Panoply Is Right Around the Corner

On October 15, 2011, the NCCDC organizers will be holding Panoply for the second year at the Airport Hilton. Panoply is an event that complements the NCCDC. The primary goal for teams is to obtain resources that reside in a virtual cloud and secure it from the other competitors while maintaining its functionality.

For example, Team A may discover a Virtual Machine that is running on a Windows 2003 platform and is configured to be a DNS server. Team A may use any legal strategy to gain access to the VM and input their unique team string. In this case, Team A must create a reverse lookup entry that responds to a DNS query with the IP address 1.1.1.1 with their team string corresponding to it. We would then do a lookup for the IP address 1.1.1.1. If the team is successful, the result should be as “Name: (Team A’s String)  Address: 1.1.1.1″

More information about Panoply can be found here: http://www.cyberpanoply.com/

The first Panoply event was met with positive feedback. This year’s event will have close to 30 VMs. Along with the virtual targets, there will also be fun challenges where teams can compete for bonus points.

Although this might be considered the “fun” competition, it stresses several important factors that future IT professionals should know about: assessments, security, and maintaining critical services with minimum downtime.

How to get involved with CCDC

One of the most common questions we address here at the Nationals is “how do we get involved in CCDC”?  Well the answer is “it depends” – on who you are and what aspect of CCDC you want to be involved with.

Student/coach:  If you are a student or a faculty member interested in starting a team and competing in CCDC events, head on over to www.nationalccdc.org and take a look at the Competitors tab.  There you’ll find information about the rules (including topics like team composition and eligibility), regional events, the competition schedule, and so on.  Be sure to download the Team Prep Guide in the Download section of the Competitors tab.  CCDC is a tiered competition structure – there are qualifying events, leading to regional events, which lead to the national event.  If you win you keep progressing up the competition ladder.  To start competing in CCDC events you’ll need to contact the POC responsible for your qualifying or regional event (see the CCDC Regional map under the CCDC Regionals section of the Competitors tab) and register your team for competition.  CCDC competitions start in January but don’t wait to register – many CCDC events have a limited number of competitions spots and they fill up fast. Continue reading

NICE draft plan has been released for comments

The security of our nation and critical infrastructures has been a hot topic for some time now. Failure of our critical infrastructure, such as the electric grid or financial services, due to cyberattacks can be disastrous and costly. Cybersecurity is extremely important, and I believe it takes awareness, forward thinking, planning, educating, and all of us working together to secure our nation. NIST has released their draft  National Initiative for Cybersecurity Education Strategic Plan (NICE) which is a step in that direction. They are asking for comments from a wide variety of Americans including everyday citizens whose daily lives interact with cyberspace (they are encouraging participation and thoughtful comments from all interested citizens and organizations.  You can submit comments via the template. I am encouraging YOU to comment and help this plan take shape as it continues to mature. Continue reading