Post on 13-Dec-2015
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Center for CybersecurityResearch and Education (CCRE)
Tommy Morris, PhDDirector and Associate Professor
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Outline
• What us CCRE?• Center of Academic Excellence for 2 Year
Programs• Helpful resources for curriculum development• Cybersecurity professional certificate programs• Gencyber• Matriculation into a 4 year university• Cybercorps: Scholarship for Service
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Tommy Morris
• PHD, Computer Engineering (Cybersecurity), Southern Methodist University
• 17 years @ Texas Instruments– chip design and verification
• 7 years @ Mississippi State University– Director, Critical Infrastructure Protection Center– Associate Director, Distributed Analytics and Security
Institute (research lead)• Associate Professor, Electrical and Computer
Engineering
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
UAH CCRE Mission
• To provide cybersecurity research as a service for local, state, and national industry and government, develop first class cybersecurity education programs, and provide a pipeline of trained cybersecurity scientists and engineers.
Actionable solutions
Practical approach
Strong team
Hard problems
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
UAH Cybersecurity
• NSA/DHS Center of Academic Excellence in Information Assurance Cyber Defense
• NSA/DHS Center of Academic Excellence in Information Assurance Research
• NSF Cyber Corp Scholarship for Service– 15 students currently on scholarship– BS, MS, Phd; Computer Engineering, Computer
Science, Information Systems– Internship and service obligations
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
People• Social Psychology of
Cybersecurity• Cyber wargaming• Intrusion detection• Cyber physical systems• Industrial control systems• Cloud security• Secure software
development• Penetration testing• Critical decision making• Disaster Response• Risk management• Access control• Embedded systems• Provenance• Assurance• Data mining• Machine learning• Big data
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
CAE2Y
• NSA/DHS Center of Academic Excellence in Cyber Defense Education– CAE2Y – certification for 2 year degree programs• regionally accredited two-year community colleges• technical schools
– https://www.iad.gov/NIETP/index.cfm
• CAE2Y – certifies your program and aligns your curriculum with a standard
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
CAE2Y Requirements
• Requirements– Cyber Defense Center establishment and maintenance
• Oversee program, physical or virtual center, center website
– Cyber Defense program of study• Toward degree or certificate
– Student development– Cyber Defense faculty – Outreach– Knowledge Unit mapping
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
CAE2Y Knowledge Units - Core• Basic Data Analysis• Basic Scripting or Introductory Programming• Cyber Defense• Cyber Threats• Fundamental Security Design Principles• IA Fundamentals• Intro to Cryptography• IT Systems Components• Networking Concepts• Policy, Legal, Ethics, and Compliance• System Administration
• For each knowledge unit NSA provides a brief set of topics which should be included.
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
CAE2Y Knowledge Units - optional
• There are optional knowledge units– May be mapped to other certificate programs– May target individual job functions or
certifications for the local job market• Too many to put on a slide• Each KU has a accompanying set of sub-topics
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Helpful websites
• National CyberWatch Center– Provides a guide for mapping curriculum to the
knowledge units.– 47-page guide – https://scout.wisc.edu/cyberwatch/r131
• CAE Community– Website developed by CAE participating schools.– More information. Forums.– https://www.caecommunity.org/
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
NICE Framework
• National Initiative for Cybersecurity Education (NICE)
• Common understanding of and lexicon for cybersecurity work.
• Gives an overview of the types of jobs available in the cybersecurity field.
• There is a mapping of NSA/DHS CAE knowledge units to the NICE framework.
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Certificate programs
• Many government cybersecurity positions require an applicant to have a set of certifications
• Many organizations teach to these certifications– Short course (professional development)– Program of study which culminates is skills needed to pass a
certificate exam• Entry level: Security+, Network+, GIAC Security Essentials
(GSEC), Certified Computer Examiner (CCE)• Advanced: Certified Ethical Hacker (CEH), Certified
Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Certificate Program Popularity
• Number of citations from survey of job postings:
• http://www.tomsitpro.com/articles/information-security-certifications,2-205.html
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Certificate Programs
• Most certificate programs require a student to pass an exam.
• Program websites provide – Training materials– Practice exams
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Gencyber Camps
• Gencyber is a program sponsored by NSA and NSF to provide free cybersecurity camps for – Teachers – how to teach cybersecurity– high school & middle school students• Cybersecurity first principles (basic concepts)• Introduce cybersecurity• Motivate students to pursue cybersecurity degrees
• http://www.gen-cyber.com/
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Matriculation
• Hopefully community college cybersecurity students continue their education at UAH.– Scholarship opportunities– Map to a Bachelors of Science– What to expect at UAH
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
What expect at UAH
• UAH offers 3 B.S. degrees related to cybersecurity– Computer Engineering– Computer Science– Information Systems
• At undergrad level students will take electives in cybersecurity.
• There are cybersecurity certificate programs available.
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Cybercorps
• Scholarship for Service– Two years full scholarship– Plus salary for undergrads!!!!!
• $20,000 per 9 months• Internships at gov’t agency required• Service obligation
• UAH is a Cybercorps school!
• https://www.sfs.opm.gov/
CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION
Contact InformationTommy Morris, PhDDirector, Center for Cybersecurity Research and EducationAssociate Professor, Electrical and Computer EngineeringUniversity of Alabama in HuntsvilleWork: (256)824-6576Cell: (256)808-6436Email: tommy.morris@uah.edu