The world’s largest student-run cyber security event, founded 13 years ago by the New York University Tandon School of Engineering, will expand this year to NYU Abu Dhabi and the Indian Institute of Technology, Kanpur, where finalists from India, the Middle East, North Africa, and the United States will compete simultaneously in November 2016. The schools also announced they are accepting registrations for the Cyber Security Awareness Week (CSAW) elimination rounds in August and September, which last year pitted nearly 20,000 students – from high schools through doctoral programs – against global competitors, all working from their own computers. The competitions will challenge their knowledge of virtually every aspect of information security, from hardware and software penetration testing and protection to digital forensics and government policy.
This year the best students from India, the Middle East, North Africa, and the United States will earn travel awards to participate in the final rounds, which will be held November 10-12, 2016 at IIT Kanpur, NYU Abu Dhabi, and NYU Tandon. At the regional CSAW campuses, students will network with top professionals who serve as judges, hear experts address emerging issues, meet recruiters eager to fill what is expected to be a shortfall of 1.5 million cyber security professionals by 2020, and face tough competition from teams from other schools.
The CSAW games were founded by Professor Nasir Memon, now chair of the NYU Tandon Department of Computer Science and Engineering, and his students. Students continue to design the contests under the mentorship of information security professionals and faculty and run them from NYU Tandon’s student-led Offensive Security, Incident Response and Internet Security (OSIRIS) lab, home also to weekly Hack Nights.
“Data security is a critical global issue. Attackers know no national boundaries, and neither should those who protect our personal privacy and institutions,” Memon said. “We are pleased that IIT Kanpur, a world-leading engineering school, recognized the ability of CSAW to engage and educate information security students and decided to introduce the contests to students throughout India. I am equally excited about the role that NYU Abu Dhabi will play this year. In the past CSAW brought high school teams to New York. This year, thanks to the leadership of students and faculty, it will expand its reach to high school and university students across the Middle East and North Africa.” Memon heads NYU Abu Dhabi’s cyber security program, as well as NYU Tandon’s.
“With hobby hackers, foreign state actors, terrorist organizations and other adversaries abounding, cyber security is not just a computer science issue but a national security issue. IIT Kanpur is delighted to join hands with the New York University Tandon School of Engineering to bring the cyber security awareness competitions to India. We hope that Indian institutes and universities will participate in large numbers and show their competitiveness against the teams from all over the world,” said Manindra Agrawal, the N. Rama Rao Professor in the IIT Kanpur’s Department of Computer Science and Engineering.
Each of the regional finalist competitions will vary slightly in the content. Winners of the final rounds can walk away with cash prizes, scholarships, and more. Bragging rights are often the biggest motivator – CSAW has become a boldface line for recruiters and university admissions officers.
This year, CSAW will include:
- Capture the Flag (CTF) hacking competition – This cornerstone challenge attracts upwards of 10,000 remote players each year and provides entry- and mid-level problems to solve at the preliminary stage. Students find themselves competing against professionals and amateurs of all ages in the September remote round, but only the best undergraduate teams qualify for the 30-hour-long marathon of the final round, which is notoriously difficult.
- High School Forensics – The entryway into cyber security, this competition attracts students who enjoy solving puzzles, in this case a fictional murder mystery. To encourage newcomers, NYU Tandon students and their mentors developed an online, self-taught curriculum and offer digital workshops.
- Embedded Security Challenge – In the world’s oldest hardware hacking contest, a Blue Team from NYU Tandon designs a target system. Everyone else – Red Teams – will hack it, to mimic real-world attacks. The finalists will present their findings to security experts in this challenging, research-oriented contest.
- Applied Research Competition – To participate in the program, recognized as the most prestigious Best Paper Award for young researchers, doctoral students must submit papers that have already been published in peer-reviewed journals or presented at conferences.
- Policy Competition – Challenging contestants to think about the big picture of law, policy, economics, and governance, this competition requires students to develop a policy paper proposing how to overcome market failures in cyber security and better protect consumer privacy and critical infrastructure.
- Department of Homeland Security Quiz – Held during the finals, this trivia contest challenges students on technical knowledge as well as history and current events. This year players can use their own smartphones thanks to an app written by former CSAW student team leader Kevin Chung.
- Security: Open Source – This new, one-day workshop for professionals, organized by NYU Tandon Computer Science and Engineering Assistant Professor Brendan Dolan-Gavitt, will bring open-source software authors to NYU Tandon and NYU Abu Dhabi to explain their tools.
- Entrepreneurial Pitch Competition – Competitors will be invited to pitch commercially viable ideas for real-world security problems to potential funders.
The 2016 CSAW is supported by Gold Sponsors: Palo Alto Networks and the U.S. Department of Homeland Security; Silver Sponsor: IBM; Bronze Sponsors: Navy Civilian Careers-U.S. Navy, NCC Group and Raytheon; and Supporting Sponsors: Bloomberg, Cubic Corporation, and Intel.
Preliminary rounds for the Embedded Security Challenge will be held in August; the other preliminary challenges will be in September.