results from faculty capacity building program
Carnegie Mellon University has previously received three NSF Federal Cyber Service Scholarship for Service – Capacity Building Track awards (from 2002 through 2007.) This funding has been used to develop and offer six editions of an intensive, month-long, in-residence summer program to help develop information assurance (IA) education and research capacity at colleges and universities designated as minority-serving institutions (MSIs) - specifically, historically black colleges and universities (HBCUs) and hispanic serving institutions (HSIs).
The IACBP has exceeded the expectations of our participants and has made a measurable impact on the capacity of these MSIs to educate students in IA. With the last two grants Carnegie Mellon able to invite 36 faculty, including two department chairs, in computer and information science, computer information systems, and similar departments from 11 MSIs. The following results are just an example of accomplishments based on the 2004, 2005, and 2006 editions (plans for new courses or modules that are still under construction are not listed here):
At least six new undergraduate courses
- Introduction to Information Assurance (Hampton University)
- Beginning Information Assurance (Hampton University)
- Computer Information Security (California State University, L.A.)
- Information Security Management (California State University, L.A.)
- Information Security (Oakwood College)
- Networking Security Fundamentals (California State University, Northridge)
At least five new graduate courses
- Information Security (Texas A&M University, Corpus Christi)
- Network Security (Texas A&M University, Corpus Christi)
- Applied Cryptography (Texas A&M University, Corpus Christi)
- Survivable Systems Analysis (Texas A&M University, Corpus Christi)
- Advanced Information Assurance (Texas A&M University, Corpus Christi)
At least ten new modules added to existing courses
- Undergraduate research (Texas A&M University, Corpus Christi)
- Computer Literacy (Hampton University)
- Computer Science I (Hampton University)
- Software Design & Development (Hampton University)
- "ID Protection" added into the courses "Intro to Computers," "Data Structure II," and "Operating System I" (Hampton University)
- The general concept of "Security" added into "Operating System I" (Hampton University)
- Artificial Intelligence (Texas A&M University, Corpus Christi)
- Computer Security, Ethics, and Privacy (Spelman College)
- Home Computing and Computer Security (Oakwood College)
- Data Base Security in the course Database administration, and Information System Security to the course System Analysis and Design (California state University, LA)\
At least seven new degree options
- Information Assurance graduate program for Computer Science students (Texas A&M University, Corpus Christi)
- Master's in Information Assurance (Cal Poly Pomona)
- Professional MBA in Information Assurance (Cal Poly Pomona)
- A.S. Degree in Network Administration and Security Management (Mount San Antonio College)
- 2+2 Business Degree in Information Assurance (Cal Poly Pomona with Mount San Antonio College)
- 2+2 A.S.-B.S. (Mount San Antonio College's A.S. degree in NASM will articulate to California State University, Fresno's BSIT - Bachelor of Science in Industrial Technology)
- Master of Science in CS with Information Security track (California State university, Dominguez Hills)
At least eight grant proposals
- NSF Building Information Assurance Infrastructure (Hampton University)
- NSF Federal Cyber Scholarship for Service Capacity Building grant proposal titled "A Regional Collaborative Cluster: Development, Dissemination and Adaptation of Information Assurance Survivability Curriculum" (Cal Poly Pomona)
- NSF "Ethics Education in Computing: A Moral Development Constructivist Approach" (Texas A&M University, Corpus Christi)
- CISCO (Texas A&M University, Corpus Christi)
- NSF Cyber Trust "Signature-based Network Intrusion Detection Using JESS" (Texas A&M University, Corpus Christi)
- STC Center for Trusted Collaboration (Texas A&M University, Corpus Christi with Purdue University)
At least sixteen published papers
- Parviz, Partow-Navid and Ludwig Slusky. "Evaluation of Campus Information Security." Paper presented to the Secure IT 2005 Conference, San Diego, CA, April 19-22, 2005.
- Parviz, Partow-Navid and Ludwig Slusky. "IT Security in Pubic Organizations." In The Encyclopedia of Digital Government, edited by Ari Veikko Anttiroiki. Hershey, PA: Idea Group Reference, 2005.
- Wilson, I.P. and M. Garcia. "Biometrics as a Cryptographic Key Generator." Paper accepted for publication at the Hawaii International Conference on System Sciences, January 4-7, 2006.
- Dark, M., M. Garcia, Y. Qing, I. Ghansah, J. Chen, H. Lee, and C. Shing. "Adaptation of a State of the Art Computer Forensics Course." Paper presented to the 8th International Conference for Young Computer, Beijing, China, September 20-22, 2005.
- Garcia, M., G. Gopal, J. Dick, P. Swaminathan, and K. Sunil. "Rule-based Intrusion Detection System Based on SNORT." Paper presented to the Network/Computer Security Workshop, Bethlehem PA, August 4-5, 2005.
- Garcia, M., M. Dark, Q. Yuan, I. Ghansah, J. Chen, C. Shing, and H. Lee. "Adaptation of a Computer Forensics Course." Paper presented to the 6th International Conference on Information Technology-Based Higher Education and Training, Dominican Republic, July 7-9, 2005.
- Aijaz, A. and M. Garcia. "Applications of Artificial Intelligence to Intrusion Detection." Paper presented to the EuroIMSA 2005 conference, Grindelwald, Switzerland, February 21-23, 2005.
- Young, L. and M. Garcia. "Using Recursion to Exploit Buffer Overflow." Paper presented at IADIS International Conference Applied Computer 2005, Algarave, Portugal, February 22-25, 2005.
