Cybersecurity Education in North Dakota Tony Aukland Information

Cybersecurity Education in North Dakota Tony Aukland Information Systems Security Analyst

How did we get here? Amazon Social Media Cloud Data Online Shopping Internet Streaming Services E-commerce Gaming Texting Home Monitoring Email SCADA

How did we get here? Botnets DDo. S Hackers Hacktivists Malware Spectre Ransomware Phishing Meltdown Predators Wanna. Cry

Who is Targeting Us? § § Cyber Criminals § Primary use to Make Money § Organized Crime Terrorists/Extremists § Propaganda/Fundraising § Recruitment of Youth § Target Recon Hacktivists § Ideologically Motivated § Politically Charged Nation States § Advanced Persistent Threat § Government attacks Vikingdom

North Dakota Looking Ahead (K-20) § Group of educators, administrators, employers, workforce development and private business § Get out of silos! Striving for the same goals! § Know what we are all doing! Pool our resources! § K-20 Education Pipeline Interstate § Develop Workforce § § Cybersecurity labor shortage 1. 5 – 3. 5 millions vacancies in next 5 years North Dakota Cybersecurity § Being developed in conjunction with Public and Private entities, for Public and Private entities.

North Dakota Looking Ahead (K-20) Participants § Office of the Governor § ND Educational Technology Council § North Dakota University System § § North Dakota State University § University of North Dakota § Bismarck State College § Minot State University Workforce Development § Department of Labor / Job Service § Commerce Department § Career and Technical Education § Tech. ND (formerly ITCND)

North Dakota Looking Ahead (K-20) Participants § ND Center for Distance Education § Department of Public Instruction § Education Standards & Practices Board § Edu. Tech § National Integrated Cyber Education Research Center § Palo Alto § Information Technology Department § ND State & Local Intelligence Center

NDSU – Leading the Herd § Ph. D. programs in Computer Science & Software Engineering with cybersecurity option § M. S. programs in Computer Science & Software Engineering with cybersecurity option § B. S. program in Computer Science with multiple cybersecurity options (aligned with 2018 NSA/DHS Center ofr Academic Excellence requirements § Cybersecurity Research § Cyber Defense § Cyber Operations § Cybersecurity Tool Development § Participating in Hacking for Defense program § Graduate Certificate Program in Cybersecurity (NDUS Collaborative) § Undergraduate Minor in Cybersecurity

NDSU – Leading the Herd Cybersecurity Course Topics at NDSU § Research Methods § Information Security § Offensive & Defensive Network Security § Ethical Hacking § Web Software Security § Reverse Engineering § Malware Analysis § Information Warfare § Cybersecurity Law & Policy § Computational Crime & Forensics § Cybersecurity Management

NDSU – Leading the Herd § Education for K-12 Educators § Graduate courses currently available § Developing graduate certificate to prepare K-12 educators in Computer Science, including cybersecurity content § K-12 Summer Camp in Cybersecurity 2018 § NDSU Cybersecurity Student Organization § § Competing in Cyber Collegiate Defense Challenge (Dakota. Con) Contact http: //www. ndsu. edu/cybersecurity for more information Director: Dr. Kendall Nygard NDSU Computer Science Department Chair QBB 258 A 24 (701) 231 -8203 kendall. nygard@ndsu. edu Associate Director: Dr. Jeremy Straub NDSU Assistant Professor of Computer Science QBB 258 B 8 (701) 231 -8196 Jeremy. Straub@ndsu. edu

UND § Computer Science has been moved into college of electrical engineering and mines. § Graduate Certificate Program in Cybersecurity (NDUS Collaborative) § Curriculum coming this Fall § § § UND‐CSCI : Bachelor of Science in Data Science ‐ New Program UND‐CSCI : Master of Science in Data Science – New Program UND‐CSCI : Minor in Cyber Security ‐ New Program UND‐EE : B. S. Degree in Cyber Security – New Program UND‐EE : M. S. Degree in Cyber Security – New Program Contact: § Prakash Ranganathan, Ph. D. (Assistant Professor / IEEE Senior Member) Department of Electrical Engineering 243, Centennial Drive, Stop 7165 Office: Upson II Room 160 -L Phone: 701. 777. 4431 (work) E-mail: prakash. ranganathan@engr. und. edu

