Dear Editor,
I WISH to congratulate a group of current and past members of the University of Guyana’s Cybersecurity Club on their recent participation in the OAS’s virtual International CyberEx 2021 Competition, which was held on June 30, 2021. The International CyberEx is an annual OAS/INCIBE initiative that seeks to strengthen technical abilities to respond to cyber incidents.
Guyana first participated remotely in an activity of this nature by invitation from OAS/CICTE in December 2014. “The Regional Cyber Games” was held virtually on the December 10, 2014 and was organised by the Colombian Cyber Emergency Response Team – colCERT. Guyana’s then very new National Computer Incident Response Team (I was the Head of Unit at that time), with Incident Handler Jason Plummer as captain, supported by Bhojnarine Hemchand and Aneal Giddings (then at the Ministry of Foreign Affairs), jumped at the opportunity to develop exposure to Capture the Flag cyber training exercises. The activity is as much a learning exercise as an opportunity to showcase skills.
With the dynamic duo ‘Jason and Bhoj’ both out of Guyana pursuing further studies in Canada, I had the pleasure this year of seeing four young Guyanese challenge themselves at the International CyberEx 2021 competition, where Guyana came in 36th out of 82 countries.
What is interesting about this effort is that all four members of the team nurtured their interests in Cybersecurity at the University of Guyana’s Cybersecurity Club (UGCC). Team captain, Mr. Cloyd London, is a former President of the UGCC for the academic year (2018-2019). Teekae Jordan is a founding member of the UGCC, which was established in 2017 and served as a dedicated vice-president every year until he graduated. Jason Jacobs is the current President of the UGCC and Wayne Force Jr. is the current vice-president of the club. This is the objective of the Department of Computer Science’s Clubs – to give opportunities to young, talented students to hone and sharpen skills and develop knowledge in special-interest areas.
Cloyd London, now a UG graduate, having learned that anyone can participate in the tournament from academia, public/private sector, National CSIRTS or NGOs, explained that he had difficulty finding colleagues who were willing to give the tournament a try. Team captain, Cloyd London. Cloyd is a long-standing Network Technician at GTT.
Failing to find professionals who had the skills and interest in cybersecurity, he turned to his old college buddies and then he said he was able to form the ‘Dream Team’: Cloyd London as captain, Teekae Jordan, Wayne Forde Jr and Jason Jacobs as the penetration and forensics researchers.
On June 30, the OAS launched the tournament with 12 challenges, 10 of which were on digital forensics, one on exploitation and one on analysis. The tournament lasted for eight hours and several OAS countries participated.
Guyana went into the tournament with high enthusiasm but only to realise they were not prepared for the kind of questions or tasks that were expected of them to execute, this being their first attempt at CyberEx. However, as Captain London explained, they quickly adjusted and strategised. They told themselves that they had to face 12 challenges and that they must be able to answer at least one challenge that is high on points and try to attempt the other challenges partially. The penetration tester on the team was current UGCC President and UG final-year student, Jason Jacobs, who encouraged everyone to look at one of the difficult questions and put their best foot forward. They did and were able to gather 500 points and be within the 44 countries that were able to answer a challenge successfully out of 82 countries and Guyana finished the tournament ranked 36th.
As academic adviser to the UGCC, I am proud of the efforts of these young men. They have over the years invested hours of their personal time and personal funds studying and developing their knowledge and skills in an area where Guyana (and the rest of the world) is desperately short of skills. I encouraged them to enter the tournament knowing quite well that they would come face to face with what they did not know, a valuable learning experience. Now, the team is energised to develop their knowledge in digital forensics.
As a nation we have a far way to go in terms of Cybersecurity Awareness Building and skills development and the individuals who participated in the CyberEx2021 are at the forefront of technical Cybersecurity knowledge and skills in Guyana today. While the same set of skills can be used to hack into networks for criminal purposes, UGCC members have their interests squarely in being ethical security practitioners, investing in themselves to protect and defend networks.
It is notable that the tournament was won by an academic CERT (Computer Emergency Response Team) from Argentina, CERTUNLP, the academic CSIRT of the National University of La Plata. Cloyd London, during his year as President of UGCC, with my full support, tried valiantly to form an academic CSIRT at the University of Guyana. The institution, at that time, did not have the environment to support such innovative thinking.
We need to do much more as a nation, to support the development of local talent in Guyana, especially in the area of Information technology which, while changing at a rapid pace, is the core enabler of every aspect of society, from social networks to academic, private and public-sector operations. As we have all seen with COVID-19 and the need to move online with alacrity, we are all dependent on information technology today. Along with the opportunities, ICTs also bring threats and responding to both opportunities and cyber threats demands agility in management and IT governance in all organisations today, including government agencies.
The only thing that is stopping the young people of Guyana from developing their cybersecurity skills is the quality of training that we provide to them, which is dependent upon the vision that we set for ourselves as a nation. I am thankful to the OAS/CICTE, an organisation that has over the years provided much technical assistance to Guyanese to develop Cybersecurity skills. This is not the first time that the OAS has provided opportunity for UGCC to learn more about Cybersecurity.
The club, under the leadership of Cloyd London, participated in the OAS Diplohack competition in Feb 2019, when they had the opportunity to visit the OAS HQ and engage with the best young minds in the Region working in cybersecurity governance. While the OAS is doing its part, our government’s efforts in National Cybersecurity Governance needs better leadership and that can only come from more political participation.
Guyana has already seen the passion that young University of Guyana students have shown for robotics and STEM in general. We really must be more strategic as a nation in our support to developing human resources for future development of the country. It is dreams that we must support. And dream teams. If we are out of touch with the heartbeat of the youth, we will continue to lose them.
Sincerely,
Sandra Khan
Lecturer, Department of Computer Science, University of Guyana