Cyber Security Research and Education Institute (CSI) The University of Texas at Dallas April 1, 2013 FEARLESS engineering 4/8/2015 1 Our History • NSA/DHS Center for Excellence in Cyber Security Education June 2004 • Cyber Security Research Center (CSRC) Established October 4, 2004 • NSA/DHS Center for Excellence in Cyber Security Research June 2008 • Cyber Security Research and Education Center (CySREC) Established September 2010 • Cyber Security Research and Education Institute (CSI) Established April 1, 2013 FEARLESS engineering Our Faculty Founder • Bhavani Thuraisingham, PhD, DEng (U of Wales, U of Bristol - UK) October 2004 Core Faculty • Alvaro Cardenas, PhD (U of MD) Spring 2013 - Control Systems Security • Yvo Desmedt, PhD (U. Leuven-Belgium) Fall 2012 - Cryptography • Kevin Hamlen, PhD (Cornell) Fall 2006 - Language and Software Security • Murat Kantarcioglu, PhD (Purdue) Fall 2005 - Data Security and Privacy • Zhiqiang Lin, PhD (Purdue) Fall 2011 - Systems Security and Forensics • Yiorgos Makris, PhD (UC San Diego) Fall 2011 - Hardware Security • Kamil Sarac, PhD (UC Santa Barbara) Spring 2010 - Network Security • Latifur Khan, PhD (U of Southern CA) Spring 2005 - Data Mining for Security Several additional faculty are affiliated with the Center from ECS, SOM, EPPS, BBS, NSM. They bring expertise in: Risk Analysis, Economics of Security, Game Theory for Modelling the Adversary, and Psychology of Hackers, among others. FEARLESS engineering Our Accomplishments • NSA/DHS Center for Excellence in Education (2004) and Research (2008) • $20m in Research Funding and $3m in Education funding • Prestigious grants and contracts including: Multiple NSF Career, AFOSR YIP, DoD MURI • Fellowships and Awards: • IEEE, AAAS, IACR Fellowships; IEEE and ACM Awards • e.g., IEEE CS Technical Achievement, IEEE SMC/Homeland Security Technical Achievement • Numerous keynote addresses, top-tier journal and conference publications, open source tools and prototypes, patents • Collaborative research with AFRL, Raytheon, Rockwell • Known for Interdisciplinary Research • PhD Student placements at IBM TJ Watson, Google Privacy, Microsoft, Amazon, Clemson U, … FEARLESS engineering Our Sponsors FEARLESS engineering Our Academic Collaborators FEARLESS engineering CSI Organization Project Coordinator Cyber Security Research and Education Institute (CSI) Ms Rhonda Walls Dr. Bhavani Thuraisingham Chief Scientist Dr. Yvo Desmedt Executive Director Education Center Dr. Kamil Sarac • NSF SFS Program • DoD IASP • NSF Secure Cloud Research Centers Data Security/Privacy Dr. Murat Kantarcioglu Active Malware Defense Dr. Kevin Hamlen • TexSAW • Cyber Security Certificate Programs Research Labs Systems Security/ Virtualization (Dr. Zhiqiang Lin) Applicable Cryptopraphy (Dr. Yvo Desmedt) Affiliated Centers and Labs VMware Intl. Center for Decision and Risk Analysis (Dr. Alain Bensoussan) Sandia Hardware Security (Dr. Yiorgos Makris) Raytheon Security Analytics Dr. Latifur Khan Critical Infrastructure (Dr. Alvaro Cardenas) Tektronix Secure Cloud Dr. Bhavani Thuraisingham Network Security (Dr. Kamil Sarac) IBM Rockwell Sandia Cisco Cyber Operations Dr. Han Kallberf FEARLESS engineering Industry Sponsors and Collaborators Nokia Center for Crime and Justice Studies (Dr. Robert Morris) Cognitive Neuro Science (Dr. Daniel Krawczyk and Dr. James Bartlett) Statistics (Dr. Michael Baron) NSF IUCRC (Dr. Farokh Bastani) Research Thrust - 1 • Active Malware Defense – Sponsors: AFOSR, NSF, NASA, Sandia, ONR – Reactively Adaptive Malware and Frankenstein – Reverse Engineering for Malware Detection – Android Malware Detection – Novel Data/Stream Mining Techniques for • Malware detection • Insider threat analysis • Intrusion detection – Host Health Management – Risk Analysis for Botnets FEARLESS engineering Research Thrust - 2 • Data Security