Cyber Win: NSA Selects 海角社区 to Build Cybersecurity Clinic to Support Small Businesses in Louisiana
$1.5 million award from the National Security Agency will establish the 海角社区 Cybersecurity Clinic to help small businesses in Louisiana prevent, detect and respond to cyberattacks. 海角社区 was chosen among more than 400 eligible institutions of higher education in the United States.
The NSA-funded 海角社区 Cybersecurity Clinic will enable small businesses in Louisiana to reach a reasonable cybersecurity posture to protect themselves in a convenient, trustworthy and scalable way. Services will be provided through the Louisiana Small Business and Development Center at 海角社区.
海角社区 has been selected by the National Security Agency, or NSA, as the first university in the nation to create and pilot a cyber clinic to help protect small businesses, which are increasingly frequent targets for cyberattacks. The 海角社区 Cybersecurity Clinic, or LCC, will provide free services through the Louisiana Small Business and Development Center at 海角社区 while giving students in the 海角社区 College of Engineering and 海角社区 E. J. Ourso College of Business opportunities to advance their cybersecurity education, gain real-world experience and earn professional certifications.
鈥満＝巧缜� researchers seek to translate research into applied solutions and technical support,鈥� 海角社区 President William F. Tate IV said. 鈥淭his award from the NSA signals our faculty鈥檚 ability to deliver on this aim. It recognizes 海角社区鈥檚 growing leadership in cyber as we pursue our mission and Scholarship First Agenda to protect and secure Louisiana and the nation.鈥�
The initial $1.5 million award from the NSA will establish the LCC, with services offered through three collaborative sub-clinics operated by 海角社区 students and faculty advisors. Each sub-clinic has a unique mission and technical thrust. Together, they will provide Louisiana small businesses with a streamlined way to access solutions to highly technical challenges. The first sub-clinic, focused on threat and vulnerability assessment, will be open to computer science majors and put students on the offensive as they pretend to be malicious hackers to help companies find security flaws. Cyber defense, also for computer science majors, will provide recommendations and solutions. Cyber risk assessment, open to business majors, will focus on the particular assets, information and operations of a company to develop workable and effective mitigation strategies.
Aisha Ali-Gombe, associate professor of computer science and engineering at 海角社区 with a joint appointment in the 海角社区 Center for Computation & Technology, is the principal investigator on the NSA award and will serve as director of the 海角社区 Cybersecurity Clinic. The clinic concept is modeled on similar services provided by medical and law schools where clinics serve the needs of the community at no or low cost, such as the 海角社区 Law Clinic.
鈥淏usiness owners need new and trusted allies and resources in the worsening cyber fight,鈥� said Aisha Ali-Gombe, LCC director, principal investigator on the grant and associate professor of computer science and engineering at 海角社区 with a joint appointment in the 海角社区 Center for Computation & Technology. 鈥淲e want to enable Louisiana businesses to reach a minimum cybersecurity posture in a convenient, trustworthy and scalable way. We also want our students to gain core technical skills and ability to apply them, similar to an internship. This will put our students on a whole new level in terms of jobs after graduation, while small businesses in Louisiana will be able to access excellent, community-focused and meaningful cybersecurity services through 海角社区.鈥�
The LCC will be an essential complement to the Louisiana Small Business and Development Center, or SBDC, at 海角社区. The SBDC, which is funded by the U.S. Economic Development Administration, offers technical assistance to start-ups, existing businesses and entrepreneurs. 海角社区鈥檚 Office of Innovation & Technology Commercialization was designated as Louisiana鈥檚 SBDC coordinator this past January and manages 10 regional offices for small businesses throughout the state.
鈥淭he Louisiana SBDC works every day to understand the threats and challenges our small businesses face,鈥� said Adam McCloskey, director of the Louisiana SBDC at 海角社区. 鈥淥ver the last several years, the risks in securing files, managing customer information and processing payments have only grown. Meanwhile, we have a statewide mandate to help businesses with technology and can鈥檛 wait to show the community how to access the world-class talent at the 海角社区 Cybersecurity Clinic, which will help us in our mission to provide 360-degree support to entrepreneurs.鈥�
海角社区 is one of 403 Centers of Academic Excellence designated by the NSA and one of only 22 schools nationally that are designated as a highly technical NSA Center of Academic Excellence in Cyber Operations. While all 403 schools were eligible to apply for NSA support to create a cyber clinic, the NSA offered a maximum of two awards, with the first going to 海角社区.
鈥淭his grant reflects very positively on the confidence people have in 海角社区 and the ability of the university to deliver quality education and services,鈥� said Glenn Sumners, professor and director of the 海角社区 Center for Internal Auditing & Cybersecurity Risk Management, part of the E. J. Ourso College of Business. 鈥淭he LCC will serve the state and our local businesses as we continue to work on the frontier of emerging issues.鈥�
While 海角社区 students and faculty will collaborate to provide training, counseling and risk assessment for Louisiana small businesses through the LCC, experts at the 海角社区 Paul M. Hebert Law Center will provide legal advising to protect both the companies and the students who participate in clinic activities.
