Author: Douglas Rausch

CTF

Sign up for Fall Season of National Cyber League Has Started

Posted on by Douglas Rausch

Hey Cybersecurity Students – If you are interested in honing your cybersecurity skills in a competitive environment and adding some hands on experience to your resume this is for you!

Our nationally ranked Bellevue University National Cyber League is gearing up for our fall season and we are looking for players.  Team members have a great time putting their skills to the test in both the individual and team events such as cryptography, password cracking, traffic and log analysis, web application security, and others.  We start our league soon so we are forming our team now.  You can find out about the league here https://www.nationalcyberleague.org  We’ll have practice sessions and you will compete in a preseason, individual, and team games.  Our season is starting now and runs through Nov 5th.  If interested contact Prof Rausch (drausch@bellevue.edu) for more information.  The College of Science and Technology is covering a limited number of entry fees so your only investment is your time.  We have a limited number of spots so let us know your interest now.  

Careers

National Cybersecurity Virtual Career Fair

Posted on by Douglas Rausch

Registration is now open for VCF that will be taking place on September 22, 2023 from 9:00am – 1:00pm Pacific Time. Join students and alumni from over 400 institutions across the Nation designated as Centers of Academic Excellence in Cybersecurity with employers seeking top cyber talent. For more information and registration, check out the link:

SAVE THE DATE – National Cybersecurity Virtual Career Fair 2023 | CAE Community

Careers

Position Available

Posted on by Douglas Rausch

Analyst I, Technical Operations – Corporate Security position at First National Bank of Omaha available

https://firstnational.wd5.myworkdayjobs.com/fnbocareers/job/Omaha—FN-Tech-Ctr/Analyst-I–Technical-Operations—Corporate-Security_R-20230924-1

This applicant should have a basic understanding of the major areas of information technology. He/She will work with security technology system administrators to liaison and work directly with IT professionals to implement, configure, and operationalize systems.

CTF

Bellevue University Cyber League Team Nationally Ranked

Posted on by Douglas Rausch
NCL logo

The spring season of the National Cyber League (NCL) has completed with the Bellevue University team securing the number 45 spot out of 451 competing Universities and Colleges. This is the highest ranking the Bellevue Team has achieved across its 10 seasons of play.   

The NCL has two seasons each academic year, one during the Fall term and one during the Spring term. Each season is made up of a preseason game where students practice skills, an individual game where students compete individually, and a team game where students are placed on teams of up to seven individuals and compete as a group. The games are known as Capture the Flag style competitions where students win a flag for solving a challenge related to cybersecurity. Challenges fall into categories such as Open-Source Intelligence, Cryptography, Password Cracking, Log Analysis, Network Traffic Analysis, Wireless Access Exploitation, Forensics, Scanning, Web Application Exploitation, and Enumeration & Exploitation. Competitions generally start around noon on a Friday and end the following Sunday evening.

The national ranking, known as the power ranking, is based on a school’s top performing team during the team game, the school’s top performing student during the Individual Game, and the number of participating students from the school, with additional consideration given to better student performance during the Individual Game. Bellevue will again be participating in the Fall 2023 NCL and looking for students interested in improving their cybersecurity skills in a hands-on, competitive environment. The competition is open to all undergraduate and graduate students, not just those pursuing a cybersecurity degree. Look for announcements on joining for the Fall season to be made in late August. Interested students can contact Associate Professor Doug Rausch for more information on the competition.

Edit June 12th, 2023 – Link to Bellevue University news article:

https://news.bellevue.edu/bellevue-university-cyber-league-team-completes-season-with-top-50-national-ranking/

Concepts, Research

CAE Tech Talk

Posted on by Douglas Rausch

Please join us for the April CAE Tech Talk Thursday, April 20, 2023 beginning at 1:00 pm EST.

Time: 1:00 – 1:50 pm EST

Topic: The Concept of Zero Trust: Tenets, Architecture, and Threats

Location: https://captechu.zoom.us/j/664120328

AND

Time: 2:00 – 2:50 pm EST

Topic: Rethinking the Security and Privacy of Bluetooth Low Energy

Location: https://captechu.zoom.us/j/664120328

Just log in as “Guest” and enter your name. No password required.

