U . S . N AVA L A C A D E M Y A L U M N I A S S O C I AT I O N A N D F O U N D AT I O N
2021–2022 IMPACT REPORT:
CENTER FOR CYBER SECURITY STUDIES
LETTER FROM THE DIRECTOR The mission of the Center for Cyber Security Studies (CCSS) is to enhance the education of midshipmen in all areas of cyber warfare, to facilitate the sharing of expertise and perspectives in cyber warfare from across the Yard, to provide a streamlined means of identifying priorities, to enhance inter-disciplinary research in cyber warfare, and to disseminate information, harmonize efforts and shape a common framework for cyber warfare related efforts at USNA. Over the past year the Center has seen numerous major achievements by and experiences for our midshipmen and faculty. USNA’s Cyber Security Team (CST) won the SANS NetWars Academy Cup Championship, a unique event tailored exclusively to cadets and midshipmen at the U.S. Service Academies. The CCSS also led Language, Regional Expertise and Culture (LREC) Trips to seven countries for various professional development and cultural immersion experiences with a focus on cyber education and training. In addition, thirty-three midshipmen participated in summer internships in 2022 with organizations such ASRC Federal, AT&T, BAE Systems, Booz Allen Hamilton (CIRT), General Electric (GE) Aviation, Institute for Defense Analysis (IDA), Johns Hopkins University Applied Physics Laboratory, Lockheed Martin Corp (LMC, Microsoft Corporation, T Rowe Price (TRP), NSA, and more. The Cyber Lecture Series continues to attract excellent speakers on current cyber-related topics with an audience of over 2,000 midshipmen, faculty, staff and external guests. Over the course of the academic year, the CCSS had three faculty members receive Navy Commendations for Meritorious Service Medals. The Center was also able to bestow seven Cyber Operations majors with awards ranging from graduate scholarships to academic excellence awards for their leadership in the cyber operations major throughout their time at USNA. Looking forward, as the CCSS continues to grow, we would like to capitalize on our past success by continuing to support the margin of excellence that we have provided thus far. We are regularly looking for opportunities to support Women in Computing and Cybersecurity (WiCC) activities, engagements with recognized cybersecurity experts (both government and otherwise), vendor training for faculty and midshipmen, and classified education and research facility upgrades. Please enjoy reading more about the continued growth of our cyber studies program and the areas in which our midshipmen and faculty excel. Your continued generous support allows us to maintain the Center’s mission of enhancing education in all areas of cyber warfare, creating opportunities to share cyber expertise and increasing the interdisciplinary research at the United States Naval Academy. On behalf of the Center for Cyber Security Studies, thank you for your dedicated support and interest in our program. Sincerely,
Captain Paul Tortora ’89, USN (Ret.)
Director, Center for Cyber Security Studies United States Naval Academy
— 2 —
CENTER FOR CYBER SECURITY STUDIES
CENTER FOR CYBER SECURITY STUDIES CONFERENCES AND COMPETITIONS
SPECIAL EVENTS The CCSS provided support to the Women in Cybersecurity and Computing dinner, which hosted
SANS NETWARS ACADEMY CUP CHAMPIONSHIP
Ms. Carmen Marsh as the guest speaker.
USNA’s Cyber Security Team (CST) won the SANS NetWars Academy Cup Championship that took place 17–18 March. The annual SANS NetWars Academy Cup
IMPACT STATEMENTS:
Championship is a unique event tailored exclusively to cadets and midshipmen at the U.S. Service Academies
“The Cyber Major and CCSS have not only enabled,
(USMA, USAFA, USNA, USCGA). Eight midshipmen
but encouraged me to be a calm, confident and
and one faculty member spent their Spring Break
intentional student and junior officer. Through the
representing USNA with their elite cyber skills and
example of invested professors in the classroom,
brought home the win.
meaningful internships, international exposure, briefing practice and opportunities to teach peers and
INTERNSHIPS
underclass, the Cyber Major and CCSS have given me
Thirty-three midshipmen participated in the following
the greater USMC team.”
