Check out this blog post by Michael McGrew, a Security Engineer at Facebook, which highlights opportunities for students to connect their classroom knowledge with real world situations.
Putting security education into practice
The best security education helps students connect their classroom knowledge to real world situations, and entry-level security jobs increasingly expect some hands-on experience. Not all school curricula today includes these opportunities, though, so students often look outside of the classroom to build and solidify their skills.
I found myself looking for these same opportunities when I was a junior in college. I came across the Collegiate Cyber Defense Competition (CCDC), a defensive security competition that puts teams of students in a mock business environment. The program challenges students to run their business while protecting their network and systems from a team of professional penetration testers looking for vulnerabilities. I started a club at my school and formed a team to bring to the Western Regional Collegiate Cyber Defense Competition (WRCCDC). After practicing and reviewing strategies for a couple of months, we attended the competition and learned a ton. It set me up for other competitions and extra-curricular activities that prepared me to enter the security professional field.
Giving back to students
In recognition of the value of these types of learning opportunities, Facebook helped sponsor the WRCCDC competition at the end of March. My colleague, Javier and I joined a team of penetration testers attempting to breach the students' systems. The challenging environment exposes students to hands-on experience with enterprise equipment. Teams are constantly under pressure to keep the business running smoothly and to secure and maintain their systems while defending against attacks. This simulation teaches teamwork, time management, risk assessment, and core technical security skills. Whenever we managed to get around one of their defenses, we were peppered with questions from the students: “How did you get into our server?” and “How can we secure our network from what you were doing?” Giving informal tutorials about security defenses and best practices to talented and passionate students was the highlight of my experience.
Hey, students—get involved!
The National Collegiate Cyber Defense Competition (NCCDC) is coming up next week, but CCDC isn't the only outlet for students to get security experience outside the classroom. If you're a student, I challenge you to get involved with a cyber security competition. It was a big part of my professional development, and you'll gain something you simply can't on your own. Below are a few events to explore:
Collegiate Cyber Defense Competition (CCDC) http://nationalccdc.org/
CCDC is a defensive competition for teams of college students to protect a mock business network against professional penetration testers.
CSAW Capture the Flag (CTF) https://ctf.isis.poly.edu/
CSAW CTF is an entry-level Capture the Flag event designed for undergraduate students.
U.S. Cyber Challenge (USCC) http://www.uscyberchallenge.org/
Cyber Foundations is a series of tutorials and quizzes for high school students to learn about security and test their skills. Cyber Quests is an online quiz where the top scoring participants are invited to a week-long camp with classes taught by SANS instructors. Registration is currently open for Cyber Quests!
CyberPatriot https://www.uscyberpatriot.org/
CyberPatriot is a competition for high school students where teams address real life cybersecurity situations in a virtual environment.
MITRE Cyber Academy http://mitrecyberacademy.org/stem/competitions
MITRE Cyber Academy hosts annual competitions for high school and college students that allow teams to compete against each other in different hacking challenges.
National Cyber League (NCL) http://www.nationalcyberleague.org/
The NCL provides an ongoing virtual training ground for students to develop, practice, and validate cybersecurity skills using lab exercises aligned with individual and team games.