Mason Competitive Cyber / en Cyber savant hacks his way onto international team /news/2024-12/cyber-savant-hacks-his-way-international-team <span>Cyber savant hacks his way onto international team</span> <span><span lang="" about="/user/1536" typeof="schema:Person" property="schema:name" datatype="" xml:lang="">Nathan Kahl</span></span> <span>Tue, 12/03/2024 - 11:48</span> <div class="layout layout--gmu layout--twocol-section layout--twocol-section--30-70"> <div class="layout__region region-first"> </div> <div class="layout__region region-second"> <div data-block-plugin-id="field_block:node:news_release:body" class="block block-layout-builder block-field-blocknodenews-releasebody"> <div class="field field--name-body field--type-text-with-summary field--label-visually_hidden"> <div class="field__label visually-hidden">Body</div> <div class="field__item"><p><span><span><span><span><span><span><span><span class="intro-text">Dylan Victor Knoff is president of the <a href="https://competitivecyber.club" title="MCC">Mason Competitive Cyber (MCC) club</a>, a computer science major, and the kind of self-motivated hacker you might see rummaging through Goodwill bins, in his free time looking for a $4 router that he can use to bolster his resume.</span> </span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span><strong>“</strong>I’ll pull it apart and take the firmware off the chip. It's good fun, responsibly and ethically doing stuff to it, of course, and then reporting vulnerabilities,” he said. </span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span>The AV junior likes to examine routers because they are more likely than other devices to have detectable problems. Once he finds a vulnerability, per industry practice, he reports it to the vendor and then <a href="https://www.mitre.org" title="MITRE">MITRE</a>, the nonprofit that that catalogs firmware and software problems. Getting a mention on their common vulnerabilities and exposures listing looks good professionally for young cyber sleuths. </span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span>This ambition to make the cyber world a better, safer place is a theme in Knoff’s life. First, he started a Capture the Flag (CTF) team during high school, and then he attended a university cyber club while still a teen. When the Orlando native and first-gen college student could have chosen the local University of Central Florida, instead he left home for George Mason, recognizing the university’s prowess in the field and the benefit of being close to potential employers in the Washington, D.C., metropolitan region. Knowing that breaking into cybersecurity is no Mickey Mouse endeavor, shortly after arriving in Fairfax he networked with the <a href="https://www.battelle.org" title="Battelle">Battelle</a> intern coordinator and subsequently landed a paid, full-time co-op with the STEM giant. </span></span></span></span></span></span></span></p> <figure role="group" class="align-left"><div> <div class="field field--name-image field--type-image field--label-hidden field__item"> <img src="/sites/g/files/yyqcgq291/files/styles/small_content_image/public/2024-12/screen_shot_2024-12-03_at_11.56.00_am.png?itok=Fw9nYe6M" width="330" height="350" alt="Young man stands on a rocky trail" loading="lazy" typeof="foaf:Image" /></div> </div> <figcaption>When he's not hacking routers, Knoff enjoys Shenandoah National Park</figcaption></figure><p><span><span><span><span><span><span><span>Knoff is on the U.S. Cyber Team and in October competed at the International Cybersecurity Challenge in Santiago, Chile. He said, “We competed against other countries’ teams in a two-day CTF, where one day was attack-and-defend, and the second day was on vulnerability assessment and exploit development.”</span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span>Knoff’s research focus is reverse engineering and vulnerability research. “I'll find something wrong with a specific device or framework and I'll find a ‘zero day,’ which is a vulnerability that is unknown to the vendor, and then I'll disclose it to them,” he said, indicating the standard industry practice. </span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span>For next year’s <a href="https://www.districtcon.org" title="District Con">DistrictCon</a>, a hacker conference in Washington, D.C., in February, Knoff and two members of MCC participated in the Junkyard Contest, where participants find vulnerabilities in devices; they discovered a stunning eight zero days on one router. </span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span>Knoff is giving a separate talk at the conference, on return-oriented programming, a way that hackers can get into a system by reusing code that already exists in a program. “I made this tool that utilizes computer emulation to analyze and visualize the memory side effects of elements that make up a return-oriented attack. Using data aggregation, these elements are then sorted based on their exploitation effects and made easily searchable to an operator.” He made the<strong> </strong>tool open source, available to anyone on GitHub, and is releasing an updated version the day of the talk.