Division of Graduate Education (DGE)

This capacity track project is developing an interdisciplinary, cybersecurity education program for engineers that must be aware of critical design issues for addressing cybersecured control systems for electromechanical devices, more effective techniques for the integration of secure software and hardware devices, and associated law and policy issues.

The field of software development needs developers to write secure code, as well as to continuously respond to evolving threats and adapt system designs to meet new security needs. This requires developers to gain a deep understanding of foundational concepts in secure programming, and continuously learn and practice defensive, secure, and robust coding.

Engineering a secure IT system, in addition to technical skills, requires a particular mindset focused on using cybersecurity solutions effectively against sophisticated and stealthy cyber attacks. The traditional lecture-centric style of teaching has failed to deliver that mindset, which is the direct result of an over-emphasis on specific technical skills (with limited lifespan and insufficient technical depth), abstract rather than deeply technical examination of fundamental concepts, and an impatience in developing broader analytical skills.

Cybersecurity is one of the most strategically important areas in computer science, and also one of the most difficult disciplines to teach effectively. Historically, hands-on cyber security exercises helped students reinforce basic concepts, but most of them focused on user level attacks and defenses. Since OS kernels provide the foundations to the applications, any compromise to OS kernels will lead to an entirely untrusted computing. Therefore, it is imperative to teach students the practice of kernel level attacks and defenses.

SRI International (SRI) and Asylum Labs (Asylum) propose using 3D virtual world gaming technologies to enhance the understanding, engagement factors, and the recruitment impact of Cyber Challenge Competitions (C3). This project intends to address the C3 engagement challenge by designing visualization and presentation technologies that have proven highly successful in e-Sports leagues. The project will demonstrate how C3 forums can be transformed with a high-engagement visualization layer for cybersecurity talent recruitment.