OSU is training the next generation of cybersecurity professionals online by providing services, responding to active incidents for real clients
In cybersecurity classes at Oregon State University, students learn to spot threats, address them and fix underlying security vulnerabilities. All of these skills are critical to success after college.
But what’s it like to find a major vulnerability at the end of your shift, when the minutes are ticking by, and your clients need action? Who should help, and how can you communicate your findings clearly?
Students studying computer science at Oregon State have learned how to answer those critical questions — and build job-ready skills — through the innovative practicum program ORTSOC. It’s open to students pursuing the cybersecurity option of a bachelor’s degree in computer science online with Oregon State.
Deepening expertise through experiential learning
ORTSOC is structured like a teaching hospital, providing students with immersive cybersecurity training experiences in one area before reassigning them to another.
“We talked to some of our peers in veterinary medicine about how they design a curriculum, including clinical rotations,” said Dave Nevin, associate professor of practice in the College of Engineering at Oregon State. “We just thought that was a great model for training professionals, so we adopted that.”
Students move through rotations in network security monitoring and incident response, security engineering, assessment, threat intelligence and penetration testing. Every shift, they collaborate with a variety of clients — including local government agencies, K-12 schools and nonprofit organizations that lack in-house cybersecurity capacity.
Through repetition and practice, students build a full complement of cybersecurity knowledge and gain experience that aligns directly with professional cybersecurity roles.
“At the start of the program in the fall, we are the ones guiding students through our incident response process,” Nevin said. “Halfway through the year, the students are doing that. They detect something and make a decision on whether or not to lead the response or assign to someone else. It’s really fun to see that personal growth and their communication.”
ORTSOC benefits for students and the community
ORTSOC clients are typically small entities with one IT employee and a limited capacity to find or address cybersecurity issues.
“We have real clients and we’re either their only cybersecurity protection or we’re supporting their internal staff. The pressure is on, and that’s important in providing students with real experience,” said Nevin.
Students spend 10 to 12 hours each week in supervised shifts, coordinating with peers and Oregon State faculty to respond to incidents as they arise.
“Students spend more time with us and with their classmates than they have in any other class they’ve taken since grade school,” Nevin said. “They form very close peer bonds. They form great relationships with us. That is really beneficial.”
To preserve ORTSOC’s collaborative model, Oregon State online students log in for their shifts at the same time as their Corvallis campus counterparts.
“Our goal is to make the students that are online feel like they’re in the room with us, and I think that’s crucial,” Nevin said.
From ORTSOC cybersecurity training to the workforce
For many roles in cybersecurity, “entry level” still comes with the expectation of real-world experience. That’s not always easy for students to gain. ORTSOC helps close that gap, giving students the opportunity to practice their skills in live environments.
Former students have used their ORTSOC experience to both prepare for and land high-value cybersecurity jobs in Oregon and beyond. The lessons — and the ability to collaborate — remain after graduation thanks in part to networking opportunities.
“We have a Slack channel our graduates can use to stay in touch with us. They can’t see everything, of course, but they can still connect with us and advise students,” Nevin said.
After working closely with students for a year, Nevin says it’s sometimes hard to see them graduate and leave Oregon State. Maintaining those connections has become what Nevin calls an “unexpected benefit,” creating an active community where students learn alongside graduates who share their on-the-job insights and advice.
Learn more about ORTSOC and its innovative cybersecurity training model at Oregon State.