Careers

Spring Career Fair

Posted on by Douglas Rausch

Student registration for the Spring 2023 Virtual Career Fair is now open. We currently have 36 employers registered with amazing FT, PT, and internship opportunities. You are encouraged to come to participate in the fair either in a group or 1:1 individualized session. Even if you aren’t currently job searching, the virtual career fair is a great place to practice networking and building rapport with recruiters. To see a list of all the employers participating, click here.

CIS/Software/Cyber/Systems & Network Admin/Web Development

  • Blue Cross Blue Shield of Nebraska
  • Department of Veterans Affairs Network Contracting Office 23 (NCO 23)
  • Department of Veterans Affairs, Lincoln Regional Office
  • ECHL (East Coast Hockey League)
  • Five Nines (Computer Networking)
  • Gallup (Software, Cloud Administrator)
  • H&H Group
  • Hudl (Software)
  • IRS – Criminal Investigations
  • Quantum Workplace (Internet & Software)
  • Sandhills Global, Inc. (Internet & Software)

The Spring 2023 Virtual Career Fair will occur on Thursday, March 30th, from 10 am – 3 pm CDT on our online job platform, Handshake. To attend the Career Fair, students must log in to Handshake (free to create an account) and register for the event using this link – https://bellevue.joinhandshake.com/career_fairs/38978 We would also encourage viewing this short video (https://youtu.be/YNnnOrEDF28) as it shares how to attend a virtual fair and sign up for employer sessions. More information is available on the Career Fair page – https://www.bellevue.edu/student-support/career-services/career-fair

Careers

Career Services Spring Workshops & Career Fair

Posted on by Douglas Rausch

SAVE THE DATE – Spring 2023 Virtual Career Fair

Save the Date! The Spring Career Fair is March 30th  from 10 am – 3 pm hosted virtually via Handshake. The fair is open to all BU students & alumni. Registration open Monday, March 20th at 10 am CDT. For more information about the fair is available here – http://ow.ly/iro650KFYt6

Spring 2023 Career Services Virtual Workshops

Join us for one of our virtual workshops this spring term.  This term Career Services will address topics such as resume and cover letter basics, getting Career Fair ready, interviewing, internships, and using LinkedIn. So come to one, or better yet, come to all! More information is shared below in the event links. Sign up today!

Career Fair Ready Virtual Workshop – Thursday, March 23, 2023, 4-5 pm @ Handshake

The Spring Career Fair is approaching but are you ready? Learn how a virtual career fair works, what to expect during the fair, and quick tips to prepare you for the big event. Register via Handshake @ https://bellevue.joinhandshake.com/events/1264761Registration closes 3/22/23 at 12 pm CDT.

Internship FAQ Workshop – Thursday, April 13, 2023, 12-1 pm @ Handshake

Looking for an internship and not sure where to start?  In this workshop, Career Services will share their top 2 search sites and essential tips to get you on the right path to finding an internship! Register via Handshake @ https://bellevue.joinhandshake.com/events/1264793Registration closes 4/12/23 at 12 pm CDT.

Resume Basics Workshop – Wednesday April 26, 2023, 4-5 pm @ Handshake

 Career Services will share the elements of compelling resumes. We will also provide examples and guide you through writing your resume, which will get you noticed by recruiters. Register via Handshake @ https://bellevue.joinhandshake.com/events/1264829 Registration closes 4/25/23 at 12 pm CDT.

Cover Letter Basics Workshop – Tuesday, May 9, 2023, 4-5 pm @ Handshake

Career Services will share the purpose and elements of a compelling cover letter. This session will also be full of examples that will guide you to write your exceptional cover letter. Register via Handshake @https://bellevue.joinhandshake.com/events/1264905Registration closes 5/8/23 at 12 pm CDT.

