Sen. Doc. No. 20-074 SPECIAL REPORT OF THE RESEARCH COUNCIL concerning CREATION OF THE UMASS CYBERSECURITY INSTITUTE IN THE COLLEGE OF INFORMATION AND COMPUTER SCIENCES (#6275) Presented at the 794th Regular Meeting of the Faculty Senate March 12, 2020 RESEARCH COUNCIL MEMBERSHIP Dominique Alfandari, MJ Alhabeeb, Michelle Budig, Leslie Button, Lisa Chasan-Taber, Carey Clouse, E. Bryan Coughlin, Robert DeConto, Jennifer Donais, Janet Fink, Lori Goldner, Michelle Hosp, Paul Katz, James Kitts, Barbara Krauthamer, Michael Malone, Jason Moralee, J. Eliot Moss, Simon Neame, Martina Nieswandt, Jennifer Normanly, MJ Peterson, Sarah Poissant, Ashwin Ramasubramaniam, Peter Reinhart,Alexander Ribbe, Brian Shelburne, Carol Sprague, Maria Tymoczko, Rachel Walker, Annette Wysocki COUNCIL RECOMMENDATION The Research Council endorses granting permanent approval to the Cybersecurity Institute (CSI), which is already operating on the University of Massachusetts Amherst campus. In consultation with the CSI Director, VCRE, and Provost, we recommend that CSI be approved as a Center affiliated with the College of Information and Computer Sciences (CICS), reporting to the CICS Dean, and following established policies regarding the management and oversight of Centers. We recommend that the Faculty Senate approve the Cybersecurity Institute name. GENERAL QUESTIONS: 1. Is this proposal for a Center or an Institute? Institute 2. Proposed Title of Institute/Center UMass Cybersecurity Institute Sen. Doc. No. 20-074 3. What is the School/College or other major budgetary unit that this center or institute will be a part of? College of Information and Computer Sciences 4. What are the names of the Center/Institute directors or other responsible persons? Brian Levine 5. What is the mailing address, telephone number of director(s) or responsible person(s)? 140 Governors Drive, Amherst, MA 413-577-0238 6. What is the proposed starting date? Now PROPOSAL DESCRIPTION: 1. Please provide a brief description (60 words or less) of the proposed enterprise (name, basic mission, activity scope, clientele). Faculty and students who are part of the Institute work in research areas spanning security and privacy challenges in networking and communications, embedded systems, data privacy, software engineering, software systems, applied cryptography, and more. "Security for the Common Good" is the guiding principle of the Institute's efforts in research and education. 2. What are the rationale and justification (mission, goals, objectives, relation to campus goals, needs addressed, population served, resources obtained)? The Institute contributes to the mission of the campus in several ways. Security is critical to every person, industry, and government in the world today, and our research projects have had enormous impact. The Institute serves the campus' educational mission as well by coordinating the curriculum and efforts of several colleges. 3. What are the specific activities planned as an on-going part of the enterprise (types, quantities of activities, meetings, publications, seminars, research)? The Institute has several recurring activities. Each fall we run a Security Speaker Series. We support two student organizations that are focused on security. We run an NSF- supported Scholarship for Service program. The faculty involved are of course involved in a broad set of research topics. Please see the attached PDF for an overview. 4. How does this enterprise differ from other offices or activities on campus with similar names, missions, interests? Sen. Doc. No. 20-074 There are no similar offices, centers, or institutes; however our efforts have synergery with centers and institutes dealing with data science and analytics because they face cybersecurity issues. We already coordinate with the Center for Data Science, for example. INSTITUTIONAL RELATIONSHIPS AND GOVERNANCE: 1. List all University units involved and describe administrative arrangements with them, if any. The Institute primarily involves the College of Information and Computer Sciences and the Department of Electrical and Computer Engineering. However, faculty from other departments are members, including Mathematics & Statistics, Political Science, and Isenberg. The Institute is open to anyone with an interest in our broad field and a desire to advance societal good. 2. Describe any organizational relationships (as distinct from funding sources) with other agencies, public or private, outside the University. The Institute is funded by a gift from the MassMutual Foundation. That award was matched by the Massachusetts Tech Collaborative (MTC). We meet regularly with the MTC. In addition, the Institute leads a 5-year NSF Scholarship for Service (SFS) program on campus, and recently submitted a proposal to NSF to renew the program. Faculty associated with the Institute have a broad set of research sponsors, including the NSF, Department of Justice, Department of State, DARPA, and private companies. 