A Model for Establishing a Cybersecurity Center of Excellence

Transcription

1 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 A Mdel fr Establishing a Cybersecurity Center f Excellence Edward J. Mskal emskal@saintpeters.edu Cmputer & Infrmatin Sciences Department Saint Peter s University Jersey City, New Jersey 0706 Abstract In rder t effectively ensure ur cntinued technical advantage and future cybersecurity, we need a technlgically skilled and cyber savvy wrkfrce and an effective pipeline f future emplyees. Our Gvernment has identified Cybersecurity as ne f the mst serius ecnmic and natinal security challenges we face as a natin and has ear-marked cybersecurity educatin as a majr part f its Cmprehensive Natinal Cybersecurity Initiative. By establishing a Cybersecurity Center f Excellence as part f ur Cmputer Science - Cybersecurity curriculum, Saint Peter s University will be well psitined t train and educate students n this very imprtant Natinal initiative. In additin, we will be prviding ur students with the skill-sets necessary t becme a member f the cybersecurity wrkfrce that is expected t increase frm glbal revenues f $95 billin in 2014 t $155 billin in Keywrds: Cybersecurity, Center f Excellence, Security, Infrmatin Technlgy 1. INTRODUCTION The need fr infrmatin security has been increasing in all industry sectrs, including energy, healthcare, financial services, manufacturing, transprtatin, and hmeland security. Assciated with this need fr infrmatin security, is the demand fr prfessinals with knwledge in the areas f cmputer security and infrmatin risk and assurance. In February 2012, the Cmmerce Department s Natinal Institute f Standards and Technlgy (NIST) established a Natinal Cybersecurity Center f Excellence. Accrding t NIST, the Center is t perate as a public - private cllabratin fr accelerating the widespread adptin f integrated cybersecurity tls and technlgies (Natinal Institute f Standards and Technlgy, 2014). The Natinal Cybersecurity Center f Excellence (NCCE), lcated in Rckville, Maryland, prvides businesses with real-wrld cybersecurity slutins, based n cmmercially available technlgies. The center brings tgether experts frm industry, gvernment and academia t demnstrate integrated cybersecurity that is cst-effective, repeatable and scalable (Natinal Cybersecurity Center f Excellence, 2014). During the design f ur Cybersecurity Center f Excellence Mdel, the NCCE has been ur advisr and has prvided us with cybersecurity educatinal infrmatin. They have als intrduced us t cybersecurity technlgy vendrs and business partners. This advisr capacity rle has played an imprtant part in the design f ur Cybersecurity Center f Excellence. 2. WHAT IS CBERSECURIT? Cybersecurity refers generally t the ability t cntrl access t netwrked systems and the infrmatin they cntain. Where cyber security cntrls are effective, cyberspace is cnsidered a reliable, resilient, and trustwrthy digital infrastructure. Where cyber security cntrls are 2014 EDSIG (Educatin Special Interest Grup f the AITP), Page 1

