Towards Assessing Cybersecurity Posture of Manufacturing Companies: Review and Recommendations

John Del Vecchio , Yair Levy, Ling Wang, Ajoy Kumar

With the continued changes in the way businesses work, cyber-attack targets are in a constant state of flux between organizations, individuals, as well as various aspects of the supply chain of interconnected goods and services. As one of the 16 critical infrastructure sectors, the manufacturing sector is known for complex integrated Information Systems (ISs) that are incorporated heavily into production operations. Many of these ISs are procured and supported by third parties, also referred to as interconnected entities in the supply chain. Disruptions to manufacturing companies would not only have significant financial losses but would also have economic and safety impacts on society. The vulnerabilities of interconnected companies created inherited exploitations in other interconnected companies. Cybersecurity practices need to be further enhanced to understand supply chain cybersecurity posture and manage the risks from lower-tier interconnected entities up to the top-level dependent organization. This paper will provide an overview of the Theory of Cybersecurity Footprint to emphasize the relationship among interconnected entities and the cybersecurity effects one organization can have on another regardless of size. This paper provides a literature review on the manufacturing industry with a recommendation for future developmental research using the Delphi method with a panel of experts to develop an index to measure cybersecurity posture based on interconnected entities from lower tiers and establish index weights specifically for the manufacturing industry.

Quantum Computing: Computing of the Future Made Reality

Janelle Mathis

Quantum computing is an emerging new area focused on technology consisting of quantum theory aspects such as electrons, sub-atomic particles, and other materials engineered using quantum mechanics. Through quantum mechanics, these computers can solve problems that classical computers deem too complex. Today the closest computing technology compared to quantum computers are supercomputers, but similarly to classical computers, supercomputers also have faults. With supercomputers, when a problem is deemed too complex, it is due to the classical machinery components within the computer, thus causing a halt in solving the task or problem. In contrast, these problems could be solved with a quantum computer due to the advancements in engineered materials based on quantum mechanics. Apart from the hardware that enables a quantum computer to function more intelligently, the software developed for these computers can also show tremendous improvements in certain aspects, such as cryptography. This research examines quantum computing from its origins and details how the computer runs, its faults and limitations, ways to protect from quantum computing attacks, and demonstrates what programming a quantum computer would entail.

RFID Key Fobs in Vehicles: Unmasking Vulnerabilities & Strengthening Security

Devon Magda, Bryson R. Payne

In modern vehicles, radio frequency identification (RFID) key fobs, a form of remote keyless entry (RKE), play a pivotal role in vehicular security and functionality. The goal of this research is to implement and demonstrate radio-based cyberphysical attacks against identified vulnerabilities associated with RFID key fobs and provide insights on how to fortify security precautions against such attacks. Furthermore, this research reviews and acknowledges pre-existing security features that have been implemented to prevent the recurrence of these vulnerabilities. An additional goal of this research is to discover the security disparity between RFID tags and readers from vehicles manufactured in the early 2000s and vehicles from the mid-2010s or later.

The Impact of Individual Techno-characteristics on Information Privacy Concerns in the Diffusion of Mobile Contact Tracing

Jiesen Lin, Dapeng Liu, Lemuria Carter

In the wake of the global health crisis, mobile contact tracing applications have emerged as important tools in managing disease spread. However, their effectiveness heavily relies on mass adoption, significantly influenced by the public's information privacy concerns. To date, systematic examination of how these privacy concerns relate to the innovation adopter categories in mobile contact tracing remains sparse. Furthermore, the influence of individual techno-characteristics on these concerns is to be explored. This research seeks to fill these gaps. Drawing on the diffusion of innovation theory, we examine the impact of the key techno-characteristics—adopter category, propensity for identification misrepresentation, and exposure to media reports of privacy invasion incidents - on information privacy concerns in the diffusion of mobile contact tracing applications. We aim to investigate how these factors in culmination shape privacy concerns. Our findings offer insights to devise more effective strategies for managing privacy concerns. This research expands the current academic discourse around technology adoption and privacy and has practical implications for the design and rollout of mobile contact tracing applications.

