The Elastic Contributor Program recognizes and rewards the hard work of our awesome contributors and encourages knowledge sharing within the Elastic community. In this blog, learn how to contribute to the Elastic Security community.

<p>At Elastic, we understand the value of our community. Community is at the core of what we do and who we are as a company. In an effort to recognize Elastic community contributors around the world, we launched the <a href="https://www.elastic.co/community/contributor">Elastic Contributor Program</a> in September of this year.<br>
</p><p>The goal of this program is to encourage knowledge transfer within the Elastic community and build friendly competition around contributions. In this blog post, we’ll walk through ways in which you can contribute to the Elastic Security community and how to submit your contributions to our program for potential reward.&nbsp;
</p><h2>Contribute to the public rules repo</h2><p>We believe in security through openness, not obscurity. For that reason, Elastic Security <a href="https://www.elastic.co/blog/elastic-security-opens-public-detection-rules-repo">released a public GitHub repository</a> where <strong>free</strong> rules are developed in the <strong>open</strong>. We welcome contributions from the community and believe this is a unique opportunity to share our collective knowledge, collaborate with each other, and solve security problems together<strong> </strong>as a community.
</p><p>To start sharing your rule logic, check out <a href="https://github.com/elastic/detection-rules">elastic/detection-rules</a> on GitHub. We have detailed instructions there for navigating the repository, forking and cloning, and creating a rule. We include a command line tool for bulk editing the files and to make creating new rules easier.
</p><div class="video embed-container" style="height: 319.725px;">
	<img class="vidyard-player-embed" src="https://play.vidyard.com/cJtxAkxmSVmeMiLUCwLqxs.jpg" data-uuid="cJtxAkxmSVmeMiLUCwLqxs" data-v="4" data-type="inline" data-autoplay="1" data-loop="1" data-disable_analytics="1" data-hidden_controls="1" data-muted="1" disable_analytics="1" style="width: 100%; margin: auto; display: block;">
	<p><br>
	</p>
	<p>When you’re ready to add a new rule to the repository, run <code>python -m detection_rules create-rule</code>, and you’ll be prompted for the required metadata. We recommend using the CLI when possible, as it reduces copy-and-paste errors that happen when reusing contents from a TOML file from another rule or template.
	</p>
	<p>When your rule is in a good state, you can run the command <code>python -m detection_rules test</code> to locally perform unit tests, which validate syntax, schema usage, etc. Then, create the pull request and someone on our Intelligence & Analytics team will review the contribution. If we request any changes, we’ll work with you to make the recommended changes.&nbsp;
	</p>
	<p>If you have a good idea for a rule, but want to collaborate with us on the idea or get feedback, feel free to create a <a href="https://github.com/elastic/detection-rules/issues/new/choose">New Rule</a> issue. We look forward to collaborating with you!
	</p>
	<p>The latest information is always in the repo — be sure to check out the <a href="https://github.com/elastic/detection-rules/blob/main/CONTRIBUTING.md">contributor guidelines</a> and <a href="https://github.com/elastic/detection-rules/blob/main/PHILOSOPHY.md">philosophy docs</a>. Or, watch the <a href="https://www.elastic.co/webinars/introducing-the-public-repository-for-detection-rules">webinar</a> for a deeper dive.
	</p>
	<p><img src="https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/bltb5374646b6e23ced/5fd00faa7c43e43bf4195e7e/elastic-contributor-program-detection-rules.png" data-sys-asset-uid="bltb5374646b6e23ced" alt="elastic-contributor-program-detection-rules.png">
	</p>
	<h2>Other ways to contribute</h2>
	<p>There are numerous ways to get involved in the Elastic Security community! Share your security use case in a blog or through a <a href="https://community.elastic.co">virtual meetup</a>. You can also write a tutorial, record a video, or organize and host events. If writing or speaking isn’t your thing, no problem! We can work with you to create, promote, or present content around your story.&nbsp;
	</p>
	<p>You can also validate the work of your peers that have contributed to the <a href="https://www.elastic.co/community/contributor">Elastic Contributor Program</a> and receive credit for doing so. These are just some of the many possibilities — be sure to check out <a href="https://www.elastic.co/community/contributor">our contributor webpage</a> for more information.
	</p>
	<h2>Earn credit for your contributions</h2>
	
