CyberPatriot


CyberPatriot is a national youth cyber education program for K-12 created in the United States to help direct students toward careers in cybersecurity or other computer science, technology, engineering, and mathematics disciplines. The program was created by the Air Force Association. It is a National Youth Cyber Defense Competition for high and middle school students, and features the annual in-person National Final Competition. It is similar to its collegiate counterpart, the Collegiate Cyber Defense Competition (CCDC). The AFA is also affiliated with distinctly branded sister competitions in US-allied countries, including Canada, formerly the UK, and Australia, but such teams may also be eligible to compete separately in the main CyberPatriot program.
CyberPatriot requires teams to assume the role of cybersecurity professionals, responsible for protecting various systems in a set amount of time. The competition consists of multiple online rounds in which teams analyze virtual machines, identify vulnerabilities, and implement security measures, answer forensics questions, and secure critical services. The Center for Infrastructure Assurance and Security (CIAS) is responsible for designing, developing, and supplying the technology and virtual machines used in CyberPatriot. The competition assesses participants' cybersecurity knowledge, problem-solving abilities, teamwork, and analytical thinking.
The National Youth Cyber Defense Competition is now in its eighteenth season and is called "CyberPatriot 18" indicating the season's competition. CyberPatriot 18 is accessible to high schools, middle schools, and accredited homeschooling programs across the United States. JROTC units of all Services, Civil Air Patrol squadrons, and Naval Sea Cadet Corps divisions may also participate in the competition. CyberPatriot also sponsors two additional initiative programs: Summer CyberCamps and an Elementary School Cyber Education Initiative. The Northrop Grumman Foundation is the "presenting sponsor". A British spin off program was called Cyber Centurion.

History

CyberPatriot began in 2009 as a proof-of-concept demonstration at AFA's Air Warfare Symposium in Orlando, Florida. Four organizations were responsible for developing the competition: the Air Force Association, the U.S. Air Force, the defense contractor SAIC, and the Center for Infrastructure Assurance and Security at The University of Texas at San Antonio. Eight high school teams from AFJROTC and Civil Air Patrol squadrons competed. The second phase of the program was limited to Air Force AFJROTC and Civil Air Patrol teams. Online training and qualification competitions were held during the fall of 2009 with nearly 200 teams from 44 states competing for eight slots in the first in-person National Finals Competition in February 2010, held in Orlando, Florida. The final phase of the developmental program, full national deployment, is now underway. Over 1,500 teams from all 50 states, Canada, and DoD Dependent schools overseas competed in CyberPatriot VI. CyberPatriot VII began in October 2014, with over 2,100 teams registered to compete. The Middle School Division was added in CyberPatriot V. CyberPatriot IX, which started in October 2016, featuring over 4,300 registered teams. The previous national commissioner who had served in that position since 2008, General Bernie Skoch, then the long-time National Commissioner, retired in June 2021, and has been replaced by Acting National Commissioner Rachel Zimmerman, who has served in other leadership roles prior to her term as commissioner.

Goals and objectives

CyberPatriot is open to high school and middle school students, offering educational opportunities and a pathway to cybersecurity careers. The program increases the awareness of cybersecurity by delivering a basic education in a competitive format that enhances leadership, communication, and cooperation skills among its competitors.

Team Composition

Teams have the following members:
  • Coach: An approved adult leader—such as a teacher, parent, or designated supervisor—who completes the team's registration and provides oversight throughout the competition period.
  • Verification Official: An administrator from the participating organization who is responsible for confirming the Coach’s eligibility and approval in accordance with program requirements.
  • Competitors: A group of two to six students, consisting of up to five primary competitors and one alternate, who participate in the competition and complete all assigned tasks.
  • Technical Mentor : A qualified adult volunteer who possesses technical expertise and supports the team’s preparation by offering guidance in cybersecurity concepts and competition-related skills.
  • Team Assistant : An individual who aids the Coach with administrative duties related to team management and logistics throughout the competition season.
Each team is required to have a registered Coach, a Verification Official, and registered Competitors. Coach registration begins in the late spring to allow preparation over the summer. The qualification rounds of the competition are completed online at the teams' home locations from September to early January.