the platform and tools to be an effective member of
2022 summer internships. Below are the sponsors and
–2NDLT LUCY ACKERMAN ’22
the number of midshipmen who participated in each of the internships. •
ASRC Federal, Moorestown, NJ: 2 MIDN
•
AT&T, Leesburg, VA: 2 MIDN
•
BAE Systems, Nashua, NH: 5 MIDN
•
Booz Allen Hamilton (CIRT), Annapolis Junction, MD: 3 MIDN
•
General Electric (GE) Aviation, West Chester, OH: 2 MIDN
•
Institute for Defense Analysis (IDA), Alexandria, VA: 3 MIDN
•
Johns Hopkins University Applied Physics Laboratory, Laurel, MD: 11 MIDN
•
Lockheed Martin Corp (LMC), Moorestown, NJ: 1 MIDN
•
Microsoft Corporation, Redmond, WA: 2 MIDN
•
T Rowe Price (TRP), Owings Mills, MD: 2 MIDN
The following NSA Internship Programs took place in 2022: •
National Security Agency Fort Meade: 36 MIDN
•
Marine Corps Forces Cyberspace Command: 30 MIDN
USNA’s CST at the SANS NetWars Academy Cup Championship
—3 —
2021–2022 IMPACT REPORT
LANGUAGE, REGIONAL EXPERTISE AND CULTURE (LREC) TRIPS
(CCB), and Rhea Group the group was able to learn about
BULGARIA AND BELGIUM
Culturally, the group hiked along the Seven Rila Lakes and
Belgium’s approach to cyber.
visited the Rila Monastery while in Bulgaria. In Belgium,
In July and August 2022, CDR Phil Starcovic, USN, led a
the group took a day trip to Bruges. These trips provided
group of eight midshipmen on an LREC trip to Bulgaria
cultural context to what was learned during the various
and Belgium. The midshipmen had the opportunity
cyber visits.
to learn about how Bulgaria and Belgium approach cyber operations within academia, the military and the
IMPACT STATEMENTS:
government. The group received briefs on Bulgarian cyberspace capabilities at the Bulgarian Defence Institute, National Laboratory of Computer Virology (Bulgarian
“At the Pentagon I was privy to incoming cyber
Academy of Science) and the Bulgarian Cyber Command.
attacks and got to see firsthand what our nation
Additionally, the group was able to visit the cyber spaces
defends against on a daily basis. In Israel, myself and
at Nikola Vaptsarov Naval Academy in Varna, Bulgaria.
other Midshipmen got to see how our allies enforce cyber security as well as being cultured and shown a
While in Belgium, the group visited NATO Headquarters
beautiful nation. I could not be more thankful for the
and Supreme Headquarters Allied Powers Europe in order
experiences I got as a Midshipmen thanks to the
to get an understanding of the part the United States plays
Cyber Science Department and Center for Cyber
in relation to the rest of NATO. While at the Belgian Royal
Security Studies.”
Military Academy, Centre for Cyber Security Belgium
–ENS JACK CALLAHAN ’22
Neuschwanstein Castle—Bavaria, Germany
— 4 —
CENTER FOR CYBER SECURITY STUDIES
ESTONIA
The second stop on the LREC was to the NATO George C.
CYBER EUROPE—ESTONIA
in Garmisch, Germany. This experience was focused
Marshall Center for European Security Studies (GCMC) on participating in a portion of the Seminar in Irregular
CAPT Paul J. Tortora ’89, USN (Ret.), CAPT James
Warfare and Hybrid Threats (SIWHT), which is a senior
Caroland, USN, and LCDR Patrick Yarcusko ’12, USN, led
defense official-level conference. The midshipmen were
a group of eight midshipmen on an LREC trip to three
able to listen to several speakers including experts from
European countries. The midshipmen attended CyCon
across NATO partner and friendly nations. Topics of the
2022: Keep Moving from 31 May–03 June in Tallinn,
Seminar included Russian Economic Coercion, NATO
Estonia. This annual International Conference on Cyber
Cyber Policy and Chinese Influence in NATO. Part of
Conflict, the keynote conference of the LREC, addresses
the program at GCMC also involved participating in
the most relevant issues concerning the cyber defense
breakout sessions in which the midshipmen had tailored
community and has become a community building event
seminars on cyber policy in irregular warfare. These
for cyber security professionals who practice the highest
sessions included several U.S. and NATO military officers
standards of academic research. The four-day conference
discussing insider threats, disinformation and cyber policy
consisted of senior speakers from across NATO. Each
in the Black Sea. The culminating event for the group was
presentation provided various outlooks from both military
a workshop session with a panelist of civilian and military
and private sector leaders on key cyber security issues
leaders, including a one-star Pakistani general, trying to
that NATO countries are facing. The conference also
answer the question of how NATO can use cyber policy
consisted of several breakout and workshop sessions
to address current problems in the South China Sea and
where the midshipmen cooperated with military and
beyond.