	<p>Visit the <a href="https://contributor-program.app.elstc.co">Elastic Contributor Program portal</a> to start earning points for your contributions. There are six primary contribution types: event organization, presentation, written content, video, translation, and code. If you are submitting contributions made to the detection rules repo, be sure to select <strong>code</strong> as your contribution type.
	</p>
	<p>If you are on the leaderboard for your region, you have a chance to win prizes and be recognized as a top contributor. We recognize top contributors with things like training subscriptions, event tickets, virtual badges, and more.
	</p>
	<p>Check out <a href="https://www.elastic.co/blog/elastic-contributor-program-how-to-submit-and-validate-a-contribution">our blog post</a> to learn how to use the <a href="https://contributor-program.app.elstc.co">Elastic Contributor Program portal</a> and start submitting your security contributions today! We’ll see you on the leaderboard.&nbsp;
	</p>
</div>

elastic-contributor-program-banner.jpg

elastic-contributor-program-thumbnail.jpg

Elastic Contributor Program: How to make security contributions

The internet is a great educational tool for kids, but also poses dangers. Learn how to teach your kids cybersecurity tips and tricks they can use.

<p>Confession: I am a security practitioner. I am also a mom. What I am not is a homeschool teacher.
</p><p><img src="https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/blt2ac284d54c4f24f5/5e96171073ed5d349d31c76c/homeschool_cartoon.jpg" data-sys-asset-uid="blt2ac284d54c4f24f5" alt="homeschool_cartoon.jpg">
</p><p>Earlier this year, I spoke to the 5th- and 6th-grade classes at my son’s Innovation Day about cybersecurity. I discussed what it means to be a cybersecurity practitioner and how the practice of cybersecurity affects everyday life.  We’ll never know how many of those kids will train to become security professionals later in life, but I do know that at the end of the day they understood the concepts I spoke on, and some of them were eager to implement them.
</p><p>For me, it was a powerful lesson. Adults may be resistant to change but kids — especially school-age kids — are in active training. Knowing that, shouldn’t we be training them to take security seriously? Shouldn’t we be teaching our kids best practices now when they have the best chance of forming habits? All too often, this isn’t happening.
</p><p>The global pandemic and resulting closures of businesses and schools have been an adjustment for all of us. Our kids are now adjusting to online learning, and this  begs an important question for not only the current circumstances, but the future as well — how do we empower our children to protect themselves online?
</p><p>Here are some ideas that you can work on with your kids to keep them safe online, right now:
</p><h2>Teach them to break things</h2><p>Kids love to build things, and often do this naturally. Instead of teaching them to build, why not teach them how to break things? Teach them to see flaws in design. This will help them to understand vulnerabilities with smartphones and devices. One of the most common vulnerabilities is unintentional data leakage through the use of mobile apps. Teach them about phishing if they use email, and more importantly, teach them about smishing. Smishing is launched through text messages instead of email. Like phishing scams, cyber miscreants attempt to trick people into downloading malware, clicking on malicious links, or disclosing sensitive information. Teach them how to address these types of weaknesses so they can be less vulnerable to cyber attackers as they grow up in a digital world.
</p><h2>Teach them to ask questions</h2><p>According to Harvard-based child psychologist <a href="https://emergentthinkers.com/2019/05/15/ponder-puzzle-pose-the-case-for-curiosity/">Paul Harris</a>, a child asks around 40,000 questions between the ages of two and five. So you may be asking, “why would I want to teach my child to ask even more questions?” Instead of urging them to ask more questions, let’s teach them to ask the right questions. For example, why is a flashlight app asking for access to your calendar? The more your kids learn to ask why, the more cautious they'll be on the Internet and as they grow into adults.
</p><p><img src="https://images.contentstack.io/v3/assets/bltefdd0b53724fa2ce/blt3d0abe2567f741a0/5e961757271d775edb04adb6/Cami_and_kids.jpg" data-sys-asset-uid="blt3d0abe2567f741a0" alt="Cami_and_kids.jpg" style="display: block; margin: auto;">
