Georgia Tech News | The Contracting Education Academy

February 4, 2019 By cs

$100k ethical hacking competition, in-person at GTRI on Feb. 14th

Georgia Tech, along with the University of North Georgia, are co-hosting the Cyber 2.0 Hacker’s Challenge, inviting students and faculty from all educational institutions, as well as corporate and military cyber professionals, to participate in a live network penetration test with a grand prize of $100,000.

The First Ever Vendor-based Hackers Challenge in the USA

Threats associated with cyber-attacks are real and are growing. They are a real concern for many U.S. enterprises in healthcare, finance/banking, IT, utilities, retail, transportation and governments. All are steadily increasing their cyber defense budget and are continuously adapting new solutions and approaches. And yet, all are also willing to accept 99%, or even 95% defense, as the best that can be achieved.

Cyber 2.0, the sponsor of the Hacker’s Challenge, is a company that provides a defense solution against the spread of cyber-attacks within the organizational networks.

If you succeed in obtaining a highly classified information file, you will:

Win a $100,000 Reward

Time and Place:

Thursday, February 14th, 2019 at the GTRI (Georgia Tech Research Institute)
250 14th Street, NW, Atlanta, GA 30332
8:30 AM to 4:00 PM

Register at: www.Cyber20.com/Hackers-Challenge.aspx

The challenge includes computers and servers, configured for file sharing.
No other special configuration: no firewall and no antivirus or other defense programs are installed. The only defense mechanism is Cyber 2.0 in System.
Hackers will gain access to the network via a Wi-Fi access point.
They will also receive the admin user name and password for each of the computer and servers participating in the challenge.
To win, you need to gain access to and copy a file from the fileserver.

All those who register for the challenge must physically participate and be present at the GTRI to win.

For more information, contact: Josecylin Cole, USA Sales Channels Manager – M: {404) 375-2811 – Email: josecylin.cole@cyber20.com

December 3, 2018 By cs

Georgia Tech hosting event promoting ‘defense innovation’ to be held on Jan. 14th

Companies who believe that they have the next key discovery or the next great idea that could benefit the Department of Defense (DoD) are invited to participate in a Georgia Tech-hosted event on Monday, January 14, 2019.

On that date, Georgia Tech’s Procurement Assistance Center (GTPAC) will host a day-long event designed to benefit innovative small businesses – with priority given to small technology companies that have the potential to directly enhance achievement of DoD’s mission.

Lisa R. Sanders, Director of Science and Technology for U.S. Special Operations Command (USSOCOM), is a featured speaker at the Defense Innovation Conference. (More details here: https://gtpac.org/2018/12/17/special-operations-science-and-technology-director-is-speaking-at-jan-14-gtpac-event)

Registration is now open at: https://www.eventbrite.com/e/creating-the-next-defense-innovation-conference-tickets-53056770228 Advance registration is required for this event; on-site registration will not be allowed. The registration fee is $50.

By attending, companies will learn all about the Small Business Innovation Research (SBIR) and Small Business Technology Transfer (STTR) programs, the Rapid Innovation Fund (RIF), Other Transaction Authority (OTA) for prototype projects, and additional contracting vehicles aimed at attracting innovative companies to help the U.S. Department of Defense.

See promotional flyer here: Defense Innovation Conference – Jan. 14 2019 Event

Registration for the event is now open at: https://www.eventbrite.com/e/creating-the-next-defense-innovation-conference-tickets-53056770228

Full Agenda and Featured Speakers

An advance copy of the conference agenda is available here: Agenda – Defense Innovation Conference – 01.14.2019 – Final.

Biographical sketches of all the featured speakers is available here: Featured Speakers – Defense Innovation Conference 01.14.2019.

October 22, 2018 By cs

Georgia Tech to offer ‘Hacking for Defense’ course in 2019

The Georgia Institute of Technology will begin offering a course in 2019 designed to give students opportunities to study — and potentially solve — challenges from the U.S. Department of Defense (DoD) and related intelligence agencies.

The semester-long Hacking for Defense (H4D) course was created and first launched at Stanford University in 2016 by retired U.S. Army Col. Pete Newell, retired Special Forces and Foreign Area Officer Joe Felter; Tom Byers, director of the Stanford Technology Ventures program; and Steve Blank, a retired serial entrepreneur and the creator of the Lean Startup movement.