Competition guidelines

The competition is a tournament structure with three divisions:
  1. Open High School Division: Open to all public, private, parochial, magnet, charter, home schools, and special groups such as CampFire, Boys & Girls Club, Boy Scouts, Church Youth Groups, Girl Scouts, etc.
  2. All-Service Division: Open to all JROTC Services, Civil Air Patrol squadrons, US Naval Sea Cadet Corps units. The registration fee is waived for teams competing in the All-Service Division
  3. Middle School Division: Open to all middle schools and junior high schools which follow the same common organizations as mentioned above in the Open High School Division.
The early rounds of the competition are done online during weekends via the Internet from teams' schools or other sponsoring organizations' facilities. Before the round, teams download virtual images of operating systems with known flaws or cybersecurity vulnerabilities. Each team is tasked to find the flaws while keeping specified computer functions, such as email, working. Team progress is recorded by a central CyberPatriot scoring system, known as the CyberPatriot Competition System.
The scores from Qualification Rounds 1 and 2 are totaled to determine which tier a team advances to.
  • Platinum: Top 30% of teams. Rounds include State, Semifinals, and National Finals.
  • Gold: Middle 40% of teams. Rounds include State and Semifinals.
  • Silver: Bottom 30% of teams. Rounds include State and Semifinals.
In the Semifinals round, only the top 25% of teams and state wild cards will be eligible to compete. Only teams in the Platinum tier are eligible for the National Finals.
In CyberPatriot XIII, only three rounds were held, with Round 1 delayed due to COVID-19 to allow coaches additional time for recruitment, according to announcements from the Air Force Association. Round 3 determined the National Finalists teams that year.
The Challenges that teams may face include:
  1. Network Security Challenge, in which teams fix vulnerabilities in "images" of Operating Systems that have been purposely tampered with, During Nationals, competitors also must protect the virtual machines (VMs) from "Red Team" which is a group of "hackers" that will exploit vulnerabilities on the competitor's machines. The Operating Systems in CP-XVII included: Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, Ubuntu 22, and Mint 21.
  2. Cisco Networking Challenge, in which teams show their knowledge about Cisco Packet Tracer, and take a Cisco quiz.
  3. CyberPatriot Web-Based Challenge, in which competitors compete in a CTF-like challenge. This challenge is currently only in the Semifinals Round.
  4. Boeing Cyber-Physical System Challenge, in which teams are presented with an operational system that tracks and maintains flight information. This challenge is currently only in the Semifinals Round.
Additional competition rules are outlined below:
  • The Qualification Competition begins as soon as this image is opened and ends 4 consecutive hours later, after which the score will be logged. Attempting to continue after the time limit will incur penalties. It is the coach's responsibility to ensure their team does not exceed the limit.
  • Only one instance of the image can be opened at any given time. Opening multiple instances of a virtual image will result in a penalty.
  • No person may compete on a team with which they are not registered, and may only be registered with one team per competition.
  • During the competition, no outside assistance may be given to or received from anyone.
  • No competitor may offer assistance to another after their round ends and the other begins.
  • No outside communication is allowed during the competition. This includes but is not limited to verbal, electronic, written or coded.
  • No offensive activity of any kind is permitted, including but not limited to hacking through programs or manual code injection, interfering with another team through social engineering, deception, and/or attaining the opposing machine.

National Finals Competition

The highest-scoring Semifinalist teams from each division, about 28 in total, are invited to participate in the in-person National Finals Competition. For example, typically the top 12 open division teams and top 3 middle school divisions qualify until a 2 team per organization limit rule was added in the 2020-2021 season. This is held annually in the spring, with all travel and lodging expenses covered by the program. For CyberPatriot IV-VII, National Finals Competitions were held at the Gaylord National Resort & Convention Center in National Harbor, Maryland in March. From the CyberPatriot VIII season through the CyberPatriot XI season, the National Finals Competitions moved to the Hyatt Regency Baltimore Inner Harbor in Baltimore, Maryland, and were held in April of each year. Beginning in the CyberPatriot XII season to CyberPatriot XVII, the National Finals Competition was held at the Bethesda North Marriott Hotel & Conference Center in Bethesda, Maryland outside of Washington, D.C., in March. However, the CyberPatriot XII In-Person National Finals Competition, the first year planned at the Bethesda North Marriott, was canceled due to the COVID-19 outbreak, and a virtual, in-home competition was held online in May, about two months after the originally scheduled in-person competition event. Currently, the competition is held in the Washington, D.C. Area. The CP-XII Virtual National Finals was held on May 2, 2020, and marked the first-ever online virtual CyberPatriot National Finals Competition. Due to the widespread outbreak of COVID-19, the CyberPatriot XIII season had modifications to accommodate the delay in team administration as well as provisions for additional procedures for competing at home. Due to continued COVID-19 restrictions in the United States, provisions were made to allow remote participation in the competition, and the National Finals that season, in 2021, was also held virtually, in which competitions competed fully remotely online.
Winning teams in the Open and All-Service Divisions receive educational grants, which can be applied to an institution of their choosing. First place teams earn $2,000 per competitor, second place teams earn $1,500 per competitor, and third place earns $1,000 per competitor. The scholarship money is provided by the Northrop Grumman Foundation. In CyberPatriot VII, for first, second, and third place, an additional $2,000, $1,500, and $1,000 were awarded to the teams, respectively, by the National Security Agency

