1 SOUTH DAKOTA BOARD OF REGENTS Committee on Academic and Student Affairs AGENDA ITEM: III A(3) DATE: April 3-4, 2013 ****************************************************************************** SUBJECT: Intent to Plan: DSU Doctor of Science in Cyber Security Executive Summary Dakota State University requests Board authorization to develop a proposal for a Doctor of Science (D.Sc.) in Cyber Security. The intent to plan is provided as Attachment I. The program will prepare students for cyber security careers in government agencies, in the private sector, and in higher education. The program will also support the University s research initiatives. DSU intends to seek authorization for delivery at University Center Sioux Falls and online. The University does not intend to request new state resources. The program would be supported by redirections of existing resources and applying for external resources. (Continued) ****************************************************************************** RECOMMENDED ACTION OF THE EXECUTIVE DIRECTOR Authorize Dakota State University to develop a proposal for a Doctor of Science in Cyber Security with the following conditions: 1. The University will not request new state resources or additional facilities to develop, implement, or maintain the proposed program. The program proposal will identify the sources and amounts of all funds needed to operate the program and the impact of reallocations on existing programs. 2. The University will research existing curricula, consult with experts concerning the curriculum, and provide assurance in the proposal that the program is consistent with current national standards and with the needs of employers. 3. The proposal will define the specific knowledge, skills, and competencies to be acquired through the program and demonstrate how each will be obtained in the curriculum. 4. The proposal will identify the specific measures to be used to determine whether individual students have attained the expected knowledge, skills, and competencies and the consequences for students who do not achieve at the expected levels.
2 Intent to Plan: DSU Doctor of Science in Cyber Security April 3-4, 2013 Page 2 of 3 1. University Mission The statutory mission statement for Dakota State University is provided in SDCL : The primary purpose of Dakota State University in Madison in Lake County is to provide instruction in computer management, computer information systems, electronic data processing and other related undergraduate and graduate programs. The secondary purpose is to offer two-year, one-year and short courses for application and operator training in the areas authorized by this section. This authorization includes the preparation of elementary and secondary teachers with emphasis in computer and information processing. Except for degree programs in existence during the academic year, the unique baccalaureate programs authorized for Dakota State University shall not be duplicated by the Board of Regents. Board Policy 1:10:5 Dakota State University Mission Statement provides the degrees authorized: A. Undergraduate Programs Associate degree programs are approved in allied health care, business, general studies, and information technology. Baccalaureate programs are approved in allied health care, business, education, information technology, mathematics, and sciences. B. Graduate Programs Master s degree programs are approved in education and information technology. A Doctor of Science degree in Information Systems is approved. The Board has approved six master s programs and one doctoral program for the University: M.S. in Applied Computer Science (approved in 2012) Master of Business Administration (approved in 2010) M.S. in Health Informatics (approved in 2009) D.Sc. in Information Systems (approved in 2005) M.S. in Information Assurance (approved in 2003) M.S.Ed. in Computer Education & Technology (approved in 1999) M.S. in Information Systems (approved in 1999)
3 Intent to Plan: DSU Doctor of Science in Cyber Security April 3-4, 2013 Page 3 of 3 2. Related Programs within the System There are no D.Sc. in Cyber Security in the system. 3. System Strategic Goals, State Initiatives and Workforce Development The proposed program supports the system s strategic goal (Policy 1:21): Expand graduate education. Promote growth of research initiatives: Graduate students in the proposed program would support DSU s research centers. Contribute to economic development by expanding programs to meet workforce needs and offering off-campus and online programs. DSU intends to request authorization for online delivery. Graduates will be prepared for careers in private industry, government agencies, and institutions of higher education. 4. Off-Campus and Distance Delivery DSU intends to seek authorization for delivery at University Center Sioux Falls and online. 5. Resources DSU does not intend to request new state resources. The University has faculty, courses, and infrastructure that can be redirected to the new D.Sc. program. Off-campus and distance delivery will generate self-support tuition revenue that can be used to support the program. The University intends to apply for external resources (Attachment I, section #7).
