BGSU students create nonprofit organization to provide free cybersecurity testing

Computer science students detected a cybersecurity breach during free testing for small business

By Branden Ferguson

A group of Bowling Green State University students recently created a nonprofit organization to help protect small businesses against cybersecurity attacks, leveraging their education to create public good.

"As a cybersecurity intern, I saw how much businesses were being charged for penetration testing," said Logan Coffey, fourth-year computer science major, co-founder and owner of the nonprofit organization, The Secure Signals Project. "Small and medium-sized companies need this type of testing the most, yet it's not affordable. Together, we as students are offering the service for free."

With the motto 'help us while we help you,' Coffey and his fellow students began applying their technical skills — learned in the BGSU computer science's cybersecurity program — to make real-world differences. A BGSU alumnus and graduate student are also part of the organization.

"During a 24-hour cybersecurity investigation, we identified and confirmed a breach after being called by a business that experienced suspicious computer activity," said Coffey. "We collected forensic evidence through system imaging, log analysis and malware investigations before delivering the data to a professional incident response team that eradicated the threat. Thanks to our rapid response and relentless effort, the company emerged unscathed."

Experiential learning and real-world application are crucial to student success and are built into the University's highly-regarded computer science program, which was Ohio's first. Students actively engage in simulated cybersecurity challenges, design and implement complex systems that improve efficiency and security, and analyze software for suspicious code and potential vulnerabilities.

"It is essential for students to go beyond theoretical knowledge and gain practical experience that allows them to apply what they've learned in the classroom to real-world scenarios," said Dr. Jake Lee, associate professor and chair of the computer science department. "These experiences help students build confidence and deepen their technical expertise, preparing them to tackle the challenges they'll face on the job."

In addition to being the owner of The Secure Signals Project, Coffey is also the founder and president of the BGSU Cybersecurity Capture the Flag Club. As part of the club, students apply technical cybersecurity skills in a competition setting, attempting to breach their opponent's system while defending their own.

"Many club officers also work for The Secure Signals Project," said Coffey. "The skills used during friendly competition apply to both the real job market and the efforts of our nonprofit."

In addition to utilizing the state-of-the-art digital forensics and cybersecurity lab for cybersecurity and digital forensics classes, Coffey and his team members have also built their own virtual penetration testing lab to allow for future growth and training. The lab mimics real environments and allows students involved in the nonprofit to practice attacks before using them in the field.

"Offensive cybersecurity has a very high barrier to entry, and when working with companies, we deal with very sensitive information and systems," Coffey said. "This virtual space allows us to create fake enterprise environments and allows students to practice risk-free."

Coffey plans to continue leading The Secure Signals Project after graduation, with goals of expanding its reach and continuing to make a difference.

"While this project has been enormously beneficial in expanding my individual growth and education, it has also been very fulfilling," Coffey said. "We hope to continue to provide public good to the community and expand to different markets, including threat hunting and security research."

Businesses interested in free cybersecurity services and penetration tests are encouraged to visit www.securesignalsproject.com/register.