Select Page

UChicago Cybersecurity Symposium

Core Security Concepts and Research Security

Thank you for Attending!

The goals for this one-day cybersecurity symposium included the following:

  • to empower faculty and staff with the knowledge and skills required to protect the University’s digital assets.
  • to reinforce our commitment to providing a secure and resilient learning environment.
  • to foster a sense of shared responsibility and collaboration in addressing growing cybersecurity challenges, ensuring that our institution remains at the forefront of digital safety and security.
  • to build relationships with our faculty and staff constituencies and partners.

The symposium offered two learning tracks: Core Security Concepts and Research Security.

Ida Noyes Hall

Steering committee members holding a welcome sign
Attendees listening to the Opening remarks at the Cybersecurity Symposium

Cybersecurity Symposium Videos

Opening Remarks and Keynote
  • Ivan Samstein, Chief Financial Officer, The University of Chicago and Executive Vice President and Chief Financial Officer, University of Chicago Medicine
  • Juan de Pablo, Liew Family Professor in Molecular Engineering at the Pritzker School for Molecular Engineering (PME), Executive Vice President for Science, Innovation, National Laboratories, and Global Initiatives, and Senior Scientist at Argonne National Laboratory
  • Kevin Boyd, Chief Information Officer, IT Services
  • Jessica Sandy, Governance Risk and Compliance Manager
  • Samuel L. Volchenboum, Associate Professor of Pediatrics; Associate Director, Institute for Translational Medicine; Associate Chief, Research Informatics Officer; Dean of Master’s Education.

View the recording. (Panopto video)

Track A: Core Security Concepts

 

The Human Firewall

Kendall Williams, Security Engineer, IT Services; Craig Drake, Information Security Engineer, University of Chicago

View the recording. (Panopto video)

 

How to Protect your Data from Insider Threats

Jay Patel, Assistant Special Agent in Charge, FBI Chicago Field Office

View the recording. (Panopto video)

 

Security Lessons Learned
  • Harold Pollack, PhD, Co-Director of the Health Lab and Helen Ross Professor, Crown Family School of Social Work, Policy, and Practice, University of Chicago
  • David Awschalom, PhD, Liew Family Professor of Molecular Engineering and Vice Dean for Research and Infrastructure
  • Samuel L. Volchenboum, Associate Professor of Pediatrics; Associate Director, Institute for Translational Medicine; Associate Chief, Research Informatics Officer; Dean of Master’s Education

View the recording. (Panopto video)

 

Ask a CISO

Matt Morton, CISO, IT Services; Les McCollum II, MPS-CRM, CISO, UChicago Medicine

View the recording. (Panopto video)

Application Security Overview

Heather Stratford, Founder and CEO, Drip7

View the recording. (Panopto video)

 

HIPAA Data Overview

Karen Habercoss, Chief Privacy Officer, UChicago Medicine

View the recording. (Panopto video)

Track B: Research Security

 

Password Research: The Intersection of Human Computer Interaction, Privacy, and Security

Blase Ur, Neubauer Family Assistant Professor, Department of Computer Science

View the recording.(Panopto video)

 

3 Ways to Secure Your Research Data

Mike Abreu, Security Engineer, IT Services; Eddie Martinez, Security Engineer, BSD

View the recording. (Panopto video)

A Researcher’s Overview of Security and Compliance for Data Commons and Other Data Platforms

Bob Grossman, Frederick H. Rawson Distinguished Service Professor in Medicine and Computer Science; Jim and Karen Frank Director, Center for Translational Data Science (CTDS); Chief, Section of Biomedical Data Science, Dept. of Medicine; Chief Research Informatics Officer (CRIO), Biological Sciences Division

View the recording. (Panopto video)

 

Don’t Let Storage Hold Up Your Research: How to Choose the Right Solution for Your Needs

Cornelia Bailey, Director, Information Assurance, IT Services; Knut Boehmer, IT Risk Analyst, IT Services

View the recording. (Panopto video)

 

Securing Your Research in the Cloud

Shelley Rossell, Lead Information Security Engineer, IT Services

View the recording. (Panopto video)

 

Closing Remarks

Erin Adams, Vice Provost for Research, Joseph Regenstein Professor of Biochemistry and Molecular Biology Committee on Cancer Biology; Kevin Boyd, CIO, IT Services; Matt Morton, CISO, IT Services

View the recording. (Panopto video)

Speakers

Juan de Pablo, PhD

Liew Family Professor in Molecular Engineering at the Pritzker School for Molecular Engineering (PME), Executive Vice President for Science, Innovation, National Laboratories, and Global Initiatives, and Senior Scientist at Argonne National Laboratory

Much of Juan de Pablo’s work entails conducting supercomputer simulations to understand and design new materials from scratch and to find applications for them. He is a leader of simulations of polymeric materials, including DNA dynamics — how DNA molecules arrange and organize themselves and interact with other DNA molecules. He also studies protein aggregation and its poorly understood relationship to various diseases, including type II diabetes and neurodegenerative disorders.