4 ATTACHMENT I 4 South Dakota Board of Regents Intent to Plan for a Doctor of Science in Cyber Security UNIVERSITY: Dakota State University DEGREE(S) AND TITLE OF PROGRAM: Doctor of Science in Cyber Security INTENDED DATE OF IMPLEMENTATION: Fall 2014 University Approval To the Board and the Executive Director: I certify that I have read this intent to plan, that I believe it to be accurate, and that it has been evaluated and approved as provided by university policy. March 25, 2013 President Date After approval by the President, a signed copy of the proposal should be transmitted to the Executive Director. Only after Executive Director review should the proposal be posted on the university web site and the Board staff and the other universities notified of the URL. 1. What is the general nature of the proposed program? What is the expected demand for graduates in South Dakota? What is the need for the proposed program? Dakota State University requests permission to develop a proposal for a Doctor of Science degree program in Cyber Security. The proposed degree program is intended to: Capitalize on DSU s expertise in cyber security by offering a terminal degree in a highly technical and hands-on manner; Support federal, state, and local government agencies and the private sector by providing highly skilled cyber security professionals to conduct cutting edge research and work; Support higher education institutions with a much-needed infusion of additional faculty members that can teach in the most technical areas of cyber security; More effectively recruit and retain high-quality South Dakota students interested in pursuing graduate education and careers in cyber security; Expand DSU s cyber security course schedule and to develop a focus in cyber security for the M.S. in Applied Computer Science program; Further enhance the pool and technical abilities of students available to assist faculty with Dakota State University s research initiatives, including the 2010 National Center for the Protection of the Financial Infrastructure and the Center for the Advancement of Health Information Technology; Provide advanced academic and research opportunities for outstanding graduate students. Development of this new degree program is a university priority and a strategic focus. The budget implications are well understood. We put this proposal forward with a strong belief that it will be a successful addition to the institution.
5 Dakota State University ATTACHMENT I 5 DSU intends to request authorization to deliver the degree program on campus and at a distance. The university does not intend to request any new or increased student fees to implement this program. However, the courses in the proposed degree program would qualify for existing CSC/INFS course fees. In addition to those course fees, the program would be supported with internal redirections, external resources and self-support tuition revenue generated by off-campus and distance students. DSU currently has one tenure-track computer science faculty line open and that faculty position has been filled with someone who has expertise in cyber security. Additional faculty positions would be funded through a mix of self-support tuition revenue and external fundraising. Dakota State University intends to design a program that will allow students to take advantage of courses offered as part of the existing D.Sc. in Information Systems, M.S. in Information Assurance, and M.S. in Applied Computer Science as program electives. As a consequence, it s likely that the only new courses needed would be those in the cyber security core. The proposed program supports the Board of Regents Economic Development & Quality of Life strategic goal (Policy 1:21): Promote growth of research initiatives: Graduate students in the proposed program would support DSU s research centers. Expand graduate education. Contribute to economic development by expanding programs to meet workforce needs and offering off-campus and online programs. DSU intends to request authorization for delivery on campus, at University Center-Sioux Falls and online. Workforce Need for Graduates The requirement for secure computing environments, made up of hardware, software, networks, and operating systems, continues to increase in all industries. Previously, secure computing was thought to be a concern only in sensitive government installations and financial transactions, but the need for secure computing has now spread to virtually every activity completed in every industry. Particular attention to secure computing has also grown in health care, secure software development, and security service companies. A doctoral degree program in cyber security prepares a graduate for a career as a technical security professional in a government or private sector firm or as a faculty member at a higher education institution. South Dakota Demand: Doctoral-level cyber security graduates will be hired by three distinct groups: 1) Private industry firms, such as Daktronics, Sanford Health, and Avera Health, to assume a technical leadership role related to cyber security; 2) State and local government agencies, such as South Dakota Bureau of Information & Telecommunications, the South Dakota Department of Transportation, the Board of Regents Information Systems and other local government agencies, to assume a technical leadership role in cyber security; 3) Institutions of higher education that need competent faculty members in cyber security, computer science, and other related knowledge areas.
