I. Overview of Cybersecurity Programs

Polytechnic University of Puerto Rico (PUPR) currently has a Master of Science in Computer Science with a Specialization in Cybersecurity, a Master of Science in Computer Engineering with Emphasis in Cybersecurity, a Bachelor of Science in Computer Engineering with a specialization in Cybersecurity, and a PhD in Applied Science and Engineering with a Supplementary Area of Study of Computer Science with an emphasis in Cybersecurity.

These programs are the only of their kind in Puerto Rico. Programs at PUPR have consistently received accreditation from the Middle States Association of Colleges and Schools (MSACS), ABET, and the Council of Education of Puerto Rico (CEPR). Current estimated enrollment figures at PUPR are over 4,500 students specifically in the engineering disciplines. PUPR has become a strategic STEM Research & Education Minority Serving Institution (MSI) in the Caribbean.

One of PUPR’s specific goals is “To develop research skills in the students and to provide scientific research within the academic community”. All these programs service a large, mainly Hispanic under-represented student population. Since the development of the two graduate certificates in Forensics and Cybersecurity, more than 100 students have received the certificates, and 60 more students are currently enrolled in both certificate programs.

PUPR has also graduated more than 150 students from the MS CS program in the Cybersecurity specialization. Many of these are now working with the DoD, NavSea, Air Force, FBI, CIA, NSA, DHS, MITRE, John Hopkins, MIT Lincoln Labs, Sandia Labs, Navy, Oak Ridge, LLNL, Los Alamos National Labs, U.S. Patent and Trademark Office, DoE, among others. This is proof that cyber security education is in great demand in federal organizations, providing career opportunities that are well remunerated. PUPR is a reliable pipeline to supply this demand.

Bachelor of Science in Computer Science (BS CS)

We offer a Bachelor of Science in Computer Science (BS CS) of 122 credits. The Bachelor of Science in Computer Science is one of the few CS programs accredited by ABET. The summary of the program components is as follows:

Students take courses such as: Data Structure, Advanced Programming, Software Engineering, Computer Architecture for CS Majors, Operating Systems, Computer Networks, Database Systems, Design and Analysis of Algorithms, Computational Theory, and Final CS Project Design, among others.

The emphasis for these NSF-SFS Scholars is to develop a Final Project Design in Cybersecurity. The following four (4) cybersecurity courses are considered for the Track: Network Security, Ethical Hacking, Computer Forensics, and Reverse Engineering & Software Protection. All these cybersecurity courses have been offered at the Institution since 2010.

These courses prepare students for careers in cybersecurity and related disciplines.

Bachelor of Science in Computer Engineering (BS CpE)

We also offer a Bachelor of Science in Computer Engineering (BS CpE) of 149 credits. Students eligible for the NSF-SFS will be enrolled in a cybersecurity track that has a key component of three courses (3 credits each for a total of 9 credits). The Bachelor of Science in Computer Engineering is also accredited by ABET.

The summary of the program components is as follows:

Students take courses such as: Data Communication and Networks, Software Engineering; Computer Architecture, Operating Systems, Computer Networks, Microprocessors, Database Systems, DSP, Capstone Design, among others.

The emphasis for these NSF-SFS Scholars is to develop a Capstone Design in Cybersecurity. The following cybersecurity courses are considered for the Track: Network Security, Ethical Hacking, Computer Forensics, and Reverse Engineering & Software Protection. All these cybersecurity courses have been offered since 2010 at the Institution.

These courses prepare students for careers in cybersecurity and related disciplines.

The Master of Science in Computer Science with an Area of Interest in Cybersecurity

The MS CS program offers a thesis option and a non-thesis option. Degree requirements for the thesis option are thirty-three (33) credits, which include the completion of twenty-seven (27) credits of coursework and six (6) credits of approved thesis work. The thesis subject matter is to be approved by the student’s graduate advisor and the thesis committee. Degree requirements for the non-thesis option are thirty-nine (39) credits that include thirty-six (36) credits of coursework and three (3) credits of a final project course. Core courses provide students with a solid foundation for technology applications and advanced studies in networking, computer security, computer forensics, and other CS topics.

Annual offerings demonstrate that there is a demand for the courses and sufficient enrollment to maintain a solid MS CS program.

Please see curriculum and program structure below: 

Core Courses: (Required: 15 credits for Thesis and non-Thesis Option) – Advanced Design and Analysis of Algorithms; Computational Theory; Principles of Information Security; IT Operations; and Computer Forensics. 

Specialization in Cybersecurity Courses: (Required: 12 credits for Thesis and Non-Thesis Option) – Advanced Database Systems; Computer Security; Network Security; and Advanced Computer Forensics.

After completing the required Core and Cybersecurity Specialization courses the student with the non-thesis option may opt for one of these Emphasis Areas:

Emphasis Areas (9 credits).

• Database Security and Secure Operations – IT Auditing and Secure Operations; Contingency Planning; and Database Security.

• Digital Evidence & Forensics – E-Discovery and Digital Evidence; IT Auditing and Secure Operations; and Law, Investigation, and Ethics.

Non-Thesis Project Option – Non-thesis option students are required to complete the Final Project (3 credits) after completing the core, specialization, and emphasis area courses. 

Thesis Project Option – Thesis option students are required to complete the Final Thesis Project (6 credits) after completing the core and specialization courses.

PhD Program in Engineering Science

Polytechnic University of Puerto Rico (PUPR) is also offering a PhD program where security is one of the core research areas. Initiative focuses on developing an Interdisciplinary PhD in Engineering Science. Students will master two core areas (in Computer Science and Engineering) straddling the interdisciplinary research area of security. The program structure and curriculum are shown below: 

Program Structure/Curriculum: Engineering and Applied Sciences Ph.D. Degree The interdisciplinary Engineering and Applied Sciences Ph.D. Degree requires completion of a minimum of 60 credit hours of approved graduate level course work.

