CYBERSECURITY AT UMBC

Innovation that Matters

UMBC – Institutional Overview

National and International Recognition

• UMBC is ranked #7 among the Nation’s “Most Innovative Schools“ on the 2018 U.S. News & World Report Best Colleges Guide

– Joining Arizona State University, Stanford, MIT, Georgia State, Carnegie Mellon and Harvard.

• UMBC is ranked #13 the 2018 U.S. News’ Best Colleges Guide’s list of National Schools with the “Best Undergraduate Teaching”

– Joining Princeton, Stanford, Duke, Yale and Berkeley

• UMBC is ranked #120 globally in Geosciences and #141 in Space Sciences

– #5 globally in geoscience publications among most cited and normalized citation impact

• UMBC is ranked #12 globally for Strength in International Collaborations in Space Sciences

Maryland is a Major Hub of National Cyber Initiatives

• National Security Agency (NSA)

• U.S. Cyber Command

• Intelligence Advanced Research Projects Agency (IARPA)

• Defense Information Systems Agency Headquarters (DISA)

• NIST – National Cybersecurity Center of Excellence (NCCoE)

Cybersecurity in Maryland

UMBC Cybersecurity Ecosystem

Education

Research Entrepreneurship

Degree Programs • BA/BS/MS/MPS/PhD • Undergrad CS Cybersecurity Track

Certificate Programs • Undergrad Cybersecurity Analytics (IS) • Grad: Cybersecurity Operations (CYBR) • Grad: Cyber Strategy & Policy (CYBR)

Scholarships • Federal CyberCorps (SFS)

• UMBC CyberScholars • DOD IASP

Student Organizations • CyberDawgs, hackUMBC • ISSA, ACM, IEEE chapters

• Center for Women in Technology

Non-Credit Training • UMBC Training Centers • Summer Enrichment Experiences • GenCYBER Camps

Campus Research Centers & Labs • Center for Information Security

& Assurance • IBM Accelerated Cognitive

Cybersecurity Laboratory • Malware DREAM Lab • Embedded Systems and

Networks Laboratory • Center for Hybrid Multicore

Productivity Research (CHMPR) • High Performance Computing

Facility • Ebiquity

Collaborations & Partnerships • NIST NCCoE FFRDC • US Naval Academy • Northrop Grumman • NSA, ARL, AFOSR, DARPA,

IARPA • Other USM institutions and

global academia (Keio, Kyushu, et. al.)

• Private Industry

Industry & Business • Cync Program • Cybersecurity Incubator

• Career Services • Office of Tech Transfer • Local, Regional, National, & Global Outreach

Cybersecurity Center

• Interdisciplinary Research Institute comprising over 30 Faculty • Designated by NSA and DHS as CAE-R and CAE-CD

• Graduate and Undergraduate Education Programs

• Traditional Graduate Programs • Cybersecurity MPS designed with industry/government input • Cybersecurity track for CS and CE students; planned for IS • Cyberscholars, SFS CyberCorps, INSURE, etc. …

• Established in 2012 • Director: Anupam Joshi • http://cybersecurity.umbc.edu

UMBC Center for Cybersecurity

UMBC Cybersecurity Research Focus Areas

• Mobile Systems & Device/Endpoint Security

• Policy-based, Context-aware Access Control

• Security and Privacy for IoT/E, Mobile, Cloud Environments

• Big Data/Analytics for Security

• Especially privacy-preserving Analytics

• Economic Risk Analysis for Cyber Attacks

• Cloud Computing Security

• Cyber-Physical Systems

• Public Policy Issues

UMBC Research in Data Science

UMBC Education Initiatives in Data Science

• Multiple courses in a variety of sub areas of Data Science in several departments including CSEE, IS and Math/Statistics

• Data Science Track for Undergraduate and Graduate Students in Computer Science

• Several MS and PhD students conduct research in Data Science

• New Master of Professional Studies in Data Science approved, to launch in Fall 2017

Cybersecurity Curriculum Considerations

• A competent practitioner needs basic computer science and information systems practices – There are varied expectations about what constitutes a “technical

course” and (professional) student qualifications for them

– Practical and theoretical preparation needed

• Programs should focus on context, practice, community and professionalism to further one’s cybersecurity “career” – Not just impart “skills” for a series of “jobs”

• Curriculum also needs to consider technical, social, policy and business components representing

the challenges facing cybersecurity

professionals today.