At the Institute, the course will be taught by Keith McGreggor, director of VentureLab, a program in Georgia Tech’s Enterprise Innovation Institute that helps faculty and students create startups based on Tech research. Co-teaching the class with him will be Lawrence Rubin, associate professor in the Sam Nunn School of International Affairs at the Ivan Allen College of Liberal Arts.

As designed, students will be given a current real problem intelligence or defense agencies face and work on that challenge for the entire semester to validate the problem and work to solve it, Newell said.

“Technology is continually changing and by creating this mixing bowl in a university, you’re in an ideal place for bringing government problems to the problem-solvers and energizing young people into doing something that’s impactful,” said Newell, who is managing partner of BMNT.

BMNT’s nonprofit arm, Hacking for Defense Inc. (H4Di), oversees the H4D program.

H4D addresses four necessary components to help federal agencies be more innovative, said Newell, who is former director of the Army’s Rapid Equipping Force.

For the federal sponsors themselves, they get world-class market research to tackle problems at a faster pace than anywhere else and engage with potential employees or future collaborators by creating an innovation network pipeline.
Students get to work on a real challenge and learn by creating a case study of a real problem, he said.
For private industry, it gives them an early look at the problems government agencies are looking to solve — which often mirror some of the same issues business is trying to address.
Finally, universities such as Georgia Tech, are increasingly looking to deliver cutting-edge education to students that gives them experience in building innovative and disruptive solutions beyond basic research.

That matches the entrepreneurship experience that Tech wants all of its students to have, McGreggor said.

“We’re trying to create an armada of entrepreneurial students and we want every student at Georgia Tech to have that entrepreneurial experience before they graduate,” McGreggor said. “Hacking for Defense is going to be different in that participating students won’t be coming up with a startup idea; these defense and intelligence agencies will meet with us with the problems they want us to figure out. It’s an opportunity for our students to think about solving a different kind of problem.”

As part of the rollout and expansion of the program to Tech and other organizations, H4Di was on campus Sept. 20 and 21 to train about 60 people from across the country who will be teaching H4D courses on the methodology behind it.

“The defense and national security challenges we’re seeing are evolving at a pace we’ve never seen before in our history and to tackle these issues, we have to connect DoD to cultures of innovation and those are largely housed in academia and the venture community,” said Max Weintraub who works to form collaborative relationships between the DoD and universities as the H4D program manager at the MD5 National Security Technology Accelerator, the DoD program office that sponsors H4D at Georgia Tech and other leading universities. “We’re excited that Georgia Tech is on the list.”

Tech will join a number of top schools already teaching the class, that, in addition to Stanford, include: Columbia University, the University of Southern California, Georgetown University, the University of Virginia, and the United States Air Force Academy.

What makes Tech an attractive choice is Atlanta’s solid base of entrepreneurial activity, Georgia’s manufacturing and industrial capacity, the number of military installations and government labs in the state and its Southeast neighbors, and the federal research dollars the Institute attracts.

“It’s easy to draw a circle around Georgia Tech right there in the Southeast as being in the epicenter of a great entrepreneurial ecosystem,” Newell said.

Since the original launch, H4D has led to nine startup companies being formed, including Capella Space, a company that makes low-orbit satellites with a synthetic aperture radar technology that takes quality images regardless of clouds, light or other atmospheric conditions.

But while some students may ultimately form their own companies, Newell stressed that is not the core goal.

“We’re giving them the ability to engage with the government to work on a real problem to gain real-world experience,” Newell said. “They get to develop the critical problem-solving skill sets that will be most in demand in the future.”

Source: https://innovate.gatech.edu/news/georgia-tech-to-offer-hacking-for-defense-course-in-2019/

September 6, 2018 By cs

10 tips to help you succeed as an adult learner

Adult learning is no walk in the park. Going back to a formal learning environment can be daunting for working professionals even if they’re top achievers in their jobs.

At Georgia Tech Professional Education (GTPE), we support adult learners as they build their expertise to pursue their career goals. Our staff are adept at serving the needs of adult learners because they understand their challenges – they’re lifelong learners themselves.

Here are the top tips from GTPE staff based on their personal experiences as adult learners.