BSC § NDUS has approved BSC to offer a Bachelor of Applied Science in Cybersecurity. § Students are able to finish in two years. § With the approved Bachelor of Applied Science, students will be able to complete a higher degree. § BSC is geared to workforce training § Working with high schools to offer dual credit § BSC offers a Tech Summer Camp to middle school age students which includes a program project, cyber program, and database. § Offer many classes that lead towards industry certifications – A+, Security+, CCNA, Linux+, MCSA, Starting Palo Alto certs in Fall

BSC § Industry partnerships, local businesses such as MDU, Basin, NISC, ITD, and global like Palo Alto and Cisco (we are a Cisco networking Academy) § BSC Cybersecurity Center § § NSA Centre of Academic Excellence § Committed to providing high level cybersecurity training and awareness § https: //bismarckstate. edu/academics/programs/careertechnicalprogram s/computersupport/cybercenter/ Contact: Matt Frohlich Technical Center 110 Phone: 701 -224 -5581 Email: Matthew. Frolich@bismarckstate. edu Nick See Technical Center 106 Phone: 701 -224 -5528 Email: Nicklos. See@bismarckstate. edu

Minot State University § § § Computer Science Degrees offered at Minot State § Bachelor of Science with a Major in Computer Science § Minor in Computer Science (non-teaching) § Minor in Computer Science (teaching) § Concentration in Computer Science § Certificate in Computer Programming § New graduate certificate in cybersecurity management Coursework § Computer Security § Database Design/Administration § Software Development/Engineering § System Administration and Web Programming § Preparation for Graduate School Contact: Dr. Sayeed Sajal Office Model 110 Email: Sayeed. sajal@minotstate. edu Telephone: (701) 858 -3075

Looking Ahead ND K-20 ND Center for Distance Education § Provides distance learning pre-K through 12. § Use a process-based management system which allows for customization for K-12 and colleges. § ND Center for Distance Education currently offers cybersecurity courses. In addition, ND CDE offers: § Choice: nobody in ND should not have access to learning opportunities. § Opportunity: access to different ways of learning § Validation: connect students to each other and that they can succeed.

Looking Ahead ND K-20 ND Center for Distance Education § ND Smart Lab (a “turnkey” environment that provides curriculum, software, pre-made kits, etc. ) § A tool set implemented a couple years ago - partnered with Creative Learning Systems (Colorado). § Focus on non-traditional classroom. § Education across multiple platforms. § Currently have labs in La. Moure, Lisbon, Litchville-Marion, Fargo. § Additional schools have committed

Looking Ahead ND K-20 Edu. Tech § Edu. Tech a division within the North Dakota Information Technology Department § § Focused on PK-12 educational technology services. Provides numerous IT services, such as Statewide K-12 Infrastructure § Educational technology professional development § Student information/educational data services § Support services § § § Edu. Tech services are designed to give educators access, training, consulting, coaching, and support to use current and innovative educational technologies in their classrooms that improve teaching and learning. Edu. Tech partnering with NICERC to offer multiple services including: § § creating awareness offer trainings to teachers Middle school this year § High school next year §

Looking Ahead ND K-20 Edu. Tech § Edu. Tech provides support services, training, outreach to schools regionally and locally. § Staff in locations across North Dakota. § § § § Dickinson Bismarck Valley City Grand Forks Fargo Rugby Maxbass

NICERC National Integrated Cyber Education Research Center § Great partner for North Dakota § Cyber Innovation Center founded in 2007. § It all starts with K-12 level education. § Building partnerships with schools and communities interested in cyber, STEM, and computer science. § Developing nation’s cyber workforce through creation & enhancement of cyber, STEM, and computer science educational opportunities for teachers and students. § Students need to be introduced to cyber education much earlier (elementary) to organically grow our workforce. § Want to build a place where students can enter the education system/workforce through project-based learning. § The goal is to integrate cyber into all aspects of our student’s education.