List of CyberPatriot National Champions

YearSeasonTeam nameSchool/OrganizationCityCoachTeam MembersRefs
2009CyberPatriot ITeam Spaatz[Osceola Secondary school|High School (Kissimmee, Florida)|Osceola High School] Kissimmee, FLMajor Jeffrey A. MillerCadets Linval Overdiep, Gretchen Rivera, Jacob Caudill, Joseph Delhoyo, Rick Hamilton, Madiha Majeed, Kiara Vazquez, John Borrero
2010CyberPatriot IIAFJROTC Team Doolittle Clearfield High School Clearfield, UTKit K. WorkmanRobert Estrada Jr., Adam Thurman, T.J. Boender, Jorge Lerma, Eric Takacs
2011CyberPatriot IIITeam WilsonOrlando Cadet Squadron Orlando, FLNina HardingC/SMSgt. Matt Allen, C/1st Lt. Josh Dovi, C/SMSgt. Evan Hamrick, C/SSgt. Isaac Harding, C/TSgt. Michael Hudson, C/2nd Lt. Shawn Wilson
2012CyberPatriot IVWolfpackColorado Springs Cadet SquadronColorado Springs, COCapt. Bill BlatchleyCarlin Idle, Kyal Lanum, Christopher Ottesen, John Parish, Stephen Parish, Chris Vasquez
2013CyberPatriot VMarine Military AcademyMarine Military AcademyHarlingen, TXWilliam BeckmanDylan Che, Drew Hopkins, Daniil Murashov, Jose Rodriguez, Kyle Rogers
2014CyberPatriot VIFearsome FalconsClearfield High School / UT-081Clearfield, UTKit WorkmanJohn Maxfield, Kincaid Savoie, Drex Beckman, Zach Sharkey, Shay Perkins, Nate Bertoldie
2015CyberPatriot VIIMarine RaidersMontachusett Regional Vocational Technical SchoolFitchburg, MAPaul JornetConner Quick, Jack Marabello, Jamison LeRoche, Leon Gaulin, Nicholas Sullivan
2016CyberPatriot VIIINetrunnersCenturion BattalionWinter Park, FLKen SteffeyJacob Dawson, Nolen Johnson, Leilani Morales, Sam Precourt, Peter Steffey, Monica Vogel
2017CyberPatriot IXWolfpackColorado Springs Cadet SquadronColorado Springs, COBill BlatchleyNoah Bowe, Taylor Coffey, Zach Cramer, Garrett Jackson, Isaac Stone
2018CyberPatriot XCyber Warriors 0Troy High School Fullerton, CAAllen StubblefieldCharissa Kim, Nicole Wong, David Lee, Brandon Shin, Ha Young Kong, Silas Shen
2019CyberPatriot XIByte Sized FalconsScripps Ranch HS San Diego, CAMaster Sergeant Ferdinand ToledoShane Donahue, Evan Dicker, Valerie Ho, Brandon Nguyen, Alex Roh
2020CyberPatriot XIITXPatriot | chmod 755 -r /srv/ftp/Anime/Roosevelt High School San Antonio, TXJosh BeckFardeen Bhimani, Frieda Farias, Tristan Lee, Harrison Lewis, Jacob Rahimi
2021CyberPatriot XIIIRuntime TerrorTroy High School Fullerton, CAJohn-Michael LinaresTaiyu Chen, Chan Chung, Justin Huang, Brian Ni, Johnny Ni, Anna Wu
2022CyberPatriot XIVThe Terabyte FalconsScripps Ranch HS San Diego, CAFerdinand ToledoSaatvik Aggarwal, Jake Lee, Leopold Li, Nathan Min, Mikella Nuzen
2023CyberPatriot XVRuntime TerrorTroy High School Fullerton, CAJohn-Michael LinaresBrian Ni, Chan Chung, Johnny Ni, Aaron Shan, Anna Wu, Victoria Yang
2024CyberPatriot XVIW.A.T.T.Troy High School Fullerton, CAAllen StubblefieldMichael Xiong, Jacky Feng, Alex Wang, Craig Wu, Liwei Xia, Jacob Yu
2025CyberPatriot XVIITerabyte FalconsScripps Ranch High School San Diego, CAMark McLouthAudrey Li, Veer Chopra, Aarav Maheshwari, Rithvik Manikandan, Arush Sastry, Delbert Tran