private-sector leaders on the most pressing cyber security issues that NATO faces.
Bronze Soldier memorial—Tallinn, Estonia
—5 —
2021–2022 IMPACT REPORT
The final stop of the LREC was to Greece, in which two
on disinformation, biometrics, NATO cyber policy and
locations were visited. The first location was Piraeus,
maritime communications all with a VBSS focus. During
the main port of Athens and location of the Hellenic
the biometrics course, the midshipmen received training
Naval Academy (HNA). This visit to HNA consisted of
on the use of state-of-the-art NATO biometrics hardware
midshipmen being greeted by the HNA Superintendent
to show the challenges of both identifying and verifying
and then receiving a tour of the Academy grounds and
individuals at sea. The midshipmen also participated in
museum from several Greek Naval Cadets. A particularly
a tactical-sweep exercise on one of NMIOTC’s training
enjoyable experience was to join the cadets for their noon
vessels, Ares, in Souda Bay in which sailors from the
meal formation and participate in noon meal with their
Hellenic Navy Seals instructed the midshipmen in a hands-
cadet regiment. The group then received a presentation
on walk-through of how to board a contested vessel.
on how each Academy views cyber education with a workshop on what each group can learn from each other’s
Throughout the trip, the midshipmen also engaged in
approach. The midshipmen then visited the Hellenic
several cultural, military and historical activities including,
Navy’s firefighting and damage control facilities in order
but not limited to a visit to the Tallinn Military Cemetery,
to get a larger picture view of how the Hellenic Navy
PT in the German Alps and a tour of the Acropolis of
operates. The second engagement in Greece was to the
Athens guided by Hellenic Naval Academy Midshipmen.
NATO Maritime Interdiction Operations Training Center (NMIOTC) in Souda Bay, Crete. NMIOTC specializes as
ENGLAND
the NATO center of excellence on Maritime Interdiction
CAPT Paul Tortora and LCDR Joseph Hatfield, USN,
Operations (MIO) and Visit Board Search and Seizure
Ph.D. led a group of seven midshipmen on an LREC trip
(VBSS) and works in certifying Fifth and Sixth Fleet Units
to England, visiting London, Portsmouth, Bletchley Park
and several NATO Special Operations Units in VBSS
and Cambridge. The midshipmen heard from some of
operations. The purpose of the visit to NMIOTC was a
the foremost leaders and experts from government,
two-day course focusing on cyber security in the maritime
intelligence, military, academia and commercial cyber
domain, specifically while engaging in VBSS and MIO.
sectors. The group attended site visits and briefs with
The midshipmen were able to participate in seminars
Presenting USNA Cyber Program to Hellenic Naval Academy (HNA)—Greece
— 6 —
CENTER FOR CYBER SECURITY STUDIES
the Ministry of Defense (MOD), the Government
the crowded street markets in Jaffa and Haifa and taking
Communications Headquarters (GCHQ) and the U.K.’s
in historic religious sites in Nazareth at the Church of the
National Cyber Security Centre, the Portsmouth Naval
Holy Sepulchre, Western Wall and Temple Mount, the trip
base and the Prince of Wales. Visits to historical and
was a special opportunity for the midshipmen. A unique
cultural sites were also included, ranging from the Imperial
experience, and must-do for any trip to Israel, was to cover
War Museum, the Victory and the Cambridge University
themselves in mud and float in the Dead Sea!
historical library. While at the Cambridge American Cemetery, the midshipmen were given the distinct honor of
On a more professional development note, industry
lowering the flag at the end of the day.
