CISC Research Report 04-04

Transcription

1 Final Report for the Development of a Center for Research and Education in Information Security CISC Research Report Fall 2004 IIIA Institute for Infrastructure & Information Assurance James Madison University Harrisonburg, VA (540) ; Fax (540)

2 FINAL REPORT FOR THE DEVELOPMENT OF A CENTER FOR RESEARCH AND EDUCATION IN INFORMATION SECURITY Submitted to Dr. Ruben Prieto-Diaz Associate Director for Research Computer Science, MSC 4103 James Madison University Harrisonburg, VA Submitted by: Mr. Robert A. Willis, Jr. Principal Investigator/Chair Hampton University Hampton, Virginia Telephone: (757) Facsimile: (757) robert.willis@hamptonu.edu Fall

3 INTRODUCTION This report serves as the final report as requested for this grant. The grant allowed the Department of Computer Science at Hampton University to develop an Information Assurance infrastructure that will serve as a foundation for further expansion. The Department of Computer Science now contains a cadre of faculty interested and knowledgeable of the main Information Assurance (IA) educational issues. The faculty is also prepared to include its gained knowledge to offer new IA courses and courses modified to include IA modules. STATEMENT OF WORK The tasks for the three-year period were as follows: 1) Establish a baseline of INFOSEC expertise at Hampton University. The Department of Computer Science faculty will strive to gain the ability to conduct innovative INFOSEC research (individually and collaboratively with both JMU faculty and industrial and governmental partners) Dr. Lawrence Daley was enrolled in two James Madison courses during Fall He became ill and was unable to complete but one course. During subsequent semesters Dr. Daley was unable to take any courses. Dr. Ruknet Cezzar attended a three day Information Assurance and Computer Security Seminar at Jackson State University (Spring 2003). Dr. Philip Johnson attended an Information Assurance and Computer Security Conference (Spring 2003) Mr. Robert A. Willis Jr. and Ms. Marietta Gittens attended a four week workshop at Carnegie Mellon University in July All faculty attended an INFOSEC workshop conducted by Dr. Corey Schou (Idaho State University) on November 10, 2003 All faculty attended an INFOSEC Symposium conducted by Information the Software Engineering Institute at Carnegie Mellon University personnel. Mrs. Deborah Kaneko attended a four week workshop at Carnegie Mellon University in July ) Provide branch office facilities and industrial and governmental contacts for the Commonwealth Information Security Center in the Hampton Roads area, and exchange information on corporate outreach and K-12 outreach programs Office space was set aside. 3) Offer courses to graduate and undergraduate students at Hampton University and other local colleges. A survey course in Information Security was conducted during Fall An Introduction to Information Assurance course was developed and conducted during Spring ) Include graduate and undergraduate students in appropriate INFOSEC research projects. 3

4 One graduate and two undergraduates presented posters at ADMI (Association of Computer and Information Science and Engineering Departments at Minority Institutions) Tiffany Parker (Graduate), Cryptography and Logarithm/Factorization Problems in Cryptology Mylisa Wilburn, Information Security: Internet Safe Shopping Sharita Marshall, Effect of Information Security on the Business-to-Business Boom Javont DeGrafenraidt is completing his MS thesis in Cryptology during Summer Three graduate students presented Incorporating Information Assurance in the Software Development and Design Process at the ADMI 2004 Symposium. 5) Explore the possible development of the M. S. in INFOSEC at Hampton University. Implementation is delayed pending University approval and funding. Dr. Lawrence Daley has researched several curricula and has largely completed the development of the program. 6) Develop and implement internship programs that provide INFOSEC experiences for students and professional staff. This will be accomplished by recruiting a number of students to participate in opportunities provided by industrial and governmental partners. Two students served as interns to the CIA for Summer This is a direct result of Hampton University s participation in the InfoSec grant. One M.S. graduate who was partially supported in AY has secured a position at Lockheed/Martin. Her assignment is in Information Assurance and Computer Security. Two students served as interns to the Lockheed/Martin for Summer This is a direct result of Hampton University s participation in the InfoSec grant. 7) Develop and implement a student interest program on campus to attract, acquire, and support students in pursuit of potential careers in INFOSEC areas by conducting a number of INFOSEC specific seminars each semester. JMU personnel and personnel from industrial and governmental partners will be invited to conduct lecture series (via video conferencing when feasible) to the student chapters of the Association of Computing Machinery, National Technical Association (NTA) and National Society of Black Engineers (NSBE). A special interest group encompassing all three organizations may be formed to encourage student leadership of the program. On hold. 8) Collaborate in the development and offering of appropriate workshops, symposium, tutorials and conferences. CISC personnel presented at Hampton University s 2nd Annual Technology Conference (Fall 2002). CISC conducted a two-hour Information Security workshop at the Annual Meeting of the Virginia Academy of Science (May 2003). A workshop was conducted during Spring

