麻豆传媒

Over the course of a recent Saturday, a group of University of New Haven students spent hours taking on the role of penetration testers, studying a 鈥渃ustomer鈥檚鈥� digital security and seeking out any vulnerabilities they could find.

Members of the University鈥檚 Cybersecurity and Hacking team, they worked from 10 a.m. to 6 p.m. searching for ways into the mock company鈥檚 computer system and devising solutions to make that system as impenetrable as possible.

They were competing in the New England Regional against teams from the , the , , , , , and the . Teams from more than 100 universities compete across seven global regions.

Throughout the day, four cybersecurity professionals from Black Hills Information Security acted in character, 鈥済oing into the competition rooms, playing the role of the customer, interacting with competitors and scoring them on the interactions,鈥� explained Liberty Page M.S., senior lecturer and program coordinator of the University鈥檚 B.S. in cybersecurity.

鈥淭hese are highly skilled and experienced people working in the field.鈥� At the same time, two representatives from CPTC Global and an unseen group of professionals monitored the student teams鈥� work online.

Prof. Page coordinates the University hosting the two-day event, which involves dozens of volunteers 鈥� faculty, student, and industry professionals 鈥� as well as sponsors, including Black Hills Information Security.

With the first part of the event complete, the students then had until 12:30 a.m. to collaborate on writing an exceptionally detailed report, which would serve as an action plan for the company they were a consultant for.

鈥楾hey stayed motivated throughout the day and until the very end鈥�

The deadline didn鈥檛 faze the team nor did the long hours, said Jonthan Chute 鈥�25, captain of the CPTC team. For the last several months, Chute had the team tackle different problems and scenarios, focusing not only on technical savvy but also on developing soft skills.

鈥淲e acted as attackers attempting to breach the company's cybersecurity, and we also have to handle the business side of things: responding to the client's concerns and providing a comprehensive report of the outcome of the penetration test,鈥� he said. 鈥淭he team did not need me to keep them focused during the competition. They stayed motivated throughout the day and until the very end.鈥�

They were ready, too, to write the report. 鈥淲riting security assessment reports is not something many students do in their free time, or in class,鈥� Chute said. 鈥淭o overcome this, we wrote our own report, as if it were the competition, to gain experience.鈥�

鈥淛on did an excellent job organizing these meetings and ensuring that we were well prepared,鈥� said Kristine Zurovchak 鈥�26.

'It felt like all of our preparation from over the last several months had truly paid off'

The next afternoon, the teams heard talks from industry professionals and the winners were announced. The University of Massachusetts Amherst took first place, the University of New Haven placed second, and West Point third.

鈥淚鈥檓 so incredibly proud of our team,鈥� Prof. Page said.

Murat Gunestas, Ph.D., assistant professor of cybersecurity and the hacking team coach and club adviser, called the competition 鈥渢he most realistic I鈥檝e ever seen. Besides technical skills, it tested students鈥� professionalism, communication skills, ethical approach, and responsibility.鈥�

Chute said 鈥淐PTC is one of the few competitions that provides students with experience that is directly transferable to professional work. The competition is sponsored and shaped by organizations that do security assessments on a daily basis. These companies also use the competition as an avenue for hiring recent graduates, so it is a nice addition to your resume.鈥�

For Zurovchak, who was competing with the team for the first time, said placing second was 鈥渁n incredible moment. In addition to Chute, she was joined by Ryan Stapleton 鈥�26, Mark Daniels 鈥�25, Ronald Scarpa 鈥�25, Jessica Berrios 鈥�25 M.S., and alternate Matthew Liselli 鈥�27.

鈥淚t felt like all of our preparation over the last several months truly paid off,鈥� Zurovchak said. 鈥淔or me, it means that penetration testing as a future career is an achievable goal and one that I can realistically aim for. I鈥檓 proud of what the team accomplished and excited to see where the skills gained from the competition take us.鈥�

鈥業t鈥檚 a cat-and-mouse game with bad actors鈥�

Graduates of the University鈥檚 Cybersecurity program go on to work for leading companies, including the MITRE Corporation, as well as for the NSA, the FBI, the military, FDIC, and the U.S. Department of State.

Students who take part in the CPTC and competitions are highly sought after, Prof. Page said. 鈥淭he members of this team are almost uniformly getting job offers,鈥� she added.

鈥淥ne of the key indicators of success in cybersecurity is the willingness to work inside and outside the classroom and to continually seek more knowledge all the time,鈥� Prof. Page said. 鈥淚n this job, you cannot stay static. You are constantly faced with new challenges, so you have to always be learning. It鈥檚 a cat-and-mouse game with bad actors, so you have to stay out ahead of them.

鈥淭he work is so important 鈥� it impacts people everywhere,鈥� Prof. Page continued. 鈥淭hese students are heroic to me.鈥