6 Dakota State University ATTACHMENT I 6 The table below provides a summary of computer science employment needs in South Dakota, from the South Dakota Department of Labor. The occupations denoted with a double asterisk (**) are highlighted by the South Dakota Department of Labor as being among the fastestgrowing occupations in South Dakota, with strong job prospects through This table suggests that there will continue to be strong job opportunities within the state (consistent with job demand at the national level) for graduates who have a computer science and cyber security background. South Dakota Department of Labor and Regulation Occupational Estimates and Projections, Selected Occupations Related to Computer Science / Cyber Security SOC* Code Standard Occupational Classification Title 2010 Base Number of Jobs 2020 Projected Number of Jobs Percent Change Computer Programmers % Computer Software Engineers, Applications % Computer Software Engineers, Systems Software % Computer Support Specialists** % Computer Systems Analysts % Database Administrators % Network and Computer Systems Administrators** % Network Systems and Data Communications Analysts** % Source: South Dakota estimates and projections from South Dakota Department of Labor, available at: * Standard Occupational Classification, U.S. Bureau of Labor Statistics **On the SD Department of Labor list of fastest growing occupations in South Dakota. Additional information available at: National demand Dakota State University has very strong relationships with many potential employers for graduates of a doctoral degree program in cyber security. There are nearly 25,000 unfilled cyber security positions within the federal government and cyber security is expected to continue to be a vital area of need for most government agencies and federally funded research and development centers (FFRDC). These provide excellent job placement opportunities, particularly because DSU already has a strong working relationship with: National Security Agency (NSA)
7 Dakota State University ATTACHMENT I 7 Central Intelligence Agency (CIA) Navy SPAWAR Department of Homeland Security (DHS) Johns Hopkins University s Applied Physics Lab Army INSCOM Carnegie Mellon s Software Engineering Institute MIT s Lincoln Labs Institutions of higher education have also expressed a need for cyber security faculty members. And, the national shortage of technical cyber security faculty members continues to grow at the same rate as the shortage of competent cyber security professionals in federal agencies. The table below, from the U.S. Bureau of Labor Statistics, provides a summary of employment demands nation-wide. All the occupations below (with the exception of computer programmers) are expected to have exceptional job opportunities through Employment Projections for U.S. Computer Science / Cyber Security Professionals Current 2010 employment Percent of Number Industry Projected 2020 employment Change, Percent of Industry Number Percent Occupation Number Computer software engineers, applications Computer systems analysts Computer programmers Computer software engineers, systems software Computer and information systems managers Computer support specialists Computer and Information Scientist, Research United States Bureau of Labor Statistics: Note: Percentage change (last column in the table above) is calculated by dividing the projected change in employment (2010 to 2020) by the 2010 employment number. Example: 99,900/174,000 = 57.4%. The percent distribution columns are not intended to add to 100%. Evidence of Student Demand
8 Dakota State University ATTACHMENT I 8 DSU graduates the largest number of baccalaureate and master s students in computer sciencerelated degree programs annually (see tables below.) These DSU graduates provide a strong market for a doctoral program in cyber security. DSU Enrollments in Computer Science-Related Majors DSU DSU Total 6-Year Average B.S. Computer Sci B.S. Computer and Network Security B.S. Computer Game Design B.S. Network & System Admin UG Fall Enrollment , M.S. Info Systems M.S. Info Assurance GR Fall Enrollment Source: DSU Fall Enrollment Reports. B.S. in Computer Game Design was approved in 2008; B.S. in Network and System Administration was approved in DSU Degrees Conferred in Computer Science-Related Majors DSU Total DSU 6-Year Average B.S. Computer Sci B.S. Computer and Network Security B.S. Computer Game Design * 0 B.S. Network & System Admin UG Degrees Conferred M.S. Info Systems M.S. Info Assurance GR Degrees Conferred From DSU s IPED report. *B.S. in Computer Game Design was approved in 2008; first graduates from that degree program will occur in On average, about 10 percent of DSU s baccalaureate graduates go on to graduate school. That number is higher for DSU s baccalaureate graduates in the computer science-based degree programs, with an average of 22 percent of that group going on to graduate school each year. In