• UMBC Cyber Dawgs – 2017 National Champions – 1st Place at 2017 National Collegiate Cyber Defense Competition

San Antonio, Texas – April 2017

– Cyber Coaches:

Charles Nicholas & Richard Forno

Cybersecurity Student Experience

NIST-NCCoE FFRDC in Cybersecurity

UMBC and UMCP teamed with MITRE on successful bid for the NIST NCCoE

Federally-funded Research & Development Center (FFRDC) in Cybersecurity

• 25-year, $5 Billion Indefinite Delivery / Indefinite Quantity (IDIQ) Contract

awarded to MITRE/USM Team in September 2014

• FFRDC Home located near USM Shady Grove Campus & NIST Campus

• Academic Advisory Council Leadership by UMBC & UMCP

UMBC/USNA Cyber Partnership

Joint Cybersecurity Research between UMBC and USNA Faculty

• Several multi-year Research Programs supported by ONR

• Total Awards – $2.1 M over three Years

UMBC Faculty:

• Nilanjan Banerjee, Tim Finin, Anupam Joshi, Karuna Joshi, Tim Oates, Chintan Patel, Ryan Robucci – CSEE

• Ravi Kuber & Nirmalya Roy – Information Systems

• Jim Franson & Todd Pittman – Physics

UMBC/USNA Cyber Symposia

• Held at UMBC – March 2016

• Held at USNA – April 2017

Accelerated Cognitive Cybersecurity Lab (ACCL)

• UMBC and IBM announced a collaboration to create the Accelerated Cognitive Cybersecurity Lab (ACCL) • The ACCL advances scientific frontiers in cybersecurity and machine learning.

The lab is supported by a multi-year commitment from IBM. • Initial Support: $ 1 Million • Launch: Fall 2016

• UMBC is also one of eight universities across the Nation selected to train IBM’s

Watson computer system to increase the capacity of cybersecurity professionals to quickly detect and respond to emerging threats.

• ACCL Lead: Anupam Joshi

• Chair & Professor, CSEE

The intellectual merit of CHMPR research lies in expanding the breadth of efficient hybrid multicore computational science applications by advancing knowledge of constrained parallel processing algorithms. CHMPR has a broad spectrum of application areas. In particular, applications consist of Bio-Health Informatics, Data Intensive Computing, Electronic Molecular Imaging, Interactive Digital Media, Climate Change Analysis, and Quantifiable Social Media for Disaster Mitigation. CHMPR is an NSF-supported I/UCRC Center • Director: Yelena Yesha • http://chmpr.umbc.edu

Center for Hybrid Multicore Productivity Research

Education & Training Opportunities at UMBC

• Traditional degree programs (bachelor’s, master’s, doctorate) in computer science, computer engineering, electrical engineering, and information systems with data-science and security-related tracks and certificates. A large number of electives in data science and security offered across these fields of study.

• Professional Degree (MPS) and academic certificates in cybersecurity across two campuses in Maryland. New MPS in data science under development

• Non-credit technical training courses offered by UMBC Training Centers for IT and cyber-professionals

Undergraduate Cybersecurity (BS)

• Traditional CS/CE/IS degree

• Students can select Cybersecurity track – Introduction to security and three electives from a wide set in security area.

• Students may apply for a combined BS/MS or BS/MPS program to continue their studies in cybersecurity via continuous enrollment.

• Exploring: Introductory First Year Elective Course and a course in the Social Sciences tailored to cybersecurity students.