Figure 1 presents a block diagram of the program structure.

The interdisciplinary Engineering and Applied Sciences Ph.D. degree requires a Principal Area of Study (major) in the field of Engineering. PhD students that are candidates for the NSF-SFS will be in the Computer Engineering and Electrical Engineering programs.

In addition, they will seek the degree in the Supplementary Area of Study of Computer Science with the emphasis in Cybersecurity that includes courses in topics such as: Network Security, Digital Forensics, Data Mining and Warehousing, and Computer Security, Design and Analysis of Algorithms, among others.

There is a great demand for professionals that can bring solutions through collaboration, public awareness and the introduction of new methods of Cybersecurity. Cybersecurity is an area that presents great challenges requiring solutions that can only be obtained by means of research and innovation, which leads to the introduction of new products and services.

Dr. Alfredo Cruz, Executive Director of the PUPR-CAE CD designation has strengthened the Cybersecurity specialization in the Master of Science in Computer Science program, and the Master of Science in Computer Engineering, by offering excellent curricular alternatives that provide students the security skills and knowledge to react to real world situations in the workplace (Government and Industry).

We also continue to attract and retain high-profile researchers in Computer Science and Engineering thus increasing the number and quality of Hispanic student and faculty participation by fostering the integration of research and education in Cybersecurity.

Dr. Alfredo Cruz and Dr. Duffany, have contributed significantly to the development of the Graduate Certificate in Information Assurance and Security (GCIAS) in 2009, and the development of the Graduate Certificate in Digital Forensics (GCDF) in 2012. PUPR has also developed a Graduate Certificate in Artificial Intelligence and Data Analytics (GCIADA) in 2025. All of these certificates have local accreditation and are in great demand.

The GCIAS provides students and IT security professionals from private and public sectors with theoretical components and hands-on-practice in a curriculum that is specially designed to cover the managerial and technical aspects of Information Assurance and Security.

The GCDF provides an in-depth introduction to key topics of digital forensics and provides a balanced teaching philosophy that contains both theory and hands-on practice. It attracts people from local and national law enforcement agencies (and other public and private sectors) that need the background in this area to enhance their job skills and overall performance. The certificate provides exposure to current problems in a rapidly changing field and to encourage participants to experiment and learn firsthand innovative ideas and approaches.

The GCAIDA provides an in-depth introduction to key topics of Artificial Intelligence and Big Data Analytics. They provide both theory and hands-on practice in these fields that are in great demand. This certificate provides exposure to current problems in a rapidly changing field and encourages participants to experiment and learn firsthand innovative ideas and approaches. The certificate provides an in-depth introduction to key topics of Artificial Intelligence in the field of Cybersecurity. Students will learn how to detect email threats such as spamming and phishing using AI; Categorize APT, zero-days, and polymorphic malware samples; Overcome antivirus limits in threat detection; Predict network intrusions and detect anomalies with machine learning; Verify the strength of biometric authentication procedures with deep learning; Evaluate cybersecurity strategies and learn how you can improve them; among others.

II. Historical Background of CAE/IAE Designation

In 2009 Polytechnic University of Puerto Rico (PUPR) was recognized as the first and only institution in Puerto Rico to be granted the special distinction from the National Security Agency (NSA) and Department of Homeland Security (DHS) as a Center of Academic Excellence in Information Assurance Education (CAE/IAE).

PUPR was one of the first 100 institutions to obtain this designation in the Nation. With this designation as a CAE/IAE PUPR has obtained scholarships and fellowships that help outstanding students to pursue graduate studies in IA/CD, enabling them to work with the Federal Government or other federal institutions and agencies. The Institution is also constantly applying for Scholarships for Service (SFS) awards from the NSF; funds for faculty and student research; and many other benefits that are available for designated centers nationwide.

PUPR received recognition and an official certificate during the June 2009 CNSS Awards Ceremony, which were held at the 13^th Colloquium for Information Systems Security Education (CISSE). This certificate, signed by the CNSS Chair, was valid through June 2014. The Information Assurance Courseware Evaluation (IACE) program provides consistency in training and education for the information assurance skills that are critical to our nation.

In the process of obtaining the CAE/IAE designation Polytechnic University of Puerto Rico also became the first academic institution in the Caribbean to be certified by the Committee on National Security Systems (CNSS). The Information Assurance Courseware Evaluation (IACE) program validated the Polytechnic University of Puerto Rico courseware as meeting all of the elements of the Committee on National Security Systems (CNSS) National Training Standards for: Information Systems Security (INFOSEC) Professionals, NSTISSI No. 4011 System Administrators (SA), CNSSI No. 4013 Entry Level As a result of CNSS certification:

• PUPR was added to NSA’s list of referrals for students who seek training in the INFOSEC field.
• Federal civilian and military personnel were permitted to take our certified courses under government sponsorship.
• PUPR received recognition and a certificate during the CNSS Annual Conference (certificates were presented by the Assistant Secretary of Defense for Command, Control, Communications and Intelligence).
• PUPR is authorized to issue certificates to students who complete its certified courses.
• PUPR is permitted to use the CNSS logo on its certificates, literature, and advertising.

In 2014 PUPR received re-designation as a new CAE IA/CD designated by the DHS and the NSA. We still have the honor of being the first and only institution designated in Puerto Rico and the Caribbean, having a strategic position in the southeast of the United States. The Institution counts with excellent resources to support the initiative of increasing local Information Assurance and Cyber Security education; and to develop outreach activities. 

In 2021 PUPR received re-designation as a CAE CD. The efforts to fulfill and maintain the required criteria to be designated as a CAE CD were supported by the Director of the Center for Information Assurance for Research and Education (CIARE), Dr. Alfredo Cruz. He networked with the Graduate School (where he is Graduate Program Director) and the ECECS Department to enhance the curriculum; develop courses, programs, and certificates that strengthen cybersecurity education at PUPR.