</span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span>On rare days when he’s not at a keyboard, Knoff enjoys getting outside, especially for a hike. “I love going to Shenandoah with my friends, doing Old Rag and White Oak,” he said, referencing two of the more popular—and challenging—Shenandoah National Park trails. </span></span></span></span></span></span></span></p> <p><span><span><span><span><span><span><span>Currently he’s entertaining offers for two new co-ops, with the hopes of potentially spinning one of those into full-time employment. And whether scaling digital peaks or the rugged trails of Shenandoah, Knoff will find himself climbing…toward discovery and solutions in a safer cyber world.</span></span></span></span></span></span></span></p> </div> </div> </div> <div data-block-plugin-id="field_block:node:news_release:field_content_topics" class="block block-layout-builder block-field-blocknodenews-releasefield-content-topics"> <h2>Topics</h2> <div class="field field--name-field-content-topics field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">Topics</div> <div class="field__items"> <div class="field__item"><a href="/taxonomy/term/3346" hreflang="en">Cyber Security</a></div> <div class="field__item"><a href="/taxonomy/term/10431" hreflang="en">Mason Competitive Cyber</a></div> <div class="field__item"><a href="/taxonomy/term/2186" hreflang="en">computer science</a></div> <div class="field__item"><a href="/taxonomy/term/4066" hreflang="en">Tech Talent Investment Program (TTIP)</a></div> <div class="field__item"><a href="/taxonomy/term/336" hreflang="en">Students</a></div> </div> </div> </div> </div> </div> Tue, 03 Dec 2024 16:48:51 +0000 Nathan Kahl 115026 at Mason Competitive Cyber scores multiple wins at CyberForge 2024  /news/2024-02/mason-competitive-cyber-scores-multiple-wins-cyberforge-2024 <span>Mason Competitive Cyber scores multiple wins at CyberForge 2024 </span> <span><span lang="" about="/user/326" typeof="schema:Person" property="schema:name" datatype="" xml:lang="">Martha Bushong</span></span> <span>Wed, 02/14/2024 - 12:50</span> <div class="layout layout--gmu layout--twocol-section layout--twocol-section--30-70"> <div class="layout__region region-first"> <div data-block-plugin-id="field_block:node:news_release:field_associated_people" class="block block-layout-builder block-field-blocknodenews-releasefield-associated-people"> <h2>In This Story</h2> <div class="field field--name-field-associated-people field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">People Mentioned in This Story</div> <div class="field__items"> <div class="field__item"><a href="/profiles/pcosta" hreflang="und">Paulo Costa</a></div> </div> </div> </div> </div> <div class="layout__region region-second"> <div data-block-plugin-id="field_block:node:news_release:body" class="block block-layout-builder block-field-blocknodenews-releasebody"> <div class="field field--name-body field--type-text-with-summary field--label-visually_hidden"> <div class="field__label visually-hidden">Body</div> <div class="field__item"><p><span class="intro-text">The AV team Mason Competitive Cyber scored first, second, and fourth place at the <a href="https://cyberforge.cvcsa-cyber.org/">Cyberforge 2024</a> competition held on February 11-12. During the two-day conference students heard from industry professionals and enhanced their cyberskills by competing in the Capture the Flag (CTF) competition. </span></p> <div class="align-right"> <div class="field field--name-image field--type-image field--label-hidden field__item"> <img src="/sites/g/files/yyqcgq291/files/styles/small_content_image/public/2024-02/masoncc_2024.png?itok=5hJvzoJx" width="350" height="350" alt="group shot from event" loading="lazy" typeof="foaf:Image" /></div> </div> <p>“Winning a Virginia-wide competition is pretty good news by itself,” said <a href="https://volgenau.gmu.edu/academics/cyber-security-engineering-department">Cyber Security Engineering Department</a> Chair <a href="https://volgenau.gmu.edu/profiles/pcosta">Paulo Costa</a>. “CyberForge is especially important due to the quality of the teams, the level of effort every team and associated organizations/universities put into it, and the impact it has in the Virginia cybersecurity space."</p> <p>Costa consider this one of the two most important competitions in the area. The other is Virginia Military Institute’s Cyber Fusion event happening later this month on February 23-24.