2 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 absent, incmplete, r prly designed, cyberspace is cnsidered the wild west f the digital age (Bayuk, Healey, Rhmeyer, Sachs, Marcus, Schmidt, Weiss, 201). Given the rapid glbal diffusin f Internet and scial netwrking technlgies, the degree t which scieties arund the wrld are increasingly linked is n the rise. With each new participant in the infrmatin age added t the netwrk, the pssibilities fr threats and pprtunities increase expnentially. Tday, due t the Internet and the access it prvides t file servers cntaining databases thrughut the wrld, infrmatin has becme available at virtually n cst t anyne wh has a cmputer and Internet cnnectivity (Jhnsn, 2014).. CBERCRIME COSTS & STATISTICS Accrding t an industry study by McAfee, cybercrimes cst the glbal ecnmy up t US$500 billin annually. The study als fund that cybercrimes can ptentially result in the lss f 500,000 jbs in the United States (McAfee, 201). Pnemn Institute s 201 Cst f Cyber Crime study finds the average cmpany in the U.S. experiences mre than 100 successful cyber-attacks each year at a cst f $11.6M. That s an increase f 26% frm The study als shws that cmpanies wh implement enabling security technlgies reduced lsses by nearly $4M, and thse emplying gd security gvernance practices reduced csts by an average f $1.5M (Pnemn Institute, 201). A study by Nrtn fund that abut 556 millin adults are victims f cybercrime each year, which equates t 1.5 millin victims per day and 18 victims per secnd (Nrtn, 2012). A gd website that cllects infrmatin n glbal cybersecurity attacks and reprts statistics n the attacks is Hackmageddn.cm. T illustrate, Figure 1 shws attacks based n cuntry distributin, Figure 2 shws mtivatins behind attacks, and Figure shws distributin f attack techniques. All illustratins are frm the Hackmageddn.cm (201), web site and are fr a snapsht in time, the mnth f August 201. As illustrated in Figures 1-, cyber-attacks are glbal. They are classified int 4 main areas f mtivatin: cybercrime, hacktivism, cyber warfare, and cyber espinage. Leading in the type f attack techniques that are knwn are DDS with 17.8% and accunt hijacking with 16.8%. Out f all attack techniques, 24.% are categrized an Unknwn. Despite the estimated lss f mney and infrmatin and knwn threats frm adversaries, the precise impact f cybercrime is unknwn because it is nt always detected and reprted. Figure 1 Figure 2 Figure As a result f sphisticated technlgy and cmputers linked t infrmatin systems and databases, which are netwrked via lightning fast telecmmunicatins links, we are in an era where the infrmatin revlutin has changed the way rganizatins cnduct business. Cyberattacks cntinue t prliferate as vulnerabilities in cmputer systems and threats frm hackers have increased every year. Malicius sftware threats, attacks, and btnets make frnt page news displaying the infamus success f hackers stealing data, crippling cmpanies, and spying n crpratins and gvernments. Apprpriate cybersecurity cntrls and tls need t be in place with a cybersecurity-savvy wrkfrce that can cmbat the many risks and vulnerabilities faced in tday s glbal sciety EDSIG (Educatin Special Interest Grup f the AITP), Page 2

3 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 Our Gvernment has identified Cybersecurity as ne f the mst serius ecnmic and natinal security challenges we face as a natin. As a result, a Gvernment prject has been initiated t review the federal effrts t defend the United States infrmatin and cmmunicatins infrastructure and the develpment f a cmprehensive apprach t secure America s digital infrastructure. One f the tenants f the cmprehensive apprach is t encurage institutins/rganizatins t prvide educatin prgrams and training in Cybersecurity (The White Huse, 2014). 4. RESEARCH METHODOLOG During the 201/2014 Academic ear, the Cmputer Science Department received apprval t implement a new undergraduate cncentratin in Cybersecurity. Appendix A identifies the Cybersecurity curriculum cncentratin. We wanted t implement a Cybersecurity Center f Excellence as part f the curriculum t prvide a value-added cmputing and learning envirnment fr ur students. Therefre, we cnducted a study t determine what ther United States clleges and universities were ding with Cybersecurity Labs in cnnectin with their undergraduate and graduate Cybersecurity curriculums. The study wuld help us in designing the Mdel f ur Cybersecurity COE. A ttal f 100 clleges and universities were studied. The schls that were part f the study were identified frm literature searches n the Internet and frm selecting schls arund the cuntry that have cmputer science degree fferings. Appendix B identifies schls studied that ffer Cybersecurity undergraduate and graduate degrees including schls that have Cybersecurity Labs. Frm the 100 clleges and universities studied, thirty-eight schls ffer Cybersecurity degrees and seventeen f thse schls have Cybersecurity Labs. Appendix C identifies schls studied that d nt ffer Cybersecurity degrees. There are sixty-tw schls that d nt ffer Cybersecurity degrees. Twenty-fur f the schls have Cybersecurity Labs. Table 1 shws the gegraphic breakdwn f schls ffering Cybersecurity degrees. Table 1: Gegraphic Breakdwn f Cybersecurity Degrees Nrth East 17 Mid Atlantic 8 Suth East 1 Mid West 5 Suth 2 Suth West 0 Nrth West 0 West 2 Online Ttal 8 Of the 8 schls that ffer Cybersecurity degrees: 27 have undergraduate prgrams 20 have graduate prgrams 9 have bth undergraduate and graduate prgrams are Online 17 have a Cybersecurity Lab Adding the schls that have a Cybersecurity Lab frm Appendix B and C, we cme up with 41 schls that have a Cybersecurity Lab. 5. CBERSECURIT CENTER OF EXCELLENCE MODEL A detailed review f the 41 clleges and university Cybersecurity Labs led t the mdel that we develped fr the Saint Peter s University Cybersecurity Center f Excellence. Implementatin is planned fr the start f the fall 2015 Term. Appendix D is an illustratin f the Cybersecurity Center f Excellence (COE) Mdel. The Cybersecurity COE will cnsist f (1) a physical 24/7 state-f-the art cmputer netwrk facility cnsisting f hardware platfrms and perating systems, netwrk, and security sftware/tls and (2) a 24/7 virtual web prtal that cnsists f Cybersecurity dcuments, prducts, tls, and an elearning repsitry that can be accessed anywhere arund the wrld. In reviewing the 41 clleges and universities that have Cybersecurity Labs, while they had gd hardware and sftware infrastructures and nging research prjects, nne f them included ther academic departments as part f their Cybersecurity Lab. T help differentiate the Saint Peter s University Cybersecurity COE frm 2014 EDSIG (Educatin Special Interest Grup f the AITP), Page

