Queens College Shines in Cybersecurity Competition: A Second Place Victory
Queens College (QC) has once again demonstrated its prowess in the field of cybersecurity by securing a commendable second place in the Information Systems Audit and Control Association’s (ISACA) 2024 Cybersecurity Case Study Competition. This achievement marks the second time QC has placed in the top three of this prestigious competition, solidifying its reputation as a leading institution in cybersecurity education.
The ISACA Cybersecurity Case Study Competition
The ISACA NY Metropolitan Chapter Cybersecurity Case Study Competition immerses students in a simulated real-world cybersecurity challenge, where they are tasked with proposing innovative solutions to complex problems. Participants are required to analyze case studies and articles from Harvard Business School, collaborating as a team to develop comprehensive presentations. These presentations are then evaluated by a panel of judges, with the top three teams receiving the opportunity for interviews with cybersecurity executives.
This year, the competition centered around the notorious 2020 SolarWinds supply chain attack, a significant cyber incident that resulted in widespread data breaches affecting numerous global organizations, including various sectors of the U.S. federal government. The challenge not only tested the students’ technical knowledge but also their ability to think critically and strategically under pressure.
Understanding the SolarWinds Cyberattack
The SolarWinds attack was a sophisticated and multi-faceted cyber intrusion that began with early signs of hacker activity as far back as 2019. The attackers exploited vulnerabilities in SolarWinds’ software, which is widely used for system management across various sectors. By September 2020, hackers had successfully implemented a code injection that altered the execution of critical programs, leading to a backdoor that remained undetected for nearly three years.
The breach was first discovered by Volexity, a cybersecurity firm that identified the backdoor and alerted SolarWinds. The attackers employed advanced techniques, including lateral movement to compromise a Microsoft Office 365 account, allowing them to expand their control over the network. The attack utilized a sophisticated malware package, including components named Sunspot, Sunburst, Teardrop, and Raindrop, each playing a crucial role in the execution and maintenance of the attack.
Team Solar Eclipse: A Collaborative Effort
Representing Queens College, Team Solar Eclipse tackled the complexities of the SolarWinds attack head-on. The team emphasized the significance of the breach, highlighting its impact on thousands of organizations and the potential risks posed to national security. Their presentation showcased a thorough understanding of the attack’s mechanics and proposed a collaborative response involving industry leaders such as CrowdStrike, KPMG, and the law firm DLP Piper.
On December 13, 2020, senior leaders from these organizations convened to review the response strategy, coordinate efforts, and communicate effectively about the attack. Following their recommendations, software updates were released on December 15 to eliminate the malicious code, ultimately protecting approximately 100 affected customers from further harm.
A Testament to QC’s Cybersecurity Education
Queens College’s impressive second-place finish out of 23 participating schools is a testament to the institution’s commitment to providing high-quality cybersecurity education. The success of Team Solar Eclipse reflects the rigorous training and resources available to students at QC, equipping them with the skills necessary to navigate the ever-evolving landscape of cybersecurity threats.
As the cybersecurity field continues to grow in importance, QC’s achievement in the ISACA competition underscores the relevance of its academic programs and the dedication of its students. Enrollment for the 2025 Cybersecurity Case Study Competition has already begun, and interest is expected to be high as students seek to follow in the footsteps of Team Solar Eclipse.
Conclusion
Queens College’s second-place standing in the ISACA 2024 Cybersecurity Case Study Competition not only highlights the institution’s academic excellence but also its role in shaping the next generation of cybersecurity professionals. As cyber threats become increasingly sophisticated, the skills and knowledge gained through such competitions will be invaluable for students as they prepare to enter the workforce. With a strong foundation in cybersecurity education, QC is poised to continue making significant contributions to the field and fostering a culture of innovation and resilience in the face of cyber challenges.