NICERC National Integrated Cyber Education Research Center § NICERC is federally funded through Homeland Security § § § Three pronged approach § § All teachers have free access to curriculum Supplies would need to be purchased (at a low cost). Content Engagement Professional Development Contact: Kevin Nolten Director of Academic Outreach Email: kevin. nolten@cyberinnovationcenter. org Phone: 318 -759 -1600

Homeland Security Cybersecurity Education NICCS National Initiative for Cybersecurity Careers & Studies § Cyber. Corps Scholarship for Service § National Science Foundation (NSF) provides scholarships to students for cybersecurity-related degree programs § In return for service in federal, state, local, or tribal governments upon graduation. § § § North Dakota discussing Currently no North Dakota Colleges & Universities participate More Information § https: //niccs. us-cert. gov/formal-education/cybercorps-scholarship-service-sfs

Homeland Cybersecurity Education NICCS National Centers for Academic Excellence § Jointly sponsored by Homeland Security and the National Security Agency § 2 & 4 year colleges and universities can become a CAE § Recognized/based on their robust cybersecurity KU’s (Knowledge Units) § NDSU & BSC working towards this § More information https: //niccs. us-cert. gov/formal-education/national-centers -academic-excellence-cae

Homeland Cybersecurity Education NICCS Integrating Cybersecurity into the Classroom § Resources for middle and high school teachers and educators § STEM EDA (Explore, Discover, Apply) workshops available for middle school educators § STEM EDF (Education Discovery Forum) workshops available for high school teachers § More Information: § https: //niccs. us-cert. gov/formal-education/integrating-cybersecurity-classroom

Palo Alto Networks / Cybersecurity Academy https: //www. paloaltonetworks. com/services/education/academy § Provides degree-granting, accredited academic institutions with courseware, certification, training labs, and faculty training – at no cost § Gives today’s cybersecurity students hands-on knowledge of the leading next-gen security platform § Benefits of Joining: § Training on next-gen security and threat prevention § Use fully bundled VM-100 Virtual Machine appliances § Use NDG Netlab+ services to run PA Network Labs § Access to Cybersecurity courseware & e-learning § PCSNE certification vouchers at 50% discount

SANS Cyberstart § SANS Institute = stands for Sys. Admin, Audit, Network, and Security § Provides security courses involving administrators, security managers, and information security professionals § Many delivery methods § § Self-paced / Online / Cyber Clubs/ Classroom Cyber. Start UK § United Kingdom = nationwide program to find, motivate and develop cyber talent § Launched January 2018 § For students in 10 – 13 (9 – 12 grade, 14 – 18 years old) § UK invested $25 Million to develop 6000 Cyber Warriors § 20, 000 students from across England § Expected 5% to pass § If players get passed Level 7, considered strong in Cybersecurity § If students pass Cyber. Start Game, Cyber. Start Essentials Course

SANS Cyberstart US § 7 States Piloted in Summer 2017 § § § § § Michigan Nevada Iowa Virginia Delaware Rhode Island Hawaii Successes § 3450 students registered § 156 won scholarships Took mini version of Cyber. Start § Solved 8 challenges § Full game has hundreds of challenges § Cyber. Start brochure https: //www. sans. org/media/cyberstart/Cyber. Start. Brochure-US. pdf

SANS Cyberstart Virginia § Cyber. Start Virginia § § § https: //www. sans. org/media/cyberstart/Cyber. Start-Brochure-US. pdf 1980 students tested their skills § 75% solved at least one of the assessment challenges § 43% solved enough to test their cyber aptitude on 250+ challenges of full Cyberstart program § 10 high school & college students were in the overall top 20 nationally § 62 won scholarships for more advanced cybersecurity education Student satisfaction § 91% rated the game excellent § 93% recommended to a friend § 97% considering further cybersecurity training

SANS Cyberstart Virginia https: //www. sans. org/media/cyberstart/Virginia-Cyber. Start-Report. pdf

SANS Cyberstart Nevada § Cyber. Start Nevada § § § https: //www. sans. org/media/cyberstart/Nevada-Cyber. Start-Report. pdf 188 students tested their skills § 80% solved at least one of the assessment challenges § 52% solved enough to test their cyber aptitude on 250+ challenges of full Cyberstart program § Number 1 highest scoring student in the country is at University of Nevada Reno § He and 11 other high school and college students won scholarships for more advanced cybersecurity education Student satisfaction § 91% rated the game excellent § 96% recommended to a friend § 100% considering further cybersecurity training

SANS Cyberstart Nevada https: //www. sans. org/media/cyberstart/Nevada-Cyber. Start-Report. pdf

SANS Cyberstart Pilot States Hawaii Iowa Delaware Rhode Island Michigan # of Students 317 474 359 92 104 1 or > solved assessment challenges 248 313 267 74 79 Students Qualified 161 198 170 46 62 Elite Levels 7+ 40 43 38 5 16 Scholarships 22 26 20 4 8

