The Charger Blog

University Captures Second Place in Leading Cybersecurity Competition, Prepares for International Finals

The New England regional of the Collegiate Penetration Testing Competition, hosted by the UniversityӰԭs Connecticut Institute of Technology, is part of an international program considered one of the Ӱԭpremier collegiate ethical hacking competitions,Ӱԭ attracting groups of cybersecurity students from some of the most prestigious programs across the globe.

January 6, 2022

By Meagan Cipollina, Contributing Writer


Group image of the members of the University of New HavenӰԭs team.
Members of the University of New HavenӰԭs team.

A team of seven University of New Haven students is going for gold Ӱԭ in the international finals of the , set to take place January 6 through 9. The group recently captured second place in the New England Regional Competition, hosted by the UniversityӰԭs Connecticut Institute of Technology (CIT).

The competition takes a deep dive into real-life cybersecurity problem solving, such as uncovering vulnerabilities of mock networks connected to real companies, determining the financial impact of those vulnerabilities, and writing an executive-level report detailing what they found.

The annual regional and global competitions bring together students with top marks from some of the most prestigious cybersecurity programs across the nation and around the world. In 2020, the New England regional competition was hosted virtually by CIT, and the Chargers captured third place. In 2019, the competition was held on campus and in-person.

Ibrahim Baggili, Ph.D., Elder Family Chair and director of the University's Connecticut Institute of Technology, highlighted the stiff competitive nature of the event, while also recognizing the effort the team puts in every year.

"Cybersecurity involves attacks and defenses, thus, it is competitive by nature,Ӱԭ he explains. ӰԭCompetitiveness is part of what we instill in our students. Our cyber teams always compete and work hard in order to beat teams from universities four and even eight times our size. Our progress in placing among the top teams constantly shows how hard our students work and their deep knowledge of the domain."

ӰԭIt is completely different to be able to apply those skills in a live environmentӰԭ

The UniversityӰԭs team is led by captain Samuel Zurowski Ӱԭ21 and co-captain Charles Barone Ӱԭ22, and includes Nicholas Dubois Ӱԭ24, Mathew Piscitelli Ӱԭ22 M.S, Robert Serafin Ӱԭ22 M.S., Alex Sitterer Ӱԭ24, and Tyler Thomas Ӱԭ22 M.S., and is advised by Mohamed Nassar, Ph.D., an assistant professor.

ӰԭSince I started coaching the hacking club team last spring, I noticed how skilled, determined, and autonomous the team members are,Ӱԭ said Dr. Nassar. ӰԭThey are strongly motivated and want to make a difference. They showed excellent discipline, organization, and time management skills during the regional competition.

ӰԭJust looking at their report, completely written in Latex, your impression would be that this is not a report written by students. One would expect it had been written by a major security advisory and consulting firm,Ӱԭ he continued.

Zurowski, a computer science major, explains the process.

ӰԭStudents act as security consultants for a mock company where we attempt to find as many vulnerabilities as possible,Ӱԭ he says, adding that the team is under a strict deadline. ӰԭThis year, the theme was a manufacturing company that produces croissants called .Ӱԭ

"We look at what we did well, what we can improve, and what was sufficient."Samuel Zurowski Ӱԭ21

The University of New HavenӰԭs team then tests the network of the company after a cyberattack. As the team members discover vulnerabilities, they detail the impact, what would be done to fix them, and, of course, how to fix and comply with cybersecurity efforts.

ӰԭThis report is meant for technical, C-suite level executives, and other management in a company,Ӱԭ adds Zurowski. ӰԭThis competition is meant to be as realistic as possible to provide students real-world experience in penetration testing.Ӱԭ

These tests are incredibly important in this current digital age, Zurowski points out, as Ӱԭapproximately 50 new vulnerabilities are reported each day,Ӱԭ making staying on top of network vulnerabilities an extremely difficult task for a company.

ӰԭBy regularly undertaking assessments it can help an organization understand its weaknesses, and help protect important assets, including customer data,Ӱԭ he said.

Meanwhile, the teamӰԭs co-captain, Barone, says the competition helps transition students interested in cybersecurity from the classroom setting to taking part in real-world applications with the skills they learned.

ӰԭIt is one thing for a professor to tell you that a vulnerability exists in an application or platform,Ӱԭ he said. ӰԭBut it is completely different to be able to apply those skills in a live environment.Ӱԭ

ӰԭHaving exceptional teammates is what makes it possible for us to place so wellӰԭ

As the team prepares for the international finals, which will take place at , the group is putting their hard work under the microscope. First up, is the report. Zurowski explains the report is the biggest part of the competition, and he and his teammates are reviewing the one they put together for regionals.

ӰԭWe look at what we did well, what we can improve, and what was sufficient,Ӱԭ he said.

They then dig into researching major security issues happening right now, as well as familiarizing themselves with different cybersecurity platforms so they can Ӱԭbreak intoӰԭ those mock networks.

Co-captain Barone reflected on the strengths of this yearӰԭs team and how they have been learning from mistakes and successes over the last three years of competitions.

ӰԭAlthough there is a shared skillset that is common among all the team members, each member of the team also brings their unique knowledge and experiences to the table,Ӱԭ he said. ӰԭIt is that combined shared experience that has allowed us to build team chemistry and communication.Ӱԭ

ӰԭThis competition requires immense organization, technical knowledge, and time management,Ӱԭ added Zurowski. ӰԭHaving exceptional teammates is what makes it possible for us to place so well.Ӱԭ

As part of the international competition, the team will be competing against top schools such as , , the Rochester Institute of Technology, and .

ӰԭI am very excited to accompany three team members who will be physically participating in the competition in Rochester,Ӱԭ adds Dr. Nassar. ӰԭOther team members will be participating remotely. As a coach, I canӰԭt be more proud of their performance, and I wish them all luck competing with teams from top universities in the United States and abroad.Ӱԭ