Interviewing Tips and Tricks Workshop – Wednesday, May 17, 2023, 12-1 pm @ Handshake

Career Services will share about different types of interviews and strategies to respond to questions, and best demonstrate your knowledge and qualifications for the position you want. Register via Handshake @https://bellevue.joinhandshake.com/events/1264990 Registration closes 5/16/23 at 12 pm CDT.

LinkedIn Basics Workshop – Thursday, June 1, 2023, 4-5 pm @ Handshake

Career Services will share the purpose and elements of a compelling cover letter. This session will also be full of examples that will guide you to write your exceptional cover letter. Register via Handshake @https://bellevue.joinhandshake.com/events/1264932Registration closes 5/8/23 at 12 pm CDT.

Micro Internships Opportunities on Parker Dewey

Micro-Internships opportunities are a great way to gain experience if a 12-week internship just doesn’t fit your busy schedule. Micro-Internships involve five to 40 hours of work, and many can be completed remotely, with you in one location and the employer-based in another. They are offered by companies of all shapes and sizes – from start-ups to Fortune 100 companies. Assignments go across all departments, including sales, marketing, technology, human resources, and finance. For more information on the Micro-Internship Program or to create an account, please visit our Micro-Internship page here.

Careers

NSALive Session – Women in Cybersecurity

Posted on by Douglas Rausch

Interested in finding out about opportunities for women in the NSA Cybersecurity Directorate? Mark your calendar for March 9 at 4pm EST to hear about how NSA is supporting women in cybersecurity.

Joining the Cybersecurity Directorate means cutting-edge work that protects the nation, as well as numerous training, networking and mentorship opportunities. We’ll be sure to also cover our incredible benefits and flexible working culture that makes it possible for our team members to achieve not only their professional goals but their personal goals as well.

If you’re up for rewarding work on a team that encourages work-life balance, please join us for this NSALive session.

CTF

Spring Season for National Cyber League is Here!

Posted on by Douglas Rausch

Hey Cybersecurity Students – If you are interested in honing your cybersecurity skills in a competitive environment and adding some hands on experience to your resume this is for you!

Our nationally ranked Bellevue University National Cyber League is gearing up for our spring season and we are looking for players.  Team members have a great time putting their skills to the test in both the individual and team events such as cryptography, password cracking, traffic and log analysis, web application security, and others.  We start our league soon so we are forming our team now.  You can find out about the league here https://www.nationalcyberleague.org  We’ll have practice sessions and you will compete in a preseason, individual, and team games.  Our season is starting now and runs through April 16th.  If interested contact Prof Rausch (drausch@bellevue.edu) for more information.  The College of Science and Technology is covering a limited number of entry fees so your only investment is your time.  We have a limited number of spots so let us know your interest now.  

Research

A Zero-Day Cloud Timing Channel Attack

Posted on by Douglas Rausch

IEEE has published Dr. Robert Flower’s paper titled “A Zero-Day Cloud Timing Channel Attack.”

Abstract:
The Intrusion Detection and Prevention System (IDPS) services of a North American cloud service provider were ineffective against a simulated network timing channel attack. During the tests, three conspiring white hat agents exchanged a total of 33,024 network packets. As the proxy based attack executed, the vendor’s intrusion detection service did not generate a warning, nor did its intrusion prevention service drop packets. Throughout the experiment, 4,096 bytes of randomized data (simulating covert traffic) were exchanged over a 2.06 hour period (4.4 bits-per-second); however, the vendor’s Artificial Intelligence (AI) enabled threat detection service did not issue an alert. A Wilcoxon Ranked Sum test on the before-and-after throughput confirmed none of the vendor’s countermeasures triggered/intervened to a statistically significant degree (threat intel: p=0.703, IDPS: p=0.998 , threat intel +  IDPS: p=0.118 ). These results indicate those accountable for data-oriented Service Organization Control (SOC) 2/3 reports (e.g., auditors, cybersecurity executives, etc.) should carefully examine the assurances offered by cloud service providers with regard to their network steganography defenses.

Read full paper here: https://ieeexplore.ieee.org/document/9973314