High School Students Track Real Cybercriminals at UAB

 ========= Old Image Removed =========Array
(
    [_wp_attached_file] => Array
        (
            [0] => 2017/07/GwStudents2-scaled.jpg
        )

    [_wp_attachment_metadata] => Array
        (
            [0] => a:6:{s:5:"width";i:2560;s:6:"height";i:1920;s:4:"file";s:30:"2017/07/GwStudents2-scaled.jpg";s:5:"sizes";a:14:{s:6:"medium";a:4:{s:4:"file";s:23:"GwStudents2-336x252.jpg";s:5:"width";i:336;s:6:"height";i:252;s:9:"mime-type";s:10:"image/jpeg";}s:5:"large";a:4:{s:4:"file";s:23:"GwStudents2-771x578.jpg";s:5:"width";i:771;s:6:"height";i:578;s:9:"mime-type";s:10:"image/jpeg";}s:9:"thumbnail";a:4:{s:4:"file";s:23:"GwStudents2-140x140.jpg";s:5:"width";i:140;s:6:"height";i:140;s:9:"mime-type";s:10:"image/jpeg";}s:12:"medium_large";a:4:{s:4:"file";s:23:"GwStudents2-768x576.jpg";s:5:"width";i:768;s:6:"height";i:576;s:9:"mime-type";s:10:"image/jpeg";}s:9:"1536x1536";a:4:{s:4:"file";s:25:"GwStudents2-1536x1152.jpg";s:5:"width";i:1536;s:6:"height";i:1152;s:9:"mime-type";s:10:"image/jpeg";}s:9:"2048x2048";a:4:{s:4:"file";s:25:"GwStudents2-2048x1536.jpg";s:5:"width";i:2048;s:6:"height";i:1536;s:9:"mime-type";s:10:"image/jpeg";}s:9:"wbhm-icon";a:4:{s:4:"file";s:21:"GwStudents2-80x80.jpg";s:5:"width";i:80;s:6:"height";i:80;s:9:"mime-type";s:10:"image/jpeg";}s:13:"wbhm-featured";a:4:{s:4:"file";s:23:"GwStudents2-600x338.jpg";s:5:"width";i:600;s:6:"height";i:338;s:9:"mime-type";s:10:"image/jpeg";}s:20:"wbhm-featured-square";a:4:{s:4:"file";s:23:"GwStudents2-600x600.jpg";s:5:"width";i:600;s:6:"height";i:600;s:9:"mime-type";s:10:"image/jpeg";}s:18:"wbhm-featured-home";a:4:{s:4:"file";s:23:"GwStudents2-415x311.jpg";s:5:"width";i:415;s:6:"height";i:311;s:9:"mime-type";s:10:"image/jpeg";}s:22:"wbhm-featured-carousel";a:4:{s:4:"file";s:23:"GwStudents2-353x265.jpg";s:5:"width";i:353;s:6:"height";i:265;s:9:"mime-type";s:10:"image/jpeg";}s:28:"ab-block-post-grid-landscape";a:4:{s:4:"file";s:23:"GwStudents2-600x400.jpg";s:5:"width";i:600;s:6:"height";i:400;s:9:"mime-type";s:10:"image/jpeg";}s:25:"ab-block-post-grid-square";a:4:{s:4:"file";s:23:"GwStudents2-600x600.jpg";s:5:"width";i:600;s:6:"height";i:600;s:9:"mime-type";s:10:"image/jpeg";}s:14:"post-thumbnail";a:4:{s:4:"file";s:23:"GwStudents2-125x125.jpg";s:5:"width";i:125;s:6:"height";i:125;s:9:"mime-type";s:10:"image/jpeg";}}s:10:"image_meta";a:12:{s:8:"aperture";s:1:"0";s:6:"credit";s:0:"";s:6:"camera";s:0:"";s:7:"caption";s:0:"";s:17:"created_timestamp";s:1:"0";s:9:"copyright";s:0:"";s:12:"focal_length";s:1:"0";s:3:"iso";s:1:"0";s:13:"shutter_speed";s:1:"0";s:5:"title";s:0:"";s:11:"orientation";s:1:"0";s:8:"keywords";a:0:{}}s:14:"original_image";s:15:"GwStudents2.jpg";}
        )

    [_media_credit] => Array
        (
            [0] => Dan Carsen
        )

    [_navis_media_credit_org] => Array
        (
            [0] =>  WBHM
        )

    [_navis_media_can_distribute] => Array
        (
            [0] => 
        )

)
1622022915 
1501539695

What do fake NBA jerseys, black-market pills, and other people’s bank data have in common? They’re all available through cybercrime, and they’ve all been tracked by high school students learning to help catch the criminals at a weeklong camp at the University of Alabama at Birmingham.

Experts say there are about 350,000 cybersecurity job openings in the U.S., and that there aren’t nearly enough skilled workers to fight a rising tide of internet crime. But “Cyberdetectives Camp” is trying to prime that pipeline, not through simulated scenarios contrived for kids in a classroom, but through open-source investigations of real criminals.

Each day of the camp was different, but the day I visited, the targets were people selling counterfeit NBA and soccer jerseys online around the world. Some of the 22 students had already discovered common IP and email addresses connecting a nation-straddling group of these fraudulent websites.