SANS Girls Go Cyberstart § 2018 Girls Go challenge has ended § Created to encourage girls into Cybersecurity § Must have been in 9 th – 12 at public or private § States / U. S. Territories that took place American Samoa Colorado Connecticut Delaware Hawaii Indiana Iowa Maine Maryland Mississippi Nevada New Jersey North Carolina Texas Vermont West Virginia Wyoming

SANS Cyberstart North Dakota § SANS coming to speak North Dakota K-20 § I have been in regular contact with program coordinator Alan Paller § If we had to pay for full program § $600 for Cyber. Start Game § $2300 for continuation to Cyber. Start Essentials (Course) § § § Remember, expected 5% to proceed SANS is hoping to offer full program to all students/individuals § Private and Public School § High School / College Age § Parents will be able to sponsor / pay in full their own student Contact Tony Aukland for more information § Would be interested in how many schools/students would be intersted

Cub Scouts & Girl Scouts § Cub Scouts Cyber Chip § Earned as a Tiger Scout § § § Must recharge each year § https: //www. scouting. org/training/youth-protection/cyber-chip/ Cybersecurity for Girls Scouts § Partnered with Palo Alto § 16 Cybersecurity badges coming in the fall § § 1 st grade Elementary school through high school § Offering Cybersecurity presentations to Girl Scouts § Through ND K-20 discovered CDE / Tonya Greywind has also reached out to Girl Scouts. Working with Tonya. § http: //www. girlscouts. org/en/press-room/news-releases/2017/paloalto-networks-girl-scouts-collaborate-cybersecurity-badges. html Learn Build Create Academy = Midwest = Minecraft & Roblox coding/programming

Veterans • Veterans § https: //niccs. us-cert. gov/training/veterans § National Initiative For Cybersecurity Careers & Studies § Free Training and Scholarships available § Fed-VTE

Cybersecurity Competitions § Cyber. Patriot – Air Force Association § Capture The Flag § US Cyber Challenge § NICE Framework – Find a competition § § https: //www. cybercompex. org/pages/nice Cyber Collegiate Defense Challenge – Dakota Con, Madison, SD Two day Network Security event focuses on the operational aspect of managing, securing, and defending a "commercial" network infrastructure. Two teams in North Dakota attending NDSU full competition team Exhibition team from Bismarck, joint U of Mary and BSC. Demonstrate their ability to withstand defend against real-time network security attacks.

Apprenticeships vs Internships Much discussion on this in the state and around the country Employers having difficulty waiting 4 – 5 years waiting for the workforce. Looking into Federal funding to aid with this NIST (National Institute of Standards and Technology) is leading NICE (National Initiative for Cybersecurity Education) Strategically focused to convene a national effort address the cybersecurity shortage for both public and private sector https: //www. nist. gov/news-events/news/2018/01/cybersecurity-apprenticeshipsenhance-cybersecurity-infrastructure Cybersecurity apprenticeships enhance Cybersecurity Infrastructure https: //www. commerce. gov/news/blog/2018/01/cybersecurity-apprenticeshipsenhance-cybersecurity-infrastructure Internships = private business regularly looking for interns State CIO discussing/working with Workforce Development committee

Cyber Careers • Cisco estimates there are currently one million unfilled cybersecurity jobs worldwide • Symantec predicts by 2019 the number will be 1. 5 million. • Projections are now showing 3. 5 million by 2021 • Little wonder that the word “crisis” appears so often in articles on cybersecurity hiring, or that professionals in the field—finding themselves in such high demand—are able to command such high salaries. • Source: Indeed. com http: //blog. indeed. com/2017/01/17/cybersecurityskills-gap-report/

Cyber Careers • • • Are you Creative? § Keep people from becoming victims on online attacks § Find system weaknesses § Do you like to observing people and their behavior? § Are you a problem solver? Are you Analytical? § Make hardware hacker proof § Do you want to make sure phones, airplanes, cars and other equipment hackerproof? § Make software hacker proof Are you Technical? § Hunt down bad guys on the Internet? § Oversee systems and everything connected to it? § Be an Internet first responder?

North Dakota State & Local Intelligence Center Tony Aukland Information Systems Security Analyst Information Technology Department aaukland@nd. gov (701) 328 -3245 http: //www. nd. gov/des/homeland/fusion-center/ https: //www. nd. gov/itd/