King of the Hill: A Novel Cybersecurity Competition for Teaching Penetration Testing

Honors and Awards • NCWIT (National Center for Women & Information Technology) Undergraduate Research Mentoring Award, 2020. • NSF CAREER Award, 2020. • IRTF Applied Networking Research Prize (ANRP) for Understanding the Role of Registrars in DNSSEC Deployment, 2019 • Dean’s Award for Excellence in Teaching, College of Computer, Mathematical, and Natural Sciences, 2018 • IEEE Cybersecurity Award for Innovation 2017, for CRLite: A Scalable System for Pushing All TLS Revocations to All Browsers • Distinguished paper award, USENIX Security 2017, for A Longitudinal, End-to-End View of the DNSSEC Ecosystem • Reviewer award, SIGCOMM 2012 • Best paper, USENIX NSDI 2009, for TrInc: Small Trusted Hardware for Large Distributed Systems • Best presentation, Computer Science track of UMD Graduate Research Interaction Day, 2009 • Microsoft Live Labs fellowship, awarded 2008 • Dean’s fellowship for excellence in research, Computer Science Dept., Univ. of Maryland, 2006 • Outstanding undergraduate computer science teaching assistant award, Univ. of Maryland, 2002

[1]  David Brumley,et al.  PicoCTF: A Game-Based Computer Security Competition for High School Students , 2014, 3GSE.

[2]  Bobby Bhattacharjee,et al.  Motivating participation in internet routing overlays , 2008, NetEcon '08.

[3]  Gianluca Stringhini,et al.  Hit 'em where it hurts: a live security exercise on cyber situational awareness , 2011, ACSAC '11.

[4]  Lance J. Hoffman,et al.  Exploring a national cybersecurity exercise for universities , 2005, IEEE Security & Privacy Magazine.

[5]  Andrew Ruef,et al.  Build It, Break It, Fix It: Contesting Secure Development , 2016, CCS.

[6]  Gregory J. Conti,et al.  Hacking Competitions and Their Untapped Potential for Security Education , 2011, IEEE Security & Privacy.

[7]  Chris Eagle.  Computer Security Competitions: Expanding Educational Outcomes , 2013, IEEE Security & Privacy.

[8]  Amy B. Woszczynski,et al.  Learning Outcomes for Cyber Defense Competitions , 2017, J. Inf. Syst. Educ..

[9]  Giovanni Vigna,et al.  Organizing Large Scale Hacking Competitions , 2010, DIMVA.

[10]  Wm. Arthur Conklin.  Cyber Defense Competitions and Information Security Education: An Active Learning Solution for a Capstone Course , 2006, Proceedings of the 39th Annual Hawaii International Conference on System Sciences (HICSS'06).

[11]  Ram Dantu,et al.  Experiences During a Collegiate Cyber Defense Competition , 2010 .

[12]  Andrew Ruef,et al.  Build it break it: measuring and comparing development security , 2015 .

[13]  Bobby Bhattacharjee,et al.  Boycotting and Extorting Nodes in an Internetwork , 2007 .