4 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 ther clleges and universities Cybersecurity Labs, we are including in ur Cybersecurity COE, tw academic departments: (1) Criminal Justice, and (2) Business Administratin. We are als including ur Guarini Institute fr Gvernment and Leadership. The tw departments and the Guarini Institute will be participants and have a rle in the COE. They will include their students in educatinal related activities/events and als emphasize cybersecurity technical, legal, and ethical issues during curse lectures, assignments, and seminars. Technlgy and equipment fr the COE will be made pssible frm vendr dnatins, grants, and University funding. It will include large cmputer screens that prvide real-time infrmatin n Cyber-attack timelines, wrldwide gegraphic lcatins, cyber threats and vulnerabilities, metrics, and cmputer dashbards frm SANS (SysAdmin, Audit, Netwrk and Security, 2014), the CERTStatin (CERTStatin, 2014), and the Arbr Netwrks Attacks Surce Map (Arbr Netwrks, 2014). 6. CBERSECURIT COE CONTENTS The Cybersecurity COE will cnsist f a netwrk f Windws and Linux cmputers. The netwrk is currently in the design stage and will include: Sftware: - Micrsft SQL Server R2 - Micrsft.NET Framewrk IBM Security AppScan: Security Vulnerability Prgram - HP WebInspect: Security Vulnerability Prgram - LgRhythm: Lg Event and Management Analysis - CISCO Netwrk Simulatr - Department f Hmeland Security Cyber Security Evaluatin Tl - Netwrk Sniffers and Intrusin Detectin Sftware Virtual Machines: - NETinVM: VMWare Virtual Machine Image that cntains a series f User-Mde Linux Virtual Machines - CISCO Virtual Lab Vendr Testing Sites: - IBM Altrmutual - HP Freebank - CrackMeBank As illustrated in Appendix D, The Cybersecurity COE, cnsists f fur dmains: Educatin, Leadership, Cmmunicatin, and Innvatin. The dmains cnstitute the majr tenants n which we designed ur Cybersecurity COE. Fllwing is what each dmain will cnsist f/prvide fr: Educatin: - Prgrams - Internships - Wrkshps - Tls - Test Beds - Physical Labs - Virtual Labs - Cyber Club - Ethical Hacking Cntest Leadership: - Subject Matter Experts - Crdinatin f Resurces - Vendr Relatins - Business Relatins - Gvernment Relatins - Liaisn with ther Universities Cmmunicatins: - Increase University Awareness - Increase Public Awareness - Newsletters - Multi-Media - Threat/Vulnerability Dashbards Innvatin: - Research - Cllabratins - Case Studies - Publicatins In the Appendix D illustratin at the tp f the dmains is als labeled: the Natinal Cybersecurity Center f Excellence. We will cntinue t wrk with the NCCE t get new ideas and incrprate state-f-the-art technlgy and sftware tls int ur Cybersecurity COE. They are the verarching umbrella f ur Cybersecurity COE that will help guide ur future directin. 7. CBERSECURIT COE OPERATIONS The Cybersecurity COE, will perate in the Cmputer & Infrmatin Sciences Department f the University. It will be managed by a Directr. The Directr will be respnsible fr the day-tday activities and grwth f the COE. Student interns will prvide technical supprt, wrk n prjects, and cnduct research in cllabratin with University prfessrs. We will create a 2014 EDSIG (Educatin Special Interest Grup f the AITP), Page 4

