Volgenau School of Engineering BS Cyber Security Engineering Peggy Brouse, Ph.D. Cyber Security Initiative Cyber security is the body of technologies, 2 processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access Cyber security engineering is the proactive engineering design of physical systems with cyber security incorporated from the beginning of system development Peggy Brouse, Ph.D. Cyber Security Initiative Industry, government, and academia increasingly seek individuals who can use their engineering expertise to solve problems in cyber security On 26 February 2014, Governor Terry McAuliffe signed Executive Order Number 8, which launches a new framework for the Commonwealth’s cyber security efforts called “Cyber Virginia,” and establishes the Virginia Cyber Security Commission to bring public and private sector experts together to make recommendations on how to make Virginia the national leader in cyber security [1] Federal spending for cyber security is estimated to be $13.3 billion by 2015, and the 2012 Department of Defense budget for cyber alone is $3.2 billion [2] Cyber security spending as a whole topped $60 billion globally in 2011 and is expected to grow at a rate of almost 10% every year, over the next 3-5 years [3] [1] http://technology.virginia.gov/news/newsarticle?articleId=3445 3 [2] Virginia’s Innovation Ecosystem: The Trusted Leader in Growing Cyber Peggy Brouse, Ph.D. Security Solutions, Office of Virginia’s Secretary of Technology [3] http://www.technology.virginia.gov/news/viewRelease.cfm?id=1087 Cyber Security Initiative Global Growth and Need • Despite economic slow down and a tight job market, the demand for cyber security professionals has grown 3.5 times faster than the demand for other IT professionals and about 12 times faster than the demand for all other jobs in the past five years [4] • Continued growth of mobile platforms, cloud computing, electronic transfer of secure information, and electronically operated systems in everything from electricity generation and stock market trading to keeping up with the latest in social media has driven a need for these highly coveted cyber graduates around the world and outside of the government/defense sectors, which were previously the primary employers for such 4 Peggy Brouse, Ph.D. [4]http://www.businesswire.com/news/home/201308050053 41/en/California-Metro-Washington-D.C.-%E2%80%93-TopDestinations Cyber Security Initiative Global Growth and Need [continued] • In a 2013 Global Information Security Workforce Study, it was predicted that the demand for cyber security professionals will experience double-digit, year-over-year percentage increases over the next five years in the Americas, Asia-Pacific (APAC), and the Europe, Middle East, and Africa (EMEA) [5] • This growth worldwide, as well as, increased need in industries outside of government and defense, which require security clearances, creates opportunities in cyber security for students that may not have previously considered the subject because of their inability to qualify for American work visas or security clearances [5]https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/2013%20G lobal%20Information%20Security%20Workforce%20Study%20Feb%202013.pdf 5 Peggy Brouse, Ph.D. Cyber Security Initiative Global Shortages • In the 2013 Global Workforce Study, 56% of the 12,000 information security professionals, including 2/3 of the executive level respondents with budgetary influence, believe there is a shortage in their cyber security workforce [6] • The Wanted Analytics adds, “With hiring growing, these jobs are likely to be very hard for recruiters and employers to fill. Currently, our Hiring Scale scores these positions as an 85. The scores range from 1 (representing less difficulty) to 99 (representing more difficulty). At an 85, it's likely that employers will experience fierce competition to attract candidates and a long time-to-fill.” [7] [6]https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/2013%20G lobal%20Information%20Security%20Workforce%20Study%20Feb%202013.pdf [7] http://www.wantedanalytics.com/insight/2013/07/10/hiring-trends-forcyber-security-jobs/ 6 Peggy Brouse, Ph.D. Cyber Security Initiative Demand in D.C., Maryland, and Virginia (DMV) • With DC, Maryland and Virginia requiring a large number of these cyber specialized employees for the federal government and defense sectors alone, the ability to find graduates within Virginia would be advantageous for employers in the DMV region • The Wanted Analytics analyzed the demand for cyber security jobs in July 2013. Over a 90 day period there were more than 13,000 jobs available online for jobs that required experience in cyber security. This is a 24% year-over-year increase when compared to the same 90-day period in 2012 [8] • Last year, then Virginia Governor Bob McDonnell rolled out an initiative to attract more cyber based businesses to join the states existing 300 [9] [8] http://www.wantedanalytics.com/insight/2013/07/10/hiring-trendsfor-cyber-security-jobs/ 7 [9] http://www.technology.virginia.gov/news/viewRelease.cfm?id=1087 Cyber Security Initiative Demand in D.C., Maryland, and Virginia (DMV) [continued] • As reported in the Washington Post in February 2014 [10], Burning Glass Technologies conducts daily reviews of job postings across 32,000 online sites. In a report released last month, the company said that the Washington metropolitan area had more than 23,000 job postings for cybersecurity positions in 2013, a figure that far surpasses the number of such postings in any other region • New York had the second-highest number with just over 15,000. The San Francisco-San Jose metro area, which includes Silicon Valley, had more than 12,000 [10] http://www.washingtonpost.com/business/capitalbusiness/report-finds-dc-area-a-hotbed-forcybersecurity-jobs/2014/03/08/1b72ff1e-a560-11e3-8466-d34c451760b9_story.html 