engagement with Check Point Software Technologies, headquartered in Tel Aviv, Israel, provided business insights as well as real-world cyber threats and analysis
ISRAEL
of top Threat Actors and Indicators of Compromise for
The 2022 Cyber Language, Regional Expertise and
current and future trends. Engagement with senior-level
Culture (LREC) trip to Israel hosted seven midshipmen,
managers at Check Point gave midshipmen an opportunity
ranging from rising youngsters to firsties, for three
to apply the knowledge and critical thinking attained in
weeks over summer training block two. With home-base
courses across the Cyber Operations major and provided
established at Tel Aviv University, the midshipmen were
a brief insight into challenges that corporate executives
able to complete a one-credit course in National Israel
and cybersecurity leaders face when deciding to leverage
Cybersecurity Strategy and several day trips that included
cybersecurity technologies and cyber threat intelligence
UNESCO World Heritage sites at Masada National Park,
solutions provided by Check Point. Later in the trip, a rare
White City of Tel Aviv and Bahá’i Holy Places in Haifa.
opportunity was provided at the Israel Naval Academy
Food, delicacies, markets, coffees, beaches, arts and tours
to engage with Israeli naval cadets, with the two groups
that included camel rides were just some of the cultural
sharing stories about the differences in life in Annapolis and
experiences that will result in memories that will last
life in Haifa, experiences with the service selection process,
a lifetime. From structured experiences at the Tel Aviv
and a tour of the facilities with an insider perspective in
Museum of Art and ANU History & Culture Museum to
various training programs the cadets undergo.
Midshipmen participate in a tour and presentation of Israeli cyber company Check Point—Tel Aviv, Israel
—7 —
2021–2022 IMPACT REPORT
CYBER LECTURE SERIES •
VADM ROSS MYERS (Commander of Fleet Cyber Command and U.S. Tenth Fleet), 6 OCT 2021
•
MAJGEN MATTHEW G. GLAVY ’86, USMC (Deputy Commandant for Information), 16 OCT 2021
•
LTGEN MICHAEL GROEN (Director, Joint Artificial Intelligence Center), 22 MAR 2022
Voluntary Graduate Education Program (VGEP) Scholars: •
ENS ADELINE GEOGHAGAN ’22, USN: Johns Hopkins University, M.S. in Cybersecurity
•
2NDLT DYLAN LARKIN ’22, USMC: Johns Hopkins University, M.S. in Cybersecurity
2022 CAPSTONE PROJECTS The 98 cyber majors in the Class of 2022 worked in small teams to complete a total of 29 projects. Midshipmen
CENTER FOR CYBER SECURITY STUDIES AWARDS
presented their projects on Capstone Day in spring 2022 on 4 May 2002, which took place in Alumni Hall as a normal event post COVID. The capstone projects reflected
FACULTY/STAFF AWARDS
the interdisciplinary nature of the major, ranging from policy to technical to the social sciences in order to solve
Navy Commendations: •
LCDR JAY SNELL, USNR—Meritorious Service Medal
•
LCDR ANDREW SLACK, USN—Meritorious Service Medal
•
real-world problems. The following projects represent the Cyber Operations majors. Further project descriptions are in the Capstone Day program linked HERE.
