Ohio Cyber Range@UC Impact Report: Phase II

In December 2017, the University of Cincinnati partnered with the Ohio Department of Higher Education and the Ohio Adjutant General’s Department to explore and demonstrate the use of an Ohio Cyber Range (OCR). The OCR Phase II leveraged UC’s multi-year experience running a virtual cloud environment (Sandbox) and UC’s distinct comprehensive approach to Cybersecurity in which multiple disciplines collaborate on programs, including two NSA Centers of Excellence in Cyber Operations and Cyber Defense, an ABET accredited undergraduate program in Cybersecurity as well as several graduate programs. Nine outcomes were explored during the project.

Leveraging UC’s existing virtual environment – Sandbox system – a new nimble, secure, highperformance virtual environment was created with capacity to replicate a wide variety of network configurations to educate and practice Cybersecurity. The OCR Phase II environment provides a remotely accessible persistent environment for high schools, higher education institutions, career centers, professional organizations, government agencies, and industry.

Leveraging UC’s existing virtual environment – Sandbox system – a new nimble, secure, high performance virtual environment was created with capacity to replicate a wide variety of network configurations to educate and practice Cybersecurity. The OCR Phase II environment provides a remotely accessible persistent environment for high schools, higher education institutions, career centers, professional organizations, government agencies, and industry.

• 6 high schools
• 3 colleges
• 135 high school students
• 1,231 college students
• 27 faculty classes
• 3 businesses 
• 16 professionals

Active Accessible Network of 1,366 users

Exploring the impact of hands-on practice on learning and motivation, the Cyber Hacking Exercises challenged beginning and advanced participants to problem solve, collaborate, and practice new skills. Over 262 students and professionals participated in 12 events. In addition, multiple exercises were developed for various levels along with a platform to support competitive events that include a customizable interface and a scoreboard.

Exploring how the OCR can enable and support industry efforts and identifying use cases where the OCR can complement an organization’s Cybersecurity strategy and operation. The OCR Phase II explored possibilities in advanced manufacturing and financial industry. Engaging in talent development initiatives and utilizing the OCR as an education platform is identified as a priority.and industry.

Researching and exploring the use of the Ohio Cyber Range from governance to education to testing and professional practice. A new governance model was developed to expand the engagement of partners across Ohio. A professional practice experience was developed to position college students for Cybersecurity co-ops. A testing framework for web applications was developed to efficiently discover vulnerabilities. A framework for encrypting data while enabling data search and use was explored. A simulation of permissioned blockchain technology was conducted.

Introducing the Portable Computing Device concept where students assemble their own computing handheld machine and connect it to the OCR environment. Furthermore, in partnership with the State’s RAPIDS grant opportunity, students assembled a mini Cyber Range environment from basic components and practiced the challenges of system set up, configuration, and administration.

Exploring informal and formal engagements with high school students, teachers and districts. The OCR Phase II provided a virtual lab environment for four formal high school courses and supported several introductory and intermediate camps and workshops for students and teachers. Education modules were developed to support instructors including learning resources and labs that utilize the OCR Phase II environment.

Exploring the use of the OCR Phase II as the virtual lab for technology courses that require complex networking configurations and isolated organizations. The OCR Phase II supported formal courses, student groups, student research, industry and academic research.

Exploring workforce development for Ohio adult learners and facilitating entry level preparation for the Cybersecurity field. With funding from the National Security Agency (NSA), a 12-week online training program for veterans, law enforcement, and government employees was delivered twice. A two-hour seminar for the general public was also designed. Several conversations took place with industry professionals to explore the role of the OCR in supporting intermediate and advanced workforce development.

Exploring different channels of communication and engagement strategies for Ohio learners and professionals. Through formal and informal courses, workshops, competitions, presentations, and a Cybersecurity Education Symposium, the OCR Phase II is spreading the education and workforce development message across Ohio.

The Cybersecurity Education Symposium will continue to be a forum for Ohio educators, learners, professionals, and leaders to continue to advance Cybersecurity in the State. Education modules and engagement with K12, higher education, adult learning organizations, workforce development, and industry will continue to pave the way for talent development and engagement.

• Marc Cahay, PhD, CoPI-Research; Head, Department of Electrical Engineering & Computer Science
• Jason Chaney, OCR Phase II-Technology Lead; College of Education, Criminal Justice & Human Services
• John Franco, PhD, CoPI-RAPIDS Project, Director-CAE Cyber Ops; Professor Dept of Electrical Engineering & Computer Science
• Jason Gerst, CoPI-Technology Director-Information Technology, College of Education, Criminal Justice & Human Services
• Richard Harknett, PhD, CoPI-Government and Policy Head, Department of Political Science
• Chengcheng Li, PhD, Director-CAE Cyber Defense; Associate Professor, School of Information Technology
• Rebekah Michael, MS; OCR Phase II-Executive Director; Assistant Professor - Educator, School of Information Technology 
• Ryan Moore, MS; OCR Phase II-Education Lead; Assistant Professor-Educator, School of Information Technology 
• Hazem Said, PhD, CoPI-Operation and Outcomes; Head, School of Information Technology
• Brian Verkamp, MBA, CoPI-Technology; Assistant Vice President, Enterprise Shared Service, University of Cincinnati

• Mark Beadles, Chief Information Security Officer, OARnet Department of Higher Education
• Mark Bell, Cybersecurity Outreach Coordinator, The Adjutant General Department
• Major Kevin Mamula, Ohio National Guard
• Cheryl Rice, Associate Vice Chancellor, Higher Education Workforce Alignment, Department of Higher Education
• Charles See, Vice Chancellor, External Relations & Education Technology Department of Higher Education
• John Zulfer, COL (Retired) Senior Cyber Outreach Coordinator, Ohio Nationa Guard