</p><figcaption>Cami Lewis with her kids Isaiah and Malakye.</figcaption><h2>Teach them to confirm</h2><p>A 6th-grade student at the Innovation Day I spoke at admitted that he and his classmates like to create fake personas on Facebook. Chances are that plenty of cyber creeps are doing this too. Teach your kids to be cautious of all online personas and not to exchange information with anyone whose identity seems fishy. Also, teach them to tell a trusted adult whenever something feels awkward or strange.
</p><h2>Teach them prevention
</h2><p>Our dog likes to steal and hide toys. We've had enough incidents with this behavior that my son now puts his toys away right after using them so that they’re out of the dog’s reach. We should teach our children to think of cyber criminals in the same way. If your kids put their personal information within reach, it's much more likely to be stolen by a wrongdoer. Instead, ensure your kids know what information is safe to share, and encourage them to change their passwords regularly and encrypt their devices.
</p><p>A child’s identity is extremely attractive to cyber thieves. Their credit history represents a clean slate that will remain untouched — and potentially unchecked — for years.  Many parents don’t realize their child’s identity could be compromised at school by filling out school forms without thinking about how the information will be stored or who may have access to it.  Be vigilant in protecting your child’s personal information. Find out if your child has a credit report, and if for some reason they do, freeze their credit.  Be proactive if you notice red flags. As kids spend more time on connected devices, make sure your children aren’t sharing personal information and teach your kids about what information is safe to share.
</p><h2>Teach them about defense
</h2><p>Plenty of kids have smartphones with location-based services. Combine that with social networks that encourage users to tell friends and followers where they are and you have a real-world problem. Just like you would teach your kids defensive driving, teach your kids not to share their location on social media. Or, better yet, turn off their location-based services for them.
</p><h2>Teach them about privacy</h2><p>Hackers and fraudsters are increasingly targeting children. I was appalled to hear <a href="https://www.nbcnews.com/news/us-news/man-hacks-ring-camera-8-year-old-girl-s-bedroom-n1100586">a recent story</a> trending across major news networks about a hacker accessing the camera inside a little girl’s room. Teach your kids about how unsafe people exploit smart speakers. Any time you introduce a new technology into your home, guiding your kids on how to use it and what the expectations are will empower them to use it safely when you’re not around. Even better, don’t allow devices in your home that you can’t ensure are safe for your family.
</p><h2>Teach them about technology 
</h2><p>Teaching cybersecurity skills to kids while they are still young is important. Your kids live in a computer-driven world. and kids who acquire these skills early learn to be critical thinkers and process information in an analytical way.
</p><p><a href="https://www.elastic.co/products/elasticsearch/service">Set up a cluster</a> and let them play around. Introduce them to <a href="https://www.elastic.co/siem">SIEM</a> and show them some features. Kids can soak up basic cybersecurity skills as rapidly as they pick up new technologies. With those easy-to-acquire skills, they can be equipped to protect themselves from cyber threats automatically. We owe it to them to make this possible.
</p><p>Remember, no amount of preparation will deter every cyber creep. But as my son learned with our toy-snatching dog, good habits go a long way.
</p><p><em>Interested in joining a company with <a href="https://www.elastic.co/about/our-source-code?baymax=web&elektra=culture-virtual-safety-how-to-teach-your-kids-cyber-security-best-practices">a Source Code to live by</a>? We’re hiring. Check out <a href="https://www.elastic.co/about/teams?baymax=web&elektra=culture-virtual-safety-how-to-teach-your-kids-cyber-security-best-practices">our teams</a> and f<a href="https://www.elastic.co/about/careers/?baymax=web&elektra=culture-virtual-safety-how-to-teach-your-kids-cyber-security-best-practices">ind your fit</a>! Want to read more about life at Elastic? Read more <a href="https://www.elastic.co/blog/category/culture?baymax=web&elektra=culture-virtual-safety-how-to-teach-your-kids-cyber-security-best-practices">on our blog</a>!</em>
</p>

Articles by Cami Lewis

Elastic Contributor Program: How to make security contributions

Virtual safety: How to teach your kids cybersecurity best practices

Products & Solutions

Company

Resources

Featured topics

News

Articles by Cami Lewis

Elastic Contributor Program: How to make security contributions

Virtual safety: How to teach your kids cybersecurity best practices