5 The workshop was intended for CSC faculty at local HBCU s (Hampton University, Norfolk State, Elizabeth City, Virginia Union and Virginia State). Unfortunately only Hampton University faculty attended. Its focus was to show how InfoSec materials could be incorporated into select CSC/CIS courses, to illustrate a number of InfoSec research topics that could easily be used by mentors and to discuss new course development. The Department of Computer Science sponsored a tutorial on Mighty View (May 21, 2003) at the Tidewater CIO meeting A workshop was conducted on November 10, (See attached agenda) The workshop was intended for CSC faculty at local HBCU s (Hampton University, Norfolk State, Elizabeth City, Virginia Union and Virginia State). Faculty from all institutions and a number of Community Colleges attended Its focus was to show how InfoSec materials could be incorporated into select CSC/CIS courses, to illustrate a number of InfoSec research topics that could easily be used by mentors and to discuss new course development. Twentyfive faculty and seven graduate students attended. Dr. Corey Schou of Idaho State University conducted the workshop. A regional symposium (with partial CTRF sponsorship) was conducted on February 28, (See attached agenda) The symposium was very successful. 9) Share course materials and courseware; seek to cooperate in the development of these materials, and explore organization of joint listings of courses, sharing of curriculum, working together in multisite video conferencing for seminars, distance classes, etc. Added security modules to the Operating Systems and Software Engineering courses. 10) Coordinate efforts to advance INFOSEC agendas in terms of research, education, standards, etc. and Advancement of technological and economic development in Virginia. OTHER 11) Project impact on economic development 12) Industrial partners with whom you are currently collaborating 13) Research accomplishments Tentative plans have been made to meet with managers from two local companies to address this area. Two students served as interns to the Lockheed/Martin (Manassas) for Summer This is a direct result of Hampton University s participation in the InfoSec grant. Arrangements have been made to meet with Virginia subcontractors as well. Dr. Lawrence Daley took one information security class from JMU (Spring 2003). For a total of three classes. 5

6 Dr. Ruknet Cezzar attended a three day Information Assurance and Computer Security Seminar at Jackson State University (Spring 2003). Dr. Philip Johnson attended an Information Assurance and Computer Security Conference (Spring 2003) Mr. Robert A. Willis Jr. and Ms. Marietta Gittens attended a four week workshop at Carnegie Mellon University in July Mrs. Deborah Kaneko will attend a four week workshop at Carnegie Mellon University in July One graduate and two undergraduates presented posters at ADMI (Association of Computer and Information Science and Engineering Departments at Minority Institutions) Three graduate and one undergraduate presented posters at ADMI (Association of Computer and Information Science and Engineering Departments at Minority Institutions) One graduate student was awarded an M.S. degree with an Information Assurance thesis topic. One additional graduate student will be awarded an M.S. degree with an Information Assurance thesis topic (Summer 2004). 14) There has been no action taken of the following items: Intellectual property reporting Publications New applications identified Discoveries Federal money leverage Private research money leveraged 6