1. Choose the Right Learning Opportunity

Your time is valuable, so it’s essential that the program you choose is worth your while. Chris Walker, assistant director of marketing, found that deciding whether training would truly benefit him to be one of his primary concerns. He advises conducting research before committing to a program of study. ”See if the school you’re interested in will provide contacts to their graduates who can offer references,” he suggested. “It’s so important to know if you’ll get a return on investment before you make your decision.”

Brenda Sanders, graphic designer, mentioned other ways to research potential programs. “I went online to see the reviews from other students about what they learned and how they felt about the assignments and instructors,” she said. Getting recommendations from friends and colleagues is also an effective way find out if a program will be a fit for you.

2. Prioritize Your Learning

Balancing work, life, and learning is always a concern for working professionals. And for Najla Lewis, marketing manager, it was no different. “One of my top challenges was managing my responsibilities – work, family, and homework,” she said. She overcame this obstacle by completing as many tasks as possible before her course started. During the course, she tried to make use of short bursts of free time to minimize her workload in the office, such as answering emails during her lunch breaks and in the evenings. Her advice to others is to prioritize learning. “Plan to make short-term adjustments to your life pattern because they will benefit you in the future,” she said.

Lindsey Laney, academic program manager, found that she needed a dedicated learning space when she worked on her second master’s degree. “I knew I needed a quiet space to work, so I transitioned our guest bedroom into an office dedicated to school,” she said. “I had a dedicated school computer, school desk, and an understanding that when the door was closed, I was working on school and couldn’t interact at that time.”

Fatimah Wirth, instructional designer, pointed out another aspect of planning ahead: reviewing the syllabus and course structure. “If you’re taking an online course, make sure to set aside enough time to watch lecture videos, complete assignments, projects, quizzes, or exams and take part in discussions,” she said. “If you’re taking face-to-face classes, allow enough time to attend classes and complete assignments or projects outside of class time. Take into account travel time and travel conditions.”

For Patrice Miles, assistant dean of business operations, prioritizing her learning also means being fully engaged during class. ”I focused on being ‘in the moment’ and avoiding distractions when I was in class,” she said. “The phone stayed in my purse!”

3. Don’t Let the Big Picture Overwhelm You

Laura Haynes, assistant director of operations, experienced three major life events while working on her doctorate. She got married, had a baby, and suffered the loss of her father. She also had a full-time university teaching position during this time. It’s no wonder she considered abandoning her studies. However, one comment gave her the will to keep going. “I shared my thoughts with one of my mentors, who was a university president. He advised that I would ‘never regret completing a Ph.D. program.’ I credit his simple remark with compelling me to persist and complete the degree,” she said.

Her recommendation to other adult learners is based on her mother’s advice to focus on the manageable tasks at hand and take one day at a time. “Take bite-sized morsels of study digested daily to avoid choking on the potentially overwhelming number of assignments required to complete each course,” she said. “I highly recommend this approach, without which I may have become overwhelmed and disengaged.”

4. Believe in Yourself

Georgia Tech is known for its rigor and the strength of it STEM programs. This reputation can lead working professionals in non-technical fields to wonder is they are able to succeed in our programs. Najla Lewis, marketing manager, found herself questioning if she would be able to manage the rigor of a course at GTPE and whether she would be a fit for a project management program with her non-technical background. “Even though many of our learners are from technical fields, there are also learning opportunities for people in non-technical fields,” she discovered. “I found that the project management certificate program had a good mix of adult learners from all industries, career levels, and disciplines. I fit in well and was able to lend my individual talents to the group activities and discussions.” Her advice to others is to believe in themselves.

5. Focus on Long-term Benefits Not Short-term Obstacles

Chris Walker, assistant director of marketing, considers taking time off work for professional education to be a key challenge. Being out of the office to take a course means that the work piles up while you’re away. Rather than focusing on the consequences of missing work, Walker suggests keeping your long-term goals in mind. “Try to focus on the value of the long-term benefits of training versus the short-term inconvenience of taking time off work and having to play catch up,” he suggested.

6. Don’t Let Technology Get You Down

Technology plays a major part in our lives, so make sure it works to your advantage when you’re learning. Edith Greenwood, producer of interactive instructional media, raised the issue of technical needs. “Take care of any technical requirements related to the class before it starts,” she said. “Trust me, this will make assignment completion less frustrating.”

