Armstrong Atlantic State University Regional Center for Cyber Security Education and Training January 2003 Ray Greenlaw, School of Computing Armstrong Atlantic State University 1 Outline • • • • • Collaborators Why Develop a Cyber Security Center? Cyber Security Center Overview Objectives Budget Ray Greenlaw, School of Computing Armstrong Atlantic State University 2 Outline • • • • • Collaborators Why Develop a Cyber Security Center? Cyber Security Center Overview Objectives Budget Ray Greenlaw, School of Computing Armstrong Atlantic State University 3 Collaborators • William Baugh Savannah Technology Group • Jeff Buerstatte U.S. Attorney’s Office, Southern District of Georgia • Demery Bishop Savannah Crime Stoppers • Michael Donahue Regional Educational Services, Armstrong Atlantic State University • Dan Drake U.S. Attorney’s Office, Southern District of Georgia • Jon Feldman Chatham County • Jim Goodlett • Stephen Jodis School of Computing, Armstrong Atlantic State University • Nathan Katzif Katzif Consulting • Michael Lee Memorial Health University, Medical Center • Letty Shearer Economic Development, Armstrong Atlantic State University • Walter Silverman Micrographic Sciences • Mark Woodruff Hancock, Askew & Co. VeriSign Ray Greenlaw, School of Computing Armstrong Atlantic State University 4 Collaborators • • • • • • • • • • Bluewater Technologies Chatham County Chatham County District Attorney’s Office Chatham County Police Department City of Savannah Entre Solutions Federal Bureau of Investigation George Washington University Georgia Bureau of Investigation Georgia Ports Authority Ray Greenlaw, School of Computing Armstrong Atlantic State University 5 Collaborators • • • • • • • • • Georgia Public Safety Training Center GO Software Gulfstream Hancock, Askew & Co. Memorial Health University Medical Center Micrographic Sciences Ogeechee Technical College Savannah Crime Stoppers Savannah Police Department Ray Greenlaw, School of Computing Armstrong Atlantic State University 6 Collaborators • Savannah Technology Group • Southeastern Law Enforcement Training Center • The Southern Company (Savannah Electric and Power) • VeriSign Ray Greenlaw, School of Computing Armstrong Atlantic State University 7 Outline • • • • • Collaborators Why Develop a Cyber Security Center? Cyber Security Center Overview Objectives Budget Ray Greenlaw, School of Computing Armstrong Atlantic State University 8 Why Develop a Cyber Security Center? Cyber Crimes Identity Theft Types of computer-related crimes. Transmitting Child Pornography Theft of Intellectual Property Cyberstalking Copying or Distribution of Computer Programs Unauthorized Access to Computer Computer Sabotage Computer Forgery Bank Card Fraud Credit Card Fraud 0 5 10 15 20 25 30 35 Any Computer Crime 40 45 Percentages of surveyed prosecutor offices with at least one conviction. Ray Greenlaw, School of Computing Armstrong Atlantic State University 9 Why Develop a Cyber Security Center? Cyber Crimes Reported intrusions to law enforcement Reported intrusions to law enforcement 32% Internet connection cited Internet connection cited point of attack more asas point of attack more frequently than internal frequently than internal systems systems Acknowledged financial Acknowledged financial losses due to computer losses due to computer breaches breaches 74% 1 80% 90% 0 20 40 60 80 Detected computer Detected computer security breaches within security breaches within months thethe lastlast 12 12 months 100 Percentage of users surveyed. Ray Greenlaw, School of Computing Armstrong Atlantic State University 10 Why Develop a Cyber Security Center? Criminal Watch http://criminalwatch.com/resources/cybercrime.asp • United States Internet Crime Task Force • Computer Crime and Intellectual Property Section (CCIPS) • McAfee Anti-Virus Emergency Response Team (AVERT) • Carnegie Mellon CERT Coordinator Center Ray Greenlaw, School of Computing Armstrong Atlantic State University 11 Why Develop a Cyber Security Center? Target Audiences – Person Specific • Corporate User • Consumer User – Device Specific • Telephones • Wireless Cell Devices • Personal Digital Assistants (PDAs) – Network Specific • Wireless Carrier’s Transport • Local Area, Metropolitan Area, and Wireless Area Networks • Internet Ray Greenlaw, School of Computing Armstrong Atlantic State University 12 Why Develop a Cyber Security Center? National Strategy to Secure Cyberspace – Level 1: Home User and Small Business – Level 2: Large Enterprises – Level 3: Critical Sectors – Level 4: National Priorities • • • • Military Bases Coast Guard Facilities Ports of Embarkation/Debarkation Vulnerable and Potentially Exploitable Coastal Area – Level 5: Global Ray Greenlaw, School of Computing Armstrong Atlantic State University 13 Why Develop a Cyber Security Center? Regional Needs – Law Enforcement • • • • • • • • Cyber Forensic Training Litigation Support Analyst Training Electronic Evidence and Internet Law Expertise Real-Time Search and Seizure Authentication Center Link Analysis Encrypted Vault – Financial/Banking Institutions – Health Care Industry • Health Insurance Portability and Accountability Act of 1996 (HIPAA) • Electronic Patient Record Ray Greenlaw, School of Computing Armstrong Atlantic State University 14 Outline • • • • • Collaborators Why Develop a Cyber Security Center? Cyber Security Center Overview Objectives Budget Ray Greenlaw, School of Computing Armstrong Atlantic State University 15 Cyber Security Center Overview • Background – September 2002 5th Science Symposium in Savannah – National Initiatives • President’s Critical Infrastructure Board • The National Strategy to Secure Cyberspace • Cyber Security Research and Development Act • Location – Armstrong Atlantic State University – Department of Information Security Ray Greenlaw, School of Computing Armstrong Atlantic State University 16 Cyber Security Center Overview • Cyber Security Training and Education – Pre- and In-Service Professionals – Public and Private Sectors • Offerings – Continuing and Professional Education Courses – Certified Training – Academic Degree Preparation – Applied Research – Brokering Ray Greenlaw, School of Computing Armstrong Atlantic State University 17 Outline • • • • • Collaborators Why Develop a Cyber Security Center? Cyber Security Center Overview Objectives Budget Ray Greenlaw, School of Computing Armstrong Atlantic State University 18 Objectives • Sponsor, Coordinate, and Provide Cyber Security Training to Private and Public Sector • Serve as Cyber Security Hub, Broker, and Resource Center • Provide Cyber Security Education for Certification and Academic Degrees • Conduct and Foster Cyber Security Research Ray Greenlaw, School of Computing Armstrong Atlantic State University 19 Outline • • • • • Collaborators Why Develop a Cyber Security Center? Cyber Security Center Overview Objectives Budget Ray Greenlaw, School of Computing Armstrong Atlantic State University 20 Budget (5 Years) • Personnel – Faculty – Graduate Research Assistants – Instructors – $11 Million • Equipment – Network Infrastructure – Smart Classrooms – $10 Million Ray Greenlaw, School of Computing Armstrong Atlantic State University • Construction – – – – Analysis Laboratories (2) Classrooms (3) Office Space $6 Million • Operating Expenses – Events Money – Visitor’s Fund – $3 Million • Total $30 Million 21