Graduate Programs

• Graduate Studies at the MS/PhD Level: graduate courses in a variety of areas such as computer security, network security, cryptology, coding theory, analytics, privacy, wireless, voting, e-commerce, etc.. Cybersecurity Track in CS. Multiple Ph.D. and MS students complete dissertations in the security area every year.

• Graduate Certificate in Cybersecurity Strategy and Policy: non-technical graduate certificate that provides students the essential domain knowledge required to serve in decision-making roles throughout the cybersecurity industry.

• Masters in Professional Studies - Cybersecurity: prepares computer science, information systems, and other technical professionals to fill management and leadership roles in cybersecurity-related companies or agencies.

• Some courses offered via traditional classroom instruction and via hybrid courses that replace 50% or more of class sessions with asynchronous on-line activities.

Cyber Scholars and Affiliates

• During 2016-2017 – 33 Scholars & Associates

70% women

27% Underrepresented Minorities

Get Program Elements, Live on LLC, most get scholarships

– 104 Cyber Affiliates 51% women

49% Underrepresented Minorities

Get Program elements

Program Elements include CyberPracticum, Research Experience, LLC, Multiple internships, Community, Networking events ….

Professional Degree (MPS)

• Target audience: current IT/cyber professionals

• Curriculum mixes cybersecurity & professional skills development, technical & non-technical

• Currently enrolls nearly 180 students

• Six Core Courses (18 credits)

➢ Introduction to Cybersecurity

➢Cybersecurity Law and Policy

➢Cybersecurity Project

➢Managing Cyber Operations

➢Risk Analysis & Compliance

➢Management, Leadership, Communication

• Four Electives (12 credits) among

➢ Software Security

➢Cyber Warfare

➢Mobile Device Security

➢Global Cyber Capabilities & Trends

➢Practitioner Development Lab

➢Malware Analysis (CMSC)

➢Reverse Engineering (CYBR/CMSC)

UMBC Training Centers

• The Center for Cybersecurity Training at UMBC Training Centers.

• Variety of programs ranging from entry-level cybersecurity foundations to advanced cyber warrior programs for the military, intelligence and contractors communities.

• Professional certification preparation to meet DoD Directive 8570 (CompTIA Security+, CISSP, etc.).

• Training delivered at UMBC, or at satellite locations in Northeast, MD, Rockville, MD or Tyson’s Corner, VA.

• Mobile Cybersecurity Lab available for onsite training. • UMBC Training Centers has been granted facility security

clearance to be eligible for a broad range of training engagements.

Industry and Government Partnerships

• Recent Cooperative Agreements include

– NSA, ARL, USA RDECOM

• Recent research grants from

– NSF, NIST, DARPA, NSA, ONR and AFOSR

• Strong corporate support from

– IBM, GE, Cisco, Northrop Grumman

• Entrepreneurship @ bwtech

• UMBC is co-directing research @ NIST NCCoE FFRDC

The Cyber Incubator at UMBC’s Technology Park – bwtech@UMBC

• Supports early stage companies providing technology-related products and services to the DoD and intelligence communities

• Furnished, class-A shared suite amenities and advisory services

• Partnership with Northrop Grumman – CYNC Program

• Cyber Map, Cyber Hive – business development and attraction

Over 50 cyber security companies located at bwtech@UMBC

bwtech@UMBC Cyber Incubator

UMBC & bwtech@UMBC – A Continuum of Support for Entrepreneurs

Start-up

Incubation Inventions

Development

Seed Funds

Proof-of Concept

Funds

Commercial

Development

UMBC Faculty & Students

Technology Catalyst Fund

Maryland Innovation Initiative

bwtech@UMBC Technology Incubators

bwtech@UMBC Research Park

© 2017 bwtech@UMBC

Cybersecurity @ UMBC Stats

~130 Companies in Research Park

56 Cyber Companies in Park

44 in Cyber Incubator

~65% Women, Minority and/or

Veteran

~48% Product Companies

© 2017 bwtech@UMBC

• Proximity to federal labs, NSA, Fort

Meade, Aberdeen

• Experience & programs assisting

entrepreneurs

• Robust connectivity infrastructure

• Co-located with DOD/Intelligence

agencies

• HUBZone location

Why Cyber at bwtech@UMBC?

