

Data breaches cost American companies $7.35 million on average last year, according to a study sponsored by IBM, and a data breach at Equifax compromised the personal information of more than 147 million Americans.

"Everybody uses a computer, no matter what industry you go into. Knowing how to secure it, and not being that employee who downloads malware onto your company's computer, is going to be beneficial no matter what you go into," Zimmerman said.

That logic appealed to a slew of organizations that agreed to help fund CyberPatriot, from Facebook and Symantec to the U.S. government itself.

Defense contractor Northrop Grumman, CyberPatriot's primary funder, rewards the competition's winners with thousands of dollars in college scholarship money.

To Nakasone, the fact that the program has drawn the interest of both government and the private sector is natural. "I think it speaks to the recognition, not only of the need, but the importance of what we do and what we're going to do in the future in cyberspace."

Ret. Gen. Suzanne Vautrinot even hired a team of CyberPatriot competitors as interns when she was leading the Air Force's cyber command.

"It was actually classified," Vautrinot said, "We got them clearances to be able to do work as a high school student, as an intern. And they learned on the floor. The next year, that team won CyberPatriot."

"You're not babysitting them," she explained, "You're injecting them with something that is going to make them a superhero in the future."

For Kaylee Kirkwood, 16, and her all-female team from Highlands Ranch, Colorado, cybersecurity wasn't an interest — let alone a passion — before they joined their high school's CyberPatriot club.

"It's mostly marketed towards boys. And they make the stereotype that it's like, 'Oh, well boys love videogames. Boys will be boys,' you know? And it makes it so girls, like even for me, I didn't even consider this to be a thing that I could be doing," Kirkwood said.

Despite being first-time competitors, Kirkwood and her team were among the less than one percent of CyberPatriot participants who made it to the final round held in Baltimore, Maryland.

One of the perks of making it that far is exposure to some of the biggest employers in technology and a tour of Northrop Grumman.

"They have people, they come in, to try to infiltrate the company, you know?" Kirkwood recalled, "It was just interesting to see how it's applied from a business standpoint."

"We get to connect with these people in more of a professional setting before we've even gotten to college or thought a lot about college, so it's really a game changer for a lot of us making our decisions," Kirkwood's teammate Katherine Rocha said.

It was certainly a game changer for Kirkwood, who has decided that she wants to pursue cybersecurity at the Air Force Academy after high school.

"I didn't really know what I wanted to do until I joined this club," Kirkwood went on, "Right now, you know, I do kind of want to go and pursue this as a career."

NBC News:

US Air Force Hacked By Teenager:

« US Builds The Fastest Supercomputer. For Now.
The Five Most In-Demand Cybersecurity Roles »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

AV Test

AV Test

The AV-TEST Institute is a leading international and independent service provider in the fields of anti-virus research and IT security.

PeCERT

PeCERT

PeCERT is the national Computer Emergency Response Team for Peru.

Garrison Technology

Garrison Technology

Garrison SAVI® is a unique technology for secure remote browsing that can dramatically change the risk profile for enterprise cyber security.

Gulf Computer Services Co (GCSC)

Gulf Computer Services Co (GCSC)

Gulf Computer Services is a major player in the field of networking & Communication solutions for emerging industries such as Internet Services and Information Technology in Saudi Arabia.

Bio-Morphis

Bio-Morphis

Bio-Morphis Reflex solution is a paradigm shift in the approach to information systems security.

CloudOak

CloudOak

CloudOak is a cloud channel provider for hybrid cloud Backup as a Service (BaaS), Disaster Recovery as a Service (DRaaS) and Archiving to Small to Medium Business (SMB).

AnChain.AI

AnChain.AI

AnChain.AI's analytics platform proactively protects crypto assets by providing proprietary artificial intelligence, knowledge graphs, and threat intelligence on blockchain transactions.

Aergo

Aergo

Aergo offers an easier and more proven way to adopt blockchain and transform your business while building on your existing IT and cloud assets.

Strategic Cyber Ventures (SCV)

Strategic Cyber Ventures (SCV)

SCV grow cybersecurity companies that disrupt advanced cyber adversaries and revolutionize the cyber product marketplace.

Enterprise Incubator Foundation (EIF)

Enterprise Incubator Foundation (EIF)

Enterprise Incubator Foundation (EIF) of Armenia is one of the largest technology business incubators and IT development agencies in the region.

Parameter Security

Parameter Security

Parameter Security is a provider of ethical hacking and information security services.

KETS Quantum Security

KETS Quantum Security

KETS harnesses the properties of quantum mechanics to solve challenging problems in randomness generation and secure key distribution and enable ultra secure communications.

Nine23

Nine23

Nine23 are a highly focused cyber security solutions company that defines, builds and manages innovative services, enabling end-users to use technology securely in today’s workplace.

Eqlipse Technologies

Eqlipse Technologies

Eqlipse Technologies provides products and high-end engineering solutions to customers in the Department of Defense and Intelligence Community.

Closed Door Security

Closed Door Security

Closed Door Security is the only cybersecurity team in the north of Scotland offering everything from IASME Certification to CREST-Accredited penetration testing.

Triovega

Triovega

Triovega are a leading provider for production security and efficiency. Our solutions enhance OT security, and reduce production downtime.