This is part of what a cybercrime trail looks like.

Dan Carsen, WBHM
This is part of what a cybercrime trail looks like.

Gary Warner, UAB’s director of computer forensics research, reminded the students, “it’s in the Netherlands and it’s in China, but just because the company is headquartered in China doesn’t mean that they don’t have part of their network operating in the United States.”

Which means U.S. law enforcement could get involved in taking down the criminals, or at least their websites. It’s all about prioritizing through a series of steps, Warner says.

“Trying to find proofs of identity, then proofs of crime, and then prioritization – why is this criminal worth investigating?”

For example, if hundreds or even thousands of counterfeit websites are traced to one person, one computer, or one email, that’s more likely to be a high-priority target and more efficient to prosecute. And Warner’s cyber-campers have found those types of targets.

Daija Young, left, and Sarah Newton on the trail of cybercriminals selling unlicensed pharmaceuticals.

Dan Carsen, WBHM
Daija Young, left, and Sarah Newton on the trail of cybercriminals selling unlicensed pharmaceuticals.

“The students were able to identify a lot of the email accounts, and those have already been referred over for the FBI to investigate,” he says.

Phishing scams, forensic hard-drive analysis, ransomware – they’re tackling all of it. But there’s a troubling backdrop here: Analysts predict that within five years there’ll be a shortage of about two million cybersecurity workers worldwide.

High school senior Sarah Newton of Douglasville, Georgia might soon help fill that gap. She’s checking out a sketchy-looking website called International Drug Mart.

“We found 34 domains, which are other websites, that are registered to that same email address,” she says. Basically, she’s following a trail. I ask her if that’s one of the challenges she likes about this kind of work. Absolutely,” she says.

Hoover High School graduate Will Thomason agrees. He’s “pinging” or probing computer networks around the world to try to reveal connections between sites that sell fake goods.

Will Thomason probes computer networks selling bootleg products around the world.

Dan Carsen, WBHM
Will Thomason probes computer networks selling bootleg products around the world.

“And then we can put that into a report that gets turned in to the FBI. And then they can launch an investigation,” says Thomason. “This is definitely a great way to spend a week.”

Warner and other educators hope that the interest lasts more than a week. They’re looking for career cybercrime fighters.

“We’re trying to show people who may not have a typical computer-science, geek-from-age-three background that there are lots of exciting careers in computer science and in criminal justice,” says Warner, who plans to hold the camp again next summer. He says businesses, governments, the military, hospitals – basically any legal enterprises – are going to need a lot more people who can tangle with cybercriminals.

Rodney Petersen, director of the National Initiative for Cybersecurity Education, backs that up. He says projections are “by the year 2022, there will be a shortage of 1.8 million cybersecurity workers worldwide.”

And in Alabama, he says, “the data shows that there were over 3,000 open positions in cybersecurity last year, and even more specifically, there were 193 open jobs in the area of investigations … So that’s why summer camps like this are critically important, not only for the state of Alabama, but for our national effort to reduce that workforce gap.”

But after watching Warner’s high-schoolers track crafty cybercriminals, a question nagged: what if these budding cyber-experts take their skills over to the dark side where there’s potentially money to be made? I ask Warner if there’s an ethical issue here.

“Yeah, absolutely. In fact, what I tell my students here is, if any of you decide to go that way, you know who I am, I know who you are, and I will be the one that comes after you myself.”

He’s chuckling, but from this well-known cybersleuth, that’s not a promise to be taken lightly.

UAB Director of Research in Computer Forensics Gary Warner makes a point to future cyberdetectives.

Dan Carsen, WBHM
UAB Director of Research in Computer Forensics Gary Warner makes a point to future cyberdetectives.

 

Birmingham-Southern baseball team vies for an NCAA title as the school prepares to close

When Coach Jan Weisberg called the Birmingham-Southern College baseball team to an impromptu meeting on March 27, players were confused. They gathered together in the locker room and found out the news – BSC would close on May 31.

EPA formally denies Alabama’s plan for coal ash waste

The federal agency says the state’s plan was not as protective as federal standards, allowing toxic waste to remain in unlined pits that may contaminate groundwater. Alabama officials say they will appeal.

Here’s what you said were the hidden gems in Walker County

There are things we notice about where we live that others might miss. That might be a hidden gem or other surprise. We set out to discover a few of them in Walker County at our recent News and Brews community pop-up.

After years of increases, Jefferson County sees a decline in overdose fatalities

Following years of record-breaking increases, Jefferson County is finally seeing a decline in overdose fatalities. We talk to local officials to better understand the reasons for the drop, and if it’s a sign of a longer-term trend.

Alabama district attorney says ‘justice demands’ new trial for death row inmate

Jefferson County District Attorney Danny Carr filed a brief expressing his support for Toforest Johnson’s bid to receive a new trial. Carr has supported a new trial since 2020, but the latest filing detailed the findings of a post-conviction review of the case.

After decisive loss at Alabama Mercedes plants, powerful auto union vows to return and win

Newly elected UAW President Shawn Fain said the union will return to Mercedes and will press on with efforts to organize about 150,000 workers at more than a dozen auto factories across the nation.

More Education Coverage