© 2017 bwtech@UMBC

• NSA/DHS designation as a

“Center of Academic

Excellence”

• UMBC national leader in STEM

graduates

• UMBC Training Centers

• UMBC CISA, MC2, MIPAR

• 5 minutes from BWI Thurgood

Marshall Airport

© 2017 bwtech@UMBC

© 2017 bwtech@UMBC

Mission

• Support UK and other allied foreign cyber companies to establish US

presence

• Support MD’s desire to increase FDI into the state and create jobs

2-Pronged Approach

• Intensive Executive Training program: what it takes to succeed in the US

• A 12-month market entry incubator for qualifying companies to assist

with US market entry and development efforts

• Start in UK, focus on Five Eyes

• 100 International companies over next 5 years

• 75-100 new Maryland jobs created

• Estimated $35 million annually in income generation & sales

• Other impacts:

• Students: hiring opportunities for UMBC & other area Univ. students

• MD cyber ecosystem

• Broaden technology innovation and solutions derived from MD

• UK academic and business collaborations

• 2ndary goal: US companies landing in UK

**We already have 6-8 viable UK prospects asking for entrance into our program.

Program Impact and Goals**

© 2017 bwtech@UMBC

© 2017 bwtech@UMBC

International Cybersecurity Center Partners & Potential Partners

• Maryland Department of Commerce

• University of Maryland Baltimore County (UMBC)

• Economic Alliance of Greater Baltimore

• Looking for industry and other US/International

industry & academic partners

• Orientation

• US Cyber Market Overview

• Corporate Structure / Legal / Tax

• Employment Law/ Immigration

• Hiring Talent / US Hiring Practices

• Competitive Landscape

Executive Training – One Week Intensive

• Business Development

• Go to Market Strategies

• Maryland Cyber Ecosystem

• SWOT Analysis

• Public Sector CISO Decision Making

• Private Sector CISO Decision Making

• GSA / Privacy Policies / Certs & Regs

• Access to Funding

• US Market Entry Action Plans

© 2017 bwtech@UMBC

Monday

Orientation

US Cyber Market (J. Pescatore)

Go-To-Market Strategies

UMBC Tour / Intro MD

Ecosystem

Tuesday

Legal/Taxes/HR (WTP)

Import/Export, Privacy (WTP)

Competitive Landscape (T.

Weller)

Selling to Gov’t (G. Larkin)

Wednesday

SPEED DATING: Gov’t & Private

Sector Cyber CISOs

(Intro session with comments on govt and

private cyber opportunities)

Investor & Local Cyber CEO Panel /

Happy Hour*

Thursday

Mini SWOT Analysis

(Nexight?)

Draft Action Plans + help from EiRs

(working lunch)

Company Presentations &

Wrap Up

Executive Training Schedule 2018 Dates: Mar 5-8, Jun 25-28

v5

1st part held at WTC in Balt. City; 2nd part at same or nearby pub

9:00-10:00

10:30-12:00

1:00-3:00

3:30-5:00

8:30-10:00

10:30-12:00

1:00-2:30

3:00-4:30

8:30-2:00

3:00-6:00+

8:30-10:30

11:00-1:30

2:00-4:00

1st Cohort (6-8 companies) will be March 5-8, 2018 Three cohorts per year.

© 2017 bwtech@UMBC

Logistics:

™

• Business & Management Support

• Entrepreneurs in Residence

• Advisory Board

• Professional Services Partnerships

• Training & Networking Events

• Access to Capital / Financing

• Access to UMBC Resources

• Industry Partnerships

• International Business Experts

iCyberCenter Incubator

Ellen Hemmerly– hemmerly@umbc.edu

Andy Williams – andy.williams@umbc.edu

Jennifer Reynolds – jreynolds@umbc.edu

© 2017 bwtech@UMBC

Key Contacts

We are very happy to speak individually to anyone with questions or suggestions.