1. Volgenau School of Engineering BS Cyber Security Engineering Peggy Brouse, Ph.D.

2. Cyber Security Initiative  Cyber security is the body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access  Cyber security engineering is the proactive engineering design of physical systems with cyber security incorporated from the beginning of system development Peggy Brouse, Ph.D.2

3. Cyber Security Initiative  Industry, government, and academia increasingly seek individuals who can use their engineering expertise to solve problems in cyber security  On 26 February 2014, Governor Terry McAuliffe signed Executive Order Number 8, which launches a new framework for the Commonwealth’s cyber security efforts called “Cyber Virginia,” and establishes the Virginia Cyber Security Commission to bring public and private sector experts together to make recommendations on how to make Virginia the national leader in cyber security [1]  Federal spending for cyber security is estimated to be $13.3 billion by 2015, and the 2012 Department of Defense budget for cyber alone is $3.2 billion [2]  Cyber security spending as a whole topped $60 billion globally in 2011 and is expected to grow at a rate of almost 10% every year, over the next 3-5 years [3] Peggy Brouse, Ph.D.3 [1] http://technology.virginia.gov/news/newsarticle?articleId=3445 [2] Virginia’s Innovation Ecosystem: The Trusted Leader in Growing Cyber Security Solutions, Office of Virginia’s Secretary of Technology [3] http://www.technology.virginia.gov/news/viewRelease.cfm?id=1087

4. Cyber Security Initiative  Global Growth and Need Despite economic slow down and a tight job market, the demand for cyber security professionals has grown 3.5 times faster than the demand for other IT professionals and about 12 times faster than the demand for all other jobs in the past five years [4] Continued growth of mobile platforms, cloud computing, electronic transfer of secure information, and electronically operated systems in everything from electricity generation and stock market trading to keeping up with the latest in social media has driven a need for these highly coveted cyber graduates around the world and outside of the government/defense sectors, which were previously the primary employers for such Peggy Brouse, Ph.D.4 [4]http://www.businesswire.com/news/home/201308050053 41/en/California-Metro-Washington-D.C.-%E2%80%93-Top- Destinations

5. Cyber Security Initiative  Global Growth and Need [continued] In a 2013 Global Information Security Workforce Study, it was predicted that the demand for cyber security professionals will experience double-digit, year-over-year percentage increases over the next five years in the Americas, Asia-Pacific (APAC), and the Europe, Middle East, and Africa (EMEA) [5] This growth worldwide, as well as, increased need in industries outside of government and defense, which require security clearances, creates opportunities in cyber security for students that may not have previously considered the subject because of their inability to qualify for American work visas or security clearances Peggy Brouse, Ph.D.5 [5]https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/2013%20G lobal%20Information%20Security%20Workforce%20Study%20Feb%202013.pdf

6. Cyber Security Initiative  Global Shortages In the 2013 Global Workforce Study, 56% of the 12,000 information security professionals, including 2/3 of the executive level respondents with budgetary influence, believe there is a shortage in their cyber security workforce [6] The Wanted Analytics adds, “With hiring growing, these jobs are likely to be very hard for recruiters and employers to fill. Currently, our Hiring Scale scores these positions as an 85. The scores range from 1 (representing less difficulty) to 99 (representing more difficulty). At an 85, it's likely that employers will experience fierce competition to attract candidates and a long time-to-fill.” [7] Peggy Brouse, Ph.D.6 [6]https://www.isc2.org/uploadedFiles/%28ISC%292_Public_Content/2013%20G lobal%20Information%20Security%20Workforce%20Study%20Feb%202013.pdf [7] http://www.wantedanalytics.com/insight/2013/07/10/hiring-trends-for- cyber-security-jobs/

7. Cyber Security Initiative  Demand in D.C., Maryland, and Virginia (DMV) With DC, Maryland and Virginia requiring a large number of these cyber specialized employees for the federal government and defense sectors alone, the ability to find graduates within Virginia would be advantageous for employers in the DMV region The Wanted Analytics analyzed the demand for cyber security jobs in July 2013. Over a 90 day period there were more than 13,000 jobs available online for jobs that required experience in cyber security. This is a 24% year-over-year increase when compared to the same 90-day period in 2012 [8] Last year, then Virginia Governor Bob McDonnell rolled out an initiative to attract more cyber based businesses to join the states existing 300 [9] 7 [8] http://www.wantedanalytics.com/insight/2013/07/10/hiring-trends- for-cyber-security-jobs/ [9] http://www.technology.virginia.gov/news/viewRelease.cfm?id=1087

8. Cyber Security Initiative  Demand in D.C., Maryland, and Virginia (DMV) [continued] As reported in the Washington Post in February 2014 [10], Burning Glass Technologies conducts daily reviews of job postings across 32,000 online sites. In a report released last month, the company said that the Washington metropolitan area had more than 23,000 job postings for cybersecurity positions in 2013, a figure that far surpasses the number of such postings in any other region New York had the second-highest number with just over 15,000. The San Francisco-San Jose metro area, which includes Silicon Valley, had more than 12,000 Peggy Brouse, Ph.D.8 [10] http://www.washingtonpost.com/business/capitalbusiness/report-finds-dc-area-a-hotbed-for- cybersecurity-jobs/2014/03/08/1b72ff1e-a560-11e3-8466-d34c451760b9_story.html

9. BS Cyber Security Engineering  The Volgenau School of Engineering proposes a new undergraduate degree in Cyber Security Engineering (BS/CYSE) to aid in answering these needs  This program is an interdisciplinary degree that will reside at the school level  The anticipated start date for this degree is Fall 2014  The program was approved by the GMU Board of Visitors in September 2013  It is being reviewed by SCHEV for approval in May 2014 Peggy Brouse, Ph.D.9

