New cyber range helps future tech workers wargame cybersecurity

Photo courtesy of SUNY-FMCC

 

Connecting state and local government leaders

Fulton-Montgomery Community College in New York will open its range to students this fall, making it the first in the nation to offer one on campus as part of its academic curriculum.

In central New York, a dozen men and women gathered in a pared down, “War Games”-like room earlier this month. 

It was a small room, about 800 square feet, with mostly white walls and commercial carpet. There were three rows of desks, each lined with computers and facing three large panoramic monitors that spanned one entire wall of the room. 

Quite suddenly, the overhead lights dimmed and an ominous red light flashed on. A cyberattack was underway. The people at the desks quickly got to work.

Those people were students at Fulton-Montgomery Community College. The physical space was not a war room, but a lab. And the cyberattack was just a simulation in the controlled environment of a cyber range, the first such one on a campus in the nation.

Leaders at the college, which is part of the State University of New York system, opened the cyber range designed by IBM and powered by Amazon Web Services software, to the public on May 2, with student use to begin this fall. It is partially funded by a $350,000 grant from the SUNY Transformation Fund, which exists to help support innovation on campuses in the system, as well as by county and philanthropic money, matched by the state.

The idea for the cyber range came after Billy Eipp, a computer science instructor at SUNY-FMCC, saw a demonstration of an IBM cyber range in Cambridge, Massachusetts, and decided it needed to be brought to the college. He watched between eight and 10 people navigate a simulated attack on their business.

“It really blew me out of the water,” Eipp said of the experience. 

During the demonstration, Eipp watched as technologists worked to mitigate the attack and protect systems, and as communications staffers prepared a media strategy to disclose the hack. The communications staff initially botched the media statement during the exercise, and, as a result, a screen showed the company’s stock price drop.

Scenarios can be tailored to just technologists who act as first responders to an attack, or can, like the demonstration, include the business side of the company, so employees can practice planning strategies, a media response and next steps.

Cyber ranges have become more widespread in recent years as states have embraced them as a way to train a desperately needed new generation of cybersecurity workers. Now, a college is embracing the approach. 

SUNY-FMCC will integrate its cyber range into its existing cybersecurity curriculum. Past courses were typically taught in a computer lab or classroom, with students learning from textbooks about attacks or other historical cyber threats. The range is a whole different ball game, said Martin Waffle, an associate professor of computer science.

“When you are using a traditional lab, although you can teach those courses, it's not as exciting as it will be in the cyber range,” he said. 

Enrollment has increased since the cyber range was announced. Last year, Waffle said, the community college had 32 applicants; this year, that number has grown to 66, with officials expecting even more interest once the range is fully operational.

The cyber range will help students better prepare for entry into the cybersecurity workforce, a sector that has more than 500,000 vacancies nationwide. The lack of workers has prompted the federal government to act, including to encourage skills-based hiring and apprenticeships in a bid to open up nontraditional pathways to employment.

But a cybersecurity workforce deficit comes as cyber criminals continue to try to exploit vulnerabilities and use new technologies to do so. 

“We always talk about this as this asymmetric threat,” said Ross Maughan, IBM Consulting’s managing client partner for state, local and education in New York. “The attack vector is increasing all the time, and the bad actors out there are getting more and more sophisticated. As much as it is about people, it's also about the skills in terms of them being able to combat what is still a rapidly evolving threat.”

The unveiling earlier this month was attended by business representatives, county officials and SUNY system leadership.

The range will be free to SUNY-FMCC for two years, then it will be up to the school to find ways to pay for its continued use. Much of that will be absorbed in the overall operating budget, Waffle said, but there will also be opportunities for local businesses, government agencies and others to book the range and use it for their own exercises. 

Eipp said the college is at the “tip of the iceberg” of potential future uses. Having that facility available will be a game-changer, he said.

“The immersive hands-on education is just going to be to die for,” Eipp said. “It's a new model for education, for cybersecurity, for technology.”

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.