Innovations in Cybersecurity Education Workshop

University of Maryland, Baltimore County
9:30 – 4:30 Tuesday, 24 June 2014

Innovations in Cybersecurity Education is a regional workshop on cybersecurity education at all levels, from Kindergarden through post-graduate. It will include discussions about cyber competitions, hands-on exercises, educational games, and integrating cybersecurity throughout the curriculum. There will be an opportunity to experience hands-on cyber defense exercises and to play new computer security education games, including SecurityEmpire developed at UMBC.

The workshop is free and open to the public — all are welcome to attend. This workshop will to be of interest to educators, school administrators, undergraduate and graduate students, and government officials.

Please see the links above for the schedule and location and register to help us plan for the number of participants.

The workshop is organized by Dr. Alan T. Sherman with support provided in part by the National Science Foundation under SFS grant 1241576.

The Conquer site provides resources for undergraduate students interested in research, graduate school, and research careers in computing-related fields. It also provides resources for faculty mentors, looking to engage and advise undergraduates in research and prepare them for graduate school in computing fields. The site is maintained by the Computing Research Association, an organization (of which our department is a member!) with the mission to enhance innovation by joining with industry, government and academia to strengthen research and advanced education in computing.

Specific topics of interest to undergraduate students that are covered are:

• What is computing research
• Finding research opportunities
• Undergraduate research awards
• Why go to graduate school?
• The graduate school application process

Ph.D. Dissertation proposal

Creating a Collaborative Situational-Aware IDPS

Lisa Mathews

11:00am Tuesday, 10 June 2014, ITE 346

Traditional intrusion detection and prevention systems (IDPSs) have well known limitations that decrease their utility against many kinds of attacks. Current state-of-the-art IDPSs are point based solutions that perform a simple analysis of host or network data and then flag an alert. Only known attacks whose signatures have been identified and stored in some form can be discovered by most of these systems. They cannot detect “zero day” type attacks or attacks that use “low-and-slow” vectors. Many times an attack is only revealed by post facto forensics after some damage has already been done.

To address these issues, we are developing a semantic approach to intrusion detection that uses traditional as well non-traditional sensors collaboratively. Traditional sensors include hardware or software such as network scanners, host scanners, and IDPSs like Snort. Potential non-traditional sensors include open sources or information such as online forums, blogs, and vulnerability databases which contain textual descriptions of proposed attacks or discovered exploits. After analyzing the data streams from these sensors, the information extracted is added as facts to a knowledge base using a W3C standards based ontology that our group has developed. We have also developed rules/policies that can reason over the facts to identify the situation or context in which an attack can occur. By having different sources collaborate to discover potential security threats and create additional rules/policies, the resulting situational-aware IDPS is better equipped to stop creative attacks such as those that follow a low-and-slow intrusion pattern. Leveraging information from these heterogeneous sources leads to a more robust, situational-aware IDPS that is better equipped to detect complicated attacks. This will allow for detection in soft real time. We will create a prototype of this system and test the efficiency and accuracy of its ability to detect complex malware.

Committee: Drs. Anupam Joshi (Chair), Tim Finin, John Pinkston, Charles Nicholas, Claudia Pearce, Yul Williams

Mobile Analytics: An Enabler for Urban Lifestyle Applications

Professor Archan Misra

School of Information Systems, Singapore Management University

10-11:00am 24 June 2014, ITE 459, UMBC

This talk will describe various research initiatives related to the theme of “urban mobile analytics and applications”, which utilizes smartphone sensor data from multiple individuals to extract near-real time insights about individual and collective behavior in urban public spaces. A major part of this research is being conducted under the auspices of the LiveLabs Experimentation Platform, a unique urban behavioral testbed effort that enables an ecosystem of industry partners to test advanced context-based applications on a pool of approximately 30,000 real-world users in multiple real-world public spaces in Singapore. Besides describing LiveLabs-related research in areas related to energy-efficient mobile sensing and large-scale mobile analytics (e.g., queuing analytics, group detection and adaptive indoor localization). I will describe the role of such analytics for a couple of novel industry-driven applications: (a) in-store shopper intent monitoring and (b) large-scale mobile crowd-tasking.

