Hack like you 'meme' it
"We can has pizza?!" Students work on laptops at the Capture the Flag hacking competition. Cybersecurity researchers at four Arizona universities, including ASU, joined forces to host the new hacking competition for undergraduate students. The event, which included food, fun challenges and lively meme-swapping via the competition’s Discord server, aims to help fill the cybersecurity jobs pipeline with well-qualified graduates and solidify Arizona’s role as a global computer security hub. Image created by Erika Gronek/ASU
What do pepperoni pizza, cat memes and an online dojo have in common?
It turns out, these are all essential elements of a great cybersecurity hacking competition.
And experts at Arizona State University, the University of Arizona, Northern Arizona University and Grand Canyon University all agree — such events are some of the best ways to prepare students to assume challenging jobs in the computer security sector.
Cybersecurity researchers from all four universities united to cohost the Capture the Flag hacking competition held on Saturday, April 5. Undergraduates enrolled in Arizona universities and community colleges convened on all four campuses and online, with nearly 400 students from across the state registered to participate and compete to win prizes, including an Amazon gift card valued at over $1,300.
Jackie LeFevers serves as associate director of research operations for the Center for Cybersecurity and Trusted Foundations, or CTF, a cybersecurity research and education group that is part of the ASU Global Security Initiative. With approximately 70 student researchers who are part of the center, CTF is located in the School of Computing and Augmented Intelligence, part of the Ira A. Fulton Schools of Engineering at ASU.
She explains that the hacking competition is part of a cooperative, statewide strategy to both fill the jobs pipeline with well-qualified graduates and to continue to grow Arizona’s profile as a global hub for computer security.
“(These) competitions are a great way to gamify the process of increasing cybersecurity skills,” she says. “Forming a statewide competition puts a spotlight on Arizona as the place to be for cybersecurity education and careers.”
Even as threats to critical technical infrastructure continue to rise, the cybersecurity field has a well-documented shortage of workers, with an estimated 4.8 million unfilled jobs globally. About 500,000 of those vacancies are in the U.S.
Game on
Jobs in cybersecurity are among the toughest in computer science, says Yan Shoshitaishvili.
“To protect a computer system from hacking, you often need to understand it better than the people who actually created it,” he says. “You’ve got to find and fix vulnerabilities in code you didn’t write.”
Shoshitaishvili is a Fulton Schools associate professor of computer science and engineering and is an innovator of a global cybersecurity learning platform known as pwn.college. The site offers a distinct combination of an educational curriculum, a competitive practice environment and a set of communication tools to help students learn collaboratively about cybersecurity.
On pwn.college, students from 145 countries complete learning modules and then engage in online Capture the Flag exercises. Capture the Flag began as an outdoor game where two teams race to retrieve a flag from the opposing team’s base. In a computing environment, a similar activity involves hiding a cryptographic token — usually a short line of code — within a secure system.
The goal is for hackers to exploit vulnerabilities, bypass security and uncover the hidden code. The pwn.college platform mimics a dojo, even awarding real belts to students who complete challenges.
For April’s Capture the Flag hacking competition, university researchers created 23 new challenges that addressed issues in web technology, the blockchain, the Linux operating system and more.
Paul E. Wagner, an associate professor of practice at the University of Arizona, led the competition at U of A. As the director of the Arizona Cybersecurity Clinic and the Arizona Cybersecurity Academy, his work focuses on cybersecurity education and workforce development. He says experiential learning opportunities are important.
“CTF competitions are an excellent complement to formal education programs,” Wagner says. “These competitions allow students to apply their technical skills, think critically under pressure, and develop real world problem-solving abilities.”
Real sense of security
At the event, organizers awarded nearly $2,000 in Amazon gift cards. For student participants, the event seemed to accomplish its bigger goal of galvanizing enthusiasm for cybersecurity.
Gus Hintermeister, a junior studying computer science in the Fulton Schools, says he’s considering a cybersecurity career and appreciated the opportunity to learn new things.
“To me, cybersecurity seems more enjoyable and fulfilling than other specialties of computer science,” he says.
Dagny Howard, a Fulton Schools mechanical engineering student, already has a position at Kudelski Security and came to the hacking competition to improve her skills in securing web browsers. She said she would encourage fellow students to give the event a try.
Congratulations, winners!
First place: Ishaan Kurmi, ASU
Second place: Atul Raman, ASU
Third place: Dvir Hamu, ASU
“Just show up and throw yourself at it,” she says.
Shoshitaishvili says that CTF hopes to make the hacking competition an annual event that continues to foster interest in computer security for Arizona students.
“To really hone their skills, students need opportunities to practice,” he says. “Capture the Flag competitions provide those kinds of chances.”
More Science and technology
Turning up the light: Plants, semiconductors and fuel production
What can plants and semiconductors teach us about fuel production?ASU's Gary Moore hopes to find out.With the aim of learning how to create viable alternatives to fossil-based fuels, Moore — an…
ASU technical innovation enables more reliable and less expensive electricity
Growing demand for electricity is pushing the energy sector to innovate faster and deploy more resources to keep the lights on and costs low. Clean energy is being pursued with greater fervor,…
What do a spacecraft, a skeleton and an asteroid have in common? This ASU professor
NASA’s Lucy spacecraft will probe an asteroid as it flys by it on Sunday — one with a connection to the mission name.The asteroid is named Donaldjohanson, after Donald Johanson, who founded Arizona…