Thinking Like An Attacker

Tuesday challenged Leadership Initiatives' Cybersecurity interns to think beyond computers and code as they explored one of the most important realities of cybersecurity: technology is only as secure as the people who use it. Throughout the day, students examined the technical principles that protect digital information while also learning how communication, psychology, and human behavior influence cybersecurity outcomes. Through expert-led workshops, hands-on encryption activities, professional development sessions, and meetings with their nonprofit business partners, interns continued building the technical knowledge and consulting skills needed to develop meaningful cybersecurity solutions for real organizations.

The morning began with an engaging session on Cryptographic Hashing and Ethical Hacking led by Dr. Rita McCardell Doerr. Interns explored how cryptographic hashing serves as one of the fundamental building blocks of modern cybersecurity by protecting passwords, verifying data integrity, and ensuring that digital information has not been altered. Students examined how even the smallest change to a file can completely transform its hash value, demonstrating why hashing is such an effective tool for detecting tampering and maintaining trust in digital systems. Beyond the technical concepts, interns also discussed the role of ethical hackers—cybersecurity professionals who use offensive techniques to identify vulnerabilities before malicious actors can exploit them. The session highlighted the importance of responsible disclosure, ethical decision-making, and continuous testing in strengthening organizational security.

Following a short break, interns rotated between two interactive learning experiences. One group participated in a session on Operational Security (OPSEC), where students explored how seemingly harmless pieces of information can be combined to reveal sensitive details about individuals or organizations. Through real-world examples, interns learned that cybersecurity extends well beyond technical defenses; protecting information often begins with recognizing what should and should not be shared. Students discussed how organizations develop security-minded cultures by identifying critical information, evaluating potential threats, and minimizing unnecessary exposure to risk. The session reinforced the importance of awareness, discretion, and proactive thinking in preventing security breaches before they occur.

Meanwhile, the second group stepped into Encryption Lab 2: Murder in the Math Department, an interactive challenge that combined cryptography with investigative problem-solving. Working collaboratively, interns deciphered encrypted messages, identified hidden clues, and applied logical reasoning to solve a fictional cyber-related mystery. Rather than simply memorizing encryption concepts, students experienced firsthand how mathematical principles and cryptographic techniques are used to protect information and support digital investigations. The activity encouraged interns to think analytically, test multiple hypotheses, and work efficiently as a team while demonstrating that cybersecurity often requires persistence, creativity, and attention to detail. Afterward, the groups switched activities, ensuring every intern experienced both the operational security lesson and the encryption challenge.