He holds over 25 patents on multiple technologies, including nine jointly with PME Brady W. Dougan Professor of Molecular Engineering Paul Nealey and others, and is the author or co-author of more than 650 publications.

As the Executive Vice President for Science, Innovation, National Laboratories, and Global Initiatives, de Pablo helps drive and support the expanding reach of the University’s science, technology, and innovation efforts, along with their connection to policy and industry. He identifies and shapes emerging strategic scientific and technological initiatives and provides oversight of entrepreneurship and innovation activities at the University’s Polsky Center for Entrepreneurship and Innovation. He also works with faculty, deans, and administrators to build global academic partnerships and international research collaborations while overseeing the University’s international centers.

de Pablo provides leadership for the University’s stewardship of two U.S. Department of Energy National Laboratories — Argonne and Fermilab — as institutions to advance science and technology in support of the nation’s interest. He collaborates with other leaders in research and innovation to build programs and links between and among the national laboratories and the University, as well as the Marine Biological Laboratory. Working closely with President Paul Alivisatos, he plays an essential role in the University’s partnership with the Department of Energy.

Samuel L. Volchenboum, MD, PhD, MS

Director, Pediatric Cancer Data Commons

Dr. Volchenboum was drawn to computers and learned to program at a young age. Despite choosing medicine instead of computer science, he has found novel ways to use technology to enhance medical care, bringing new data-driven approaches to the field.

After an MD and PhD in molecular biology from the Mayo Clinic, he continued his medical career with a residency at Cincinnati Children’s Medical Center where rotations in oncology and stem cell transplant solidified his interest in treating children with cancer and passion for research in neuroblastoma. After completing a clinical fellowship at the Dana-Farber Cancer Institute and Boston Children’s Hospital, he continued to see patients while participating in their electronic medical record implementation.

Frustrated with the inefficiencies he observed in clinical care and medical research, he began developing new tools for collecting, processing, and managing data to augment care, improve safety, and enhance physician and patient satisfaction – all before receiving any formal training in medical informatics.

Dr. Volchenboum went on to formalize his data science training with a Master’s in Biomedical Informatics from MIT and Harvard Medical School and now is a faculty member at the University of Chicago as Director of the Center for Research Informatics, a nationally recognized group that helps academia acquire, analyze, manage, and store data to streamline their research projects.

He is also leveraging his experience at the intersection of research and bioinformatics as the scientific co-founder of Litmus Health, a company that helps drug development researchers make better go and no-go decisions from a patient’s environment, lifestyle, diet, and activity.

Blase Ur, PhD

Neubauer Family Assistant Professor, Department of Computer Science

Blase is an associate professor of computer science at the University of Chicago. He founded the UChicago SUPERgroup, an interdisciplinary research collective with dozens of incredible members. Their research spans computer security, privacy, human-computer interaction (HCI), and ethical AI. They are especially interested in developing data-driven methods for helping users make better security and privacy decisions, as well as making complex computer systems more usable for non-technical users. Their work has been supported by seven NSF grants, as well as grants from Mozilla Research and the Data Transparency Lab.

He has been fortunate to receive a Quantrell Award for Undergraduate Teaching (2021), NSF CAREER Award (2021), SIGCHI Outstanding Dissertation Award (2018), three best paper awards (CHI 2017, USENIX Security 2016, and UbiComp 2014), five honorable mentions for best paper (CHI 2021, CHI 2021, CHI 2020, CHI 2016, and CHI 2012), the John Karat Usable Privacy and Security Student Research Award (2016), an NDSEG Fellowship (2012), and a Fulbright Scholarship (2010). Jointly with the other core members of the CMU passwords group, he also received the Allen Newell Award for Research Excellence (2020) and the IEEE Cybersecurity Award for Practice (2018). He has strong interests in teaching and outreach to high school students, particularly for broadening participation in CS.