8 Peggy Brouse, Ph.D. BS Cyber Security Engineering The Volgenau School of Engineering proposes a new undergraduate degree in Cyber Security Engineering (BS/CYSE) to aid in answering these needs This program is an interdisciplinary degree that will reside at the school level The anticipated start date for this degree is Fall 2014 The program was approved by the GMU Board of Visitors in September 2013 It is being reviewed by SCHEV for approval in May 2014 9 Peggy Brouse, Ph.D. BS Cyber Security Engineering This undergraduate program prepares its graduates for a successful career in cyber security engineering Cyber attacks can affect not only computer systems but the physical systems that they are often integrated with and embedded in, including power plants and power distribution systems, manufacturing operations, transportation and navigation systems, health care systems, and many others This program is designed to prepare students for the proactive engineering design of physical systems with cyber security incorporated from the beginning of system development 10 Peggy Brouse, Ph.D. BS CYSE – Curriculum The proposed curriculum has four sets of requirements totaling 126 credit hours. They meet or exceed the following requirements: • • • • University General Education (42 hours) Math and Engineering Courses (19 hours) Program-specific courses (56 hours) Electives (9 hours) The additional 6 credit hours will not impede the four year graduation time 11 Peggy Brouse, Ph.D. BS CYSE – Curriculum – University General Education Foundation Requirements Written Communication ENGH 101 English Composition ENGH 302 Advanced Composition Oral Communication COMM 100 Introduction to Oral Communication Information Technology CS 112 Computer Science I ENGR 107 Engineering Fundamentals Quantitative Reasoning MATH 113 Anal Geometry & Calculus I 3 3 3 4 2 4 Core Requirements Literature Literature elective Arts Fine Arts elective Western Civilization/World History HIST 100 History of Western Civilization, or HIST 125 Introduction to World History Social and Behavioral Science ECON 103 Microeconomics Global Understanding Global Understanding elective Natural Science PHYS 160 University Physics I PHYS 161 University Physics I Laboratory PHYS 260 University Physics II PHYS 261 University Physics II Laboratory 3 3 3 3 3 3 1 3 1 Total: 42 BS CYSE – Curriculum – Math, Science and Engineering Course Requirements MATH 113 Analytic Geometry & Calculus I (counted in University General Requirements) MATH 114 Analytic Geometry & Calculus II 4 MATH 213 Analytic Geometry & Calculus III 3 MATH 203 Linear Algebra MATH 214 Elementary Differential Equations CS 112 Introduction to Computer Programming (counted in University General Requirements) CS 222 Computer Programming for Engineers 3 3 3 ENGR 107 Introduction to Engineering (counted in University General Requirements) PHYS 160 University Physics I (counted in University General Requirements) PHYS 161 University Physics I Lab (counted in University General Requirements) PHYS 260 University Physics II (counted in University General Requirements) PHYS 261 University Physics II Lab (counted in University General Requirements) STAT 344 Probability and Statistics for Engineers and Scientists 3 Total 19 BS CYSE – Curriculum – Cyber Security Engineering Course Requirements CYSE 101 Introduction to Cyber Security Engineering CYSE 205 Systems Engineering Principles CYSE 211 Operating Systems & Lab CYSE 220 System Modeling CYSE 230 Computer Networking CYSE 301 Digital Systems CYSE 325 Discrete Events Systems Modeling CYSE 330 Introduction to Network Security CYSE 411 Secure Software Engineering CYSE 421 Industrial Control Systems (ICS) Security CYSE 425 Secure RF Communications CYSE 430 Critical Infrastructure Protection (seminar) CYSE 445 Systems Security and Resilience CYSE 450 Cyber Vulnerability Lab CYSE 465 Transportation Systems Design CYSE 470 User Experience Engineering (seminar) CYSE 475 Cyber Physical Systems CYSE 491 Engineering Senior Seminar CYSE 492 Senior Advanced Design Project I CYSE 493 Senior Advanced 14 Peggy Brouse, Ph.D.Design Project II 3 3 3 3 3 3 3 3 3 3 3 3 3 1 3 3 3 2 2 3 Total 56 BS CYSE – Curriculum – Electives It is expected that "concentrations" will be developed to allow students to gain special expertise in selected areas of cyber security engineering. Concentrations will require 9 hours selected from the following electives: CYSE 424 – Embedded & Real Time Systems CYSE 460 – Power Systems & Smart Grid CYSE 461 – Power Grid Security CYSE 462 – Mobile Devices and Networks Security CYSE 467 – GPS Systems 3 3 3 3 CYSE 476 – Cryptography and Computer Network Security CYSE 477 – Intrusion Detection 3 3 CYSE 478 – Security Testing and Audit CYSE 479 – Methods of User Authentication 15 Ph.D. Software CYSE Peggy 480 –Brouse, Malicious 3 and Hardware 3 3 3 BS CYSE – Curriculum – Capstone Experience CYSE 492 Senior Advanced Design Project I and CYSE 493 Senior Advanced Design Project II are the capstone courses for the degree • In CYSE 492, students apply knowledge they have gained to a complex real-world problem in a group project. During this first capstone class, students conduct concept definition and requirements analysis. A Project Plan for carrying out the project is developed, culminating in a proposal presented to faculty and corporate sponsors at end of the semester • In CYSE 493, students design a cyber-physical security system, write required software, assemble hardware if needed, conduct experiments or studies, test the complete system and make recommendations to their sponsor. As in CYSE 492, the students present their results to faculty and corporate sponsors • The faculty and corporate sponsors complete evaluation sheets at the end of presentations in both classes 16 Peggy Brouse, Ph.D. Questions? Contact Information: Peggy Brouse, Ph.D. pbrouse@gmu.edu (703) 993-1502 17