PUPR is seeking re-designation in 2027 for the 4^th time as a CAE Cyber Defense and Education. The efforts to fulfill and maintain the required criteria to be designated as a CAE CDE are being supported by the Director of the Center for Information Assurance for Research and Education (CIARE), Dr. Alfredo Cruz. He is networking with the Graduate School (where he is Graduate Program Director) and the ECECS Department to enhance the curriculum; develop courses, programs, and certificates that strengthen cybersecurity education at PUPR.

III. CIARE MISSION STATEMENT

“The Center of Information Assurance for Research and Education (CIARE) of Puerto Rico in the Department of Electrical and Computer Engineering and Computer Science has the mission of promoting research, undergraduate and graduate education, and public outreach to benefit the Cyber Defense (CD) academic community and public in general, serving as a forum for students, faculty, and Cybersecurity professionals from different sectors of the economy. CIARE will help to produce more professionals with cybersecurity expertise in various disciplines to secure and protect local and national information resources and cyberspace infrastructures.” In particular, the goals of CIARE are:

• “To reduce the vulnerability of our national information infrastructure by promoting higher education in cyber defense (CD) with the development of graduate and undergraduate education programs for professionals in information assurance and cybersecurity.”
• “To provide a forum that can be used by professors, professionals, industries and students to collaborate in the identification and solution of issues on cybersecurity.”
• “To be a vehicle for IA/CD cybersecurity training, research, invention, innovation, education, public awareness, entrepreneurship, economic development, and dissemination of best practices, among others.”
• “To maintain collaboration programs with top universities nationwide and strengthen the existing and new industries and the overall economic development in the state of Puerto Rico by developing joint research projects between industry and academia in computer security and encouraging the practice of emerging security standards within minority institutions.”

Academic Programs and Certificates in Cybersecurity

The Electrical & Computer Engineering and Computer Science (ECECS) Department and the Graduate School at Polytechnic University of Puerto Rico (PUPR) has developed curriculum for Cybersecurity related courses for the Computer Science and Computer Engineering programs at PUPR.

The Graduate School at PUPR continues to strengthen the Cybersecurity Specialization in the Master of Science in Computer Science (MS CS) Program by offering excellent curricular alternatives that provide students the security skills and knowledge to react to real world situations in the workplace (Government and Industry).

The MS CS program currently has an enrollment of more than 60 students. This program is the first and only of its kind in Puerto Rico and has a specialization in Cybersecurity that has 40 students:

The Master of Science in Computer Science with an Area of Interest in Cybersecurity with Final Project (39 Credits)

The PoS in Cybersecurity that we are presenting for the redesignation is a non-thesis option that requires a final project and three additional courses in cybersecurity (instead of the Thesis) that map to the KU’s, for a total of 39 credits. All the courses have been taught for more than five years at PUPR. The number of the course and title are shown below:  

Core Courses: (Required: 15 credits)
CECS 6010 Advanced Design and Analysis of Algorithms  
CECS 6030 Computational Theory  
CECS 6005 Principles of Information Security  
CECS 6230 IT Operations 
CECS 7235 Computer Forensics

Specialization: Cybersecurity (Required: 12 credits)
CECS 6605 Advanced Database Systems 
CECS 7570 Computer Security 
CECS 7230 Network Security 
CECS 7237 Advanced Computer Forensics 

After completing the required Core and Cybersecurity Specialization courses the student may opt for one of these Emphasis Areas (9 credits).

Database and Secure Operations:
CECS 6015 IT Auditing and Secure Operations 
CECS 6035 Contingency Planning 
CECS 7240 Database Security 

Digital Evidence & Forensics:
CECS 6046 E-Discovery and Digital Evidence 
CECS 6015 IT Auditing and Secure Operations
CECS 6045 Law, Investigation, and Ethics 

Non-thesis option students are required to complete the Final Project (3 credits) after completing the core, specialization, and emphasis area courses.

Non-Thesis Project Option:
CECS 7950 Project (3 credits) 
CECS 7951 Project Extension (0 credits) 

• There are no elective courses.
• The Master of Science in Computer Science resides and administrated by the Graduate School.

PUPR also offers undergraduate courses on security such as: Computer Forensics, Ethical Hacking, Network Security, and Reverse Engineering, among others. We offer more than 17 courses in the area of security at both undergraduate and graduate levels.

We continue to attract and retain high-profile researchers in Computer Science and Engineering thus increasing the number and quality of Hispanic student and faculty participation by fostering the integration of research and education in Cybersecurity.

We also continue to strengthen the CAE CD by creating the following two graduate certificates:

• The Graduate Certificate in Information Assurance and Security (GCIAS) provides students and IT security professionals from private and public sectors with theoretical components and hands-on-practice in a curriculum that is specially designed to cover the managerial and technical aspects of Information Assurance and Security. The certification is composed of 6 key courses (18 credits): Data Communication Networks; Computer Security; Principles of Information Security; Contingency Planning; IT Auditing and Secure Operations; Law, Investigation and Ethics. This Certificate has been approved by the Council of Education of Puerto Rico (CESPR). The GCIAS highlights the Cybersecurity Specialization, delivering knowledge and skills to capacitate Computer Scientists and Engineers, as well as IT/IS professionals who are working in the development and/or maintenance of information and computer security systems or products. It prepares the student and professional with cyber security skills that are already of great demand in today’s fast paced, high-tech, competitive work areas. The GCIAS can be completed while completing the Cybersecurity Specialization or as a stand-alone Certificate. Some graduate courses may require prerequisite courses.
• The Graduate Certificate in Digital Forensics (GCDF) provides an in-depth introduction to key topics of digital forensics and provides a balanced teaching philosophy that contains both theory and hands-on practice. It attracts professionals from local and national law enforcement agencies (and other public and private sectors) that need the background in this area to enhance their job skills and overall performance. The certificate provides exposure to current problems in a rapidly changing field and encourages participants to experiment and learn firsthand innovative ideas and approaches. To complete the certificate program the student must take a total of 6 graduate courses of three (3) credits (18 credits): e-Discovery; Data Communication Networks; Computer Security; Network Security; Computer Forensics; Advanced Computer Forensics. Through this certificate, participants gain vital insight into obtaining and documenting digital information, determining the source of information compromises; and delivering expert testimony concerning digital crime related to data in computers, networks and hand-held devices. In addition, the program addresses recovery of corrupted, encrypted and hidden information, providing a comprehensive preparation for assisting in the prevention and prosecution of malicious information theft and other criminal activity. The GCDF provides a valuable intellectual asset for any IT professional interested in a demanding career in Computer Forensics and/or related fields of study.

