Volgenau School of Engineering

BS Cyber Security Engineering

Peggy Brouse, Ph.D.

Cyber Security Initiative

Cyber security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access

Cyber security engineering is the proactive engineering design of physical systems with cyber security incorporated from the beginning of system development

Peggy Brouse, Ph.D.2

Cyber Security Initiative Industry, government, and academia increasingly seek individuals who can use

their engineering expertise to solve problems in cyber security On 26 February 2014, Governor Terry McAuliffe signed Executive Order

Number 8, which launches a new framework for the Commonwealth’s cyber security efforts called “Cyber Virginia,” and establishes the Virginia Cyber Security Commission to bring public and private sector experts together to make recommendations on how to make Virginia the national leader in cyber security [1]

Federal spending for cyber security is estimated to be $13.3 billion by 2015, and the 2012 Department of Defense budget for cyber alone is $3.2 billion [2]

Cyber security spending as a whole topped $60 billion globally in 2011 and is expected to grow at a rate of almost 10% every year, over the next 3-5 years [3]

Peggy Brouse, Ph.D.3

[1] http://technology.virginia.gov/news/newsarticle?articleId=3445

[2] Virginia’s Innovation Ecosystem: The Trusted Leader in Growing Cyber Security Solutions, Office of Virginia’s Secretary of Technology

[3] http://www.technology.virginia.gov/news/viewRelease.cfm?id=1087

Cyber Security Initiative Global Growth and Need

• Despite economic slow down and a tight job market, the demand for cyber security professionals has grown 3.5 times faster than the demand for other IT professionals and about 12 times faster than the demand for all other jobs in the past five years [4]

• Continued growth of mobile platforms, cloud computing, electronic transfer of secure information, and electronically operated systems in everything from electricity generation and stock market trading to keeping up with the latest in social media has driven a need for these highly coveted cyber graduates around the world and outside of the government/defense sectors, which were previously the primary employers for such

Peggy Brouse, Ph.D.4 [4]http://www.businesswire.com/news/home/20130805005341/en/California-Metro-Washington-D.C.-%E2%80%93-Top-Destinations

Cyber Security Initiative Global Growth and Need [continued]

• In a 2013 Global Information Security Workforce Study, it was predicted that the demand for cyber security professionals will experience double-digit, year-over-year percentage increases over the next five years in the Americas, Asia-Pacific (APAC), and the Europe, Middle East, and Africa (EMEA) [5]

• This growth worldwide, as well as, increased need in industries outside of government and defense, which require security clearances, creates opportunities in cyber security for students that may not have previously considered the subject because of their inability to qualify for American work visas or security clearances

Peggy Brouse, Ph.D.5

[5]https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/2013%20Global%20Information%20Security%20Workforce%20Study%20Feb%202013.pdf

Cyber Security Initiative Global Shortages

• In the 2013 Global Workforce Study, 56% of the 12,000 information security professionals, including 2/3 of the executive level respondents with budgetary influence, believe there is a shortage in their cyber security workforce [6]

• The Wanted Analytics adds, “With hiring growing, these jobs are likely to be very hard for recruiters and employers to fill. Currently, our Hiring Scale scores these positions as an 85. The scores range from 1 (representing less difficulty) to 99 (representing more difficulty). At an 85, it's likely that employers will experience fierce competition to attract candidates and a long time-to-fill.” [7]

Peggy Brouse, Ph.D.6

[6]https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/2013%20Global%20Information%20Security%20Workforce%20Study%20Feb%202013.pdf

[7] http://www.wantedanalytics.com/insight/2013/07/10/hiring-trends-for-cyber-security-jobs/

Cyber Security Initiative Demand in D.C., Maryland, and Virginia (DMV)

• With DC, Maryland and Virginia requiring a large number of these cyber specialized employees for the federal government and defense sectors alone, the ability to find graduates within Virginia would be advantageous for employers in the DMV region  

• The Wanted Analytics analyzed the demand for cyber security jobs in July 2013. Over a 90 day period there were more than 13,000 jobs available online for jobs that required experience in cyber security. This is a 24% year-over-year increase when compared to the same 90-day period in 2012 [8]

• Last year, then Virginia Governor Bob McDonnell rolled out an initiative to attract more cyber based businesses to join the states existing 300 [9]

7

[8] http://www.wantedanalytics.com/insight/2013/07/10/hiring-trends-for-cyber-security-jobs/

[9] http://www.technology.virginia.gov/news/viewRelease.cfm?id=1087

Cyber Security Initiative Demand in D.C., Maryland, and Virginia (DMV)

[continued]• As reported in the Washington Post in February 2014 [10], Burning

Glass Technologies conducts daily reviews of job postings across 32,000 online sites. In a report released last month, the company said that the Washington metropolitan area had more than 23,000 job postings for cybersecurity positions in 2013, a figure that far surpasses the number of such postings in any other region

• New York had the second-highest number with just over 15,000. The San Francisco-San Jose metro area, which includes Silicon Valley, had more than 12,000

Peggy Brouse, Ph.D.8

[10] http://www.washingtonpost.com/business/capitalbusiness/report-finds-dc-area-a-hotbed-for-cybersecurity-jobs/2014/03/08/1b72ff1e-a560-11e3-8466-d34c451760b9_story.html

BS Cyber Security Engineering

The Volgenau School of Engineering proposes a new undergraduate degree in Cyber Security Engineering (BS/CYSE) to aid in answering these needs

This program is an interdisciplinary degree that will reside at the school level

The anticipated start date for this degree is Fall 2014 The program was approved by the GMU Board of Visitors in

