Cyber sweep: George Mason students take top three spots in national transportation cybersecurity competition

"I'm going to teach you how to hack a modern car," said George Mason University professor Tanvir Arafin to the fall 2024 cohort of CYSE 465 Transportation Systems Design. Arafin not only introduced his students to such exciting concepts in transportation security, but he also incorporated the opportunity to participate in a nationwide cybersecurity competition into his course. 

The entire class of 12 from the Department of Cyber Security Engineering chose to participate in the optional assignment and several won first, second, and third place at the  National Transportation Cybersecurity Competition (NTCC) in November 2024. George Mason’s Finn Schaefer won first place; the team of Noor Mohammed, Sonia Shaukat, Caleb Hughston, and Kayleigh Batchos won second place; and Navraj Singh Gill won third place. 

The national competition was open to all university students, both undergraduate and graduate, who could participate individually or in teams of up to four, guided by a faculty advisor. This year’s competition was titled “CYBER-CARE Challenge 2024: Securing the Future of Transportation.” 

Participants faced a series of cybersecurity challenges, including password cracking, traffic management system exploitation, Vigenère cipher decryption, SQL injection vulnerability identification, cross-site scripting (XSS) attacks, and vehicle trajectory anomaly detection. They had a few weeks to complete the challenges remotely.  

Arafin developed CYSE 465 by integrating real-world scenarios and cutting-edge research findings from his lab. He has been working in hardware and cyber-physical systems security with a key focus on cybersecurity issues of autonomous and transportation systems. CYSE 465 covers understanding data, communication, operating systems, control, and security primitives used in today's vehicles for safe and intelligent control and navigation. 

“The course offers a unique perspective on the cyber vulnerabilities that emerge from the security-oblivious modernization of transportation systems,” said Arafin. 

While he has taught the course since 2022, this was the first time he incorporated the competition into the course. Arafin noted that such competition participation can greatly enhance students’ resumes, and first-place winner Schaefer, a busy student, greatly appreciated the chance to participate. 

“This was actually the first competition that I've competed in,” he said, explaining that it’s hard to find time for such activity outside of school and work. Schaefer’s favorite challenge at the NTCC involved assessing vehicle datasets to detect problems or attacks. He drew from his personal interest in machine learning to solve the challenge. 

“I've worked with machine learning models a lot in my own personal projects, but I've never had an applicable use for it,” said Schaefer. “So, it was interesting to actually see my work have real meaning to it for once. I was able to do something pretty cool.”  

Through courses like CYSE 465, which bridge the gap between theoretical knowledge and practical application, the Department of Cyber Security Engineering is fostering a new generation of cybersecurity professionals who are well-equipped to secure the future of transportation systems. 

"The students’ competition performance is a very compelling argument on the benefits of bringing the results and lessons learned in the research lab directly to the classroom, something many CYSE faculty are doing," said Paulo Costa, the department's faculty chair. 

The achievements of George Mason students at the NTCC highlight the importance of this approach. By bringing state-of-the-art research directly to the classroom, the Department of Cyber Security Engineering is preparing students to become leaders in the field. As the cybersecurity landscape continues to evolve, the department's innovative educational strategies will ensure that its graduates are ready to meet the challenges of tomorrow.