- Balasubramanian, A., H. Pundir, V. Kankanala, and M. Garcia. "Enforcing Information Assurance Using Biometrics." Paper presented to the 2005 ASEE Annual Conference and Exposition - Computers in Education Division, Portland, Oregon, June 12-15, 2005.
- Dark, M., Q. Yuan, M. Garcia, I. Ghansah, J. Chen, and C. Shing. "Information Assurance Faculty-Curriuclum Development: What Works and What Doesn't." Paper presented to the Secure IT 2005 Conference, San Diego, California, April 19-22, 2005.
- Manson, D., S. Corey, J. Fernandez, J. Blyzka, R. Farkas, P. Partwo, and M. Garcia. "Beyond Bootcamps: A model for ongoing curriculum development Collaboration for faculty attending an Information Assurance bootcamp." Paper presented to the Secure IT 2005 Conference, San Diego, CA, April 19-22, 2005.
- Fernandez, J., S. Smith, D. Kar, and M. Garcia. "Computer Forensics - A Critical Need in Computer Science Programs." Paper presented to the Sixteenth Annual Consortium for Computing Sciences in Colleges South Central Conference, Lake Charles, LA, April 15-16, 2005.
- Young, L., M. Aubuchon, and M. Garcia. "Recursions and Buffer Overflow in C++ Programming." In Proceedings of the Symposium on Computing at Minority Institutions. (May 20-22, 2004), 82-88.
- Allawali, F. and M. Garcia. "Computer Intrusion Detection Using Data Mining." Paper Presented to the Texas A&M University System 2nd Annual TAMUS Pathways Student Research Symposium, October 14-15, 2004.
- Durbha, K. and M. Garcia. "Threats and Facility Requirements in Physical Security." Paper Presented to the Texas A&M University System 2nd Annual TAMUS Pathways Student Research Symposium, October 14-15, 2004.
- Shroff, N. and M. Garcia. "Secure Socket Layer (SSL) Protocol: The Undisputed Heavyweight Champion for Web Site Authentication and Encryption of Transactional Data." Paper Presented to the Texas A&M University System 2nd Annual TAMUS Pathways Student Research Symposium, October 14-15, 2004.
At least fourteen new certificate programs / workshops / symposia
- 25% complete for 4011 Certification and began to map the 4012 objectives to courses they offer or plan to offer (the standards put forth by CNSS, Hampton University)
- First IA Symposium (February 28, 2004, Hampton University)
- Second IA Symposium (April 2, 2005, Hampton University
- Plan for Third IA Symposium (April 4, 2006, Hampton University)
- 2nd Annual Information Assurance Symposium (December 10, 2005, Cal Poly Pomona)
- Certificate Programs in Information Assurance (Cal Poly Pomona with Mount San Antonio College and Cal State LA)
- Two-Day Workshop by IP3 (October 5 and 6, 2004, Cal Poly Pomona)
- CISCO Security Bootcamp for Professors (December 13-16, 2004, Cal PolyPomona)
- Information Assurance Mini-Bootcamps (June 20-July 1, 2005, Cal PolyPomona)
- Participation in the "Secure IT 2005 Conference" (California State University, L.A.)
- New 3-course level one community college certificate: "Information and Operating System Security" (Mount San Antonio College)
- Small business development workshops (Mount San Antonio College)
- High school outreach initiatives (Mount San Antonio College)
- K-12 and professional development initiatives (Oakwood College)
Three new collaborative centers
- Mid-Atlantic Regional Collaborative Cluster - Hampton University in Hampton, VA, is a hub educational transition partner working with the SEI to build the capacity to teach information assurance at 22 colleges and universities in Virginia, North Carolina, Maryland, Delaware, and Washington, DC.
- Southern California Regional Collaborative Cluster - California State Polytechnic University, Pomona and Mount San Antonio College in Walnut, CA are hub partners that help build information assurance capacity at 23 universities in the Cal State system and 109 community colleges in California.
- Southern Texas Regional Collaborative Cluster - Texas A&M, Corpus Christi is a new hub partner working to build capacity at community colleges and universities in Texas.
One institution being designated a Center of Academic Excellence in Information Assurance (Cal Poly Pomona, 2005)
Our participants go on to create an immediate impact at their home institutions. One example of this is David Miller from California State University, Northridge, who attended our 2005 capacity building program. Dr. Miller came to the program with the intention to create an Information Assurance course called "Special Topics in Information Systems, Information Security and Assurance." He developed the curriculum for the course during our program in the summer and was then able to offer it in the immediately following fall semester. The course was soon in high demand – all forty-one available seats were filled, spilling over onto a waiting list. The course has since become an approved regular offering in the university's curriculum, and it is the foundation for a full Information Assurance course curriculum that the university hopes to create.
Another way that our program has had enormous impact is by creating collaboration between several members of the California State University (CSU) system. Because of our 2005 capacity building program, five CSU schools have begun to work together to create modules, topics and courses that can be developed and distributed amongst the CSU system's 23 campuses. In the CSU system, students are encouraged to attend community colleges before entering the universities, and we have also incorporated Mount San Antonio College in our program to further spread the impact of our program into California's 109-campus community college system.
The response from faculty members who have participated in our capacity building programs, as well as from their respective department heads, has been uniformly and extremely positive.
Program participants have remained in contact with us here at Carnegie Mellon, as well as with each other. In the past four years, a few participants have also returned to Carnegie Mellon after the program to take CERT security courses. Detailed information about the results of previous NSF-funded capacity building programs is available in the final reports that have been submitted to the NSF.
