SecureAsia@Tokyo Conference 17-18 July, 2012

Graduate Schools Collaboration for
Practical Security Skill and Knowledge
July 17, 2012
Institute of Information Security (IISEC)

Atsuhiro GOTO 後藤 厚宏

SecureAsia 2012

1

SecureAsia@Tokyo Conference 17-18 July, 2012

Agenda IT Specialist Promotion Program in Japan: ISS Squareand IT Keys for “IT Security Specialists”
 What’s achieved by ISS Square and IT Keys
 What’s Next? PSSK
from “IT Security Specialists” to “IT Security for IT Practitioners inwide-variety of industry”

 Wrap-up

SecureAsia 20122

SecureAsia@Tokyo Conference 17-18 July, 2012

Information Security Educationin Japan, so far University: Undergraduate Schools
 Most are “Information Security Literacy” programs, very few for
Information Security Core programs University: Graduate Schools
 Only a few Security programs, not full-set of course programs⇒“IT Specialist Promotion Program for Security”
to meet the industry requirements (2007～today) Enterprises
 In-house training courses
 Seminar programs by JNSA and others Oversea Training courses
SecureAsia 2012

3

SecureAsia@Tokyo Conference 17-18 July, 2012

IT Specialist Promotion Programsfor Security
 “ISS Square” in east Japan, “IT Keys” in west Japan,aiming to educate “Top-level Security Specialists” ingraduate school programs.
 Designed as Industry-Academia Collaboration andNetworking
 8 universities from Academia 15 enterprises and NPOs from Industry
 Human networking among all university faculties and students

 Conducted by MEXT Japan Four fiscal years funding from mid 2007 to 2011 March From 2011 April, both ISS Square and IT Keys continue by theirown efforts.
SecureAsia 20124

SecureAsia@Tokyo Conference 17-18 July, 2012

Core Members and Industry
Partners

West Japan area

East Japan area

Full coverage of IT
Security program, andindustry collaborations

Exercise camps forexperiencing practicalsecurity managements
SecureAsia 2012

5

SecureAsia@Tokyo Conference 17-18 July, 2012

Program Structure in ISS SquareCore Universities(IISEC, U-Tokyo, Chuo-U, NII)
SupportingUniversities
Waseda U.
TDUSpecial Interest Groups (SIGs)
Cryptography, Network, System , Software,Management, Laws &Ethics

Practical Exercises
Summer Internships
Full set of Lectures
Cryptography, Network, System ,Software, Management, Laws &Ethics

Facultyfrom Univ. 40
from Industry 20

Certified IT Security Specialists
Top-level Security
Researchers

Practical Security
Leaders

SecureAsia 2012

National
Laboratories(NICT)

IndustryPartners(Oki, KDDI,Toshiba,Hitachi,Fujitsu, NTT,IBM Japan,NEC,Panasonic,Mitsubishi,others)6SecureAsia@Tokyo Conference 17-18 July, 2012

Featured Program in ISS Square Full set of lectures for “IT Security Body of Knowledge”
 with Special lecture series (available for IT Keys members via
video conference systems)

 Special Interesting Groups (SIGs) for 6 areas
 Cryptography, Network security, System security, Software
security, Security management, Laws & Ethics for security

 Practical exercises in “Camp” (thanks to IT Keys) IT crisis management
 IT risk management
 System attacking, intrusion vs. protection, and others

 Internship at the partner companies and overseas

SecureAsia 2012

7

SecureAsia@Tokyo Conference 17-18 July, 2012

Practical Exercise by IT Keys:
IT Crisis Management
 Learn “Internal behavior” of real Malwares by “catch andtouch”
 Learn how to provide countermeasures against system
and network vulnerability
thanks to• Telecom ISAC Japan• CCC (Cyber Clean Center)• JPCERT/CC• NTT Communications,• IPA and others

SecureAsia 20128

SecureAsia@Tokyo Conference 17-18 July, 2012

Internship at industries andoverseas
 Summer Internship at the partner companies andorganizations
 NTT Labs, KDDI Labs, IBM, JPCERT/CC, Hitachi, Oki, NEC,Fujitsu and Fujitsu Labs, Toshiba and others Oversea training course at Royal Holloway, University ofLondon (RHUL), UK.

SecureAsia 2012

9

SecureAsia@Tokyo Conference 17-18 July, 2012

Information Security Specialist
Certificate (ISSC)
ISS Square certificate conditions : Research : SIG activities, Symposium Presentation
 ISS Specified Course Program Exercises Personal Requisites
and Master Degree in each graduate school

SecureAsia 201210

SecureAsia@Tokyo Conference 17-18 July, 2012

ISS Square Certificate Results
YearApril 2008
April 2009
～ Mar 2009 ～ Mar 201059Registered

Certified

April 2010
～Mar 2011

April 2011
～Mar 2012

836495

M1

M2

M1

M2M1

M2

M1

M245

1451443449313312394533

Basically 2 year program

SecureAsia 2012

11

SecureAsia@Tokyo Conference 17-18 July, 2012

What’s achieved through IT Specialist Promotion Programs,
ISS Square and IT KeysEVALUATION