Archan Misra is an Associate Professor of Information Systems at Singapore Management University (SMU), and a Director of the LiveLabs research center at SMU. Over the past 14 years (as part of his previous jobs with IBM Research and Telcordia Technologies), he has worked extensively in the areas of mobile systems, wireless networking and pervasive computing, and is a co-author on papers that received the Best Paper awards in EUC 2008, ACM WOWMOM 2002 and IEEE MILCOM 2001. Archan’s broad research interests lie in the areas of pervasive computing and mobile systems, with specific current focus on applying mobile sensing and real-time analytics to understand human lifestyle-driven activities in urban spaces. He is presently an Editor of the IEEE Transactions on Mobile Computing and the Elsevier Journal of Pervasive and Mobile Computing and chaired the IEEE Computer Society’s Technical Committee on Computer Communications (TCCC) from 2005-2007. Archan holds a Ph.D. in Electrical and Computer Engineering from the University of Maryland at College Park.

Host: Prof. Nirmalya Roy, Sorry, you need javascript to view this email address.

UMBC has been redesignated as a National Center of Academic Excellence in Information Assurance by the National Security Agency and Department of Homeland Security for both Cyber Defense Research (CAE-R) and Education (CAE-IA/CD) for the academic years 2014-2021. UMBC is one of only 38 institutions in the US. that have recognized by NSA and DHS for both education and research.

The CAE educational designation includes (among other elements) a certification that our curriculum satisfies focus areas and knowledge units (KUs) as outlined in the NICE Framework. This framework aims to establish a common lexicon for students, universities, and employers for describing knoweldge and skills needed for various cybersecurity jobs. The CAE research designation signifies UMBC’s demonstrated excellence in conducting quality research activities pertaining to cybersecurity.

The CAE certification process was coordinated by Dr. Alan Sherman through the Center for Information Security and Assurance (CISA). Among other things, CISA oversees UMBC’s Federal CyberCorps Scholarship For Service program and is actively involved with cybersecurity education and research activities at UMBC, to include the upcoming Innovations in Cybersecurity Education Workshop on June 24.

In recent days, the United States and China have traded accusations about each nation’s alleged (or actual) espionage activities in cyberspace. Moreover, high-profile events like Stuxnet and recurring high-profile cyber-attacks such as the Target data breach continue to keep ‘cyber’ and cybersecurity issues in the news.

Today, CSEE’s Dr. Rick Forno, Cybersecurity GPD and Assistant Director of the UMBC Center for Cybersecurity, was a guest on PRI’s ‘The World’ where he discussed issues related to cyberwarfare, cybersecurity and the international application of cyberpower.

Innovations in Cybersecurity Education Workshop

University of Maryland, Baltimore County
9:30 – 4:30 Tuesday, 24 June 2014

Innovations in Cybersecurity Education is a regional workshop on cybersecurity education at all levels, from Kindergarden through post-graduate. It will include discussions about cyber competitions, hands-on exercises, educational games, and integrating cybersecurity throughout the curriculum. There will be an opportunity to experience hands-on cyber defense exercises and to play new computer security education games, including SecurityEmpire developed at UMBC.

The workshop is free and open to the public — all are welcome to attend. This workshop will to be of interest to educators, school administrators, undergraduate and graduate students, and government officials. Lunch will be provided and there is ample free parking for participants.

Please see the links above for the schedule and location and register to help us plan for the number of participants.

The workshop is organized by Dr. Alan T. Sherman with support provided in part by the National Science Foundation under SFS grant 1241576.

The Maryland Cybersecurity Roundtable will be launched at an open meeting at the Hotel at Arundel Mills Preserve from 1:30-2:30 on Thursday, May 29. Attend to learn about the Roundtable, hear about the organization’s goals and initiatives and discover ways to get involved. RSVP online by May 27.

The Maryland Cybersecurity Roundtable is a premiere forum for the discussion of cybersecurity challenges and solution development, advancement of cyber-related business innovation and growth, programs, policies, and education within Maryland and the region. The Roundtable is dedicated to creating connections and building relationships among current cyber professionals and businesses and fostering the development of the next generation of cyber thought leaders.