Exploring Information Privacy Concerns During the COVID-19 Pandemic: A Juxtaposition of Three Models

Dapeng Liu, Lemuria Carter, Jiesen Lin

Government agencies across the globe utilize mobile applications to interact with constituents. In response to the global pandemic, several nations have employed contact tracing services to manage the spread of COVID-19. Extent literature includes various models that explore information privacy. Several researchers have highlighted the need to compare the effectiveness of diverse information privacy models. To fill this gap, we explore the impact of information privacy concerns on citizens' willingness to download a federal contact tracing app. In particular, we compare three types of prevalent information privacy concerns: global information privacy concerns (GIPC), concern for information privacy (CFIP), and internet users' information privacy concerns (IUIPC). The results of an online survey administered to 209 citizens reveal that in all models trusting beliefs increase adoption intentions while risk decreases them. However, IUIPC is the only privacy construct that significantly reduces trusting beliefs.

Leveraging Gamification and Game-based Learning in Cybersecurity Education: Engaging and Inspiring Non-Cyber Students

Lowri Williams, Eirini Anthi, Yulia Cherdantseva, Amir Javed

This paper investigates the use of gamification and game-based learning in the field of cybersecurity education. Due to their technical complexity and lack of coherence, traditional pedagogical methods, such as lectures, may fail to engage and inspire students especially from non-cyber backgrounds. To address this issue, we devised two distinct cybersecurity frameworks/games based on traditional Capture The Flag (CTF) competitions; an open-ended CTF event and a story-based CTF. Such games have demonstrated potential across multiple disciplines, including computer science, physics, mathematics, and engineering, as well as across multiple levels of study including undergraduate and postgraduate students. The positive feedback and significant increase in the interest to pursue a postgraduate course in cybersecurity, especially among non-cybersecurity students, attest to the success of this gamification strategy. As such, this paper provides valuable insights for enhancing the attractiveness and efficacy of cybersecurity education, thereby encouraging a broader spectrum of non-technical and non-cybersecurity students to pursue this crucial field.

What Is Interesting and Relevant About Cybersecurity?: NLP Analysis of a Survey of CS Students

Cheryl Resch, Jinnie Shin, Christina Gardner-McCune

Cyber attacks are a common feature of current news and many of them are the result of easy to avoid vulnerabilities in software. It is imperative that students graduating from an undergraduate Computer Science (CS) curriculum understand the consequences of vulnerable code. When developing lessons and assignments, it would be useful to have a sense of students' attitude toward cybersecurity and appreciation of the need to write secure code. This paper describes an analysis of the results of a survey of students in core CS courses at our large public university, in which students answer free response questions about what they find interesting and relevant about cybersecurity. The survey was conducted in Fall 2022 and repeated in Spring 2023 after cybersecurity interventions were introduced into several core CS courses. We performed a Natural Language Processing (NLP) analysis of the free response answers to determine the overarching themes in the responses. We found that the most prevalent topics students are interested in are cryptography and penetration testing, and did not change over the two semesters. In answer to the question about the relevance of studying cybersecurity, we found that as students progress through the curriculum, what students find relevant moves from protecting their personal data to its importance in job duties and writing secure programs. When developing lessons and assignments, it may be helpful to introduce cryptography or penetration testing to engage students. Also, students should be taught early and often about the relevance of cybersecurity in their future job duties.

Impact of a Cybersecurity Work-Related Course on Students' Career Thoughts and Attitudes: A PISCES Course Evaluation

Marcia Combs, Randall Joyce, Cain Bynum

This article proposes a research study conducted at Murray State University Cybersecurity and Network Management program to investigate the impact of work-related experiential learning on college students' career thoughts and attitudes within the context of cybersecurity career development. The Cybersecurity and Network Management program introduced the CNM 518 course based on the Public Infrastructure Security Cyber Education System (PISCES) project that offers practical, hands-on experiences. The proposed research project slated for Spring 2024, aims to assess how this work-related experiential learning influences students' career thoughts and attitudes, using the Career Thoughts Inventory as a measurement tool. This research project emphasizes the importance of reflective learning within CNM 518 and aims to contribute empirical evidence on the impact of work-related experiential learning on students' career thoughts and how such learning experiences positively influence the career decision-making processes and, subsequently, the broader field of cybersecurity education.