Kevin Boyd

Chief Information Officer, IT Services

Kevin B. Boyd is the Chief Information Officer at the University of Chicago. In 2020, he was honored with the Chicago CIO of the Year ORBIE Award for not-for-profit organizations. His prior experience includes Tribune Company, CNA Financial, United Airlines, Bank One, and Grainger. He also taught as an adjunct professor at Northwestern University for nine years. Boyd holds a master’s degree from Northwestern University and bachelor’s degree from Marquette University.

Matt Morton, CISSP, HCISPP, CISM, CGEIT

Executive Director and Chief Information Security Officer, IT Services

 

Matt has a strong record of success in information security management, IT strategy and budget planning, organizational development, and strategic technology architecture. He is skilled at value creation through process improvement, organized optimization, talent development, and technology integration. Proven ability in collaboration, information security, application development management and governance structures. He has over 20 years IT experience, over 10 years in information security and over 12 years in IT management roles. He is experienced in leading web and application development functions and managing the delivery of systems on-time and under budget. He has expertise in staff development, strategic and budget planning, project management, vendor management, process improvement, systems analysis, and technology integration, and is adept at creating scalable internet architectures, managing multiple projects simultaneously. He is also able to bridge the gap between technical and non-technical personnel.

Jessica Sandy, MA, GSEC

Governance, Risk, and Compliance Manager, IT Services

As the Governance, Risk, and Compliance Manager, Jessica assesses the University’s compliance and risk posture and represent the Governance, Risk, and Compliance program in campus forums. She leads the Risk Analysts team, focusing on growing their leadership skills. At a tactical level, she provides consultations on and assessments of IT risks and vulnerabilities and track the progress of enterprise risk remediation plans. At a strategic level, she utilizes a data-driven approach to build stakeholder support in implementing a high-quality Risk Management program in a decentralized environment.

Previously, she managed a Webby award winning team of designers and developers in the University’s Web Services Department. She also served as the Senior Web and Technology Projects Manager at The Field Museum, managing two major redesigns of the museum’s website, with over 4,000+ pages with 2 million annual unique visitors. She launched several mobile apps/exhibition interactives and hired the museum’s first Social Media Strategist, exponentially increasing the museum’s social media presence and brand reach.

Kendall Williams

Security Engineer, Information Security Architect, IT Services

Kendall is an accomplished, innovative Network Planning and Information Security Engineer with 20 years of demonstrated expertise. She applies advanced technical skills, knowledge, and creativity to protect and advance the University’s brand through reliable network security.

Craig Drake, CISSP, GCIH, GMON, MCSE

Security Engineer, IT Services

Craig is an experienced Information Security Professional and Systems Administrator with a demonstrated history of working in Higher Education. He is skilled in vulnerability assessment, incident response, security awareness, disaster recovery, security information and event management (SIEM), security policy management, and server virtualization.

Mike Abreu, OSCP

Security Engineer, Information Security, IT Services

Michael is a highly skilled Information Security Engineer with extensive experience in offensive security. He has demonstrated expertise as a Penetration Tester, excelling in conducting thorough penetration tests, developing innovative services, and delivering comprehensive training to staff. Notably, his exceptional communication and relationship-building skills have resulted in winning client work through impactful presentations and engaging public talks. Michael has been sought after to present on various information security topics within the financial, real estate, and construction sectors.

Currently working as an Information Security Engineer at the esteemed University of Chicago, Michael extends his offensive security perspective to the blue team, leveraging his insights to strengthen the incident response process. With a strong focus on engineering cutting-edge solutions and proactively maintaining existing systems, he ensures the constant availability and reliability of the university’s critical infrastructure. Michael’s unwavering commitment to continuous improvement and personal growth fuels his ambition to expand his expertise in areas such as exploit development, reverse engineering, software development, virtualization, and cloud infrastructure.

Garnett Kirk

Information Security Engineer, Incident Management, Biological Sciences Division

Garnett joined the Biological Science Division Information Security Office in March 2020 as a Security Engineer. He has over 15 years of IT Experience in higher education. Garnett graduated from Purdue University with a B.S in Information Assurance & System Security. He is currently working as a Cyber Defense Operational Lead engineer for the blue team specializing in Incident Response & Cyber threat management. Garnett combines his critical skill thinking and communication skills to help secure the overall security landscape within the BSD.

Cornelia Bailey, GSEC

Division Director, Information Assurance, IT Services

Currently manages University of Chicago’s Information Assurance group, a governance, risk, and compliance function of Information Technology.

Proficient in AWS, GCP, and Azure environments. Experienced in managing cloud enablement, including operations, governance, security, and research outreach.

Oversaw and consulted on over 20 innovative proof-of-concept projects, guiding them to successful completion, three of which went on to become significant, clinically-validated studies.

