CICI: Regional: New England Cybersecurity Operation and Research Center (CORE)

新英格兰网络安全运营和研究中心（CORE）是马萨诸塞州洛厄尔大学的网络安全研究人员和网络专家与马萨诸塞州大学校长办公室的信息技术（IT）支持人员和领导层之间的合作，他们共同努力改善新英格兰资源不足的机构的安全，并提供了一个区域网络安全方法的模型。项目负责人与当地IT和网络安全相关组织和财团建立了长期合作伙伴关系，使该项目能够超越学术界，影响公众的网络安全。寻找合格的网络安全人员是全国各地的校园和企业面临的挑战。 CORE中心的一个主要目标是发展新英格兰的网络安全劳动力。 该项目直接解决了这一需要，为其他区域提供了一个可供效仿的模板。该项目为学生提供实习，助学金和合作社，让他们在安全运营和研究中心工作，并获得网络安全运营和研究方面的实践培训。研究人员将该项目的成果纳入计算机和网络安全与隐私、移动的计算、无线网络和数字取证等课程。他们有接受女性和少数民族学生加入研究小组的记录，并有意识地积极鼓励传统上代表性不足的群体的学生加入这个项目。研究人员在马萨诸塞大学建立了一个开放的网络安全计划，该计划指导客户完成一系列步骤，并从专有解决方案和免费开源解决方案中选择安全控制和技术，考虑到想要保护其资产的机构或企业的预算。在马萨诸塞大学的网络安全计划中，这些资产通过马萨诸塞大学的控制“工厂”。工厂的输入是具有弱安全控制或没有任何控制的非托管资产。产出是一套具有强大安全控制的托管资产，从而确保园区环境具有强大的网络安全保护。研究人员将麻省大学开放网络安全计划应用于麻省大学的网络和资产，这些网络和资产每周7天，每天24小时受到监控。该项目将安全咨询、安全运营和安全培训/教育等服务扩展到其他当地机构和公司，并根据收集的数据对新兴威胁、趋势和防御进行研究。为了维持运作，核心中心以负担得起的价格提供服务。

The New England Cybersecurity Operation and Research Center (CORE) is a collaboration between cybersecurity researchers and networking experts from the University of Massachusetts Lowell, and Information Technology (IT) support personnel and leadership from the Office of the President of University of Massachusetts (UMass), who work together to improve the security of under-resourced institutions in New England and providing a model of a regional approach to cybersecurity. The project leaders have built long term partnerships with local IT and cybersecurity-related organizations and consortia, which enable the project to reach beyond academia and affect the cybersecurity of the general public. Finding qualified cybersecurity personnel is a challenge faced by campuses and businesses across the nation. One major goal of the CORE center is development of the cybersecurity workforce in New England. The project directly addresses this need, providing a template for other regions to follow. The project offers internships, assistantships, and co-ops for students to work in the security operations and research center and obtain hands-on training in cybersecurity operation and research. The researchers incorporate the outcomes of the project into courses on computer and network security and privacy, mobile computing, wireless networks and digital forensics. They have a track record of accepting female and minority students into research groups, and consciously and actively encourage students from traditionally underrepresented groups to join this project.The researchers have established an open cybersecurity program at UMass, which guides customers through a sequence of steps and selects security controls and technologies from both proprietary solutions and free open source solutions, considering the budget of the institution or enterprise that wants to protect their assets. In the UMass cybersecurity program, these assets go through the UMass controls "factory". The input of the factory is unmanaged assets with weak security controls or without any controls. The output is a suite of managed assets with strong security controls, thus ensuring campus environments have robust cybersecurity protection. The researchers have applied the UMass open cybersecurity program to the UMass network and assets, which are monitored 24 hours a day, 7 days a week. This project expands the services including security consulting, security operations and security training/education to other local institutions and companies, and performs research on emerging threats, trends and defense based on the collected data. To sustain the operation, the CORE center provides services at affordable rates.