Final Report for the Development of a
Center for Research and Education in
Information Security
CISC Research Report 04-04
Fall 2004
© IIIA
Institute for Infrastructure & Information Assurance
James Madison University
FINAL REPORT FOR THE DEVELOPMENT OF
A CENTER FOR RESEARCH AND
EDUCATION IN INFORMATION SECURITY
Submitted to
Dr. Ruben Prieto-Diaz
Associate Director for Research
Computer Science, MSC 4103
James Madison University
Harrisonburg, VA 22807
Submitted by:
Mr. Robert A. Willis, Jr.
Principal Investigator/Chair
Hampton University
Hampton, Virginia
Telephone: (757) 727-5552
Facsimile: (757) 727-5390
E-mail: [email protected]
Fall 2004
I
NTRODUCTIONThis report serves as the final report as requested for this grant. The grant allowed the Department of Computer Science at Hampton University to develop an Information Assurance infrastructure that will serve as a foundation for further expansion. The Department of Computer Science now contains a cadre of faculty interested and knowledgeable of the main Information Assurance (IA) educational issues. The faculty is also prepared to include its gained knowledge to offer new IA courses and courses modified to include IA modules.
STATEMENT OF WORK
The tasks for the three-year period were as follows:
1) Establish a baseline of INFOSEC expertise at Hampton University. The Department of Computer Science faculty will strive to gain the ability to conduct innovative INFOSEC research (individually and collaboratively with both JMU faculty and industrial and governmental partners)
• Dr. Lawrence Daley was enrolled in two James Madison courses during Fall 2001. He became ill and was unable to complete but one course. During subsequent semesters Dr. Daley was unable to take any courses.
• Dr. Ruknet Cezzar attended a three day Information Assurance and Computer Security Seminar at Jackson State University (Spring 2003).
• Dr. Philip Johnson attended an Information Assurance and Computer Security Conference (Spring 2003)
• Mr. Robert A. Willis Jr. and Ms. Marietta Gittens attended a four week workshop at Carnegie Mellon University in July 2003.
• All faculty attended an INFOSEC workshop conducted by Dr. Corey Schou (Idaho State University) on November 10, 2003
• All faculty attended an INFOSEC Symposium conducted by Information the Software Engineering Institute at Carnegie Mellon University personnel.
• Mrs. Deborah Kaneko attended a four week workshop at Carnegie Mellon University in July 2004.
2) Provide branch office facilities and industrial and governmental contacts for the Commonwealth Information Security Center in the Hampton Roads area, and exchange information on corporate outreach and K-12 outreach programs
• Office space was set aside.
3) Offer courses to graduate and undergraduate students at Hampton University and other local colleges.
• One graduate and two undergraduates presented posters at ADMI (Association of Computer and Information Science and Engineering Departments at Minority Institutions) 2002 .
• Tiffany Parker (Graduate), Cryptography and Logarithm/Factorization Problems in Cryptology
• Mylisa Wilburn, Information Security: Internet Safe Shopping
• Sharita Marshall, Effect of Information Security on the Business-to-Business Boom
• Javont DeGrafenraidt is completing his MS thesis in Cryptology during Summer 2004.
• Three graduate students presented “Incorporating Information Assurance in the Software Development and Design Process” at the ADMI 2004 Symposium.
5) Explore the possible development of the M. S. in INFOSEC at Hampton University. • Implementation is delayed pending University approval and funding.
• Dr. Lawrence Daley has researched several curricula and has largely completed the development of the program.
6) Develop and implement internship programs that provide INFOSEC experiences for students and professional staff. This will be accomplished by recruiting a number of students to participate in opportunities provided by industrial and governmental partners.
• Two students served as interns to the CIA for Summer 2002. This is a direct result of Hampton University’s participation in the InfoSec grant.
• One M.S. graduate who was partially supported in AY 2001-2002 has secured a position at Lockheed/Martin. Her assignment is in Information Assurance and Computer Security.
