Cyber Security - Department of Computer Science & Information

advertisement
Armstrong Atlantic State University
Regional Center for Cyber Security
Education and Training
January 2003
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
1
Outline
•
•
•
•
•
Collaborators
Why Develop a Cyber Security Center?
Cyber Security Center Overview
Objectives
Budget
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
2
Outline
•
•
•
•
•
Collaborators
Why Develop a Cyber Security Center?
Cyber Security Center Overview
Objectives
Budget
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
3
Collaborators
• William Baugh
Savannah Technology Group
• Jeff Buerstatte
U.S. Attorney’s Office,
Southern District of Georgia
• Demery Bishop
Savannah Crime Stoppers
• Michael Donahue
Regional Educational Services,
Armstrong Atlantic State University
• Dan Drake
U.S. Attorney’s Office,
Southern District of Georgia
• Jon Feldman
Chatham County
• Jim Goodlett
• Stephen Jodis
School of Computing,
Armstrong Atlantic State University
• Nathan Katzif
Katzif Consulting
• Michael Lee
Memorial Health University,
Medical Center
• Letty Shearer
Economic Development,
Armstrong Atlantic State University
• Walter Silverman
Micrographic Sciences
• Mark Woodruff
Hancock, Askew & Co.
VeriSign
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
4
Collaborators
•
•
•
•
•
•
•
•
•
•
Bluewater Technologies
Chatham County
Chatham County District Attorney’s Office
Chatham County Police Department
City of Savannah
Entre Solutions
Federal Bureau of Investigation
George Washington University
Georgia Bureau of Investigation
Georgia Ports Authority
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
5
Collaborators
•
•
•
•
•
•
•
•
•
Georgia Public Safety Training Center
GO Software
Gulfstream
Hancock, Askew & Co.
Memorial Health University
Medical Center
Micrographic Sciences
Ogeechee Technical College
Savannah Crime Stoppers
Savannah Police Department
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
6
Collaborators
• Savannah Technology Group
• Southeastern Law Enforcement
Training Center
• The Southern Company
(Savannah Electric and Power)
• VeriSign
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
7
Outline
•
•
•
•
•
Collaborators
Why Develop a Cyber Security Center?
Cyber Security Center Overview
Objectives
Budget
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
8
Why Develop a Cyber Security Center?
Cyber Crimes
Identity Theft
Types of computer-related crimes.
Transmitting Child
Pornography
Theft of Intellectual
Property
Cyberstalking
Copying or Distribution
of Computer Programs
Unauthorized Access to
Computer
Computer Sabotage
Computer Forgery
Bank Card Fraud
Credit Card Fraud
0
5
10
15
20
25
30
35
Any Computer Crime
40
45
Percentages of surveyed prosecutor offices with at least one conviction.
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
9
Why Develop a Cyber Security Center?
Cyber Crimes
Reported intrusions to law
enforcement
Reported intrusions
to law enforcement
32%
Internet
connection
cited
Internet
connection
cited
point
of attack
more
asas
point
of attack
more
frequently
than
internal
frequently than internal
systems
systems
Acknowledged
financial
Acknowledged
financial
losses
due
to
computer
losses due to computer
breaches
breaches
74%
1
80%
90%
0
20
40
60
80
Detected
computer
Detected
computer
security
breaches
within
security
breaches
within
months
thethe
lastlast
12 12
months
100
Percentage of users surveyed.
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
10
Why Develop a Cyber Security Center?
Criminal Watch
http://criminalwatch.com/resources/cybercrime.asp
• United States Internet Crime Task Force
• Computer Crime and Intellectual
Property Section (CCIPS)
• McAfee Anti-Virus Emergency
Response Team (AVERT)
• Carnegie Mellon CERT Coordinator
Center
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
11
Why Develop a Cyber Security Center?
Target Audiences
– Person Specific
• Corporate User
• Consumer User
– Device Specific
• Telephones
• Wireless Cell Devices
• Personal Digital Assistants (PDAs)
– Network Specific
• Wireless Carrier’s Transport
• Local Area, Metropolitan Area, and Wireless Area
Networks
• Internet
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
12
Why Develop a Cyber Security Center?
National Strategy to Secure Cyberspace
– Level 1: Home User and Small Business
– Level 2: Large Enterprises
– Level 3: Critical Sectors
– Level 4: National Priorities
•
•
•
•
Military Bases
Coast Guard Facilities
Ports of Embarkation/Debarkation
Vulnerable and Potentially Exploitable
Coastal Area
– Level 5: Global
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
13
Why Develop a Cyber Security Center?
Regional Needs
– Law Enforcement
•
•
•
•
•
•
•
•
Cyber Forensic Training
Litigation Support
Analyst Training
Electronic Evidence and Internet Law Expertise
Real-Time Search and Seizure
Authentication Center
Link Analysis
Encrypted Vault
– Financial/Banking Institutions
– Health Care Industry
• Health Insurance Portability and
Accountability Act of 1996 (HIPAA)
• Electronic Patient Record
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
14
Outline
•
•
•
•
•
Collaborators
Why Develop a Cyber Security Center?
Cyber Security Center Overview
Objectives
Budget
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
15
Cyber Security Center Overview
• Background
– September 2002
5th Science Symposium in Savannah
– National Initiatives
• President’s Critical Infrastructure Board
• The National Strategy to Secure Cyberspace
• Cyber Security Research and Development Act
• Location
– Armstrong Atlantic State University
– Department of Information Security
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
16
Cyber Security Center Overview
• Cyber Security Training and Education
– Pre- and In-Service Professionals
– Public and Private Sectors
• Offerings
– Continuing and Professional
Education Courses
– Certified Training
– Academic Degree Preparation
– Applied Research
– Brokering
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
17
Outline
•
•
•
•
•
Collaborators
Why Develop a Cyber Security Center?
Cyber Security Center Overview
Objectives
Budget
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
18
Objectives
• Sponsor, Coordinate, and Provide
Cyber Security Training to Private and
Public Sector
• Serve as Cyber Security Hub,
Broker, and Resource Center
• Provide Cyber Security Education for
Certification and Academic Degrees
• Conduct and Foster
Cyber Security Research
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
19
Outline
•
•
•
•
•
Collaborators
Why Develop a Cyber Security Center?
Cyber Security Center Overview
Objectives
Budget
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
20
Budget (5 Years)
• Personnel
– Faculty
– Graduate Research
Assistants
– Instructors
– $11 Million
• Equipment
– Network
Infrastructure
– Smart Classrooms
– $10 Million
Ray Greenlaw, School of Computing
Armstrong Atlantic State University
• Construction
–
–
–
–
Analysis Laboratories (2)
Classrooms (3)
Office Space
$6 Million
• Operating Expenses
– Events Money
– Visitor’s Fund
– $3 Million
• Total
$30 Million
21
Download