YearSeasonTeam nameSchool/OrganizationCityCoachTeam MembersRefs
2009CyberPatriot IN/AN/AN/AN/AN/AN/A
2010CyberPatriot IIN/AN/AN/AN/AN/AN/A
2011CyberPatriot IIITeam MantrapRed Bank Regional High SchoolLittle Silver, NJAmanda “Mandy” GalanteChris Barry, Adam Cotenoff, Josh Eddy, Jared Katzman, Jack Kelleher, Colin Mahns
2012CyberPatriot IVAlamo AcademiesAlamo AcademiesSan Antonio, TXMike MatuszekTheodore Belitsos II, Kenny Bias, Brian Carvan, Robert Flores, Mario Puente III, Tommy Roberts
2013CyberPatriot VChantilly AcademyChantilly AcademyChantilly, VAJoan OzdoganAnirudh Bagde, Weyland Chiang, Chris Kim, Brian Nguyen, Timothy A. Rothschild
2014CyberPatriot VIAzureNorth Hollywood High SchoolNorth Hollywood, CAJay GehringerTravis Raser, Jake King, Issac Kim, Henry Birge-Lee, Isaac Kim
2015CyberPatriot VIICyberSlothsGrissom High SchoolHuntsville, ALChris SuttonJames Brahm, Morgan Wagner, Jeramy Lochner, Matthew Rogers, Michelle Driessnack, Christopher Lin
2016CyberPatriot VIIITeam SudoSummit Technology AcademyLee's Summit, MOLisa OylerJack Bliss, Zane Brown, Christian Durst, Isaac McGee, Justin Nitz, Tyler Waits
2017CyberPatriot IXTogoNorth Hollywood High SchoolNorth Hollywood, CAJay GehringerAled Cuda, Kyle Gusdorf, Jonathan Liu, Jaren Mendelsohn, Nikola Pratte
2018CyberPatriot XTogoNorth Hollywood High SchoolNorth Hollywood, CAJay GehringerJonathan Liu, Aled Cuda, Nikola Pratte, Kyle Gusdorf, Jaren Mendelsohn, Sophia Hewitt
2019CyberPatriot XITroy Tech SupportTroy High SchoolFullerton, CAAllen StubblefieldChristo Bakis, Clement Chan, Timothy Kim, Jimmy Li, Rahil Shah, Joseph Xu
2020CyberPatriot XIICyberAegis Strange Quark IIDel Norte High SchoolSan Diego, CAPaul JohnsonEric Chen, Phoenix Dimagiba, Lucy Gao, Darshan Parekh, Pranav Patil, Andrew Wang
2021CyberPatriot XIIICyberAegis CobaltDel Norte High SchoolSan Diego, CAPaul JohnsonRohan Juneja, Akshay Rohatgi, Tanay Shah, Safin Singh, Ellen Xu, Alvin Zheng
2022CyberPatriot XIVCyberAegis FlashpointDel Norte High SchoolSan Diego, CAPaul JohnsonRohan Juneja, Akshay Rohatgi, Tanay Shah, Safin Singh, Ethan Zhao, Alvin Zheng
2023CyberPatriot XVCyberAegis TempestDel Norte High SchoolSan Diego, CAPaul JohnsonAkshay Rohatgi, Alex Jiang, Rohan Juneja, Safin Singh, Ethan Zhao, Alvin Zheng
2024CyberPatriot XVIHalf DomeFranklin High SchoolElk Grove, CAChris ShupingPratham Rangwala, Eriko Akanuma, Joshua Fong, Ethan Ho, Matthew Ho, Priyam Rangwala
2025CyberPatriot XVIICyberAegis PhoenixScouting America Exploring Post 2928San Diego, CAPaul JohnsonEthan Zhao, Srijan Atti, Will Cheng, Advik Garg, Yash Parikh, Virginia Zhu