and Privacy – Sponsors: AFOSR, NSF, NIH, ARO – Privacy Preserving Record Linkage and Mining – Adversarial Data Mining – Secure Data Provenance – Policy and Incentive-based Assured Information Sharing – Security and Privacy for Social Networks – Inference Control – Risk-aware Data Security and Privacy FEARLESS engineering Research Thrust - 3 • Secure Cloud Computing – Sponsors: AFOSR, VMware – Virtual Machine Introspection and VM Space Traveler – Secure Virtualization – Hybrid Cloud Security – Secure Cloud Data Storage – Secure Cloud Query Processing – Cloud-based Assured Information Sharing – Cloud-based Malware Detection – Cloud Forensics FEARLESS engineering Research Thrust - 4 • Systems/Language/Networks/Hardware Security – Sponsors: AFOSR, NSF, ARO, DARPA, CISCO – Safe Re-use Oriented Reverse Engineering – Binary Code Analysis – In-Line Reference Monitor – Hardware Trojan Detection – Network Measurements – Control Systems Security – Cryptographic Techniques FEARLESS engineering Research Thrust - 5 • Data/Security Analytics – Sponsors: IARPA, Raytheon, Tektronix, Nokia, NASA, NGA, AFOSR – Semantic Web Data Management and Integration – Geospatial Data Management and Integration – Stream-based Novel Class Detection for Text – Social Network Data Analytics – Multimedia Data Management and Mining FEARLESS engineering Education Thrust • Sponsors: NSF, DoD – NSF SFS Scholarship for Service – DoD IA Scholarship – NSF Assured Cloud Computing – Degrees and Certificates – Courses Offered • Computer/Information Security, Network Security, Data and Applications Security, Digital Forensics, Cryptography, Data Privacy, Secure Web Services, Secure Cloud Computing, Hardware Security, CISSP Modules • Secure Social Networks, Data Mining for Security, Big Data Analytics, Critical Infrastructure Protection, Biometrics, Security Engineering FEARLESS engineering Current Proposal Efforts • Research – Attack attribution – Studying hacker behavior to develop more secure information systems – Cyber operations • Education – Interdisciplinary education program between ECS, SOM, EPPS, BBS – IGERT (Integrative Graduate Education and Research Traineeship Program – Cyber security in the systems engineering program FEARLESS engineering Intellectual Property and Technology Transfer • • • Tweethood – Dr. Latifur Khan – Patent pending technology that started with location mining on Tweets and extended to mining several demographic attributes – Complete system built around Tweethood – Presented to CIA and USAF, and CIA will introduce the technology to IN-Q-TEL VM Space Traveler – Dr. Zhiqiang Lin – Patent pending technology on virtualization security – VMware has expressed interest in licensing; 70K gift from VMware for further development SNOD – Stream-based Novel Class Detection • Patent pending technology jointly by Dr. Latifur Khan and Dr. Jiawei Han (UIUC) • System being developed around SNOD • IBM has expressed interest in licensing FEARLESS engineering Our Outreach Examples • Numerous Press Releases and TV Appearances – e.g., When President Bush family emails were hacked, LA Times came to UTD for inputs – Articles in Economist, New Scientist, NBC News, Boston Globe • Resource for Major Corporations in Cyber Security – One of 12 Cyber Security Research & Education Programs in the World interviewed by IBM T. J. Watson Center for a Best Practices Report – Courses for AFCEA PDC and numerous AF Bases and DoD Agencies • Significant Impact on Cyber Operations – • e.g., Articles in the Journal Forces Quarterly -Top Military Journal Substantial Innovations – IP Disclosures, Patents – Spin-off technologies (e.g., Integration and Mining Social Networks for Threat Evaluation, Analysis and Prediction) – Other spin-offs planned (e.g., Malware detection system) – Open source tools in Cyber Security and Data Analytics FEARLESS engineering