• Two students served as interns to the Lockheed/Martin for Summer 2003. This is a direct result of Hampton University’s participation in the InfoSec grant.
7) Develop and implement a student interest program on campus to attract, acquire, and support students in pursuit of potential careers in INFOSEC areas by conducting a number of INFOSEC specific seminars each semester. JMU personnel and personnel from industrial and governmental partners will be invited to conduct lecture series (via video conferencing when feasible) to the student chapters of the Association of Computing Machinery, National Technical Association (NTA) and National Society of Black Engineers (NSBE). A special interest group encompassing all three organizations may be formed to encourage student leadership of the program.
• On hold.
8) Collaborate in the development and offering of appropriate workshops, symposium, tutorials and conferences.
• CISC personnel presented at Hampton University’s 2nd Annual Technology Conference (Fall 2002).
• CISC conducted a two-hour Information Security workshop at the Annual Meeting of the Virginia Academy of Science (May 2003).
• The workshop was intended for CSC faculty at local HBCU’s (Hampton University, Norfolk State, Elizabeth City, Virginia Union and Virginia State). Unfortunately only Hampton University faculty attended.
• Its focus was to show how InfoSec materials could be incorporated into select CSC/CIS courses, to illustrate a number of InfoSec research topics that could easily be used by mentors and to discuss new course development.
• The Department of Computer Science sponsored a tutorial on “Mighty View” (May 21, 2003) at the Tidewater CIO meeting
• A workshop was conducted on November 10, 2003. (See attached agenda) • The workshop was intended for CSC faculty at local HBCU’s (Hampton
University, Norfolk State, Elizabeth City, Virginia Union and Virginia State). Faculty from all institutions and a number of Community Colleges attended • Its focus was to show how InfoSec materials could be incorporated into select
CSC/CIS courses, to illustrate a number of InfoSec research topics that could easily be used by mentors and to discuss new course development. Twenty-five faculty and seven graduate students attended.
• Dr. Corey Schou of Idaho State University conducted the workshop.
• A regional symposium (with partial CTRF sponsorship) was conducted on February 28, 2004. (See attached agenda)
• The symposium was very successful.
9) Share course materials and courseware; seek to cooperate in the development of these materials, and explore organization of joint listings of courses, sharing of curriculum, working together in multi-site video conferencing for seminars, distance classes, etc.
• Added security modules to the Operating Systems and Software Engineering courses.
10) Coordinate efforts to advance INFOSEC agendas in terms of research, education, standards, etc. and Advancement of technological and economic development in Virginia.
OTHER
11) Project impact on economic development
12) Industrial partners with whom you are currently collaborating
• Tentative plans have been made to meet with managers from two local companies to address this area.
• Two students served as interns to the Lockheed/Martin (Manassas) for Summer 2003. This is a direct result of Hampton University’s participation in the InfoSec grant. Arrangements have been made to meet with Virginia subcontractors as well.
• Dr. Ruknet Cezzar attended a three day Information Assurance and Computer Security Seminar at Jackson State University (Spring 2003).
• Dr. Philip Johnson attended an Information Assurance and Computer Security Conference (Spring 2003)
• Mr. Robert A. Willis Jr. and Ms. Marietta Gittens attended a four week workshop at Carnegie Mellon University in July 2003.
• Mrs. Deborah Kaneko will attend a four week workshop at Carnegie Mellon University in July 2004.
• One graduate and two undergraduates presented posters at ADMI (Association of Computer and Information Science and Engineering Departments at Minority Institutions) 2002.
• Three graduate and one undergraduate presented posters at ADMI (Association of Computer and Information Science and Engineering Departments at Minority Institutions) 2004.
• One graduate student was awarded an M.S. degree with an Information Assurance thesis topic.
• One additional graduate student will be awarded an M.S. degree with an Information Assurance thesis topic (Summer 2004).
14) There has been no action taken of the following items: • Intellectual property reporting • Publications
• New applications identified • Discoveries
• Federal money leverage
