CENTER FOR CYBERSECURITY RESEARCH AND EDUCATION Center for Cybersecurity Research and Education (CCRE) Tommy Morris, PhD Director and Associate Professor

CENTER FOR CYBERSECURITYRESEARCH AND EDUCATION

Center for CybersecurityResearch and Education (CCRE)

Tommy Morris, PhDDirector and Associate Professor


Outline

• What us CCRE?• Center of Academic Excellence for 2 Year

Programs• Helpful resources for curriculum development• Cybersecurity professional certificate programs• Gencyber• Matriculation into a 4 year university• Cybercorps: Scholarship for Service


Tommy Morris

• PHD, Computer Engineering (Cybersecurity), Southern Methodist University

• 17 years @ Texas Instruments– chip design and verification

• 7 years @ Mississippi State University– Director, Critical Infrastructure Protection Center– Associate Director, Distributed Analytics and Security

Institute (research lead)• Associate Professor, Electrical and Computer

Engineering


UAH CCRE Mission

• To provide cybersecurity research as a service for local, state, and national industry and government, develop first class cybersecurity education programs, and provide a pipeline of trained cybersecurity scientists and engineers.

Actionable solutions

Practical approach

Strong team

Hard problems


UAH Cybersecurity

• NSA/DHS Center of Academic Excellence in Information Assurance Cyber Defense

• NSA/DHS Center of Academic Excellence in Information Assurance Research

• NSF Cyber Corp Scholarship for Service– 15 students currently on scholarship– BS, MS, Phd; Computer Engineering, Computer

Science, Information Systems– Internship and service obligations


People• Social Psychology of

Cybersecurity• Cyber wargaming• Intrusion detection• Cyber physical systems• Industrial control systems• Cloud security• Secure software

development• Penetration testing• Critical decision making• Disaster Response• Risk management• Access control• Embedded systems• Provenance• Assurance• Data mining• Machine learning• Big data


CAE2Y

• NSA/DHS Center of Academic Excellence in Cyber Defense Education– CAE2Y – certification for 2 year degree programs• regionally accredited two-year community colleges• technical schools

– https://www.iad.gov/NIETP/index.cfm

• CAE2Y – certifies your program and aligns your curriculum with a standard

https://www.iad.gov/NIETP/index.cfm

https://www.iad.gov/NIETP/index.cfm


CAE2Y Requirements

• Requirements– Cyber Defense Center establishment and maintenance

• Oversee program, physical or virtual center, center website

– Cyber Defense program of study• Toward degree or certificate

– Student development– Cyber Defense faculty – Outreach– Knowledge Unit mapping


CAE2Y Knowledge Units - Core• Basic Data Analysis• Basic Scripting or Introductory Programming• Cyber Defense• Cyber Threats• Fundamental Security Design Principles• IA Fundamentals• Intro to Cryptography• IT Systems Components• Networking Concepts• Policy, Legal, Ethics, and Compliance• System Administration

• For each knowledge unit NSA provides a brief set of topics which should be included.


CAE2Y Knowledge Units - optional

• There are optional knowledge units– May be mapped to other certificate programs– May target individual job functions or

certifications for the local job market• Too many to put on a slide• Each KU has a accompanying set of sub-topics


Helpful websites

• National CyberWatch Center– Provides a guide for mapping curriculum to the

knowledge units.– 47-page guide – https://scout.wisc.edu/cyberwatch/r131

• CAE Community– Website developed by CAE participating schools.– More information. Forums.– https://www.caecommunity.org/


NICE Framework

• National Initiative for Cybersecurity Education (NICE)

• Common understanding of and lexicon for cybersecurity work.

• Gives an overview of the types of jobs available in the cybersecurity field.

• There is a mapping of NSA/DHS CAE knowledge units to the NICE framework.


Certificate programs

• Many government cybersecurity positions require an applicant to have a set of certifications

• Many organizations teach to these certifications– Short course (professional development)– Program of study which culminates is skills needed to pass a

certificate exam• Entry level: Security+, Network+, GIAC Security Essentials

(GSEC), Certified Computer Examiner (CCE)• Advanced: Certified Ethical Hacker (CEH), Certified

Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)


Certificate Program Popularity

• Number of citations from survey of job postings:

• http://www.tomsitpro.com/articles/information-security-certifications,2-205.html


Certificate Programs

• Most certificate programs require a student to pass an exam.

• Program websites provide – Training materials– Practice exams


Gencyber Camps

• Gencyber is a program sponsored by NSA and NSF to provide free cybersecurity camps for – Teachers – how to teach cybersecurity– high school & middle school students• Cybersecurity first principles (basic concepts)• Introduce cybersecurity• Motivate students to pursue cybersecurity degrees

• http://www.gen-cyber.com/


Matriculation

• Hopefully community college cybersecurity students continue their education at UAH.– Scholarship opportunities– Map to a Bachelors of Science– What to expect at UAH


What expect at UAH

• UAH offers 3 B.S. degrees related to cybersecurity– Computer Engineering– Computer Science– Information Systems

• At undergrad level students will take electives in cybersecurity.

• There are cybersecurity certificate programs available.


Cybercorps

• Scholarship for Service– Two years full scholarship– Plus salary for undergrads!!!!!

• $20,000 per 9 months• Internships at gov’t agency required• Service obligation

• UAH is a Cybercorps school!

• https://www.sfs.opm.gov/


Contact InformationTommy Morris, PhDDirector, Center for Cybersecurity Research and EducationAssociate Professor, Electrical and Computer EngineeringUniversity of Alabama in HuntsvilleWork: (256)824-6576Cell: (256)808-6436Email: [email protected]

Documents

CENTER FOR CYBERSECURITY RESEARCH AND EDUCATION Center for Cybersecurity Research and Education (CCRE) Tommy Morris, PhD Director and Associate Professor