September 20, 2011 ACSC Launch Conference

1. University-Industry Work Group: EducationTanya ZlatevaDirector, Center for Reliable Information Systems and Cyber Security (RISCS)Associate Dean for Academic Programs, Metropolitan College (MET) Boston University September 20, 2011 ACSC Launch Conference

2. ACSC Video Conference Discussion Outline • ACSC University-Industry WG: Mission • Three-Year Vision • Metrics for Success • Context and Major Issues: • What we have & • What is missing • Immediate Focus & Objectives/12-month work plan

3. ACSC Video Conference Discussion Format Panel—short presentations: • John McKenna, Vice President, Enterprise Information Security, Liberty Mutual Group • Linda Norton, Vice President, IT Production Monitoring/Vendor Oversight, BCBS of MA • David Saul, Senior Vice President and Chief Scientist, State Street Corporation Discussion • John McKenna--Facilitator Recap

4. ACSC Video Conference Mission Statement Establish the region as the leading cyber security center for educating the • scientists as well as the • professional workforce of the future.

5. ACSC Video Conference Three-Year Vision Create a highly visible academic community that stimulates and supports • strong doctoral researchas a foundation and framing context of • expanded professional degree programs(graduate and undergraduate) and • internship/work-study opportunities relevant for and in strong relation with industry.

6. ACSC Video Conference Metrics for success: • Publications (quality and quantity) from doctoral research • Number and job placement of graduates with cyber security degrees • Student projects jointly supervised by industry and academic advisors (quality and quantity) • Number and quality of internships and percentages resulting in successful job placement • Recognition of the professional programs in the top tier of cyber security programs with Carnegie Mellon, Johns Hopkins, Purdue (Note: the research programs already have highest national and international recognition)

7. ACSC Video Conference Context & Major Issues—We Have: One of the strongest research communities in the world in cryptology, networks, law, management science: • MIT—cryptology/networking/CSAIL • Harvard—BerkmanCenter for Internet & Society, Project Minerva, Cyber Security Caucus • BU—RISCS, Hariri Institute, CAE-R • Northeastern—Institute for Information Assurance, CAE-R • University of Massachusetts, Amherst, CAE-R • Babson • Brandeis • Tufts • WPI

8. ACSC Video Conference Context & Major Issues—We Have: • Three research universities • Boston University, (Tanya Zlateva, zlateva@bu.edu ) • Northeastern University, (Agnes Chan, ahchan@ccs.neu.edu ) • University of Massachusetts Amherst, Kris Hollot, hollot@ecs.umass.edu • offer professional degree programs in cyber security and are • designated as National Centers of Academic Excellence in Information Assurance Education (CAE) and Research (CAE-R) by DoD and DHS.  A distinguishing characteristic of the CAE-R is the continued effort to work with industry, government, professional organizations, and non-profits to create programs that are academically rigorous as well as attuned to industry needs and new trends.

9. ACSC Video Conference Context & Major Issues—We Have: Community colleges participation: • Middlesex Community College • Program on Homeland Security (Donald Brady) • BU Community College Alliance (BU provides scholarships for community college students) • Quinsigamond • Bunker Hill • Massachusetts Bay • Middlesex • Northern Essex • Roxbury

10. ACSC Video Conference Cyber Security Programs • Traditional rooted in the discipline with a cyber security concentration/specialization, e.g. • BS in Computer Science, Specialty Track "Security and Privacy“ (Umass) • MS in Computer Science, Concentration in Information Security (BU, Northeastern), • MS in Computer Information Systems, MS in Telecommunication, Concentration in Information Security (BU) • Programs specifically dedicated to information security, • MS in Information Assurance (Northeastern University), that provides broad knowledge on decision making in information security problems, risk management, policies and procedures, and foundation of computer system security.

11. ACSC Video Conference Cyber Security Curriculum • CS/ENG track: • Core: cryptography, computer/enterprise security, network security, security policies and procedures, database security, digital forensics, • Special topics seminars on networking security, advanced cryptography, advanced forensics (BU and NE) and electives in biometrics and privacy and security in healthcare (BU) • Management/Policy Track • Information system security, cyber law, business continuity & risk management, incidence response & disaster recovery

12. ACSC Video Conference Cyber Security Enrollments The three CAE-R • graduate approximately 200 students with an information security degree each year .  • Each university offers four to eight security courses each semester.  • Overall the three CAE-R enroll ca. 1,500 students in cyber security courses (not necessarily security concentrators) on a yearly basis thus ensuring that the basic knowledge is available to a broader community, serves to increase awareness, and in general provide cyber security literacy.

13. ACSC Video Conference Context & Major Issues—We Are Missing: Coordination mechanisms between industry, academia, government and non-profits for accessing and sharing on a continued routine basis • industrial data/environments/platforms • initiate joint projects—R&D • identify funding sources from government (federal & state), industry, academia • facilitate internship placement (undergraduate & graduate)

14. ACSC Video Conference Context & Major Issues—We Are Missing: • bringing industry perspective into the academic courses • teaching & learning repository • venues for presenting/publicizing student work and receiving industry feedback on its value • facilitate job search • attracting new talent among high school and undergraduate students, e.g.—joint sponsorship for hackatons and competitions

15. ACSC Video Conference Immediate focus & objectives / 12-month work plan Develop processes for continued and efficient communication mechanisms, (including points of contacts, regular meeting schedule) to • showcase and promote the academic programs (undergraduate, Master’s, doctoral) to prospective students • facilitate the posting of and recruiting for internships and job opportunities • generate and discuss themes for joint industry-academia research • establish seed grants for joint medium and short term projects