3. Describe the organization’s advisory board or other governance group. The advisory board is the College of Information and Computer Sciences advisory board. https://www.cics.umass.edu/people/advisory 4. Will this be an institute — an independent organizational unit, acting as a department for purposes of non-faculty personnel actions and appointments, able to solicit its own funds without departmental head approval? Yes 5. If a center, describe the relationship within the department or college to which this organization is subordinate. N/A 6. Describe arrangements for any patent rights, copyrights, or other ownership components of activities, and any restrictions on access to research information. Sen. Doc. No. 20-074 We follow the in-place rules and policies of the university regarding these issues. There is no need for special arrangements. 1. Describe the space available for use by the organization. (If this is not a permanent location, indicate other space arrangements that are to be made in the future, if known.) The Institute is virtual but has access to space in the College of Information and Computer Sciences and the College of Engineering for seminars, meetings, talks, etc. 2. Describe any requests for space that have been made. None. 3. Describe any repairs, renovations, major equipment needed to make the space you have useful to the organization. N/A 4. If University employees or students are or will be using space, describe the arrangement. N/A Staffing (when operation is fully developed) 1. Non-Faculty (provide rank or grade, student status, working title, FTE, source of funding). The Institute is staffed by - Priscilla Scott, business manager (part time) - Nancy Fontes, Clerk V (part time) The source of funding is a long-term$3M gift from the MassMutual Foundation, as well as a profit sharing with CICS generated from managing CICS online courses. 2. Faculty involved (provide name, department, extent involved, release time arrangement, if any). Director: Professor Brian Levine. One course release per year. Deeply involved. Many faculty are members of the institute and work on its research and educational programs. See a list here: https://infosec.cs.umass.edu/faculty/faculty-directory Sen. Doc. No. 20-074 3. Describe how the Center or Institute may impact existing teaching responsibilities of participating faculty members through “buy-out” arrangements, reduced teaching loads, or other provisions, and how such impacts will be resolved. Prof. Levine has teaching release of one course per year. The Institute resolves this loss for CICS by hiring instructors to teach many courses, which more than make up for the loss of Levine's teaching. 4. Attach a detailed budget showing sources of funding, full-year basic operation costs and anticipated expenditures. (This should show programmatic expenditure descriptions, kinds of funding accounts and amounts by subsidiary accounts as well as alternative funding arrangements or programmatic adjustments to be made if funding sources fail.) ATTACHMENTS: 1. Budget Summary 2. UMass Cybersecurity Institute Document 3. Research Council Review MOTION: That the Faculty Senate approve Creation of the UMass Cybersecurity 28-20 Institute in the College of Information and Computer Sciences, as presented in Sen. Doc. No. 20-074. Sen. Doc. No. 20-074 Budget Summary Budget Information A. Revenues by Source Fiscal Year 2018 Projected for Fiscal Year 2019 Campus Funds (be specific) None None Special State Appropriation None None Grants and Contracts None None Endowment None None Private Contributions $ 300,000 $ 300,000 Course Revenue $ 75,630 $ 100,000 Total $ 375,630 B. Expenses Faculty and Instructor Salaries/Benefits $ 203,242/ $63,560 $ 210,000 / $65,000 (include release time) Staff Salaries/Benefits $ 40,679/ $ 8,457 $ 42,000 / $ 8,500 Graduate Stipends/Benefits $ 14,157/ $ 2,175 $ 15,000 / $ 6,000 Undergraduate Support (course asst,)) $ 671 $ 0 Post-Doctoral Salaries/Benefits $ 0 $ 0 Events (e.g., meetings, symposia) $ 0 $ 3,000 ​ Travel $ 0 $ 0 Other (specify) supplies, computers, $ 13,496 $ 14,000 ​ ​ books, etc. Total $ 345,766 $ 363,500 The above numbers include only expenses and revenues related to online courses and the MMF gift. Profits from individual classes are shared with the College and not listed above. 3 Sen. Doc. No. 20-074 1 UMass Cybersecurity Institute The UMass Cybersecurity Institute serves as an interdisciplinary focal point for cybersecurity education and training at Massachusetts' flagship public university. The home of the CSI is the College