September 2013 It is being reviewed by SCHEV for approval in May 2014

Peggy Brouse, Ph.D.9

BS Cyber Security Engineering

This undergraduate program prepares its graduates for a successful career in cyber security engineering

Cyber attacks can affect not only computer systems but the physical systems that they are often integrated with and embedded in, including power plants and power distribution systems, manufacturing operations, transportation and navigation systems, health care systems, and many others

This program is designed to prepare students for the proactive engineering design of physical systems with cyber security incorporated from the beginning of system development

Peggy Brouse, Ph.D.10

BS CYSE – Curriculum

The proposed curriculum has four sets of requirements totaling 126 credit hours. They meet or exceed the following requirements:• University General Education (42 hours)• Math and Engineering Courses (19 hours)• Program-specific courses (56 hours)• Electives (9 hours)

The additional 6 credit hours will not impede the four year graduation time

11 Peggy Brouse, Ph.D.

BS CYSE – Curriculum – University General Education

Foundation RequirementsWritten Communication ENGH 101 English Composition 3ENGH 302 Advanced Composition 3Oral Communication COMM 100 Introduction to Oral Communication 3Information Technology CS 112 Computer Science I 4ENGR 107 Engineering Fundamentals 2Quantitative Reasoning MATH 113 Anal Geometry & Calculus I 4

Core RequirementsLiterature Literature elective 3Arts Fine Arts elective 3Western Civilization/World History HIST 100 History of Western Civilization, or HIST 125 Introduction to World History 3Social and Behavioral Science ECON 103 Microeconomics 3Global Understanding Global Understanding elective 3Natural Science PHYS 160 University Physics I 3PHYS 161 University Physics I Laboratory 1PHYS 260 University Physics II 3PHYS 261 University Physics II Laboratory 1

Total: 42

BS CYSE – Curriculum – Math, Science and Engineering Course Requirements

MATH 113 Analytic Geometry & Calculus I (counted in University General Requirements)

MATH 114 Analytic Geometry & Calculus II 4

MATH 213 Analytic Geometry & Calculus III 3

MATH 203 Linear Algebra 3MATH 214 Elementary Differential Equations 3CS 112 Introduction to Computer Programming (counted in University General Requirements) CS 222 Computer Programming for Engineers 3ENGR 107 Introduction to Engineering (counted in University General Requirements) PHYS 160 University Physics I (counted in University General Requirements) PHYS 161 University Physics I Lab (counted in University General Requirements) PHYS 260 University Physics II (counted in University General Requirements) PHYS 261 University Physics II Lab (counted in University General Requirements)

STAT 344 Probability and Statistics for Engineers and Scientists 3

Total 19

BS CYSE – Curriculum – Cyber Security Engineering Course Requirements

Peggy Brouse, Ph.D.14

CYSE 101 Introduction to Cyber Security Engineering 3CYSE 205 Systems Engineering Principles 3CYSE 211 Operating Systems & Lab 3CYSE 220 System Modeling 3CYSE 230 Computer Networking 3CYSE 301 Digital Systems 3CYSE 325 Discrete Events Systems Modeling 3CYSE 330 Introduction to Network Security 3CYSE 411 Secure Software Engineering 3CYSE 421 Industrial Control Systems (ICS) Security 3CYSE 425 Secure RF Communications 3CYSE 430 Critical Infrastructure Protection (seminar) 3CYSE 445 Systems Security and Resilience 3CYSE 450 Cyber Vulnerability Lab 1 CYSE 465 Transportation Systems Design 3CYSE 470 User Experience Engineering (seminar) 3CYSE 475 Cyber Physical Systems 3CYSE 491 Engineering Senior Seminar 2CYSE 492 Senior Advanced Design Project I 2CYSE 493 Senior Advanced Design Project II 3

Total 56

BS CYSE – Curriculum – Electives It is expected that "concentrations" will be developed to allow students to

gain special expertise in selected areas of cyber security engineering. Concentrations will require 9 hours selected from the following electives:

15 Peggy Brouse, Ph.D.

CYSE 424 – Embedded & Real Time Systems 3CYSE 460 – Power Systems & Smart Grid 3CYSE 461 – Power Grid Security 3CYSE 462 – Mobile Devices and Networks Security 3CYSE 467 – GPS Systems 3CYSE 476 – Cryptography and Computer Network Security 3CYSE 477 – Intrusion Detection 3CYSE 478 – Security Testing and Audit 3CYSE 479 – Methods of User Authentication 3CYSE 480 – Malicious Software and Hardware 3

BS CYSE – Curriculum – Capstone Experience

CYSE 492 Senior Advanced Design Project I and CYSE 493 Senior Advanced Design Project II are the capstone courses for the degree• In CYSE 492, students apply knowledge they have gained to a complex real-world

problem in a group project. During this first capstone class, students conduct concept definition and requirements analysis. A Project Plan for carrying out the project is developed, culminating in a proposal presented to faculty and corporate sponsors at end of the semester

• In CYSE 493, students design a cyber-physical security system, write required software, assemble hardware if needed, conduct experiments or studies, test the complete system and make recommendations to their sponsor. As in CYSE 492, the students present their results to faculty and corporate sponsors

• The faculty and corporate sponsors complete evaluation sheets at the end of presentations in both classes

16 Peggy Brouse, Ph.D.

Questions?

Contact Information:

Peggy Brouse, Ph.D.

pbrouse@gmu.edu

(703) 993-1502

17