Feeds

US Air Force beats off competition in NSA hacking fight

Training to defend, and attack

Internet Security Threat Report 2014

A four-day hacking competition run by the National Security Agency (NSA) to find the top military system designers and administrators has awarded the 13th annual Cyber Defense Exercise (CDX) prize to a team from the US Air Force Academy.

"CDX offers an unparalleled opportunity for some of the nation's top students to showcase their cyber skills to NSA's leading practitioners," said Neal Ziring, technical director of the NSA's Information Assurance Directorate in a statement.

"America increasingly needs professionals with highly technical cyber skills to help the country remain safe and adapt with greater agility. We need the best and brightest to help us defeat our adversaries' new ideas."

Teams from the US Military Academy, US Naval Academy, US Air Force Academy, US Coast Guard Academy, Naval Postgraduate School, the Royal Military College of Canada, and the US Merchant Marine Academy designed and built their own virtual networks, which were then bombarded with malware and system attacks for 84 hours straight by "red team" attackers.

The CDE contest isn’t just about learning to defend networks. The other purpose is to give the 60 computer experts who make up the NSA's Red Team some opportunity to practice their hacking skills against a motivated set of network operators. Attackers and defenders worked round the clock in the competition to bring down hardware and software, or to keep it up.

The teams of students had to defend their networks (housed in a closed system at Lockheed Martin's Maryland facility) against publicly available vulnerability attacks but – more importantly – had to log all activity and explain their actions to a panel of examiners. For the second year running, the fly-boys (and girls) were awarded the top prize – the Air Force's fourth win in 13 years.

Martin Carlisle, who led the 28-member team, said that the skills his team demonstrated will become increasingly important in the years ahead. "Our nation is under attack. We need to train up a new generation of leaders," he told Reuters.

The win is hard news for the Army's US Military Academy. The Green Machine's hacking grunts clinched the first ever CDX trophy in 2001 and were on a five-contest winning streak until last year. Their attempts were beaten back this time, but the competition next year is expected to be fierce. ®

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.