Student Hackers Who Build Community

For students participating in a cybersecurity competition at the University of Nebraska at Omaha (UNO), the goal was simple: Find a hidden flag. But getting there took hours of problem-solving, hacking knowledge, and a little creativity.

Some students worked to decode mysterious audio signals. Others searched for information hidden inside digital images or investigated vulnerabilities in computer networks. They picked padlocks as a lesson on securing the room where sensitive servers are stored. They even pieced together scraps of torn paper, as if an IT technician tried to conceal passwords by tearing and throwing away notebook paper. With 30 challenges to complete in 30 hours, there was plenty to keep them busy.

The competition, called 30/30 Capture the Flag (CTF), was organized by Nullify, UNO’s student cybersecurity organization, in celebration of the 30th anniversary of the College of Information Science & Technology (CIST).

For Nullify, the competition was an opportunity to introduce students to the challenges members complete in regional and national competitions. These are the same challenges that cybersecurity professionals encounter in the workplace.

“Critical thinking is one of the major skills in this,” said Grant Skoumal, vice president of Nullify and one of the competition’s organizers. “It's like a puzzle. You may know the skill, but in the end, you must figure out how to use it to solve the puzzle.”

The competition attracted students from cybersecurity, computer science, and other disciplines outside of CIST, including criminal justice and engineering. And as Skoumal explained, students don't need extensive technical experience to participate.

“We teach every single skill that is needed to participate in this competition at our meetings, and just outside of it too,” Skoumal said. “We constantly work with students, so anybody can participate in this.”

That openness is an important part of Nullify's mission. Through competitions, workshops and hands-on projects, the organization helps students explore cybersecurity beyond what they learn in the classroom.

August Zorrilla Mendez, a cybersecurity graduate student and former Nullify officer, credits the organization with helping him find his footing in the field when he was a new undergraduate.

Admittedly, his first CTF competition was unsuccessful and occurred at a time when he was struggling in classes and had doubts about his career path.

In his first outing, he spent eight hours trying to capture a single flag. But the experience encouraged him to keep learning, as well as to seek help from his peers.

“You'll find people who have done CTF for 20 years and people who is first day doing a CTF,” Zorrilla Mendez said.

That range of experience, he explained, allows students to see how others tackle challenges and gain confidence in their own abilities.

For Andy Wu, Nullify's treasurer, the organization has also provided opportunities to build relationships with students who share similar career interests.

“Nullify has been really beneficial for my career,” Wu said. “We've been able to interact with a bunch of students that have similar career interests, learn a lot of things you wouldn't be able to learn inside the classroom, be more hands-on with cybersecurity.”

Along with technical training, Nullify connects students with industry professionals through guest speakers, networking opportunities, and career development activities. Members receive assistance with resumes, LinkedIn profiles, and preparing for internships.

Skoumal personally credits the organization with helping him secure two internships, including one with the National Counterterrorism Innovation, Technology, and Education Center (NCITE), where he investigated vulnerabilities in agricultural equipment from hackers. Now, as a club officer, he hopes to provide similar opportunities for younger students.

That commitment to helping others is common in the student organization. Nicolas Smith, a senior and Nullify officer who helped develop challenges for the 30/30 competition, said organizing events has strengthened his leadership skills.

“I think it's more important to help other people grow,” he said.

Ultimately, Nullify hopes students leave with more than technical knowledge. Whether they are competing for the first time, preparing for an internship, or simply exploring an interest in cybersecurity, the organization provides a community where students can learn together.

As Skoumal described it, that support continues from one generation of students to the next.

“Nullify is just a great community, and we're trying to grow that,” Skoumal said. “I'm trying to make it better than I got it.”