Assessing Common Software Vulnerabilities in Undergraduate Computer Science Assignments

Andrew Sanders, Gursimran Singh Walia, Andrew Allen

As the demand for secure coding education grows, there is a need for improvements in how secure coding is taught and in preparing students to develop more secure software. As time in a Computer Science classroom is finite, educational efforts should be placed on targeting the most common types of vulnerabilities to better prepare students to avoid common security pitfalls in coding. Existing research in this area mainly focuses on developing vulnerability detection tools rather than analyzing the types of commonly produced vulnerabilities by students. Limited research exists in determining common student-produced vulnerabilities, and the available studies differ from the types of vulnerabilities that are researched in vulnerability detection literature. Our research works to further establish the types of vulnerabilities produced by students by using a static analysis tool on assignment code submissions in an undergraduate Programming II (CS2) course. We present our findings on what types of vulnerabilities are commonly produced by students and contrast them with what is commonly researched in the literature. We find there is little overlap between the vulnerability types reported by our study and other studies in the research area. This research has potential implications for secure coding education in a Computer Science curriculum. Further work should be done to establish the contexts in which specific vulnerability types are more likely to be produced and how to best teach students to avoid producing these vulnerabilities.

The Design and Development of Hands-on Activities for Digital Forensics Education

Xinli Wang, Vijay Bhuse, Sara Sutton

It has been widely admitted by researchers and educators that hands-on activities are a core component in digital forensics education to help students gain practical skills that are needed in real-world forensic investigations. However, it is not clear in existing works about what kinds of hands-on activities are recommended to be integrated into a digital forensics course and how to design and develop them. In our teaching practice, hands-on activities for a digital forensics course are designed in three categories: 1) activities that assist students in learning how to use common digital forensics tools; 2) activities that help students gain in-depth understanding of the basic concepts and fundamental knowledge that are presented in class lectures; 3) activities that promote students the development of mindsets and data analytical skills that are needed for a digital forensic investigator. Various formats are employed to develop these hands-on exercises in different categories. The educational objectives and student learning outcomes map well to the CAE-CD (Centers of Academic Excellence - Cyber Defense) outcomes by completing their forensic knowledge units. In this paper, we share our idea and experience to design and implement such hands-on assignments in each category for meeting specific educational objectives. Sample exercises are briefly described to explain our idea in each category. Open source tools and data sets are introduced for references. Experiences, lessons, and sample feedback from students are discussed. Our results will provide a point of reference for those who teach digital forensics courses at a college or university, or are developing a digital forensic curriculum.

Develop and Disseminate Hands-on Lab Materials of Privacy Concepts and Technologies to Educators

Na Li, Lin Li, Mengjun Xie, Bugrahan Yalvac

In the era of digitalization, massive amount of data has been generated from people's online activities or use of portable/wearable devices. The data often carries rich information about people. Therefore, privacy technologies are needed, from data generation to usage and from transmission to storage, to protect people's sensitive information. Although the research community is making great progress in addressing advanced privacy protection technologies, very few educational materials have been developed to incorporate the latest research results and engage students in learning privacy technologies, especially for younger generations. In this paper, we present our newly designed educational materials on privacy technologies, which can be used for training high quality cybersecurity professionals to meet the ever-increasing demand. The developed learning modules not only incorporate the latest research results in privacy technologies but also include effective hand-on lab activities. To help other institutions effectively teach privacy technologies, we organized a faculty training workshop in summer 2022. Twenty-nine faculty from twenty institutions nationwide participated in the training. Survey results show that the participants gained a better understanding of privacy issues and demonstrated strong interest in teaching privacy technologies after attending the workshop.

Creating a Practical Education in Space Cybersecurity Through Antenna Design and Implementation

Clark Duncan, Randall Joyce, Spencer Bugg, Jason Marquardt, Marcia Combs

With the increasing concerns over cybersecurity and space systems preparing the next generation of cybersecurity professionals is critical. In this research, undergraduate and graduate students were exposed to cybersecurity and space systems through practical antenna design and implementation in hopes of capturing pirate communication signals while in the Western Kentucky area. Students designed and built turnstile and helical antennas that focused on the 255 MHz and 318 MHz frequencies that interfaced with software-defined radios. With these systems, students were able to capture a limited range of low earth orbiting (LEO) satellite communications while ascertaining an understanding of satellite communication fundamentals. Overall, students were able to gain an understanding of antenna design, the importance of radio frequency, and satellite communications.