MAJ DAVID SERRANO, USMC—Meritorious Service Medal
AY22 PROJECTS
MIDSHIPMAN AWARDS •
•
Dr. J. Phillip London, Class of 1959 Cyber Security Studies Award: 2NDLT LUCY ACKERMAN ’22, USMC Class of 1966 Cyber Operations Excellence Award: ENS MATTHEW CEH ’22, USN
Immediate Graduate Education Program (IGEP) Selectees: •
•
•
ENS CHASE LEE ’22, USN: Knight-Hennessy Scholarship, Stanford University, M.S. International Policy ENS BRENTON PIEPER ’22, USN: Lincoln Laboratory Fellowship, Massachusetts Institute of Technology, M.S. in Information Technology Strategy ENS HANNAH PRINCE ’22, USN: Rotary Global Grant, University Of Cambridge, Mphil in Politics and International Studies
•
— 8 —
•
Pattern-of-life Analysis and Deviations for Bluetooth and Bluetooth Low Energy Devices
•
Automated Static Binary Analysis with Multi-Label Classification
•
Vulnerability Analysis of Modern Satellite Design
•
Variable IOT Interaction Tool
•
USNA ICS Cybersecurity
•
Twitter’s Effect on the U.S. Stock Market and Illegal Price Manipulation of Cryptocurrency
•
Tracking Pyongyang
•
The Visualization of Ransomware
•
The Rise of Ransomware: Utilizing Emerging Capabilities to Accomplish Known Endstates
•
The Impact of Relative Authority on Phishing Emails
•
Social Engineering Template Analysis
•
Side-Channel Analysis Applications in Zero-Trust Cybersecurity
CENTER FOR CYBER SECURITY STUDIES
•
Red Team Handbook for Chinese Cyber Operations
•
Vulnerabilities of Near-Field Communication Technology
•
Mapping the Military’s Cyber Pipelines
•
Mapping the Cyber Training Pipeline
midshipmen to officer. During the academic year,
•
Liaison of Public-Private Partnerships—Financial (LPPP-F) Model
the cyber curriculum challenged and exposed me to
•
Implementing Augmented Reality in the Modern Battlefield
•
Domestic Terrorist Outlinking from Twitter
•
Cybersecurity Awareness Among Midshipmen at the United States Naval Academy
the cyber major was my network of peers, the smartest
•
Cyber Warfare Training Platform
be cyber majors, as well as my friends. My fondest
•
Cyber Network Awareness
•
Comparing Twitter Sentiment and COVID-19 Vaccination
•
Can Race and Socioeconomic Status Make You More Vulnerable to Social Engineering Attacks?
got to see firsthand what our nation defends against
•
Application of Blockchain Technology for Electronic Voting
got to see how our allies enforce cyber security as well
•
Analysis of the Cyber Operations Major at USNA
not be more thankful for the experiences I got as a
•
Alexa, Execute the Dolphin Attack
and Center for Cyber Security Studies.”
IMPACT STATEMENTS: “The Cyber Operations Major and CCSS have been foundational in shaping my transition from
material that changed my way of thinking about our world. I did not take as naturally to the material as others, yet my professors were always very willing to help, and the initial struggle has made me a better student and person. My greatest strength I took from and hardest working midshipmen I met happened to memories of cyber have come during the summertime. I was granted two amazing opportunities: an internship at the Pentagon, and an LREC to Israel. At the Pentagon I was privy to incoming cyber attacks and on a daily basis. In Israel, myself and other midshipmen as being cultured and shown a beautiful nation. I could midshipmen thanks to the Cyber Science Department –ENS JACK CALLAHAN ’22
Vulnerabilities of Near-Field Communications Technology—2022 Capstone Day
—9 —
2021–2022 IMPACT REPORT
CCSS BUILDINGS As COVID restrictions decrease and travel occurs more frequently, CCSS has had many foreign and U.S. visitors to Hopper Hall to see the state-of-the-art facility and
•
Argentinian Naval Academy Superintendent
•
Australian Delegation
•
Dr. Jennifer London
We are continuing to identify areas for upgrade including
understand how USNA approaches cyber education.
the auditorium and the Lakefield Laboratory in the Keyser
Notable visitors were:
Classified Education and Research Facility, the Class
•
French Naval Attaché
•
NSA’s Cyber Security Directorate
•
Italian Naval Academy Superintendent
•
Israeli Defense Attaché and Israeli Naval Academy Superintendent
Many of these spaces are being used as offsite locations,
•
Commander of Japanese Maritime Self Defense Forces Command Staff College
get exposure to some of the highest levels of government.
•
Bulgarian Naval Academy Superintendent
of 1962 Cyber Science War Room and the Volgenau Conference Center.
which is providing a unique opportunity for midshipmen to
Hopper Hall—U.S. Naval Academy
THANK YOU Thank you for your support of the Naval Academy’s Center for Cyber Security Studies. The midshipmen, faculty and staff of the CCSS benefit from the philanthropy that make these experiences and research possible. Your contributions bring transformative opportunities to the Yard and help the Naval Academy be a leading institution in Cyber Security education.
— 10 —