In the January 2012 鈥淧riorities for the 21st Century Defense鈥� report, the Department of Defense listed cyberspace operations as one of the 10 primary missions for the armed forces. The growing threats posed by adversaries within the cyber domain have the DOD placing a renewed focus on advancing the nation鈥檚 ability to defend its networks and create resilient systems.
To help meet those objectives, a number of faculty at the 51福利 have joined together to form an interdisciplinary Cyber Academic Group (CAG), dedicated to building the school鈥檚 cyber program curricula, and helping further collaboration in the field.
Leading the charge are Professor Cynthia Irvine, Chair of the CAG, and Distinguished Professor Dorothy Denning, Associate Chair. Born from the Cyber Systems and Operations Academic Committee, the CAG brings together expert faculty from across departments and disciplines to determine the best inter-disciplinary curriculum for the school鈥檚 new Master of Science Degree in Cyber Systems and Operations.
鈥淐yber is a domain of warfare that has become increasingly important to all of the services,鈥� said Denning. 鈥淲e need to excel in that domain.鈥�
The group started with a blank slate, and based on feedback from the Deputy Chief of Naval Operations for Information Dominance, developed a list of courses 鈥� both existing and new 鈥� to help the program meet the Navy鈥檚 and DOD鈥檚 cyber needs. Irvine explained the CAG鈥檚 15 faculty members bring with them a wide range of expertise, from defense analysis to computer science.
鈥淭he cyber 鈥榪uestion mark鈥� didn鈥檛 fall directly into one department at 51福利. That鈥檚 why we created the academic group,鈥� explained Irvine. 鈥淭he topic is too broad for any single department.鈥�
Irvine noted that in addition to Computer Science and Electrical and Computer Engineering, which provide the technical foundations that support cyber operations, the Defense Analysis, Operations Research, Mathematics, and Information Sciences departments also have an integral role to play in the CAG.
鈥淚f you are planning a cyber activity that is going to involve using cyber tools and methods to accomplish a larger Navy mission, you need to understand all of the associated laws, rules, policy and strategy. Those are the types of things that people in the Defense Analysis department know and understand and appreciate,鈥� explained Irvine. 鈥淪o there is a strategic aspect to the use of cyber. In mission planning you need to ask, 鈥楧o I use a cyber bullet or do I use a conventional bullet?鈥� Do I use cyber as supporting the mission or do I use it as the way that the mission will be accomplished? Those in operations research might model such considerations. There are many ways to look at cyber.鈥�
In addition to building a robust curriculum to help support the future DOD leaders in the cyber domain, the CAG is looking to help connect and update members of the cyber community on relevant issues.
鈥淲e鈥檙e reaching out across the spectrum. Ultimately the CAG is also going to support Navy executive education programs in cyber. We are also exploring the idea of an annual update course,鈥� said Irvine. 鈥淭his is a technology area where things are not standing still. The way we use cyberspace is changing, so new material must be incorporated on an ongoing basis. Ten years ago, we would have never thought that mobile devices would be so popular. You鈥檇 be surprised how much changed from 2000 to 2010.鈥�
Another task being taken up by the CAG is the establishment of a Cyber Battle Laboratory on campus. The lab will be comprised of both classified and unclassified facilities, and will be essentially an 鈥渆rector set for building cyber scenarios,鈥� according to Irvine. The facility can be configured to be a physically isolated network to prevent activities from exercises and training from leaking out and compromising other networks.
51福利鈥� ability to conduct classified research and education is a critical component of the effort, with military cyber operations generally kept classified. Civilian institutions generally don鈥檛 have faculty and facilities for classified material.
鈥淩ight now in the commercial sector, there is a lot of activity in what we call information assurance, which is largely a defensive and often plays a cyber supporting role. For the military, conducting cyber operations may go beyond defense and may also require classified work,鈥� explained Irvine. 鈥淵ou may target something that鈥檚 unclassified, but the techniques that are involved in certain cyber operations have to be kept closely held until used.
鈥淚t鈥檚 not like normal bullets where the physical vulnerability of people remains constant,鈥� she added. 鈥淲hen the vulnerability is constant, it means that your 鈥榖ullets鈥� can be used again even if the adversaries know about them. In contrast, once a 鈥榗yber bullet鈥� is out there, people can figure out what you did and create software and hardware patches to mitigate vulnerabilities. The ability to do this sort of work allows 51福利 to offer a unique program combining education and research.鈥