</p> <p>The Cyberforge event featured companies such as MITRE, CCI, G2OPS, HAK5, CompTIA, Virginia Cyber Range, WiCyS, TCM Security, and more. The Mason students competed against top collegiate teams and industry professionals from around Virginia. Students value competitions as these events allow them to meet talented students and industry professionals outside their home institution. </p> <p>The team won multiple different prizes, including but not limited to Canakit raspberry pi 5 kits, CompTIA vouchers, and HAK5 gift cards, but they are most proud of the winner’s plaque, which they hope to display in the department’s office. </p> <p>The event was hosted by the <a href="https://www.cvcsa-cyber.org/" target="_blank">Coastal Virginia Cybersecurity Student Association (CVCSA),</a> Coastal Virginia Commonwealth Cyber Initiative (COVA CCI), and a local college/university's cybersecurity club. </p> </div> </div> </div> <div data-block-plugin-id="field_block:node:news_release:field_content_topics" class="block block-layout-builder block-field-blocknodenews-releasefield-content-topics"> <h2>Topics</h2> <div class="field field--name-field-content-topics field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">Topics</div> <div class="field__items"> <div class="field__item"><a href="/taxonomy/term/3056" hreflang="en">Cybersecurity</a></div> <div class="field__item"><a href="/taxonomy/term/6886" hreflang="en">Department of Cyber Security Engineering</a></div> <div class="field__item"><a href="/taxonomy/term/10431" hreflang="en">Mason Competitive Cyber</a></div> <div class="field__item"><a href="/taxonomy/term/336" hreflang="en">Students</a></div> <div class="field__item"><a href="/taxonomy/term/7171" hreflang="en">Tech Talent Investment Pipeline (TTIP)</a></div> <div class="field__item"><a href="/taxonomy/term/18541" hreflang="en">TTIP</a></div> <div class="field__item"><a href="/taxonomy/term/19491" hreflang="en">Tech Talent Investment Program</a></div> </div> </div> </div> </div> </div> Wed, 14 Feb 2024 17:50:37 +0000 Martha Bushong 110686 at Mason Competitive Cyber heads to national competition for the first time /news/2021-04/mason-competitive-cyber-heads-national-competition-first-time <span>Mason Competitive Cyber heads to national competition for the first time</span> <span><span lang="" typeof="schema:Person" property="schema:name" datatype="" xml:lang="">Anonymous (not verified)</span></span> <span>Tue, 04/13/2021 - 12:41</span> <div class="layout layout--gmu layout--twocol-section layout--twocol-section--30-70"> <div class="layout__region region-first"> </div> <div class="layout__region region-second"> <div data-block-plugin-id="field_block:node:news_release:body" class="block block-layout-builder block-field-blocknodenews-releasebody"> <div class="field field--name-body field--type-text-with-summary field--label-visually_hidden"> <div class="field__label visually-hidden">Body</div> <div class="field__item"><p>AV’s competitive cyber club is headed to the National Collegiate Cyber Defense Competition (NCCDC) after beating out intense competition in a nationwide wildcard round.  </p> <p>Mason Competitive Cyber is a team of undergraduate students from different majors who spend their free time competing in various cyber competitions. Last year, the team won the CyberFusion State Cup, where they competed against all the universities in Virginia.  </p> <p>This year is the first time the team has advanced to the NCCDC since their first appearance in 2019. “There are two general kinds of competitions: jeopardy and attack-defense. MCC has traditionally excelled in the Jeopardy competitions.  CCDC is an Attack-Defense competition.  In 2019, MasonCC competed in the Mid-Atlantic CCDC for the very first time.  That year we did not make it out of the qualifier round,” says Caleb Yu, vice president for the club.  </p> <p>After their initial loss, some team members weren’t sure if this was the competition for them. But they came back in 2020 and placed higher in their region. The nine regions of the country take the first-place winner from the regional competitions, and this year the team won second place for their region. </p> <p>“Since we won second, we qualified for a wildcard round.  We competed against the eight other second-place teams from the other regions.  Once again, only the first-place team advances to the national finals,” says Yu.  </p> <p>The MCC team pulled out the win, coming in first, with Stanford University’s team taking second. “Stanford got third place in the national competition last year.  When we noticed that they were also in the wildcard round, we knew that we'd have some fierce competition. It feels awesome to have advanced in place of a team that could have been seen as a heavy favorite,” he says.  </p> <p>The team will compete on April 23 through 25 against the top teams from across the country. “We are expecting some fierce competition from the other schools, but our confidence has never been higher,” says Yu.  </p> </div> </div> </div> <div data-block-plugin-id="field_block:node:news_release:field_content_topics" class="block block-layout-builder block-field-blocknodenews-releasefield-content-topics"> <h2>Topics</h2> <div class="field field--name-field-content-topics field--type-entity-reference field--label-visually_hidden"> <div class="field__label visually-hidden">Topics</div> <div class="field__items"> <div class="field__item"><a href="/taxonomy/term/10431" hreflang="en">Mason Competitive Cyber</a></div> <div class="field__item"><a href="/taxonomy/term/3056" hreflang="en">Cybersecurity</a></div> <div class="field__item"><a href="/taxonomy/term/7076" hreflang="en">Student news</a></div> <div class="field__item"><a href="/taxonomy/term/6836" hreflang="en">student organizations</a></div> </div> </div> </div> </div> </div> Tue, 13 Apr 2021 16:41:37 +0000 Anonymous 81551 at