New Program for Critical Infrastructure Cybersecurity
The Critical Infrastructure Protection Program
Cyber Florida at the University of South Florida, the state’s leading cybersecurity resource, is pleased to announce a new effort under the CyberSecureFlorida program: the Critical Infrastructure Protection (CIP) Program. Stemming from the success of the recently completed Critical Infrastructure Risk Assessment (CIRA) program funded by the Florida Legislature in 2022, the CIP program takes the next step to provide no-cost resources, tools, and guidance to Florida’s public and private critical infrastructure entities to help mitigate their cyberattack vulnerabilities.
The CIP Program is intended to assist small and medium-sized enterprises and resource-constrained county and municipal government entities in implementing basic cybersecurity protocols and policies to achieve a fundamental cybersecurity posture. This comprehensive initiative is designed to fortify the cybersecurity resilience of public and private critical infrastructure across the state.
In an era of increasing cyber threats, safeguarding critical infrastructure is paramount. The CyberSecureFlorida CIP program aims to empower organizations by providing high-quality cybersecurity resources, training, and support to defend against evolving cyber risks. Some of the new resources available include the following:
- A 20-question Entry-Level Assessment based on the most-reported weaknesses from the initial risk assessment program. The Entry-Level Assessment will help organizations immediately see how their cybersecurity protocols measure up in the high-risk areas.
- A Cybersecurity Incident Response Plan Template to help organizations think through and plan ahead for how to weather and recover from a cyber incident.
- A full, 156-question Risk Assessment that covers key cybersecurity protocols outlined in the NIST Cybersecurity Framework as well as ransomware readiness. Both this and the Entry-Level Assessment are provided by Idaho National Laboratory (INL) through a customized instance of their highly regarded Cyber Security Evaluation Tool (CSET)®.
“CyberSecureFlorida: Critical Infrastructure Protection Program represents a significant step forward in our commitment to fortifying the cybersecurity defenses of government entities and critical infrastructure businesses,” said Bryan Langley, Lead Program Manager at Cyber Florida. “By fostering collaboration, offering targeted training, and leveraging the expertise of our cybersecurity professionals, we aim to elevate the cybersecurity resilience of these vital sectors,” he said.
To learn more about the CyberSecureFlorida CIP program and how your organization can participate, please visit the program’s official webpage: https://cyberflorida.org/cipp. For inquiries, please contact the program lead, Bryan Langley at [email protected].
Florida SUS Dominate 2023 DOE’s CyberForce Competition
Florida State University Institutions Dominate 2023 Department of Energy’s CyberForce Competition
In an extraordinary display of cybersecurity prowess, State University System of Florida teams dominated the 2023 Department of Energy (DOE) CyberForce Competition on November 4 in St. Charles, IL. Out of 95 participating teams, Florida’s top institutions claimed four of the top five positions, showcasing the state’s exceptional talent and commitment to cyber education.
The final top standings are as follows:
1st place: UCF – A Team With A Dream: Achieving a third consecutive win, this marks the fourth National Championship in CyberForce for the UCF team, adding to their victories in 2018, 2021, and 2022.
3rd place: UF – Darth Gator: Securing an impressive third position, the UF team showcased their exceptional cyber skills.
4th place: UCF – St. Dominic College: A nod to the Q Center’s original name, St. Dominic College for Women, this UCF team claimed the fourth spot, maintaining a tradition of excellence.
5th Place: USF CyberHerd: The USF team rounded off the top five, demonstrating their dedication to cybersecurity and contributing to Florida’s dominance in the competition.
The annual DOE CyberForce Competition attracted nearly 600 students from elite schools across the nation, emphasizing the high level of competition. Florida State Universities, particularly UCF, UF, and USF, proved their mettle by claiming four of the top five positions, solidifying their reputation as leaders in cybersecurity education.
During the all-day CyberForce Competition, the teams faced real-world cybersecurity issues surrounding distributed energy resources (DERs), including constraints like budget and ensuring uninterrupted power access. The ninth iteration of the competition emphasized not just technical knowledge but innovation, adaptability, and effective communication. Participants had to maintain the system, create defenses on tight budgets, and work with virtual users. A Team with a Dream from the University of Central Florida demonstrated excellence in handling challenges to their mini electric grid despite the scenario’s realistic constraints and cyber-attacks.