• The Graduate Certificate in Artificial Intelligence and Data Analytics (GCAIDA) provides an in-depth introduction to key topics of Artificial Intelligence and Big Data Analytics. They provide both theory and hands-on practice in these fields that are in great demand. This certificate provides exposure to current problems in a rapidly changing field and encourages participants to experiment and learn firsthand innovative ideas and approaches. The certificate provides an in-depth introduction to key topics of Artificial Intelligence in the field of Cybersecurity. Students will learn how to detect email threats such as spamming and phishing using AI; Categorize APT, zero-days, and polymorphic malware samples; Overcome antivirus limits in threat detection; Predict network intrusions and detect anomalies with machine learning; Verify the strength of biometric authentication procedures with deep learning; Evaluate cybersecurity strategies and learn how you can improve them; among others. The six graduate courses of the GCAIDA are: Python Programming for AI and Data Analytics; Ethics in AI; Artificial Intelligence; Fundamentals of Big Data Analytics; Big Data Analytics Applications and Programming; and Data Mining and Data Warehousing.

Benefits of the CAE Designation

In 2009 Polytechnic University of Puerto Rico (PUPR) became the first Center of Academic Excellence in Information Assurance Education (CAE/IAE) in Puerto Rico and the Caribbean, designated by the National Security Agency (NSA) and Department of Homeland Security (DHS). In 2014 we obtained the redesignation as a CAE/IAE. In 2022 we obtained the redesignation as a CAE/Cyber Defense Education institution. We are currently seeking redesignation for 2027. This would be our 4^th term as a Center of Academic Excellence institution.

The Institution also counts with excellent resources to support the initiatives of increasing National Defense, as our highly skilled faculty and students are mostly bilingual American citizens. All this is favorable for PUPR’s 2027 re-designation as a National Center of Academic Excellence in Cyber Defense Education (CAE CD/E).

Institutions that are successful at completing the required Knowledge Units, and Criteria are designated as a National Center of Academic Excellence in Cyber Defense and Education (CAE CD/E) by the National Security Agency (NSA).

As a CAE CD/E, PUPR competes and benefits from proposal calls (RFP) that are specifically for designated CAE institutions. These proposals offer millions of dollars from the DoW, NSF, NCAE, and DHS, among others, for research and infrastructure. The Institution can obtain scholarships from granting institutions such as the DoW CSA Scholarship Program, the NSF CyberAI, NRC, and others, that help outstanding students pursue graduate studies in Cybersecurity, also enabling them to work with the Federal Government or other federal institutions and agencies.

With the CAE designations we have:

• Successfully established a Center of Information Assurance for Research and Education (CIARE) in the PUPR, Hato Rey campus, for research & education development in Information Assurance and Cyber Security. The Center has been the vehicle for developing/participating in many cybersecurity activities, conferences, and workshops in recent years.

• Increased collaboration opportunities between designated Centers of Excellence and aspiring institutions at local and national levels. This includes collaborative proposals, internships, research, and publications, among other activities.

• Continued our efforts at CIARE to support cybersecurity research, education, and faculty capacity building through proposals to local and federal government funding for scholarships, fellowships, annual colloquiums, seminars, workshops, and capacity building activities.

• Continued to utilize our high-tech equipment to enhance cybersecurity education and research. This helps us work on security problems and applications, such as cryptanalysis, cryptography, and other that can speed up solutions that are otherwise prohibitive in uniprocessor systems.

• Enhanced the cybersecurity infrastructure by purchasing equipment and establishing a Cyber Digital Forensics Investigation Laboratory (CDFIL).

• Submitted infrastructure and research proposals to continue enhancing the hands-on educational experience of great professional value in the Cybersecurity discipline.

• Supported students studying in the area of Cybersecurity by helping them to continue graduate studies through grants offered by the DoD HBCU (Historically Black Colleges and Universities), Nuclear Regulatory Commission (NRC), DHS, DoE, NSF-SFS, DoD CySP, among others.

We are recognized as the first institution in Puerto Rico to be designated as a CAE IA/CD institution designated by the NSA and the DHS:

• We have reduced the vulnerability of our national information infrastructure by promoting higher education in cyber defense (CD) with the development of graduate and undergraduate education programs for professionals in information assurance and cybersecurity.
• We have provided a forum that can be used by professors, professionals, industries and students to collaborate in the identification and solution of issues on cybersecurity.
• We have become a vehicle for IA/CD cybersecurity training, research, invention, innovation, education, public awareness, entrepreneurship, economic development, and dissemination of best practices, among others.
• We have maintained collaboration programs with top universities nationwide and strengthened the existing and new industries and the overall economic development in the state of Puerto Rico by developing joint research projects between industry and academia in computer security and encouraging the practice of emerging security standards within minority institutions.

Center of Information Assurance for Research and Education in Puerto Rico (CIARE)

The CIARE research center provides a forum that can be used by faculty, students, and cybersecurity professionals from the public and private sectors. This collaboration helps to identify the issues on IA and cyber security that need to be solved. The Center is a vehicle for: training, research, invention, innovation, education, public awareness, entrepreneurship, economic development, and dissemination of best practices.