Lindsey Laney, academic program manager, pointed out the importance of contingency plans related to technology. “I planned for ‘what if’ scenarios such as what if the Internet goes down? What if my computer stops working? Are my documents saved on a cloud so I can access them from any computer?”

7. Know How You Learn Best

From online programs to traditional face-to-face classes, today’s adult learners have many options to choose from when it comes to professional education. Each delivery method has its advantages. Online learning offers optimal flexibility and the opportunity for online collaboration with peers outside your area. Traditional classes provide the face-to-face contact with your instructor and classmates. Hybrid programs offer a combination of online and face-to-face learning.

Brenda Sanders, graphic designer, suggests considering which option offers you the best chance of success before you choose a program. “Figure out which classes work best for your lifestyle and for the way you learn,” she said. Some people need to be in a classroom, but more and more people are turning to online learning.”

8. Don’t Be Afraid to Ask Questions

Jay Boudreaux, course management coordinator, noted that adult learners need to be patient with their learning. “Ask questions when you need help with understanding content,” he said.

Whether you take an online or a face-to-face class, take advantage of the opporutnities to interact with instructors and classmates to enhance your learning. Fatimah Wirth, instructional designer, suggested, ”Be comfortable with seeking help by asking questions in a face-to-face class or in discussions if you’re in an online class. Be sure to attend office hours, face-to-face or online, to seek clarification or answers to questions you may have.”

9. Revisit What You’ve Learned and Apply It

Having taken mainly traditional, face-to-face classes, Bobby Strickland, graphic designer, found he needed to adjust to online learning. “I learn better in a classroom, so learning online was a challenge. I needed to repeat sessions to make sure I understood the content,” he said. “Taking written notes helped me retain the online content and made it feel more like a classroom. I tried to implement the content into my work projects as soon as possible so that I had a better chance at retaining it.”

Strickland’s advice to other adult learners new to online learning is not to be hard on themselves. “Be patient with yourself. If it’s been a while since you were in a learning environment, know that the pace has escalated,“ he said.

10. Explore Your Financial Options

The cost of professional education is often a concern for working adults. When Najla Lewis, marketing manager, decided to take the project management certificate program at GTPE, she explored the financial options available to her. GTPE, along with many employers, is generous when it comes to contributing to employees’ professional education, so always check with your employer if funding is available to you. Lewis also took advantage of a discount by committing to the entire certificate program rather than taking only some individual courses. “I also spaced courses out over two fiscal years so that I could take advantage of the educational support from my employer,” she said.

Massive open online courses or MOOCS are growing in popularity. Offered by the world’s top universities, they are free to everyone from anywhere. MOOCs are a convenient, affordable way to keep learning. They’re also a useful, low-risk way to test the waters before you decide to invest in professional education on a specific topic or to ease back into formal learning if you’ve had a long break from it.

To enroll in one of Georgia Tech’s many MOOCs, please browse the available courses on our partner platforms, Coursera and edX:

Lifelong Learning Is Worth It

Balancing work, life, and family while pursuing professional education can be a challenge, but you can overcome it. And the long-term benefits far outweigh the short-term inconveniences.

“Professional education allows me to be more effective and relevant in my role, and to set an example for my team about the importance of education for a lifetime,” said Patrice Miles, assistant dean of business operations. “I also find the networking with others in the program to be so valuable as we continue the learning outside of the classroom.”

You’ll never regret deepening your knowledge, sharpening your skills, and and building a professional network. Ongoing professional education makes it possible.

Source: https://pe.gatech.edu/blog/10-tips-help-you-succeed-adult-learner

See all of Georgia Tech’s professional education contracting courses at: https://contractingacademy.gatech.edu/training/

August 17, 2018 By cs

Georgia Tech researchers help close security hole in popular encryption software

Cybersecurity researchers at the Georgia Institute of Technology have helped close a security vulnerability that could have allowed hackers to steal encryption keys from a popular security package by briefly listening in on unintended “side channel” signals from smartphones.

The attack, which was reported to software developers before it was publicized, took advantage of programming that was, ironically, designed to provide better security. The attack used intercepted electromagnetic signals from the phones that could have been analyzed using a small portable device costing less than a thousand dollars. Unlike earlier intercept attempts that required analyzing many logins, the “One & Done” attack was carried out by eavesdropping on just one decryption cycle.