Ph.D. Dissertation Defense
Computer Science and Electrical Engineering
University of Maryland, Baltimore County

Human Sensor Networks for Disasters

Oleg Aulov

11:00am Thursday, 29 May 2014, ITE325b, UMBC

This dissertation, presents a novel approach that utilizes quantifiable social media data as a human aware near real-time observing system coupled with geophysical predictive models for improved response to disasters and extreme events. It shows that social media data has the potential to significantly improve disaster management beyond informing the public and emphasizes the importance of different roles that social media can play in management, monitoring, modeling and mitigation of natural and human-caused disasters.

In the proposed approach, social media sources are viewed as a Human Sensor Network, and Social Media users are viewed as “human sensors” that are “deployed” in the field, and their posts are considered to be “sensor observations”. I have utilized the “human sensor observations”, i.e. data acquired from social media, as boundary value forcings to show improved geophysical model forecasts of extreme disaster events when combined with other scientific data such as satellite observations and sensor measurements. In addition, I have developed a system called ASON maps that dynamically combines model forecast outputs with specified social media observations and physical measurements to define the regions of event impacts such as flood distributions and levels, beached tarballs, power outages etc. Real time large datasets were collected, archived and are available for following recent extreme disasters events as use case scenarios.

In the case of the Deepwater Horizon oil spill disaster of 2010 that devastated the Gulf of Mexico, the research demonstrates how social media data can be used as a boundary forcing condition of the oil spill plume forecast model, and results in an order of magnitude forecast improvement. In the case of Hurricane Sandy NY/NJ landfall impact of 2012, owing to inherent uncertainties in the weather forecasts, the NOAA operational surge model only forecasts the worst-case scenario for flooding from any given hurricane. This dissertation demonstrates how the model forecasts, when combined with social media data in a single framework, can be used for near-real time forecast validation, damage assessment and disaster management. Geolocated and time-stamped photos allow near real-time assessment of the surge levels at different locations, which can validate model forecasts give timely views of the actual levels of surge, as well as provide an upper bound regional street level maps beyond which the surge did not spread. In the case of the Tohoku Earthquake and Tsunami of 2011, social media aspects of handheld devices such as Geiger counters that can potentially detect radioactive debris are discussed as well.

Committee: Dr. Milton Halem (chair), Tim Finin, Anupam Joshi, James Smith, Yelena Yesha

Concurrent Technologies Corporation (http://www.ctc.com/) is trying to fill a internship with an undergrad with good software skills to start as soon as possible in their Annapolis Junction, MD facility. If you meet the qualifications and are interested, please follow the directions at the end of this announcement.

—

Are you ready to start your career at a corporation with a respected national reputation for solving complex technical challenges? Become a part of our team. Concurrent Technologies Corporation (CTC) has an opportunity for qualified Software Development Intern.

SOFTWARE DEVELOPMENT INTERN

Primary Responsibilities: CTC is offering a Participative Internship Program (PIP), which is a twelve week, technically focused group internship experience. The PIP is a mix of direct project work coupled with a relevant research project and end of internship presentation. It is a structured internship program providing student mentorship, leadership, technical subject matter expertise, and competency development opportunities.

The research project will include an evaluation of leading edge cloud, mobile, and virtual application based solutions enabling the integration and/or mobility of CTC’s highly scalable Cross Domain Solutions.

Basic Qualifications:

• Qualifying applicants should have course expertise in software development and best practices.

• Should be capable of handling multiple roles (development of software, writing test plans and test cases, requirements traceability, leading test teams) in a team-based environment.

• Currently pursuing a Bachelor of Science Degree in Computer Science or related discipline.

• Must have course familiarity with object-oriented software design and development using languages such as VBA, Java, C and/or C++ and basic computer networking knowledge and Familiarity with iOS and Android development.

• Hadoop, Groovy, Graph Database, iOS, Android and MongoDB experience are considered a plus.

Clearance: U.S. Citizenship.
Join us! Qualified candidates should submit their resumes online at:

http://careers.ctc.com

Email: Sorry, you need javascript to view this email address. or Sorry, you need javascript to view this email address.
Reference Code: SR # 2014-0064
EOE, M/F/D/V