9 Dakota State University ATTACHMENT I 9 AY , 10 of the 42 graduates in computer science-related degree programs went on to graduate school. Over the last five years, DSU computer science-based graduates have enrolled in graduate programs at DSU (information systems and information assurance); USD (computer science); NDSU (software engineering); University of Utah (computer science); Digipen Institute of Technology (computer science), Capital College (information assurance), UND (unspecified major), and SDSU (counseling). 2. What is the relationship of the proposed program to the University s mission as provided in South Dakota statute and Board of Regents Policy? The statutory mission statement for Dakota State University is provided in SDCL : The primary purpose of Dakota State University in Madison in Lake County is to provide instruction in computer management, computer information systems, electronic data processing and other related undergraduate and graduate programs. The secondary purpose is to offer two-year, one-year and short courses for application and operator training in the areas authorized by this section. This authorization includes the preparation of elementary and secondary teachers with emphasis in computer and information processing. Except for degree programs in existence during the academic year, the unique baccalaureate programs authorized for Dakota State University shall not be duplicated by the Board of Regents. Board Policy 1:10:5 Dakota State University Mission Statement provides the degrees authorized: A. Undergraduate Programs Associate degree programs are approved in allied health care, business, general studies, and information technology. Baccalaureate programs are approved in allied health care, business, education, information technology, mathematics, and sciences. B. Graduate Programs Master s degree programs are approved in education and information technology. A Doctor of Science degree in Information Systems is approved. The Board has approved six master s programs and one doctoral program for the University: M.S. in Applied Computer Science (approved in 2012) Master of Business Administration (approved in 2010) M.S. in Health Informatics (approved in 2009) D.Sc. in Information Systems (approved in 2005) M.S. in Information Assurance (approved in 2003) M.S.Ed. in Computer Education & Technology (approved in 1999)
10 Dakota State University ATTACHMENT I 10 M.S. in Information Systems (approved in 1999) A doctoral program in cyber security is clearly within the statutory and Board policy mission of the university. University Priority and Strategic Plan The proposed D.Sc. in Cyber Security supports the current DSU strategic plan. The DSU Strategic Plan (http://www.dsu.edu/about/strategic-plan.aspx) includes goals that are directly related to this program request: Expand current information technology leadership through cutting-edge programs. Optimize on-campus student enrollment and enhance program quality by attracting highability students. Advance DSU's emphasis on applied research. Extend DSU's educational outreach through online and alternative-location delivery. 3. Are there any related programs in the regental system? If there are related programs, why should the proposed program be added? If there are no related programs within the system, enter None. None Justification for the Proposed Program It is DSU s intention to develop a D.Sc. in Cyber Security with a technical hands-on emphasis. In recent years, South Dakota has sought to develop and capitalize on research and technology infrastructure at our universities, particularly in instances where commercialization will result. The proposed D. Sc. in Cyber Security is an essential part of the academic programming infrastructure needed to more fully participate in the high-technology economic development and advancement of our state. The program that will be developed by DSU will build on the strength of our existing baccalaureate and master s degree programs. This new doctoral program is intended to help attract and retain high-quality faculty members and students and will strengthen South Dakota s profile as a provider of first-class graduate education in an area important to its future. Dakota State University has been successful in attracting external support for research. Additional graduate students are needed to assist DSU faculty with grant-supported projects. Researchers at the DSU 2010 National Center for the Protection of Financial Infrastructure and the DSU Center for the Advancement of Health Information Technology routinely request graduate assistants in computer science with highly technical cyber security skills. At DSU, the proposed D.Sc. degree program in Cyber Security will complement the institution s existing information technology-focused graduate programs. Students enrolled in this proposed program would become a vital resource for DSU researchers and for state, regional and federal employers.
11 Dakota State University ATTACHMENT I Are there related programs at public colleges and universities in Minnesota, North Dakota, Montana, and Wyoming? If there are related programs in these states list below under each state and explain why the proposed program is needed in South Dakota. If there are no related programs in a state, enter None for that state. There are no D.Sc. degree programs in Cyber Security in this region. However, a list of universities with doctorate programs in this area is provided in the table below. Programs in Selected States State University Program Rhode Island University of Rhode Island PhD in Computer Science (Cyber Security specialization) Virginia George Mason PhD in Information Technology (Information Security and Assurance specialization) 5. Are students expected to be new to the university or redirected from other programs? How many majors are expected in the first years of the program? How many graduates are expected? Although this degree program will be attractive to DSU s master s-level student, it is also expected to draw students from across the U.S. It is anticipated that the majority of distance education students in this program would be new to DSU. DSU does not expect that students from its existing D.Sc. degree program in Information Systems would move to this degree program because of its heavy computer science emphasis. Program enrollments of new students are anticipated. It is expected that graduates would need 3-4 years to complete the degree program, depending on their educational background and time commitment to the program. DSU intends to market the proposed program to graduates of the other regental universities, to graduates of S.D. private and tribal institutions, and to graduates of out-of-state institutions. 