Immersive Learning: Understanding the Psychology of Crime Using Virtual Reality

Denise Ferebee, Jerome Blakemore, Zina Parker, Marcus Kelly, Michael Zhou, Tyana White, Farheen Dahani, Jiya Webster

Teaching cybersecurity professionals has changed from applying puzzle-based learning scenarios, general tabletops, and general gamification to an immersive learning environment. In today's teaching environment, there are known methods to teach cybersecurity tool techniques. However, beyond the technical aspect, cybersecurity professional need to understand the psychology of crime. These teaching and learning needs have become more prevalent in criminal justice, education, and computer science degree programs and aspects of job professions because learners need to understand and be able to recognize why crimes are committed. Thus, opening another major area of research in cybersecurity. Teaching someone what it means to protect systems, networks, and programs from digital attacks is difficult. Each person needs some frame of reference. Through their personal frame of reference, they discern and consume the information and find a basis for its purpose. This is known as the learning process and each individual journey is different. The learning process is affected by personal experience. Thus, creating a climate for misunderstanding through applying personal experiences to a situation that may have had a different personal or professional interaction. Because of misunderstandings and unconscious bias that occur in this type of learning structure, the misunderstandings and unconscious bias have the potentiality of being propagated into professional career interactions and investigations. Thus, this project will present a learning platform/framework to explore cybersecurity methods, discern interactions, explore the psychology of why a crime is committed through a collaborative virtual reality (VR) immersive environment.

Assessing the Effectiveness and Security Implications of AI Code Generators

Maryam Taeb, Hongmei Chi, Shonda Bernadin

Students, especially those outside the field of cybersecurity, are increasingly turning to Large Language Model (LLM)-based generative AI tools for coding assistance. These AI code generators provide valuable support to developers by generating code based on provided input and instructions. However, the quality and accuracy of the generated code can vary, depending on factors such as task complexity, the clarity of instructions, and the model's familiarity with the programming language. Additionally, these generated codes may inadvertently utilize vulnerable built-in functions, potentially leading to source code vulnerabilities and exploits. This research undertakes an in-depth analysis and comparison of code generation, code completion, and security suggestions offered by prominent AI models, including OpenAI CodeX, CodeBert, and ChatGPT. The research aims to evaluate the effectiveness and security aspects of these tools in terms of their code generation, code completion capabilities, and their ability to enhance security. This analysis serves as a valuable resource for developers, enabling them to proactively avoid introducing security vulnerabilities in their projects. By doing so, developers can significantly reduce the need for extensive revisions and resource allocation, whether in the short or long term.

Evaluation of AI Models to Update Cybersecurity Curriculum 

Chizoba Ubah, Paige Zaleppa, Blair Taylor, Siddharth Kaza

This study explores the performance of several Large Language Models (LLMs) across different facets of Cybersecurity Modules. Using prompt engineering, this work evaluates publicly available LLMs for their ability to assess the suitability of secure coding topics based on learning outcomes, categorize these topics following OWASP standards, and generate up-to-date examples for curriculum use. The findings would highlight the transformative role that LLMs would play for future advancements in Cybersecurity education.

An Analysis of Prerequisites for Artificial Intelligence / Machine Learning-Assisted Malware Analysis Learning Modules

Portia Pusey, Mahmoud Abdelsalam, Maanak Gupta, Sudip Mittal

This paper presents the findings of action research conducted to evaluate new modules created to teach learners how to apply machine learning (ML) and artificial intelligence (AI) techniques to malware data sets. The trend in the data suggest that learners with cybersecurity competencies may be better prepared to complete the AI/ML modules' exercises than learners with AI/ML competencies. We describe the challenge of identifying prerequisites that could be used to determine learner readiness, report our findings, and conclude with the implications for instructional design and teaching practice.

