Setting Up a Computer Security and Setting Up a Computer Security and Data Assurance Degree Program at Data Assurance Degree Program at Norwalk Community CollegeNorwalk Community College

Presenter: Dr. Barbara BelonProgram Creator

Degree Development TimelineDegree Development Timeline

• Idea for a Computer Idea for a Computer Security 2-year degree Security 2-year degree endorsed by the endorsed by the administration of NCCadministration of NCC

• Parallel-track with Parallel-track with development of NSF development of NSF ATE program ATE program applicationapplication

Idea | JuneIdea | June

22

00

00

11

SearchSearch JulyJuly

ContactsContacts AugAug

WCSUWCSU SeptSept

KnowledgeKnowledge OctOct

SkillsSkills NovNov

CoursesCourses DecDec

ProgramProgram JanJan

22

00

00

22

FebFeb

ApprovalApproval MarMar

AprApr

MayMay

BOTBOT JuneJune

JulyJuly

AugAug

NSF Award, BOHENSF Award, BOHE SeptSept

Program Execution Program Execution

Program ExecutionProgram Execution

22

00

00

33

First Class:First Class: Jan.Jan.

1 new course1 new course Feb.Feb.

Mar.Mar.

Apr.Apr.

MayMay

Jun.Jun.

Jul.Jul.

Aug.Aug.

Second Class:Second Class: Sept.Sept.

1 new course1 new course Oct.Oct.

Nov.Nov.

Dec.Dec.

2 new courses2 new courses Jan.Jan. 22

00

00

44

Feb.Feb.

Mar.Mar.

. . .. . .

• Initial class of 12 Initial class of 12 studentsstudents

• By Sept. 2003, By Sept. 2003, Sophomore class Sophomore class enrolled enrolled

• By Jan, new course By Jan, new course dev. completeddev. completed

Program Development ElementsProgram Development Elements

• Program DevelopmentProgram Development• Facility DevelopmentFacility Development• Faculty DevelopmentFaculty Development• Constituency / CustomersConstituency / Customers• Support NetworkSupport Network• Institutional Security PostureInstitutional Security Posture

Facility DevelopmentFacility Development

• UNIX – XP UNIX – XP dual-boot labdual-boot lab

• Networking labNetworking lab• Security lab - Security lab -

segregatedsegregated

Faculty DevelopmentFaculty Development

• Faculty security trainingFaculty security training– Computer forensicsComputer forensics– Purdue CERIAS programPurdue CERIAS program– Security ManagementSecurity Management– CISCO Security programCISCO Security program

• Faculty job-shadow assignmentsFaculty job-shadow assignments– CT State Police Computer Forensics LabCT State Police Computer Forensics Lab– FBI, New Haven officeFBI, New Haven office– Swiss ReinsuranceSwiss Reinsurance

• Faculty ExternshipsFaculty Externships– CT State Police Computer Forensics TeamCT State Police Computer Forensics Team

Constituency / CustomersConstituency / Customers

• Identifying potential studentsIdentifying potential students• Building relationships with potential Building relationships with potential

employers of graduatesemployers of graduates• Establishing an Advisory Board for Establishing an Advisory Board for

the degree programthe degree program

Support NetworkSupport Network

• InfraGardInfraGard• NY Electronic Crimes Task ForceNY Electronic Crimes Task Force• ISSAISSA• Product vendors such as AccessData, Product vendors such as AccessData,

Cisco, Symantec, etc.Cisco, Symantec, etc.• CISSECISSE• NSANSA• State and Federal Dept. of State and Federal Dept. of

Homeland SecurityHomeland Security

Institutional Security PostureInstitutional Security Posture

• Security policy and Security policy and procedures audit?procedures audit?

• Network Network vulnerability vulnerability assessment?assessment?

• Additional security Additional security initiativesinitiatives– Annual CyberSecurity Annual CyberSecurity

ConferenceConference– Security Awareness Security Awareness

seminars (targeting seminars (targeting SBHO)SBHO)

– Security workshops for Security workshops for business communitybusiness community

SummarySummary

• More than just program developmentMore than just program development• Security is a mindsetSecurity is a mindset• Institutional commitment is crucialInstitutional commitment is crucial• Faculty development is ongoingFaculty development is ongoing

Security - - Security - - just too important just too important NOT to do it right !NOT to do it right !