The CIARE centers its efforts on the following activities:

• Offer technical certification, training, workshops, conferences, lectures, as a continuing education to professionals. Each year there is special cybersecurity training and awareness for teachers and high school students.
• Strengthen the Master of Science in Computer Science with a specialization in Cybersecurity through faculty capacity building and curriculum enhancement.
• Collaborating research with the public and private sectors, including individuals.
• Attract and retain outstanding PhD faculty/researchers for the MS CS program.
• Provide consulting services.
• Participate in joint development partnerships.
• Promote best practices in IA & cybersecurity.
• The Center emphasizes on the participation of underrepresented groups. We continue to expand our collaboration with the four-year colleges in Puerto Rico and sponsor some of their best senior students to participate in cybersecurity research projects.
• We encourage graduate and undergraduate participation in cybersecurity activities and also develop outreach program to high-school students and teachers. Part of this outreach program will be making university short courses in cybersecurity available to high schools and allowing teachers to attend workshops in cybersecurity.

Cybersecurity Awareness Links & Best Practices

Student Services Guide / Student Information Handbook

Polytechnic University of Puerto Rico – Student Information Handbook
https://www.pupr.edu/wp-content/uploads/2024/04/Student-Information-Handbook.pdf

Cybersecurity Awareness Program

CISA Cybersecurity Awareness Program
https://www.cisa.gov/resources-tools/programs/cisa-cybersecurity-awareness-program

Cybersecurity Awareness Month Resources

CISA – Cybersecurity Awareness Month
https://www.cisa.gov/cybersecurity-awareness-month

Cybersecurity Awareness Month Toolkit

https://www.cisa.gov/resources-tools/resources/cybersecurity-awareness-month-toolkit

Phishing Awareness

National Cybersecurity Alliance – What Is Phishing? How to Spot and Avoid Phishing Scams
https://www.staysafeonline.org/articles/phishing

FTC – How To Recognize and Avoid Phishing Scams
https://consumer.ftc.gov/articles/how-recognize-avoid-phishing-scams

Protect Your Privacy Online

FTC – Protecting Your Privacy Online
https://consumer.ftc.gov/features/protecting-your-privacy-online

Malware and Spyware Awareness

National Cybersecurity Alliance – How to Protect Your Small Business from Malware
https://www.staysafeonline.org/articles/how-to-protect-your-small-business-from-malware

National Cybersecurity Alliance – Can A Hacker Take Over Your Computer? What to Know About Remote Access Trojans
https://www.staysafeonline.org/articles/can-a-hacker-take-over-your-computer-what-to-know-about-remote-access-trojans

General Online Safety Best Practices

National Cybersecurity Alliance – Online Safety Basics
https://www.staysafeonline.org/articles/online-safety-basics

Wi-Fi Security

Home Wi-Fi Security
CISA Project Upskill – Module 5: Securing Your Home Wi-Fi
https://www.cisa.gov/audiences/high-risk-communities/projectupskill/module5

Bluetooth and Mobile Device Security

Wi-Fi and Bluetooth Safety
National Cybersecurity Alliance – Best Vacation and Travel Cybersecurity Tips
https://www.staysafeonline.org/articles/vacation-and-travel-security-tips

NSA – Mobile Device Best Practices
https://media.defense.gov/2021/Sep/16/2002855921/-1/-1/0/MOBILE_DEVICE_BEST_PRACTICES_FINAL_V3%20-%20COPY.PDF

FCC – How to Protect Yourself Online
https://www.fcc.gov/consumers/guides/how-protect-yourself-online

Protecting Your Privacy Online
https://consumer.ftc.gov/features/protecting-your-privacy-online

Hackers, Scammers, and Personal Information Protection

FTC – Protect Your Personal Information From Hackers and Scammers
https://consumer.ftc.gov/articles/protect-your-personal-information-hackers-and-scammers

Student Activities and News

NIST | Upcoming Events (2026)
https://www.nist.gov/news-events/upcoming-events

National Cyber League Competitions (2026)
https://cyberskyline.com/events/ncl

CTF Competitions (2026)
https://www.pupr.edu/event/capture-the-flag/

Python & Linux Workshops (2026)
https://www.pupr.edu/event/python-linux-workshop/

Introduction to Cybersecurity Workshop (2026)
https://www.pupr.edu/event/spring-kickoff-workshop-introduction-to-cybersecurity-ctfs-and-htb/

CISA | Known Exploited Vulnerabilities Catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Reverse Engineering Workshop (2026)
https://www.pupr.edu/event/assembly-reverse-engineering/

Game Night Activity (2026)
https://www.pupr.edu/event/official-game-night/

Python Crypto Workshop (2026)
https://www.pupr.edu/event/python-crypto-101/

Workshop Red Ventures (2026)
https://www.pupr.edu/event/cyber-castors-taller-red-ventures-fwd787/

NSA | National Security Agency
https://www.nsa.gov/

CISA | Cybersecurity & Infrastructure Security Agency
https://www.cisa.gov/cybersecurity

CyLab Security Academy | Beginner-Friendly CTF Platform
https://cylabacademy.org

Hack The Box | Cybersecurity Training Platform
https://www.hackthebox.com

TryHackMe | Guided Cybersecurity Learning
https://tryhackme.com

NSA/CSS | Centers of Academic Excellence (CAE)
https://www.nsa.gov/Academics/Centers-of-Academic-Excellence/

SANS Cyber Aces | Free Online Security Courses
https://www.sans.org/cyberaces/

DEF CON | Annual Hacking Conference
https://defcon.org

CyberSeek | Cybersecurity Career Pathway Tool
https://www.cyberseek.org

Black Hat USA 2026 | Annual Information Security Conference
https://www.blackhat.com/us-26/

Krebs on Security | Cybersecurity News & Investigations
https://krebsonsecurity.com