5 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 Cybersecurity COE Bard which will cnsist f Subject Matter Experts, by industry, frm lcal businesses that will reprt t the Cybersecurity COE Directr. This Bard will meet t discuss the directin and technlgy/sftware t be deplyed in the Cybersecurity COE and wrk t help prmte the COE t the cmmunity and public. Our Cybersecurity COE will g live at the start f the fall 2015 Term. 8. RESEARCH AND WORKSHOP OPPORTUNITIES Research will be cnducted at the Cybersecurity COE that has a cmplex cybersecurity challenge that requires an integrated slutin that has benefits fr ne r mre industry sectrs. Sme examples f research culd be in the area f clud cmputing, mbile and wireless cmputing, and military infrmatin prtectin. The research cnducted will lead t jurnal publicatins and cnference presentatins and papers. Wrkshps and seminars will be cnducted by Cmputer Science Department subject matter experts. These wrkshps and seminars will be pen t students, faculty and the public t educate the cmmunity, prmte the Center and shwcase the research activities that we are engaged in. 9. SUMMAR Establishing a Cybersecurity COE at a cllege/university will prvide an envirnment where students can learn, cllabrate, cnduct research, and have hands-n training t the latest technlgy prviding a rich and dynamic learning experience. Students culd participate in internships in the Cybersecurity field t allw them t further excel intellectually. By establishing a Cybersecurity COE, clleges/universities will be well psitined t train/educate their students n the very imprtant Natinal Cybersecurity initiative earmarked by ur Gvernment n cyber-security educatin. In additin, students can be prvided with the skill-sets necessary t becme a member f the cybersecurity wrkfrce that is estimated t grw frm $95.60 billin in 2014 t $ billin by 2019, at a Cmpund Annual Grwth Rate f 10.% frm 2014 t 2019 (MarketsandMarkets, 2014). During Academic ear 2014/2015, ur University we will be putting in place the Cybersecurity COE. Mre details n ur Cybersecurity Mdel including implementatin prgress and ur cllabratin effrts with the NCCE will be discussed at the 2014 ISECON Cnference. 10. REFERENCES Arbr Netwrks. (2014). Digital Attack Map - Glbal DDS Attack Visualizatin. Retrieved June 1, 2014, frm: Bayuk, Jennifer, L., Healey, J., Rhmeyer, P., Sachs, Marcus, H., Schmidt, J., Weiss, J., (2012). Cyber Security Plicy Guidebk. Hbken, NJ: Jhn Wiley & Sns, Inc. CERTStatin. (2014). CertStatin s Cyber Security Dashbard. Retrieved June 1, 2014, frm: Hackmageddn.cm. (201). 201 Cyber Attacks Statistics. Retrieved June 1, 2014, frm: cyber-attacks-statistics/ Jhnsn, Thmas, A., (2012). Pwer, Natinal Security, and Transfrmatinal Glbal Events. Bca Ratn, FL: CRC Press. MarketsandMarkets. (2014). Cyber Security Market wrth $ Billin by Retrieved June 1, 2014, frm: PressReleases/cyber-security.asp McAfee Center fr Strategic and Internatinal Studies. (201). The Ecnmic Impact f CyberCrime and Cyber Espinage. Retrieved June 1, 2014, frm: reprts/rp-ecnmic-impactcybercrime.pdf?cid=bhp016 Natinal Cybersecurity Center f Excellence. (2014). The Center. Retrieved June 1, 2014, frm: Natinal Initiative fr Cybersecurity Educatin. (2014). Natinal Cybersecurity Wrkfrce Framewrk. Retrieved June 1, 2014, frm: EDSIG (Educatin Special Interest Grup f the AITP), Page 5