“This is something that could be done at an airport to steal people’s information without arousing suspicion and makes the so-called ‘coffee shop attack’ much more realistic,” said Milos Prvulovic, associate chair of Georgia Tech’s School of Computer Science. “The designers of encryption software now have another issue that they need to take into account because continuous snooping over long periods of time would no longer be required to steal this information.”

The side channel attack is believed to be the first to retrieve the secret exponent of an encryption key in a modern version of OpenSSL without relying on the cache organization and/or timing. OpenSSL is a popular encryption program used for secure interactions on websites and for signature authentication. The attack showed that a single recording of a cryptography key trace was sufficient to break 2048 bits of a private RSA key.

Results of the research, which was supported in part by the National Science Foundation, the Defense Advanced Research Projects Agency (DARPA), and the Air Force Research Laboratory (AFRL) will be presented at the 27th USENIX Security Symposium August 16th in Baltimore.

After successfully attacking the phones and an embedded system board – which all used ARM processors – the researchers proposed a fix for the vulnerability, which was adopted in versions of the software made available in May.

Side channel attacks extract sensitive information from signals created by electronic activity within computing devices during normal operation. The signals include electromagnetic emanations created by current flows within the devices computational and power-delivery circuitry, variation in power consumption, and also sound, temperature and chassis potential variation. These emanations are very different from communications signals the devices are designed to produce.

In their demonstration, Prvulovic and collaborator Alenka Zajic listened in on two different Android phones using probes located near, but not touching the devices. In a real attack, signals could be received from phones or other mobile devices by antennas located beneath tables or hidden in nearby furniture.

The “One & Done” attack analyzed signals in a relatively narrow (40 MHz wide) band around the phones’ processor clock frequencies, which are close to 1 GHz (1,000 MHz). The researchers took advantage of a uniformity in programming that had been designed to overcome earlier vulnerabilities involving variations in how the programs operate.

“Any variation is essentially leaking information about what the program is doing, but the constancy allowed us to pinpoint where we needed to look,” said Prvulovic. “Once we got the attack to work, we were able to suggest a fix for it fairly quickly. Programmers need to understand that portions of the code that are working on secret bits need to be written in a very particular way to avoid having them leak.”

The researchers are now looking at other software that may have similar vulnerabilities, and expect to develop a program that would allow automated analysis of security vulnerabilities.

“Our goal is to automate this process so it can be used on any code,” said Zajic, an associate professor in Georgia Tech’s School of Electrical and Computer Engineering. “We’d like to be able to identify portions of code that could be leaky and require a fix. Right now, finding these portions requires considerable expertise and manual examination.”

Side channel attacks are still relatively rare, but Prvulovic says the success of “One & Done” demonstrates an unexpected vulnerability. The availability of low-cost signal processing devices small enough to use in coffee shops or airports could make the attacks more practical.

“We now have relatively cheap and compact devices – smaller than a USB drive – that are capable of analyzing these signals,” said Prvulovic. “Ten years ago, the analysis of this signal would have taken days. Now it takes just seconds, and can be done anywhere – not just in a lab setting.”

Producers of mobile devices are becoming more aware of the need to protect electromagnetic signals of phones, tablets and laptops from interception by shielding their side channel emissions. Improving the software running on the devices is also important, but Prvulovic suggests that users of mobile devices must also play a security role.

“This is something that needs to be addressed at all levels,” he said. “A combination of factors – better hardware, better software and cautious computer hygiene – make you safer. You should not be paranoid about using your devices in public locations, but you should be cautious about accessing banking systems or plugging your device into unprotected USB chargers.”

In addition to those already mentioned, the research involved Monjur M. Alam, Haider A. Khan, Moumita Dey, Nishith Sinha and Robert Callen, all of Georgia Tech.

This work has been supported, in part, by the National Science Foundation under grant 1563991 and by the Air Force Research Laboratory and DARPA LADS under contract FA8650-16-C-7620. The views and findings in this paper are those of the authors and do not necessarily reflect the official views of NSF, DARPA or the AFRL.

Source: https://www.news.gatech.edu/2018/08/09/researchers-help-close-security-hole-popular-encryption-software