UVA, State Department of Elections Join Forces to Boost Cybersecurity

Faculty in the University of Virginia’s School of Engineering and Applied Science have earned a $3 million grant to lead a network of Virginia universities, in partnership with the Virginia Department of Elections, in creating an innovative educational program to train future cybersecurity professionals to protect election infrastructure.

The Virginia Cyber Navigator Program will consist of a new elections cybersecurity course to be offered to Virginia university students next spring, followed by internships that will give college students real-world experience in supporting information systems at Virginia localities, particularly critical infrastructure used in elections.

The Virginia Department of Elections, with input from localities, will inform the course’s curriculum to ensure alignment with industry-recommended system security standards. UVA will lead the rollout of the program across the network of partner universities and handle administrative duties associated with the grant.

Daniel Persico, chief information officer of the Virginia Department of Elections, is managing the project for the Commonwealth of Virginia. He has overseen technology and security for Virginia elections since 2019.

“Virginia is leading the way in cybersecurity and elections. This program is a demonstration of innovation that not only solves real-world problems, but also offers hands-on training to our future cybersecurity professionals,” Persico said. “The program will go a long way to support the communities where we live and work in the face of continually emerging threats. Staying a step ahead of cyber adversaries is our goal.”

UVA Engineering’s team includes Jack Davidson, professor of computer science; Daniel G. Graham, assistant professor of computer science; Deborah G. Johnson, Anne Shirley Carter Olsson Professor Emeritus of Applied Ethics and interim chair of the Department of Engineering and Society; Worthy Martin, associate professor of computer science; and Angela Orebaugh, assistant professor of computer science.

The university network UVA is leading includes George Mason University, Norfolk State University, Old Dominion University, Virginia Commonwealth University and Virginia Tech.

“Technology is becoming central to more public services than just utilities, communications and transportation,” said Davidson, who directs UVA Engineering’s cyber defense program of study. “Computer systems used to manage elections are also critical infrastructure. It is important to build a pipeline of computer scientists who are ready to hit the ground running to support local governments that are rapidly integrating cyber technologies.”

The grant came from the National Centers of Academic Excellence in Cybersecurity program – within the National Security Agency ­– promoting academic excellence for institutions that are equipping the cybersecurity workforce to protect critical infrastructure. UVA earned National Center of Academic Excellence in Cyber Defense and National Center of Academic Excellence in Cyber Research designations in 2018 and 2019, respectively.

The grant highlights the long-standing strength of UVA’s cybersecurity curriculum and experiential learning opportunities, which result in UVA graduating some of the nation’s most-sought cybersecurity professionals. 

Central to the new Virginia Cyber Navigator Program is the prerequisite course for students who will enter internships. Virginia Department of Elections officials are working with university network partners to finalize the curriculum for the course, which will be called “Cybersecurity and Elections.” The course will be offered at all six universities in spring 2022 and teach foundational skills for identifying and securing vulnerabilities in software systems used to support elections.

Students from across the state who complete “Cybersecurity and Elections” will gather at UVA to participate in a multi-day boot-camp – with faculty, Department of Election members and industry advisers – for intensive, pre-internship preparation. Then, in summer of 2022, students will work as embedded teams in various Virginia localities, supported by faculty advisers, to learn from and assist the localities in enhancing their security posture.

Under the multi-year grant, the Virginia Cyber Navigator Program will be revised from observations made in the field. Student interns will play a key role in this process by gathering at UVA in fall 2022 to share lessons learned during their work with Virginia’s localities. University network members, along with government and industry advisers, will rely on the feedback to inform refinements to the program, which will be offered again in the spring of 2023.

UVA Engineering has long emphasized research and teaching that analyze the implications of technology for society, particularly through initiatives such as the UVA Cyber Innovation and Society Institute. Co-led by Davidson and Johnson, the institute seeks to anticipate impacts of emerging cyber technologies in order to support projects and education that promote use of the technology in ways that benefit society.

“A major impetus for offering the course is to give students, many who will be entering public sector careers, the chance to engage in civic-minded technology projects,” said Davidson. “Opportunities to collaborate with government leaders on behalf of the local community is a critical component in learning how to deploy technologies that serve the public good.”

Davidson is a Commonwealth Cyber Initiative Fellow and notes the program also supports the initiative’s mission of cybersecurity workforce development.

The Virginia Cyber Navigator Program is expected to become a model for the nation. Course curriculum and supplemental materials will be shared and open source, so that other states’ universities can adapt the program and offer it to their students.