6 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 Natinal Institute f Standards and Technlgy. (2014). Cybersecurity Framewrk. Retrieved June 1, 2014, frm: index.cfm Nrtn. (2012). Cybercrime Reprt Retrieved June 1, 2014, frm: pu/images/prmtins/2012/ cybercrimereprt/2012_nrtn_ Cybercrime_Reprt_Master_ FINAL_ pdf Pnemn Institute. (201). 201 Cst f Cyber Crime Study Reprts. Retrieved June 1, 2014, frm: pnemn-201-cst-f-cyber-crimestudy-reprts SysAdmin, Audit, Netwrk and Security (SANS). (2014). Prgrams. Retrieved June 1, 2014, frm: The White Huse. (2014). Cmprehensive Natinal Cybersecurity Initiative. Retrieved June 1, 2014, frm: freign-plicy/cybersecurity/natinalinitiative 2014 EDSIG (Educatin Special Interest Grup f the AITP), Page 6

7 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 APPENDIX A Requirements fr Cmputer Science Majr - Cybersecurity Cncentratin. This ptin is designed fr thse wh want t learn the technlgy that is necessary t secure and defend infrmatin systems and netwrks. Students will be able t: Prtect an rganizatin s vital infrmatin and assets Implement cybersecurity best practices and risk management Understand hw t use sftware t minimize vulnerabilities Implement netwrk mnitring and real-time security slutins Analyze persistent threats and implement cunter measures Cnduct risk assessments n infrmatin systems and netwrks Examine cybercrimes and supprt recvery f peratins Create and cmmunicate cybersecurity strategies Manage cybersecurity prjects COURSE CREDITS Elementary Calculus I Elementary Calculus II Fund Cmp Prg: Html, JavaScript, C++ Intrductin t C++ Advanced Prgraming Techniques Using C++ Infrmatin Technlgy Ethics Data Structures Cmputer Mathematics Quantitative Methds fr Business Database Cncepts Infrmatin Technlgy Audit Disaster Recvery Cybersecurity and Risk Management Telecmmunicatins Netwrks Cryptgraphy Cybersecurity Lab Cmputer Science Majr Capstne Curse Ttal Credits EDSIG (Educatin Special Interest Grup f the AITP), Page 2

8 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 APPENDIX B Clleges and Universities Offering Cybersecurity Degrees with assciated Labs. Cllege/University Undergrad Graduate Cyber Security Lab Air Frce Academy Champlain University Clumbia DePaul University FDU Gerge Masn University Gerge Washingtn University Gergia Tech Mercy Cllege New England Institute f Technlgy NJIT NU-Ply Penn State (ONLINE) Purdue Rasmussen Cllege RIT Rbert Mrris University Sacred Heart University Saint Peter s University Suth East Missuri State University Suthern Methdist University St. Jhns University Stevens Institute f Technlgy Temple University f Massachusetts Amherst University f Dallas University f Maryland University f Maryland Baltimre Cunty University f Maryland University Cllege (ONLINE) University f Phenix (ONLINE) University f Ntre Dame University f Pittsburgh US Military Academy US Naval Academy USC Villanva Virginia Cllege West Chester University TOTALS EDSIG (Educatin Special Interest Grup f the AITP), Page

9 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 APPENDIX C Cllege/University N Cybersecurity Degree Has Cybersecurity Lab Bstn University Carnegie Melln Clemsn Duke Indiana University Iwa State University James Madisn University Kansas State LSU Mississippi State MIT Nrth Carlina State Oklahma State Oregn Pace University Penn State Santa Clara University Stanfrd Stny Brk UCLA University f Califrnia - Berkley University f Texas University f Washingtn Virginia Tech Cllege/University N Cybersecurity Degree N Cybersecurity Lab Alabama Auburn Bstn Cllege Brigham ung Brwn University Case Western Reserve Fairfield Flrida Internatinal Gergetwn Gnzaga University Harvard Manhattan Cllege Memphis University Michigan Michigan State Nrthwestern University Ohi State Princetn Rutgers Saint Luis University Setn Hall Syracuse University f Chicag University f Cincinnati University f Flrida University f Gergia University f Illinis University f Miami University f Nrth Carlina University f Pennsylvania University f San Dieg University f Suth Flrida University f Wiscnsin Virginia Wake Frest William & Mary Xavier ale 2014 EDSIG (Educatin Special Interest Grup f the AITP), Page 4

10 2014 Prceedings f the Infrmatin Systems Educatrs Cnference ISSN: v1 n012 APPENDIX D Cybersecurity Center f Excellence Mdel 2014 EDSIG (Educatin Special Interest Grup f the AITP), Page 5