10. BS Cyber Security Engineering  This undergraduate program prepares its graduates for a successful career in cyber security engineering  Cyber attacks can affect not only computer systems but the physical systems that they are often integrated with and embedded in, including power plants and power distribution systems, manufacturing operations, transportation and navigation systems, health care systems, and many others  This program is designed to prepare students for the proactive engineering design of physical systems with cyber security incorporated from the beginning of system development Peggy Brouse, Ph.D.10

11. BS CYSE – Curriculum  The proposed curriculum has four sets of requirements totaling 126 credit hours. They meet or exceed the following requirements: University General Education (42 hours) Math and Engineering Courses (19 hours) Program-specific courses (56 hours) Electives (9 hours)  The additional 6 credit hours will not impede the four year graduation time 11Peggy Brouse, Ph.D.

12. BS CYSE – Curriculum – University General Education Foundation Requirements Written Communication ENGH 101 English Composition3 ENGH 302 Advanced Composition3 Oral Communication COMM 100 Introduction to Oral Communication3 Information Technology CS 112 Computer Science I4 ENGR 107 Engineering Fundamentals2 Quantitative Reasoning MATH 113 Anal Geometry & Calculus I4 Core Requirements Literature Literature elective3 Arts Fine Arts elective3 Western Civilization/World History HIST 100 History of Western Civilization, or HIST 125 Introduction to World History3 Social and Behavioral Science ECON 103 Microeconomics3 Global Understanding Global Understanding elective3 Natural Science PHYS 160 University Physics I3 PHYS 161 University Physics I Laboratory1 PHYS 260 University Physics II3 PHYS 261 University Physics II Laboratory1 Total: 42

13. BS CYSE – Curriculum – Math, Science and Engineering Course Requirements MATH 113 Analytic Geometry & Calculus I (counted in University General Requirements) MATH 114 Analytic Geometry & Calculus II4 MATH 213 Analytic Geometry & Calculus III3 MATH 203 Linear Algebra 3 MATH 214 Elementary Differential Equations 3 CS 112 Introduction to Computer Programming (counted in University General Requirements) CS 222 Computer Programming for Engineers 3 ENGR 107 Introduction to Engineering (counted in University General Requirements) PHYS 160 University Physics I (counted in University General Requirements) PHYS 161 University Physics I Lab (counted in University General Requirements) PHYS 260 University Physics II (counted in University General Requirements) PHYS 261 University Physics II Lab (counted in University General Requirements) STAT 344 Probability and Statistics for Engineers and Scientists3 Total19

14. BS CYSE – Curriculum – Cyber Security Engineering Course Requirements Peggy Brouse, Ph.D.14 CYSE 101 Introduction to Cyber Security Engineering 3 CYSE 205 Systems Engineering Principles 3 CYSE 211 Operating Systems & Lab 3 CYSE 220 System Modeling 3 CYSE 230 Computer Networking 3 CYSE 301 Digital Systems 3 CYSE 325 Discrete Events Systems Modeling 3 CYSE 330 Introduction to Network Security 3 CYSE 411 Secure Software Engineering 3 CYSE 421 Industrial Control Systems (ICS) Security 3 CYSE 425 Secure RF Communications 3 CYSE 430 Critical Infrastructure Protection (seminar) 3 CYSE 445 Systems Security and Resilience 3 CYSE 450 Cyber Vulnerability Lab 1 CYSE 465 Transportation Systems Design 3 CYSE 470 User Experience Engineering (seminar) 3 CYSE 475 Cyber Physical Systems 3 CYSE 491 Engineering Senior Seminar 2 CYSE 492 Senior Advanced Design Project I 2 CYSE 493 Senior Advanced Design Project II 3 Total56

15. BS CYSE – Curriculum – Electives  It is expected that "concentrations" will be developed to allow students to gain special expertise in selected areas of cyber security engineering. Concentrations will require 9 hours selected from the following electives: 15Peggy Brouse, Ph.D. CYSE 424 – Embedded & Real Time Systems 3 CYSE 460 – Power Systems & Smart Grid 3 CYSE 461 – Power Grid Security 3 CYSE 462 – Mobile Devices and Networks Security 3 CYSE 467 – GPS Systems 3 CYSE 476 – Cryptography and Computer Network Security 3 CYSE 477 – Intrusion Detection 3 CYSE 478 – Security Testing and Audit 3 CYSE 479 – Methods of User Authentication 3 CYSE 480 – Malicious Software and Hardware 3

16. BS CYSE – Curriculum – Capstone Experience  CYSE 492 Senior Advanced Design Project I and CYSE 493 Senior Advanced Design Project II are the capstone courses for the degree In CYSE 492, students apply knowledge they have gained to a complex real-world problem in a group project. During this first capstone class, students conduct concept definition and requirements analysis. A Project Plan for carrying out the project is developed, culminating in a proposal presented to faculty and corporate sponsors at end of the semester In CYSE 493, students design a cyber-physical security system, write required software, assemble hardware if needed, conduct experiments or studies, test the complete system and make recommendations to their sponsor. As in CYSE 492, the students present their results to faculty and corporate sponsors The faculty and corporate sponsors complete evaluation sheets at the end of presentations in both classes 16Peggy Brouse, Ph.D.

17. Questions? Contact Information: Peggy Brouse, Ph.D. pbrouse@gmu.edu (703) 993-1502 17