Sunday, 25 September 2022

CyberDay & CyberTitan: cybersecurity resources for cyberawareness month

The idea of bringing cybersecurity awareness into a public school classroom makes many people uneasy, but as I said in a recent interview, "Cyber is never as complicated as you think it is, don't let the lingo and media scare you off."   There are a couple of events happening in October, which is cybersecurity awareness month in Canada, that'll give you the resources and connections you need to explore cybersafety in your classroom safely and with confidence (!).



CyberDay is the gentle introduction to cybersafety, privacy and cybersecurity.  


It's happening on October 18th and the Knowledgeflow Cybersafety Foundation has been working like beavers to put together interactive resources and talks with experts that'll make cyber accessible to everyone.

CyberDay is all online and you can pick and choose what you want to use in your classroom.  It could be a short lesson, a longer activity or even a whole day event depending on how you want to use it.

Sign up is on the site and you can even do some preliminary learning with it by having students submit questions to experts.  If you don't think you have students in your class who are curious about hacking then you're not getting where they spend most of their time (it's online).  In this event students can ask white hat hackers and pentesters about their work.  That might lead more students to consider cybersecurity pathways which are in such high demand that Canada is looking overseas to bring people in because we're not producing this expertise at home.

As they say on the site, "Cybersafety is a team sport".  You're not alone in broaching this sometimes unnerving subject, you only need to connect to CyberDay to see how much help is on hand.

If ease of access isn't compelling for you perhaps the idea that using interconnecting education technology in our classrooms means we should all be covering cybersafety and privacy with our students is simply good practice.  I attended a conference last week where Michael Canuel from LearnQC trotted out current stats that should make you sit up and take notice:
  • (a staggering) 98% of data breaches are caused by user error or cyber-illiteracy. If we took steps to improve cybersafety awareness in education, we would all but solve the current wave of cyber-attacks on the education sector.
  • cyber-awareness is vital to protecting our critical infrastructure. Canada now considers information technology to be a critical infrastructure (because it also runs all the other ones)
  • cyber-skills are part of a collection of digital literacy skills that extend well beyond coding
The need for better cyber-awareness should be self evident, but what isn't (to me) is why public education seems to go out of its way to ignore it.  While listening to Michael's talk about the poor state of cyber-skills in Canadian education, I couldn't help wondering if it isn't intentional.  Many public education organizations have vested political interests in keeping the status quo.  From a professional perspective I was left desperately hoping that educators aren't intentionally ignoring privacy and cybersafety in order to sabotage eLearning.  CyberDay would be a great first step in proving that skepticism misplaced.

One of the angles I was considering for CyberDay was just how well suited it is as a library activity.  I did a piece for the Ontario Library Association's Teaching LIbrarian online magazine about how cybersecurity (as a digital literacy) makes a perfect connection with the role a modern learning commons plays in our schools.

Library learning commons are often the first point of contact for emerging technology.  Way back in middle school in 1982, I first laid hands on a computer in our school library when we set up Commodore PETs and I saw the neon green wonder of coding for the first time.

I'm hoping I can connect with the OSLA about reaching out to librarians over the next couple of weeks to drum up interest in taking on this latest in a long line of emerging digital literacies.  Cyber isn't as scary as you think it is, and when you do get into it you quickly realize that it's a great opportunity for iterative, genuine learning.


CYBERTITAN:  Canada's student cybersecurity competition


CyberTitan has been running since 2017/18 in Canada as part of CyberPatriot, the US Air Force Association's now international student competition.  If you've read Dusty World before you know that this contest has not only opened up pathways for my students, but also played a major role in my own professional development.  I'm a huge fan of the competition and would love to see more Canadian educators get on board with it.

CyberPatriot has a live map of registered teams on their site.  As you can see, compared to the United States, Canada's engagement with the competition has been... less.

I'm particularly focused on connecting under-represented groups to the competition.  When I coached the first ever top all-female team to the national finals in 2019, I became aware of just how toxically masculine cyber can be.  I'd move mountains to get more female (including non-binary and female identifying) students into it.  I'd move more mountains to get other under represented groups including indigenous students on board too.  The finalist teams all tend to come from major city specialist schools which tend to cater to socio-economically advantaged youth.  Cyber isn't exclusively and urban/wealthy course of study, it's an all-of-us discipline that rural communities, families and businesses are just as in need of.

You can see what the competition is about from this Prezi that the mighty @oksarge and I presented at ECOO summer camp in 2020.  Students learn hands-on defensive IT skills by fixing compromised WIndows and Linux operating systems in virtual machines.

Learning to wrangle virtual machines is a big part of CyberPatriot.  You'll find this technology to be an incredible tool for teaching computer technology. You can abuse VMs in all sorts of ways that'd make your IT department shudder, and when it all goes wrong?  Just close the window.

VMs are simulated computers that happen inside a window, so you could run Apple OSx in Windows, or Windows in Linux using a VM.  Because it's all virtual there is no chance of spreading malware from inside a VM, which is why they're used in cybersecurity.  Learning virtualization technology is really eye opening for students, and it's not nearly as tricky as you think it might be.


Our lab goes full disco during a CyberPatriot round.  It's a six-hour competition window.  Pizza is brought in and snacks are available.  Students dig right to the end, making a mockery of the idea that kids today have no attention span.

The competition is exciting and students genuinely enjoy it, usually returning year after year.  Live world wide scoring pits your team against others from around the world, so if they're competitive they can follow the scoreboard and dig for points, but CyberPatriot can also be played from a purely educational perspective where students still benefit from the teamwork, iterative problem solving and cyber-skills development.  Our junior teams are always reminded that this is a reconnaissance season with no expectation of winning: learn the ropes and have fun with it.  Many become competitive anyway because (here it comes again): cyber isn't as complicated as you think it is.

Sign up is due by October 5th, but no money is due then (fees are waived for non-male teams) and I've always found that SHSM and other student success initiatives are eager to help cover costs (which aren't due until mid-November).  The swag is excellent (t-shirts, medals!) and once students understand how it all works they always say the same thing (here it comes again), "it's not as hard as I thought it would be."

Libraries would be another great focus for CyberTitan, where students could access the technology they need and develop their library and librarian coach into a cyber-aware school-wide resource.  My students have used the skills learned in CyberPatriot to help our school with technical support and many went on to support local businesses as well.  Five years in I'm seeing former CyberTitans working overseas in technical contracts, joining the cyber-side of the Canadian Forces or exploring advanced post-secondary programs.  The benefits from this are many, we just need to get more Canadian educators to take that step and sign up a team. Once they do, their students will thanks them, and they'll be back!

It's still true!  If you'd like to talk about running a high school team, I've got lots of experience and would be thrilled to help you get going.  Krista ran a very successful middle-school team in her first year coaching and can talk you through what to expect in that division.