The Hacker News | Cybersecurity News & Analysis
https://thehackernews.com

OWASP Foundation | Open Web Application Security Project
https://owasp.org

Cybrary | Free Cybersecurity Training & Career Development
https://www.cybrary.it

MITRE ATT&CK | Adversarial Tactics, Techniques & Common Knowledge
https://attack.mitre.org

CTFtime | Capture The Flag Event Tracker
https://ctftime.org

CompTIA | Security Certifications & Resources
https://www.comptia.org/certifications/security

IEEE Security & Privacy | Research & Publications
https://www.computer.org/csdl/magazine/sp

OverTheWire | Wargames for Security Learning
https://overthewire.org/wargames/

Cybersecurity & AI Initiative | MIT
https://computing.mit.edu/research/cybersecurity/

Cybersecurity Incorporated into Non-Technical Disciplines

Cybersecurity concepts are incorporated into non-cybersecurity disciplines through graduate-level courses offered in the Business School and related graduate programs. These courses expose students from business and other non-cybersecurity-focused backgrounds to important cybersecurity topics such as database security, network security, secure information systems, and the protection of organizational information assets.

In the MBA program, cybersecurity-related topics are included through the Computer Information Systems emphasis area. The following courses provide relevant exposure to information systems, data protection, networks, and security:

CIS 6605 Database Management Systems
This course presents methodologies and principles of database design, including database architectures, logical modeling, the relational model, relational operators, integrity constraints, the SQL language, and data normalization. The course also includes topics in distributed databases, object-oriented databases, and security issues. Through this course, students are introduced to the importance of protecting data, maintaining data integrity, and considering security as part of database design and management.

CIS 6615 Software Engineering for Business
This course introduces basic concepts of software requirements generation and analysis, software design, structured design methodologies, data flow design, programming of engineering systems, and testing. From a cybersecurity perspective, the course helps business graduate students understand the importance of reliable software development practices, system requirements, and testing as part of the protection and proper operation of business information systems.

CIS 6705 Data Communications and Computer Networks
This course examines recent advances and new applications in computer networks and distributed systems. It covers the technical fundamentals, architecture, and design of computer networks and distributed systems. It also includes strategies, tools, and techniques for network planning, implementation, management, maintenance, and security. Topics include the OSI model, transmission media, network operating systems, topologies, configuration protocols, performance characteristics, LANs, WANs, MANs, and enterprise-wide networks. The course incorporates cybersecurity through the study of network security strategies used to protect organizational communication systems.

In addition, cybersecurity-related content is supported through other graduate offerings, including CIS 6715 E-Commerce and Web Information Systems, which addresses Internet technologies, electronic commerce, database connectivity, electronic transactions, and security. This course strengthens student understanding of secure electronic transactions and web-based information systems.

Cybersecurity learning opportunities are also supported through the Cybersecurity Certificate (UCECySec) and the micro-credential in Cybersecurity Fundamentals in Network Security, Forensics, Reverse Engineering, and Ethical Hacking.

Together, these courses and credentials show that cybersecurity is not limited to technical cybersecurity programs. Instead, cybersecurity topics are integrated into broader graduate education, helping students from business and other non-cybersecurity areas understand the security, risk, and information protection issues that affect modern organizations.

Together, these courses and credentials show that cybersecurity is not limited to technical cybersecurity programs. Instead, cybersecurity topics are integrated into broader graduate education, helping students from business and other non-cybersecurity-focused areas understand the security, risk, and information protection issues that affect modern organizations.

Publications and Final Projects in Cybersecurity in the Last Four Years

Year 2026

Carro Luna, J. J., Perez Cabezas, A., A., M., & Perez, D. (2026, March 25–26). Cybersecurity: A comparative survey of AI design paradigms [Conference paper]. 25th Annual Security Conference, Las Vegas, NV.

Rodríguez, L. H., Pagán Vargas, L., Vicente López, L. M., & Zavala Quiñones, J. (2026). Estudio sobre percepción e impacto del uso de la Inteligencia Artificial en estudiantes universitarios. Trabajo aceptado para presentación en el VI Congreso Internacional de la Asociación Iberoamericana de Marketing, AIM 2026, Chile, 23–24 de junio de 2026. Submission 3062.

Teron, A. C., and L. M. Vicente, (2026, March) Forecasting Satellite Cyber Threats Using the A.E.R.I.S. Model: Attack Evolution & Resilience via Integrated Statistics (extended version). presented at the IEEE SoutheastCon 2026

Year 2025

Álvarez, A. and Castillo, P. (2025) Custom GPT for Cybersecurity Education: Toward a Framework for Domain-Specific AI Education. 24th Annual Security Conference, May, 2025, Las Vegas, NV.

Perez, A., Gonzalez, R. et al. (2025). Harnessing Machine Learning for Enhanced Malware Detection and Analysis. 24th Annual Security Conference, May, 2025, Las Vegas, NV.

Alvarez, M., Gonzalez, D., et al. (2025) Demystifying AI-Driven Audits and its Ethics: A Graduate Certification in Compliance Auditing and AI. 24th Annual Security Conference, May, 2025, Las Vegas, NV.

De Jesús Aponte, K. M. (2025, May). Designing a secure password management system: The SaveAPass architecture [Graduate Project EXPO, Master in Computer Engineering; advisor: Alfredo Cruz, Ph.D.]. Polytechnic University of Puerto Rico.

García Collazo, X. N. (2025, May). Active learning in cloud security course design [Graduate Project EXPO, Master in Computer Science; advisor: Alfredo Cruz, Ph.D.]. Polytechnic University of Puerto Rico.

García Romero, F. E. (2025, May). Enhancing cybersecurity awareness through real-world case studies: A data-driven evaluation of training effectiveness [Graduate Project EXPO, Master in Computer Science; advisor: Alfredo Cruz, Ph.D.]. Polytechnic University of Puerto Rico.