SecureAsia 201212

SecureAsia@Tokyo Conference 17-18 July, 2012

Preliminary Evaluation byStudents
Knowledge Acquisition by ISS Square Lectures
Course Comprehensions by Students
After

100
908060

BeforeKnowledge Level

7050403020100123456789101112Lectures

SecureAsia 201213

SecureAsia@Tokyo Conference 17-18 July, 2012

Preliminary Evaluation byIndustry
 a questionnaire survey for companies where the certified
graduates start working
Outstanding
Personality
SuperiorFair
h Executive ability 1
4
4
Not so goodg Tolerance
342
Worsef Problem awareness3
1
5Unknowne Positiveness333
d Leadership
36c Teamworking
54b Presentation 1
52
1
a Communication
24
2
10%

20%

40%60%

SecureAsia 2012

80%

100%
14SecureAsia@Tokyo Conference 17-18 July, 2012

Preliminary Evaluation byIndustry 2
Outstanding

Technical Skills

SuperiorFair

71g Management

1f Schuduling

18Worsee Planning

18Unknown

52d Situation … 1151c Logical thinking

Not so good

15b Programming

0%

20%

40%

121414a Documentation

260%

80%

100%

SecureAsia 201215

SecureAsia@Tokyo Conference 17-18 July, 2012

Preliminary Evaluation byIndustry 3Outstanding
SuperiorFair
Not so good
WortheUnknown
No answer

Security Knowledge
g Information Ethics

1251f Incident Response

1251e Information Security Management1251d Auditing and Laws for IT Security1251c Secure Network Desginb Secure System Design

322420%240%

SecureAsia 2012125a Crypto Theory and Protocol
0%

360%

1180%

1100%

16

SecureAsia@Tokyo Conference 17-18 July, 2012

By Japanese Government

SecureAsia 201217

SecureAsia@Tokyo Conference 17-18 July, 2012

Targeting to educate IT engineers with practical security knowledge
and skill for wide-variety of industry

WHAT’S NEXT?

SecureAsia 201218

SecureAsia@Tokyo Conference 17-18 July, 2012

Who we should target

Security Skill Level

TOP
GUN

Security Specialists
CIO/CISO teamISS Square,
IT Keys

IT Engineers with Practical
Security Knowledge and Skillfor wide-variety of Industry

Next target

GeneralSecureAsia 201219

SecureAsia@Tokyo Conference 17-18 July, 2012“PSSK” Practical Security Skill
and Knowledge program Target: IT Engineers with Practical Security
Knowledge and Skill for wide-variety of Industry

 Goal : IT Security Certificate valuable for both graduate
students and industry
 For graduates: advantageous in job hunting activity
 For industry: effective and efficient measures in recruiting
processes

SecureAsia 201220

SecureAsia@Tokyo Conference 17-18 July, 2012

What kind of Education in PSSK?
DevelopMulti-TalentedPractitioners
in PSSKInternshipIndustryCollaborative
Exercises
ResearchResearchPractice

GraduateSchoolUniversity

InternshipCore Programs

CollaborativeExercises

AppliedEducation

Applied Programs

Core
Education

Intensify expertisein security (ISSSquare, IT-Keys)

Research

Expertizing
Exercises

Industrypartners
andGov.Orgs

Technology Areas in Security
SecureAsia 2012

21

SecureAsia@Tokyo Conference 17-18 July, 2012PSSK Special Features
 Intensive exercises for practical security skill andknowledge Joint development with industry partners
 Technology oriented and social science oriented exercises
 Short-term(3 days to 1 week) intensive exercises using
specially designed training facilities
 Symposium, workshops, and CTF-like events for encouraging
face-to-face meetings and team workings experiences Internship in industry including “IT users”
 Not only security vendors but wide variety of industry
 Summer internship (3-4 weeks) and long-term(6mo+) internship

SecureAsia 201222

SecureAsia@Tokyo Conference 17-18 July, 2012PSSK Intensive Security Exercise
Program: plannedSocialscienceoriented

Technology
orientedIntegrated Risk Management

Information Security Auditing

IT Systems Crisis Management

Legal issues in IT Systems
Forensics

Cryptography and Authentication
Implementation and Protocol

IT Systems Operation Literacy

Secure Programming

Malware Analysis

Network Systems Security

Security Attacks and Incident
Response

Physical Network Security and Wireless LAN Security

SecureAsia 2012

23

SecureAsia@Tokyo Conference 17-18 July, 2012

Expanding Collaboration
Networks in PSSKPSSK program
Inviting more graduate students
and faculties from all over Japan.
Then from the World.

East Japan area
West Japan area
SecureAsia 201224

SecureAsia@Tokyo Conference 17-18 July, 2012

WRAP-UP

SecureAsia 201225

SecureAsia@Tokyo Conference 17-18 July, 2012

Wrap-ups ISS Square and IT Keys have been successful 320+ graduates have been certified as “IT Security Specialists”
 Industry and public sectors evaluate very high on the programs More needs from wide-variety of industry and society More practitioners
 More graduates
 More multi-talented

New education programs PSSK is NOW
expected!
SecureAsia 201226

SecureAsia@Tokyo Conference 17-18 July, 2012

THANK YOU !

SecureAsia 201227