6. Does the university intend to seek authorization to deliver this entire program at any off-campus locations? If yes, enter location(s) and intended start date(s). Does the university intend to seek authorization to deliver this entire program by distance technology? If yes, identify delivery method(s) and intended start date(s). Off-campus location University Center Sioux Falls, Fall 2014 Distance technology Internet, Fall 2014
12 Dakota State University ATTACHMENT I What are the University s plans for obtaining the resources needed to implement the program? Indicate yes or no in the columns below. Development/Start-up Long-term Operation Reallocate existing resources YES YES Apply for external resources YES YES Ask Board to seek new State resources NO NO Ask Board to approve new or increased student fee NO NO The program will be developed to leverage existing faculty and graduate course offerings as much as possible. DSU currently has seven faculty members with doctoral degrees in computer science or software engineering. An additional ten faculty have terminal degrees in information systems and two faculty members are currently completing doctoral degrees in computer science or software engineering. The infrastructure used to support other online graduate programs will also extend to this program, which minimizes the need for additional resources. Furthermore, since the program will be offered at a distance, additional resources to support the program would come from selfsupport tuition revenue. 8. Curriculum Example: Provide (as Appendix A) the curriculum of a similar program at another college or university. The Appendix should provide the required and elective courses in the program. Catalog pages or web materials may be used. Identify the college or university and explain why the program may be used as one model when the proposed program is developed. The curriculum for the Ph.D. in Computer Science with a concentration in Cyber Security offered at the University of Rhode Island is provided in Appendix A. URL: This program will be used as one curriculum model when the proposed program is developed because of the technical nature of the program and the appropriate ratio of coursework, research, and dissertation requirements. Another degree program that might be used as a model is the Ph.D. in Computer Science with an emphasis in Cyber Security at George Mason University
13 Dakota State University ATTACHMENT I 13 APPENDIX A University of Rhode Island PhD in Computer Science with Cyber Security concentration The Ph.D. in Computer Science is a research degree where the student completes a major research project that enhances the field of Computer Science. Students must complete 54 credits of course work beyond the Bachelor s degree in addition to 18 credits for the doctoral dissertation. A student entering the program with an M.S. degree in Computer Science or in a related area may be granted up to 30 credits towards the Ph.D. in Computer Science. Students must complete: 1. At least one course from each of the following course groups: o Algorithms o Programming Languages o Computer Architecture o Computer Systems o Software Design o Theory of Computation 2. At least two courses from the Applications group. 3. Other courses chosen with the approval of the Advisor or Major Professor to meet the 54- credit minimum. For the purpose of describing degree requirements, Computer Science courses are organized into the following groups: Algorithms: CSC 440 Algorithms and Data Structures (4cr) CSC 541 Advanced Topics in Algorithms (4cr) CSC 542 Mathematical Analysis of Algorithms (4cr) CSC 550 Computer Algebra (4cr) Programming Languages: CSC 402 Compiler Design (4cr) CSC 501 Programming Language Semantics (4cr) CSC 502 Theory of Compilers (4cr) Computer Architecture: CSC 411 Computer Organization (4cr) CSC 415 Introduction to Parallel Computing (4cr) CSC 511 Advanced Computer Organization (4cr)
14 Dakota State University ATTACHMENT I 14 CSC 517 Design and Analysis of VLSI Systems (4cr) Computer Systems: CSC 412 Operating Systems and Networks (4cr) CSC 512 Topics in Distributed Systems (4cr) CSC 519 Computer Networks (4cr) Theory of Computation: CSC 445 Models of Computation (4cr) CSC 544 Theory of Computation (4cr) Software Design: CSC 505 Advanced Topics in Software Engineering (4cr) CSC 509 Object-Oriented System Design (4cr) Applications: CSC 406 Computer Graphics (4cr) CSC 436 Database Management Systems (4cr) CSC 481 Artificial Intelligence (4cr) CSC 485 Computer Forensics (4cr) CSC 486 Network Forensics (4cr) CSC 522 Bioinformatics (3-4cr) CSC 536 Topics in Data Management Systems (4cr) CSC 581 Special Topics in Artificial Intelligence (3cr) CSC 583 Computer Vision (3cr) CSC 585 Topics in Computer Forensics (4cr) CSC 586 Topics in Network Forensics (4cr) Please note that admission to the PhD degree program in Computer Science requires a computer science background and that additional course work may be required to attain that background. A Master's degree in Computer Science from any acceptable institution can be used to transfer credit to count for 8-10 of the 16 courses required.