González Cartagena, R. (2025, May). Enhancing intrusion detection systems through advanced machine learning techniques [Graduate Project EXPO, Master in Computer Science, Cybersecurity in Digital Evidence and Auditing; advisor: Dr. Alfredo Cruz]. Polytechnic University of Puerto Rico.

González Figueroa, M. A. (2025, May). Miradas críticas sobre la tecnología: Auditoría de TI y ética en IA [Graduate Project EXPO, Maestría en Ciencias de Computadoras; mentor: Alfredo Cruz, Ph.D.]. Universidad Politécnica de Puerto Rico.

Iglesias Santiago, M. A. (2025, February). An assessment and study of Wi-Fi security through the use of wardriving in Caguas, Puerto Rico [Project article; advisor: Alfredo Cruz, Ph.D.]. Polytechnic University of Puerto Rico.

Luna Rivera, R. A. (2025, October). KU alignment with PUPR’s program of study [Graduate Project EXPO, Master in Computer Science; advisor: Alfredo Cruz, Ph.D.]. Polytechnic University of Puerto Rico.

Rodríguez Delgado, M. Á. (2025, May). Refreshed view of computer security and e-discovery course material [Graduate Project EXPO, Master in Computer Science; advisor: Alfredo Cruz, Ph.D.]. Polytechnic University of Puerto Rico.

Ayala Arroyo, E. (2025). Aviation data analytics in the cloud. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Carrasquillo Dávila, E. (2025). ElectroNeek Studio Pro for LUMA invoice automation and payment processing. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Liboy, B. A. (2025). Low light image enhancement using transfer learning on a lightweight U-Net architecture. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Rodriguez Ruiz, O. J. (2025). Analyst-in-loop LLM systems for forensic timeline analysis assistance. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Teron, A. C., & Vicente, L. M. (2025, October). Forecasting Satellite Cyber Threats using the A.E.R.I.S Model: Attack Evolution & Resilience via Integrated Statistics. In Proceedings of the XIX International Conference on Aeronautical and Aerospace Engineering (ICAAAE 2025), Los Angeles, CA, USA.

Teron, A. C., & Vicente, L. M. (2025, April). Protecting Satellites: Learning from the Past to Secure the Future. In Proceedings of the Annual Security Conference, Las Vegas, NV, USA.

Year 2024

Delgado-Martí, H. J. & Cruz, A. (2024). Examination of crossover features in a Genetic Algorithm towards applications in cybersecurity. 23rd Annual Security Conference, April 3 – April 4, 2024, Las Vegas, NV.

González, R., Vivas, R., Chaar, E.M. & Cruz, A. (2024). The Impact of Machine Learning on Credit Card Fraud Detection. 23rd Annual Security Conference, April 3 – April 4, 2024, Las Vegas, NV.

Meléndez, E., & Vicente, L. M. (2024, June). Object Visibility Forecasting Estimation in a Heterogeneous Environment under Occlusion. In Proceedings of the CyAD Conference 2024, Palos Hills, IL, USA.

Alicea Cortés, W. (2024, October). Exploring free computer forensics applications for digital investigations [Graduate Project EXPO, Master in Computer Science; advisor: Alfredo Cruz, Ph.D.]. Polytechnic University of Puerto Rico.

Feliz Berrios, M. (2024). Design and testing of a sentiment analysis model for digital data. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

González Maldonado, C. (2024). Quantum-safe security for 5G networks. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

López Ubinas, H. E. (2024). Cybersecurity tools. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Tapia Maldonado, A. A. (2024). Applications of Fast.ai pretrained models in image classification problem. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Nevárez Román, P. A. (2024). Shodan search engine. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Oriol Rivera, C. A. (2024). Analysis of sentiment in YouTube comments for 2024 political campaigns for governor of Puerto Rico. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Cepeda Delgado, S. R. (2024). Artificial intelligence-driven website composer. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Year 2023

Chaar, E., Jordan, Z., & Cruz, A. (2023). Comparing Security in Contactless Payments: NFC vs. QR Code. 22nd Annual Security Conference, May 9-May 10, 2023, Las Vegas, NV.

Vazquez-Ferrer, R., Garcia-Romero, F., Sosa-Lugo, J.R., Ramos-Flores, E., Gonzalez-Rodriguez, D., Cruz, A., & Duffany, J. (2023). Android Ransomware Recognition with Feature Extraction for Improved Security System Detection. 22nd Annual Security Conference, May 9-May 10, 2023, Las Vegas, NV.

Vidal, A., Vazquez-Ferrer, R., & Cruz, A. (2023). Real-Time Classification and Object Detection to provide Mass Shootings a faster response. 22nd Annual Security Conference, May 9-May 10, 2023, Las Vegas, NV.

Delgado-Martí, H. J. & Alfredo Cruz (2023). Quantum Computation and post-quantum cryptography relevance for cybersecurity education. 22nd Annual Security Conference, May 9-May 10, 2023, Las Vegas, NV.

Feliciano Cruz, E. Y. (2023). Employee guide to cybersecurity and cyber threats. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Mercado, C. (2023). Developing an accessible web journal with WCAG guidelines, Fitts’s Law, and Capital T Concept. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Ramos Flores, E. (2023). ZAP Proxy and OWASP Top 10. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Santiago Solivan, R. (2023). Network security assessment using Bettercap: DNS spoofing and how to mitigate. Graduate School, Polytechnic University of Puerto Rico. Advisor: Jeffrey Duffany.

Meléndez, E., & Vicente, L. M. (2023, November). Tracking and ID Switching Fundamentals Based on a Score Function and RNN. Presented at SC23: The International Conference for High Performance Computing, Networking, Storage, and Analysis, Denver, CO, USA.