An Exploration of Factors Influencing Oversharing on Facebook Groups

Marc Dupuis, Breanna Powell, Margaret Lanphere, Manuel Duarte, Billy Hao

Social media usage is extremely prevalent and so is the oversharing of personal information online. This paper aims to examine the factors that influence information disclosure on Facebook and how participation in groups may affect sharing behaviors. Groups can provide a more intimate and supportive environment, which may lead to excessive information sharing. An online survey was conducted on Amazon's Mechanical Turk platform with 373 accepted responses from self-reported Facebook users. The data was analyzed to determine which demographic and personality factors are correlated with oversharing behaviors on user profiles and within Facebook groups. This work has implications for understanding how individuals seek support online and what information they feel comfortable disclosing. Oversharing may increase user feelings of social support but also may make users vulnerable to cyberbullying and social engineering attacks.

Addressing the Need for Interculturality in Cybersecurity Education

Stephanie Swartz, Deveeshree Nayak

This paper addresses the need for incorporating global virtual team (GVT) projects into cybersecurity education curricula in an effort to develop students' understanding of different cultures and hone their abilities to work across multiple time zones, communicate using digital communication platforms as well as improve their virtual project and time management skills. An example of a GVTs project, Virtual Business Professional, is presented in order to illustrate how collaborative online international learning (COIL) can be embedded into IT-related coursework. It is the authors' intention to encourage instructors and administrators at institutions of higher learning to support and carry out transdisciplinary GVT projects in order to best prepare graduates for the challenges of the 21st century global workplace.

Transforming Cyber Education thru Open to All Accessible Pathways

Sin Ming Loo, Elizabeth Khan, Eleanor Taylor, Char Sample

Boise State University's (BSU) Cyber Operations and Resilience CORe program was intentionally designed so that any student, especially non-traditional and non-technical students, with an interest in cybersecurity could have an education and training pathway to enter the cyber workforce. The CORe curriculum focuses on teaching students how to design, apply, and improve cybersecurity through the interaction of people, processes, and technology. CORe is a stackable curriculum with elective credit hours and options for various academic and industry certificates and certifications that enable students to customize their unique career pathway. The CORe program guides students to think about the system being managed, the risks presented, and the dynamic intersection of system elements when considering how to incorporate resilience frameworks in achieving a resilient system. By developing systems thinking, the students gain an understanding of the interdependencies interacting with the operational system. The CORe program encourages students to integrate cybersecurity knowledge with models and frameworks found in other academic disciplines through a unifying systems approach. CORe is designed around the realities of today's broad cyber landscape: that breaches will occur in any system over time and proactive design of resilience into systems to detect, respond, and recover in a timely and orderly manner is critical. Students are taught to think holistically about cybersecurity focusing on all system elements. CORe is not a traditional cybersecurity degree. CORe is distinguished by the non-traditional engineering, computer science approach to cybersecurity education with the singular focus on infusing resilience operations and transdisciplinary systems thinking principles throughout the curriculum.

AI Tools for Education

Victor Winter

Dr. Victor Winter guides you through the conceptualization to development of an immersive cypher-based game in the style of an "Escape Room," utilizing ChatGPT and Midjourney. You'll gain valuable insights into the effective implementation of AI tools for educational purposes and immersive instruction. A presentation on the topic of Generative AI to follow.

How Learning Works: Eight Research-Based Principles for Smart Teaching

Michele DiPietro & Tris Utschig

Our teaching is only as good as the learning it produces. As experts in our respective fields, we already possess deep content knowledge, but that is only half of the story. What we try to pass on to students has to be interpreted and processed through their filters, often with unpredictable and surprising results. Therefore, the biggest investment we can make to enhance our teaching is to understand the learning process in order to tailor our efforts to produce maximal learning. Learning science is a very interdisciplinary field, drawing from cognitive, motivational, and developmental psychology; education; organizational and group learning; diversity and inclusion studies; and several other disciplinary perspectives. Ambrose, Bridges, DiPietro, Lovett, and Norman (2023) reviewed the literature on learning published over the course of the past 50 years or so and organized it into eight principles that can guide us in our teaching. In this portion of the workshop we will introduce the eight principles and, as a brief example, illustrate how selected principles might apply to Cybersecurity educational context. With this framework in mind, participants in the workshop will be able to make direct connections from the research about why the practices offered by the expert panel are effective.

