Key points are not available for this paper at this time.
A Collegiate Cyber Defense Competition was conducted this spring with five universities fielding teams. This event was designed to provide student led teams a simulated operational business environment in which they could test their skills at information security and system operation. This three day event included external hackers attacking the student networks, as well as business users placing operational and administrative demands on the teams. Teams were scored based on their ability to maintain mandated business services, keeping hackers out and answering business scenario injects. The objective was to provide an environment where the teams could exercise their information technology abilities and do so in an operational mode where most information was not freely provided, but must be uncovered and discovered by the students in real time. Issues such as prioritization, resource allocation and technical skill application were tested using real world examples on a known instrumented network. The objective of providing feedback to each team as to its skill level and abilities was achieved and then some over the course of this successful event. Lessons were learned which are being used to move this local event to a national level event.
Art Conklin (Fri,) studied this question.