“I want to congratulate A Team with a Dream from the University of Central Florida on their success in the U.S. Department of Energy’s 2023 CyberForce Competition,” said Puesh M. Kumar, Director of CESER. “The competition focused on ensuring the cybersecurity of clean energy systems and the students did an exceptional job in executing the challenge. It’s vitally important that we continue to promote cyber workforce development to help us defend the energy sector of today, and tomorrow.”
Through this competition, DOE sought to inspire and strengthen the next generation of cybersecurity professionals. Given the high demand for such experts, the CyberForce Competition plays an important role in preparing students for the field’s real-world challenges and demands. For many participants, it’s a steppingstone towards a career in creating a more secure digital world.
See the full press release from the DOE Office of Cybersecurity. To learn more about the DOE CyberForce competition, go to https://cyberforce.energy.gov/cyberforce-competition/.
Network Noise Incident Response Workshop: Pasco County
Join Cyber Florida Senior Fellow Stacy Arruda, Founder and CEO of the Arruda Group and former FBI Supervisory Special Agent, for an eye-opening experience that will help you better understand how to prevent and recover from cyberattacks. The event starts with Network Noise, a three-hour tabletop exercise where real-world cyberattack scenarios illustrate the far-reaching effects a cyberattack can inflict on your organization. Bring your leadership team to learn how cyberattacks impact not only IT but also legal, finance, operations, human resources, public relations, and other departments.
Once you understand the threat, move on to preparation with a session on creating a comprehensive cyber incident response plan specific to your organization. You’ll leave equipped with a template and foundational plan you can take back to complete and test with your organization.
This workshop is presented in partnership with the Pasco Sheriff’s Office.
Register Now
Please register in advance for this event using the form below. The registration deadline is December 10, 2023.
Venue & Directions
Forensic Institute for Research, Security, and Tactics
Innovation Building Classroom
10370 Charles Bo Harrison Way, Land O’ Lakes, FL 34637
Red Dragon Rising: China in Cyberspace
As China seeks to advance its economic and military interests and challenge the US’s global leadership and influence, it increasingly turns to cyberspace to conduct malicious and disruptive activities against the US and its allies. China’s aggressive and sophisticated cyber operations include stealing sensitive data, intellectual property, and emerging technologies from various sectors, such as defense, health, education, and infrastructure. Now, China is positioning itself to disrupt or damage US critical infrastructure in the event of a geopolitical crisis or conflict. The government, military, private sector, and academia must cooperate to protect their networks and data from Chinese intrusion. This in-person summit will bring cybersecurity scholars, military and academic researchers, and senior military leaders together for a candid discussion of emerging Chinese threats and strategic response options in cyberspace.
Featuring keynote speaker Dr. Christopher Marsh from National Defense University’s College of International Security Affairs, the event will include two open-to-the-public panel discussions on different aspects of China’s maneuvers in cyberspace and conclude with a networking lunch.
This event is presented in partnership with the University of South Florida Global and National Security Institute as part of a new series titled, Fifth Domain: CYBR, to examine issues of modern cyberwarfare, bringing the work of academic scholars and researchers to the benefit of military leadership to help inform and guide strategic policymaking.
Note: Tickets must be purchased in advance.