Panel - Intervention in Underserved Communities

Moeiini Reilly, Dr. Judith Uchiduino, Jon Exume, Zach Farley, John Robinson

This panel at The Colloquium Information System Security Education Conference aims to explore the challenges and opportunities in bridging the information security and computing education gaps in underserved communities. The panelists, with their academic and industry experience, will discuss strategies and interventions to ensure equitable access to a STEM education and career for all. Expect discussions on successful strategies and initiatives, impactful targeted intervention efforts, and ways to develop the workforce of the future.

• Organization
• Profile
• Network

Katherine Fithen has been a leader in information security and privacy for 30 years, where she has worked with businesses through digital transformation efforts to meet information security and privacy requirements. Katherine has been with KPMG since July 2020 as the Director of the Information Handling Program and the IIRT (Information Incident Response Team), and then as a Sr Director for Privacy in KPMGI (KPMG International) Risk Management Technology & Information. Prior to joining KPMG, Katherine was at McKesson Corp. as the Director for Cybersecurity Governance. Before McKesson Corp., she was a Managing Principal Consultant with Secureworks after retiring as the Chief Privacy Officer and Director of Governance & Compliance at The Coca-Cola Company in July 2017. Prior to joining The Coca-Cola Company in 2002, Katherine was the Senior Manager of the CSIRT Program at PricewaterhouseCoopers, LLP, and prior to pwc, she was the Manager of the CERT®. Katherine has earned a Bachelor of Arts in Retail Management, a Master of Arts in Personnel Management, and a Master of Science in Information Science. In August 2015, Katherine was listed as one of "Women in IT Security: 10 Power Players" by SC Magazine, and testified before Congress in 2000 on the Melissa virus (02/29/00 Committee on the Judiciary - Fithen Statement (globalsecurity.org)).

• Organization
• Profile
• Network

Mr. Gatewood is the US DHS / CISA - R4 Cyber Security Coordinator for the State of Georgia. Gatewood is the former Chief Information Security Officer for the State of Georgia, Board of Regents of the University System of Georgia and the University of Georgia. He has more than 35 years of experience in cyber security program management and strategic planning, executive leadership, including the U.S. military, state and federal governments, higher education, and several top 10 global corporations. Gatewood has also served as the Vice President for Information Technology and the Chief Information Officer (CIO) for Albany State University. Stanton has built 2 centers of excellence, (1) cryptography and (2) awareness & training. He is a recent nominee to the National Cyber Security Hall of Fame.

• Organization
• Profile
• Network

COL Malcolm Haynes was commissioned as an Armor Officer upon graduation from the United States Military Academy in 1998. A recipient of a National Science Foundation Graduate Fellowship award, COL Haynes spent the first two years after commissioning earning a master's degree in computer science at the University of Texas at Austin. Subsequently, COL Haynes was assigned as a tank platoon leader in 1-12 CAV. COL Haynes then went on to serve as the company commander of Eagle Troop, 2-2 ACR and Alpha Company, 2-23 IN. He deployed to Iraq as part of the surge from 2007-2008 where he received an ARCOM with Valor for actions in and around Khalis, Iraq when he was serving as a military transition team chief. Upon return, COL Haynes went to the School of Advanced Military Studies and served as a maneuver planner in III Corps at Fort Hood, Texas where he deployed to Afghanistan. COL Haynes was then selected to attend the Georgia Institute of Technology where he received a PhD in computer science. Since 2017, COL Haynes has served at the United States Military Academy as an assistant professor. COL Haynes' is a graduate of the Armor Officer Basic Course, Cavalry Leaders Course, Infantry Captains Career Course, Combined Arms Staff Services School, Intermediate Level Education, School of Advanced Military Studies, Air Assault School, Airborne School, and Ranger School.

• Organization
• Profile
• Network

Steve Hodges has joined Georgia Technology Authority (GTA) as State Chief Information Security Officer. Mr. Hodges previously served as the Disclosure Officer and Senior IT Security Manager for the Georgia Department of Revenue (DOR). His nearly 22-year tenure at the agency included a variety of roles: Server Platform Manager, Network Support and Security Manager, IT Operations Manager, and Database Support Manager. Mr. Hodges also held responsibility for business continuity and disaster recovery planning. Before joining DOR, he was employed by the Georgia Department of Administrative Services, first as a contractor and later as a state employee. Mr. Hodges has been involved in information security throughout his career in both the public and private sectors. Early on, he was part of a team that developed one of the first commercially marketed disk encryption and access control systems for IBM-compatible computers. His experience spans a wide array of information technology systems and configurations, and he holds several professional certifications including Lean Six Sigma, Dante Networking, Dell | EMC Clariion, and Novell CNE.