Routinely engaged with individual faculty and faculty governance bodies, as well as with individual IT professionals and IT leadership, on issues ranging from application development, to rapid prototyping, IT risk, and cloud adoption.

Previously, as a User Experience Consultant for IT Services, Cornelia Bailey helped navigate projects in which the outcome is not always well known. This required her to observe how students, faculty and staff behave and to discern what they want. This work takes many forms. Since the mobile experience at and beyond the university has worked well as a focal point of innovation, much of Cornelia’s work focused on mobile concerns. Her efforts include leading a technical steering group focused on mobile best practices, running regular user experience testing groups for IT projects, managing two mobile app challenges and coordinating multiple groups as the University publishes mobile applications. Cornelia’s efforts have also invigorated unique collaborative engagements with the Smart Museum, the Logan Center, and UChicago Medicine. Cornelia is a former programmer and a graduate of IIT’s Institute of Design with an emphasis on healthcare design. In addition to presenting on mobile topics around the university, Cornelia has presented at the Innovation Learning Network, the Center for Innovation at the Mayo Clinic, the Industrial Designers Society of America annual conference and at several HighEdWeb conferences on the topics of security and calendaring.

Erin Adams, PhD

Vice Provost for Research, Joseph Regenstein Professor of Biochemistry and Molecular Biology Committee on Cancer Biology

Erin Adams is an expert in molecular immunology. She explores how the immune system distinguishes between healthy and diseased tissue. She specifically focuses on gamma delta T cells, understanding their role in the immune response process and why they proliferate during infection. Prof. Adams is principal investigator of the Adam’s Lab at UChicago which focuses on understanding how events at the molecular level (i.e. protein-protein or protein-ligand interactions) allow the immune system to differentiate between self and non-self. She has received multiple honors, including the Cancer Research Foundation Junior Investigator Award. She has been named a Searle Scholar and a Kavli Fellow.

Harold Pollack, PhD

Helen Ross Professor; Associated Faculty

Harold Pollack is Co-Director of the Health Lab and the Helen Ross Professor at the Crown Family School of Social Work, Policy, and Practice at the University of Chicago. He is also an Affiliate Professor in the Biological Sciences Collegiate Division and the Department of Public Health Sciences.

He has published widely at the interface between poverty policy and public health. His recent work appears in Addiction, Health Services Research, American Journal of Public Health, Journal of the American Medical Association, and other publications. His popular journalism has appeared in the Washington Post, New York Times, Vox, Atlantic Monthly, and other publications. An elected member of the National Academy of Social Insurance and an elected Fellow of the American Academy of Social Work and Social Welfare, he served as the 2015 president, Health Politics and Policy section, American Political Science Association.

David Awschalom, PhD

Liew Family Professor of Molecular Engineering and Vice Dean for Research and Infrastructure

David Awschalom is the Liew Family Professor and Vice Dean for Research of the Pritzker School for Molecular Engineering at the University of Chicago, a Senior Scientist at Argonne National Laboratory, and Founding Director of the Chicago Quantum Exchange. He is also the inaugural Director of Q-NEXT, one of the US DOE Quantum Information Science Research Centers. He works in the fields of spintronics and quantum information engineering, exploring and controlling the spins of electrons, nuclei, and photons in semiconductors and molecules. His research includes implementations of information processing with potential applications in quantum computing, communication, and sensing.

Bob Grossman, PhD

Frederick H. Rawson Distinguished Service Professor in Medicine and Computer Science; Jim and Karen Frank Director, Center for Translational Data Science (CTDS); Chief, Section of Biomedical Data Science, Dept. of Medicine; Chief Research Informatics Officer (CRIO), Biological Sciences Division

Bob is the Frederick H. Rawson Distinguished Service Professor of Medicine and Computer Science and the Jim and Karen Frank Director of the Center for Translational Data Science (CTDS) at the University of Chicago. He is the Chief of the Section of Biomedical Data Science in the Department of Medicine at the University of Chicago. He is the Chair of the not-for-profit Open Commons Consortium, which develops and operates clouds to support research in science, medicine, health care, and the environment. He is also a Partner of Analytic Strategy Partners, LLC.

Jay Patel

Assistant Special Agent in Charge, FBI Chicago Field Office

Jay Patel is an Assistant Special Agent in Charge (ASAC) with the Federal Bureau of Investigation, in the Chicago Field Office. ASAC Patel has over 20 years of cyber security experience in the private sector and the FBI. ASAC Patel has investigated complex National Security cyber intrusion investigations involving US Government, Nuclear Power Companies, Defense Contractors, and Financial institutions. ASAC Patel has significant cross-programmatic experience investigating and leading hybrid Counterintelligence and Cyber investigations. ASAC Patel also has experience leading high profile international counterterrorism investigations involving homegrown violent extremists.

