Bridgewater State’s Pioneering Cybersecurity Program Raises the Bar in Applied Training

An innovative approach to cybersecurity education might produce adept cyber professionals with practical training experiences.

Post-secondary institutions are now offering specialized undergraduate courses in cybersecurity within their computer science curricula. Despite this, these programs often lack essential hands-on experience in addressing cyber threats.

Many corporate employers often express concerns about job applicants for IT positions lacking practical cyber experience, as noted by Steve Zuromski, CIO at Bridgewater State University. This shortfall prompted the creation of a distinctive cyber training program to remedy the situation.

Despite the soaring demand for cyber jobs, students frequently show little interest or awareness of the necessity for such training, even within specialized computer degree programs. This novel approach bridges the gap, offering students essential hands-on experience.

“We are aware there’s a national and global crisis regarding cybersecurity. Our role is to address this issue by building and diversifying the talent pipeline in Massachusetts,” Zuromski explained.

Holistic Cyber Training Across Age Groups

The cyber training initiatives are not solely focused on university students, explained Michelle Stanfield, director of Bridgewater’s Cyber Range. It’s a valuable resource not only for degree seekers but also for the broader community to enhance cybersecurity awareness.

The cyber facilities team collaborates with various municipalities and individuals considering career advancements through certification programs. The Cyber Center also engages with K-12 programming to introduce students to cybersecurity early on.

“They get the chance to learn about and engage with a field they may be completely unfamiliar with,” Stanfield mentioned.

This cyber program, known as CASE, incorporates Bridgewater’s Center for the Advancement of STEM Education. They developed a module for high school students to immerse themselves in the Cyber Range lab for several hours, gaining hands-on experience.

The Cyber Range and the Security Operations Center (SOC) at Bridgewater serve distinct purposes, according to Zuromski.

The Cyber Range, a virtual environment, allows students and external groups to train in a secure space. It simulates various cybersecurity crisis scenarios akin to real-world attacks, enabling safe and controlled training exercises.

The SOC is a separate physical entity on campus, developed in partnership with CyberTrust Massachusetts. Staffed by CTM personnel and Bridgewater’s cyber students, it monitors live events from local government and nonprofit organizations.

Cybersecurity Bootcamps for Real-World Readiness

The Cyber Range offers participants, including visiting students and external organizations, a five-hour immersive experience they are unlikely to forget. This exposure sparks an interest in the necessity of cybersecurity, according to Zuromski.

Participants role-play as a cybersecurity team for a gaming company that experiences a ransomware attack. They arrive at Bridgewater State, take their places, and are suddenly confronted with an attack. The lights switch from green to red, and slight desk vibrations simulate panic, enhancing the realism.

During the exercise, they must identify the attack method, develop a response plan, and brief the CEO and board. The plan must detail the incident, mitigation steps, and recommendations regarding ransom payment, Zuromski elaborated.

“It’s a top-tier facility equipped for both in-room and remote training, allowing us to reach a vast audience and simulate real-world corporate scenarios,” he noted.

The highlight of on-site cyber training at Bridgewater is the practical experience in the SOC. Students benefit from affordable, high-quality cyber education, gain hands-on practice in a safe virtual environment, and then perform real-world tasks in the SOC before graduation.

“This approach also serves to protect municipalities and nonprofits that previously lacked such defenses, making it a win-win situation,” added Zuromski.

Advanced Cyber Training Facilities

The Cyber Range spans 1,200 square feet, featuring 24 workstations with dual-screen monitors and fully funded by federal, state, and local government grants at a cost of nearly US$4 million.

The facility boasts stadium-style seating, an 18-foot by seven-foot ultra-high-definition video wall, video cameras throughout, and confidence monitors on the sides and back.

A control room at the rear houses students or professional staff who manage the room’s dramatic elements. Integrated lighting throughout the ceiling grid and behind the room creates a halo effect around the large video wall.

“We have lighting along the ribbon, an upper ribbon banner above, and integrated throughout the room’s furniture, all designed to deliver an immersive cybersecurity training experience,” said Zuromski.

Expanding Cyber Training Offerings

Stanfield mentioned that Bridgewater is expanding its catalog of offerings for external audiences, expected to launch this summer. The new program will feature a broad range of experiences, from cyber team simulations to solving diverse cyber threats such as ransomware and DDoS attacks.

“We also aim to provide individual training. For instance, if companies want their security staff to learn specific skills, we can offer tailored training sessions,” she clarified.

The formal academic aspect of cybersecurity is also expanding, Zuromski stated. The Massachusetts Board of Higher Education recently approved a full cybersecurity curriculum leading to a degree.

The university has already seen over 200 applications for the bachelor’s degree program set to begin this fall.

Editor’s Note: The images featured in this article are courtesy of Bridgewater State University.