• Network

Dr. Marshall offers 30 plus years of broad executive leadership experience as a former member of the Senior Executive Service in the federal government having served in the Department of Defense, National Security Agency (legal architect of nation’s first cyber warfare exercise), the White House (Comprehensive National Cyber Security Initiative), the Department of Commerce (Critical Infrastructure Assurance Office), and the Department of Homeland Security (Director of Global Cyber Security Management). Since retiring from the federal government (Senior Executive Service) he has broadened his executive experience by serving as Chairman of three corporations and on various boards of advisors and directors, CEO of tech startups, Executive Director of a non-profit research center, and Special Cyber Advisor to the government of Moldova. Founder and Chairman of the Board of CinturionGroup, a global provider of international fiber optic cable communications systems and services delivering high-reliability and high-capacity solutions via the next generation of fiber optic networks. Current project is connecting Europe to India and Singapore through Israel, Jordon, and Saudi Arabia. Chairman of the Board of SDSE Networks. Home of SCOUT Providing Software defined Secure Enclave. SDSE (SCOUT) secures and encrypts network communications: each endpoint, every instance, over any device, any place in the world. "Engineered with Stealth, Dark by Design." As President of X-SES Consultants LLC, he advocates at the board level, comprehensive sustainable corporate information technology governance programs that foster cost-effective software assurance, supply chain risk management, cyber security awareness training, and procurement strategies.

• Organization
• Profile
• Network

Admiral Mark Montgomery, USN (R) serves as the Executive Director of Cybersolarium.org, a non-profit organization which works to implement the recommendations of the Cyberspace Solarium Commission, where he was Executive Director from 2019 to 2021. He is also the Senior Director of the Center on Cyber and Technology Innovation and a Senior Fellow at the Foundation for Defense of Democracies. Prior to this, Mark was Policy Director for the Senate Armed Services Committee under the leadership of Senator John S. McCain and completed 32 years as a nuclear trained surface warfare officer in the U.S. Navy, retiring as a Rear Admiral in 2017.

• Organization
• Profile
• Network

Chris Silvers is a security consultant and instructor with more than 20 years experience in information security and a passion for education. He has presented at numerous conferences, such as DEF CON, DerbyCon, and GrrCon, and is a sought-after expert in cyber security with a focus on social engineering. Chris endeavors to spread security awareness in the community, particularly among teenagers and professionals outside the security industry.

• Organization
• Profile
• Network

Dr. Victor Winter is a Computer Science professor at the University of Nebraska-Omaha (UNO). Prior to joining the faculty at UNO, Dr. Winter was a Principal Member of the Technical Staff at Sandia National Laboratories (SNL) where he led the High-Integrity Software project. In 2013, Dr. Winter developed an introductory programming course based on the functional programming language SML. At the time, Dr. Winter was also teaching a computer science class on Discrete Mathematics. The educational challenges and opportunities lying at the intersection of these two classes gave rise to the creation of Bricklayer, an educational ecosystem designed to facilitate CS education across the K-16 spectrum. It is in pursuit of this educational mission that Dr. Winter, and his wife Jennifer, co-founded the 501(c)(3) educational non-profit Bricklayer.org. Dr. Winter's interest in machine learning, generative AI, and the metaverse stems from their potential to positively impact education. In 2005 Steve Jobs gave a speech to the graduating class at Stanford University where he said: "Computers themselves, and software yet to be developed, will revolutionize the way we learn." Thanks to generative AI and the emergence of the metaverse, that time has arrived. In his free time Dr. Winter likes to play video games (he is an avid Fortnite player) and go swing dancing.

• Website

The University of Tampa’s major in cybersecurity is a cutting-edge program that teaches students to protect the confidentiality, availability and integrity of information and information systems that support modern organizations. Students receive a comprehensive education that focuses on both the fundamentals of information systems as well as advanced topics in areas such as network security, cryptography, risk management, security governance, business continuity, security architecture, physical security and critical infrastructures.