AGENDA
8:00 – 8:30 AM: Check-in
8:30 – 9:00 AM: Welcome Remarks, General (Ret.) Frank McKenzie
9:00 – 10:00 AM: Keynote Address, Dr. Christopher Marsh
10:00 – 11:00 AM: Panel 1: The CCP Consolidation of Power
Moderator: Dr. Mark Grzegorzewski, Embry Riddle Aeronautical University
Dr. Jongseok Woo, University of South Florida
Dr. Stephan G. Craft, Embry-Riddle Aeronautical University
Dr. June Teufel Dreyer, University of Miami
Dr. Chris Reardon, University of New Hampshire
11:00 AM – 12:00 PM: Panel 2: The CCP as a Rising Strategic Power
Moderator: Dr. Mark Grzegorzewski, Embry Riddle Aeronautical University
Mrs. Heidi Holz, Center for Naval Analyses
Dean Cheng, United States Institute for Peace
Josiah Case, Center for Naval Analyses
Dr. Peter Pijpers, University van Amsterdam
12:00 PM Networking Lunch
VENUE + DIRECTIONS
Cybercrime Investigation for Florida Law Enforcement
Cyber Florida invites state and local law enforcement personnel across the Sunshine State to attend this free, one-day workshop presenting the latest insights, methodologies, and updates related to cybercrime. Funded by a grant from the Federal Emergency Management Agency, this event offers an impressive lineup of experts in various domains of cyber investigations, providing a valuable knowledge-sharing platform for officers and officials keen on enhancing their investigative capabilities in an increasingly digital world.
Program Agenda
9:00 - 10:00 am: Open Source Intelligence (OSINT)
Dr. Jordan Howell dives into the world of publicly available data and how it can be harnessed to aid in cyber investigations. Dr. Howell will discuss key tools, techniques, and resources available in the realm of OSINT.
10:15 - 11:15 am: Cybercrime Legal Update
Assistant U.S. Attorney Greg Schiller will provide attendees with the latest updates in the legal landscape surrounding cybercrime, providing a clearer picture of the challenges and opportunities facing law enforcement.
11:45 am - 12:45 pm: Current Forensics Challenges
In this session, veteran criminal investigator Chris Gastardi will address the ongoing challenges forensic experts face in digital investigations and cutting-edge techniques to overcome them.
12:45 - 1:45 pm: Networking Lunch (lunch provided, value less than $50)
1:45 - 2:45 pm: Cryptocurrency Investigations and the Blockchain
Cryptocurrencies present unique challenges in the world of cyber investigations. Larry Nielson, CFE, CTCE, CRC, Financial Crimes Detective at the Palm Beach County Sheriff’s Office, will delve deep into the world of blockchain and shed light on techniques to trace, track, and investigate cryptocurrency-related crimes.
3:00 - 3:45 pm: Dark Web Investigations
The Dark Web remains a mystery to many. Jeff Burke, special agent with the Defense Criminal Investigative Service, will uncover the layers of the Dark Web, providing insights into how to navigate, investigate, and track criminal activities on this hidden part of the internet.
4:00 - 5:00 pm: Cyber Investigations
Retired FBI Supervisory Special Agent Chuck Esposito gives a comprehensive look into the realm of cyber investigations, discussing everything from current threats to mitigation strategies.
Network Sorcery: The Hunt
In today's world, almost all activities take place over the internet, such as banking, homework assignments, television programs, phone conversations, and more. While the internet has positively impacted the way we work, learn, and communicate, it is also used by those with malicious intentions.
During this hands-on webinar, experts from Stamus Networks will demonstrate what bad actors do, how malware operates, and how to detect and catch these intrusions. We will also walk through the basic principles of network threat hunting and will demonstrate how to uncover ransomware and Advanced Persistent Threats.
Attendees will learn how to:
- Use Suricata as a monitoring tool
- Chase APTs and malware actors, known and unknown
- Hunt and investigate using open-source tools
- Recognize types of malware, behaviors, and current trends
Agenda:
- Introduction
- Speaker introduction
- Experience/feedback in malware IR/hunting/investigations
- Goal of Network Forensics – purpose and how it’s collected & analyzed
- Overview of Suricata as a monitoring tool
- Pyramid of pain (chasing APTs and malware actors, knowns and unknowns)
- Overview of Ransomware (types of malware, behaviors, current trends)
- Case-study: walk through an example of APT case
- Hunting and investigation: Easiest way to spin up a complete network monitoring distro
- with Suricata for Hunting, teaching and investigations comprised of only open-source tools (docker-based, runs on Linux: Ubuntu/Debian etc)
- Case-study (hands-on): live example of Ransomware malware network traffic
- Free and OSS Resources for malware training , data and investigations
- Q/A