Network Security Resources from the Department of Homeland Security National Cyber Security Division

Cyber Attacks on School Networks Increasing Digital Education - Education Week, September 23, 2013 "What I understand from what I've seen is that [DDoS attacks are] a commonality now," said the Kentucky department's chief information officer, David Couch. "We have to be prepared and understand the environment that we are operating in so we're prepared to address these issues as they come up," Eric Creighton said. "The change that would do the most right now would be awareness of the issue, and potentially federal funds to help schools buy equipment and train network people,” Marcus Rogers, a professor and chair of the cyber forensics program at Purdue University, in Indiana

Texas Denial of Service Attacks Lubbock ISD News on Denial of Service attack Harris County Department of Education and Client District Attack: 11/8/2013 – Loss of Internet, approx. 7:45 to 8:15 “denying IP spoofing records” confirming DDOS attack on LMS server 11/8 – Updated Cisco ASA with reverse path interface 11/11 – DDOS attacks approx. 8:00 and 2:00; ISP monitoring and trouble shooting 11/12 – DDOS attacks approx. 8:00 and 2:00; Modified outside IP address for LMS server

DHS Cyber Security Advisor Mission: Provide direct coordination, outreach, and regional support in order to protect cyber infrastructure. Cyber Protective Visits – On-site Cyber Protection Survey Cyber Resilience Review Cyber Security Evaluation Tool Information Sharing and Inquiry Response Incident Response Educational and Awareness Briefings Assessments

Cyber Protective Visits On-site meetings with your organization to answer questions, exchange information, and address concerns about cybersecurity.

Cyber Protection Survey Lightweight assessment provides you with immediate feedback and recommendations for enhancing your cybersecurity posture.

Cyber Resilience Review An expert-led, interview-based evaluation that assesses cybersecurity management practices used to protect critical information technology (IT) services.

Cyber Security Evaluation Tool (CSET) This tool provides users with a systematic and repeatable approach for assessing the security posture of their cyber systems and networks. CSET is a desktop software tool that guides users through a step-by-step process to assess their cyber systems and network security practices against recognized industry standards.

Cyber Security Evaluation Tool (CSET) Process Flow diagram Raises awareness about cybersecurity Select security assurance level Identifies areas of strengths and weaknesses Output – prioritized list of recommendations

Information Sharing and Inquiry Response Provide open-source threat information. Provide repository of best practices, guides, templates, after action reports, etc. Build regional cybersecurity private-public partnerships. Inform stakeholders of national cybersecurity policy and initiatives.

Incident Support Facilitate cyber incident response. Provide federal coordination for incident notification, containment, and recovery.

Educational and Awareness Briefings Community-of-interest, symposium, and conference-focused briefings and workshops to help improve your cybersecurity awareness and posture, while providing timely and relevant information on DHS and regional programs and activities.

InfraGard Facts InfraGard is a trusted partnership between the FBI, the private sector, academia and other government agencies. The mission of InfraGard is to foster collaboration and information sharing that enhances our collective ability to address threats to U.S. critical infrastructure. Began in 1996 in Cleveland; now 84 chapters and more than 25,000 members across the United States. 139/12/2015UNCLASSIFIED

Features & Benefits Secure Online Resources Alerts & Actionable Intelligence Presentations by Subject Matter Experts Peer-to-Peer Collaboration Access to Security Conferences & FBI Events 149/12/2015UNCLASSIFIED

The IG Network 159/12/2015UNCLASSIFIED

Houston Chapter Special Interest Groups (SIGs) Oil & Gas Technology Banking & Finance Emergency Services Health Care Others Under Development 169/12/2015UNCLASSIFIED

Membership FREE Individual Requirements: 18 years or older, U.S. Citizen and periodic criminal background checks (applicants are VETTED by the FBI) Apply online at 179/12/2015UNCLASSIFIED

More about the Department of Homeland Security National Cybersecurity and Communications Integration Center Industrial Control Systems U.S. Computer Emergency Readiness Team Office of Cybersecurity and Communications Community Engagement

Discussion and Questions?