Prior to becoming a Special Agent, ASAC Patel provided a wide range of management consulting services to various business sectors in New York. Some of the services provided were incident response, penetration testing, internal and external audits, and implementation of enterprise-wide IT security and governance framework to identify and mitigate risks.

ASAC Patel holds a Master’s of Science degree in Information Systems, with a focus on Cyber Security, from Stevens Institute of Technology and a Bachelor’s of Science degree in Computer Engineering from New Jersey Institute of Technology.

Les McCollum II

Executive Director, Chief Information Security Officer at UChicago Medicine

Les is a Chief Information Security Officer and general security professional with 25 years experience. He has a strong background as a security strategist, public speaker, and mentor.

Shelley Rossell

Cloud Security Architect, IT Services

Shelley has over 15 years dedicated to IT Security/cybersecurity in a complex, global research and teaching environment. She has deep experience in incident response, network forensics, security architecture, cloud security (AWS, GCP, Azure), Active Directory and Windows security, auditing, and policy/procedure work. Shelley has knowledge of HIPAA, FERPA, PCI-DSS compliance requirements and has worked with MITRE ATT&CK and NIST 800-171 frameworks and is AWS Security Specialty certified.

Karen Habercoss, CCEP, CDPSE, CHC, CHPC, CHRC, LCSW

Chief Privacy Officer, University of Chicago Medicine

Karen Habercoss is the Chief Privacy Officer for The University of Chicago Medicine. She is responsible for the enterprise multi-year strategy and day to day operations of the health system Privacy Program. Karen has a Master’s Degree in Clinical Social Work and a Master’s in Business Administration. She began her career as a licensed clinical social worker at The University of Chicago Medicine and moved into compliance over 10 years ago. Previous to her current role, she worked in the Compliance Department at The Joint Commission and as the Corporate Compliance and Quality Officer for PRS, LLC. Karen holds the following compliance certifications: CCEP, CHC, CHPC, CHRC, CDPSE and she continues to maintain her LCSW and ACSW in clinical social work. She is on the Steering Committee of the Association of American Medical Colleges Compliance Officer Forum. Karen leads the Privacy-Security Task Group for the Healthcare and Public Health Sector Coordinating Council Cybersecurity Working Group, a public-private partnership that develops industry cybersecurity best practices for the critical healthcare infrastructure. She is a member of Chief, a network exclusive to women executives, and sits on several not-for-profit boards. Karen speaks regularly on topics related to privacy implications of data use and disclosure, effective joint privacy and security strategic initiatives, and privacy enterprise risk management.

Knut Boehmer, GSEC

IT Risk Analyst, IT Services

Knut joined IT Services Information Assurance in late 2021 as IT Risk Analyst. Knut was born and grew up in Germany, working for the University of Muenster where he received a Magister Artium degree in 2011 before migrating to the United States in 2015, where he took over the IT Manager role for the University’s Institute for the Study of Ancient Cultures, formerly known as the Oriental Institute. Over the years, Knut has worked in a wide number of IT-related functions, including user support, fleet management, SEO and SEA, web development and IT risk.

Heather Stratford

Drip7 Founder and CEO

Heather is a national thought-leader in the Training and Cybersecurity fields.  She is the founder and CEO of Drip7 — a microlearning platform for cybersecurity and compliance education. She has started and exited several technology companies. Heather has written and been quoted in Forbes, Washington Examiner, WUSA – CBS Affiliate, The G7 Summit official publication, Security Magazine, Security Technology Executive, Authority Magazine, Training Industry Magazine. She has consulted and spoken for the U.S. Department of Commerce, U.S. Federal, State and Local governments, Morgan Stanley, Stanford, The City of Ottawa, General Motors and SABIC (Saudi Arabian Oil). She has a passion for including more diversity and women in entrepreneurial start-ups and technology. Heather is a National Tory Burch fellow, graduate of the Goldman Sachs 10,000 Small Businesses Program, recipient of the Women in Business Leadership Award, and the top 23 Business Influencers of 2023 award. She is an Adjunct Professor at Whitworth University and on the Gonzaga Advisory Board for the School of Leadership Studies. She volunteers regularly and provides support to local boards and start ups. Heather and her husband Bill have 5 children, enjoy traveling and riding their motorcycles.