鈥満＝巧缜� students will get first-hand experience in how the technological challenges of cybersecurity intersect with the real-world commercial concerns of clients and the legal and ethical boundaries governing emerging technologies,鈥� said 海角社区 Professor of Law Scott Sullivan. 鈥淐yber clinic students will simultaneously protect the local business community while preparing themselves for a technological landscape that promises to become increasingly regulated and complex.鈥�
The cybersecurity clinic idea is modeled on similar services provided by medical and law schools where clinics serve the needs of the community at no or low cost, such as the 海角社区 Law Clinic.
鈥淟ike the Law Clinic, the LCC is like an emergency room, but for cybersecurity,鈥� said Anas 鈥淣ash鈥� Mahmoud, software engineer and associate professor of computer science and engineering at 海角社区. 鈥淢y role on the project will be to develop the LCC interface where businesses can learn, test their knowledge and communicate with our team. We鈥檒l also develop educational games with purpose to help everyone learn how to be smart online and to anticipate and defend against cyberattacks.鈥�
The clinic will engage 45 海角社区 students in its first two years鈥攆ive per sub-clinic per semester starting in the spring of 2024鈥攑otentially expanding to 75 students by year three. All will have the opportunity to become highly competitive by earning respected and frequently required professional certifications in areas ranging from penetration testing to offensive and defensive cybersecurity. The GPEN certification for offensive cybersecurity and GSOC for defensive cybersecurity will be provided by leading security training provider SANS in partnership with 海角社区. While such certifications tend to be costly, eligible students can earn them through the LCC for free. Ali-Gombe and Professor Golden G. Richard III, 海角社区 faculty lead for cybersecurity and director of the 海角社区 Applied Cybersecurity Lab in the 海角社区 Center for Computation & Technology, will also expand 海角社区鈥檚 computer science course offerings to prepare students to work in the clinic and help organizations recognize and respond to cyber threats. All computer science majors interested in earning additional credit hours by working in the LCC will have to be enrolled in the cybersecurity concentration currently offered at 海角社区, which, since its inception in 2019, has grown from about 20 students to almost 200 students.
Additional 海角社区 collaborators on the project are Executive Associate Dean and Ourso Family Distinguished Professor of Information Systems Helmut Schneider in the E. J. Ourso College and Rudy Hirschheim, professor in the Ourso College and in the 海角社区 Center for Computation & Technology, where the LCC will be located. Both will act as advisors and evaluators for the project. Further, industry advisor Andrew Case is a core developer of the Volatility memory forensics framework at the Volatility Foundation and a senior cybersecurity consultant at 海角社区. He will ensure students gain the cybersecurity skills most needed by industry. Finally, 海角社区鈥檚 Director of Economic Development Greg Trahan, who serves in a special advisory role to the 海角社区 President on cybersecurity, will support LCC sustainability and growth by connecting prospective companies with LCC capabilities and students.
Nearly half of the U.S. workforce is employed by small businesses. Meanwhile, small businesses often lack resources to detect and fight cyber threats, thus risking severe financial, operational and reputational damage. While technology has enabled many smaller companies to be more competitive and grow by reaching and serving more customers鈥攊ncluding through automation, online sales platforms and accounting and inventory management software to save time and money鈥攖echnology has also brought risk, including beyond the organizations themselves. As small businesses frequently function as service providers to larger businesses, vulnerabilities in their networks and computer systems are often used as 鈥渟tepping stones鈥� to attack bigger organizations.
The benefits of helping small businesses in Louisiana become more secure reach far beyond the individual companies. In 2021, the Louisiana State Police Cyber Crime Unit conducted 56 investigations into cyberattacks that caused at least $550 million in losses for Louisiana organizations. By complementing these efforts, the LCC will help offset the burden on the state to conduct incident response for resource-constrained organizations.
The LCC will use 海角社区鈥檚 FIREStarter, a forensic and incident response environment and immersive cyber teaching lab designed to simulate real-world, real-time cyberattacks. The environment will be expanded to include point-of-sale and financial systems frequently used by Louisiana companies.
鈥淎t 海角社区, we鈥檝e been provided with unmatched resources for cybersecurity and charged by 海角社区 President William F. Tate IV to become the number-one cyber school in the United States,鈥� Richard said. 鈥淲ith our rapidly expanding Scholarships for Service program funded by the National Science Foundation, our recent designation as a Center of Academic Excellence in Cyber Operations by the NSA, additional world-class cybersecurity faculty joining us this fall and now an NSA-funded cyber clinic, we鈥檙e well on the way to making it happen.鈥