Facilities, Equipment, and Other Resources

Polytechnic University of Puerto Rico (PUPR) provides facilities, equipment, and technical support to strengthen cybersecurity education, research, and student success. Students from the NSF-SFS Scholarship Program are assigned equipment such as a PC, printer, and dedicated study space. PUPR also provides access to laboratory facilities and computing resources to support student retention, degree completion, and preparation for Civil Service employment.

PUPR has modern equipment for research and education in cybersecurity, computer science, computer engineering, electrical engineering, artificial intelligence, programming, networking, digital forensics, and related areas. Facilities currently available to cybersecurity students at the Electrical and Computer Engineering and Computer Science (ECECS) Department include instructional laboratories, specialized laboratories, and virtual computing resources. These laboratories support classroom activities, graduate research, cybersecurity experimentation, software development, and independent student projects.

The Institution will continue providing the infrastructure needed to support scholarship recipients until completion of their degree. The Program’s goal is that every scholar successfully finishes their studies and reaches strong placement outcomes in Civil Service cybersecurity positions.

Information security and technical support for the laboratories are managed mainly by the IT staff. Tasks are shared among the CIO, Mr. Pedro J. Perez-Dorta; the Associate Director of IT, Mr. Eryd Aquino; the Programming Analyst, Mr. Victor Santiago; and the Jr. System Administrator, Miguel Henríquez, in a combined effort to support information security and the efficient operation of laboratories and systems throughout the University. In addition, the ECECS Department provides laboratory support through Professor Rodrigo Martínez, IT Support Supervision, and Instructor Jesiel J. Carro, Technical Support.

The established laboratories and computing facilities include:

1. Cybersecurity and Local Applications Laboratory (L308)
   This Lab. is equipped with 16 computers used for cybersecurity, programming, and computing activities that require local or on-premises applications. This laboratory supports hands-on learning using locally installed software tools, controlled computing environments, and applications that can be used for cybersecurity education, software testing, programming assignments, and technical demonstrations. The laboratory provides students with direct access to computing resources needed for practical work in cybersecurity and computer science courses.
2. Alan Turing Laboratory (L301)
   This lab is known as the Alan Turing Laboratory, is equipped with 25 thin-client computers connected to a central server. This laboratory supports instructional activities that require centralized computing resources, server-based applications, and controlled student access to software environments. The thin-client configuration allows efficient management of applications and supports courses in computer science, cybersecurity, programming, networking, and related computing areas.
3. Programming and Advanced Computing Laboratory (P109)
   This lab is equipped with 24 thin-client computers and a variety of software tools used in programming courses, from introductory programming to advanced computing courses. This laboratory supports software development, algorithm design, data structures, object-oriented programming, database-related activities, and other advanced computer science and cybersecurity-related coursework.
4. The Advanced Controls and Automation Laboratory, ACAL (L302)
   The Advanced Controls and Automation Laboratory supports research and education in control systems, industrial automation, cyber-physical systems, and industrial cybersecurity. The laboratory supports simulation of cybersecurity scenarios, network configurations, and software-defined environments related to critical infrastructure protection and automation systems.
5. The Electronics and Microprocessor Laboratory, EML (P105)
   The Electronics and Microprocessor Laboratory supports research and education in digital electronics, microprocessor architecture, embedded systems, and hardware-level security. It is equipped with dedicated workstations and electronic equipment for circuit design, microprocessor programming, and hardware analysis.
6. The Microchip and PCB Design Laboratory, MPDL (L303)
   The Microchip and PCB Design Laboratory is equipped with an in-house printed circuit board (PCB) fabrication device, enabling students to design, prototype, and test custom circuit boards. The laboratory supports hardware security research by allowing students to examine the full lifecycle of electronic components, from design and fabrication to testing and security analysis.

In addition to physical laboratories, students enrolled in the program may be provided access to dedicated virtual machines with scalable and elastic performance. These virtual machines support coursework, research, cybersecurity experimentation, software testing, and flexible access to computing resources.

The basic goal of these laboratories and computing resources is to support research and education in cybersecurity, computer science, computer engineering, and related fields. These resources also support research in other areas that require advanced computing infrastructure. Together, the laboratories provide participating faculty and students with the necessary infrastructure to successfully complete academic activities, research projects, cybersecurity exercises, and advanced technical training.

Cybersecurity Awards in the Last Four Years 

Gencyber 2024-UWF
Amount: $82,723
Duration: 09/2024–12/2026
PI: Dr. Alfredo Cruz

Cybercorps Scholarship For Service (Renewal): Enhancing Cybersecurity Research and Education in Puerto Rico
Amount: $2,794,155
Duration: 06/2022–06/2027
PI: Dr. Alfredo Cruz

NCAE 003-2024: AI Capacity Building
Amount: $215,968
Duration: 12/2024–12/2026
PI: Dr. Alfredo Cruz

DoD CSA: Providing Students in Puerto Rico with Higher-Education in Cybersecurity at Polytechnic University of Puerto Rico (PUPR)
Amount: $192,454
Duration: 08/2025–07/2026
PI: Dr. Alfredo Cruz

PUPR NCAE-C 0001-2026: Developing AI and Cybersecurity Research and Outreach Activities
Amount: $372,717
Duration: 08/2026–07/2028
PI: Dr. Alfredo Cruz

PUPR-UAlbany – NCAE: Artificial Intelligence & Cybersecurity Curriculum
Amount: $40,000
Duration: 08/2026–07/2028
PI: Dr. Alfredo Cruz

PUPR-Illinois Tech: Establish CyberAI K-12 Curriculum
Amount: $120,340
Duration: 08/2026–07/2028
PI: Dr. Alfredo Cruz

The 502 Project: Building Gateways to the Cybersecurity Community
Amount: $30,000
Duration: 2024–2025
PI: Dr. Luis M. Vicente

NCAE-C 003-2023 Cybersecurity Workforce Innovation
Amount: $18,000
Duration: 2024–2025
PI: Dr. Luis M. Vicente

PUPR NCAE RING: Cybersecurity Core Curriculum Development
Amount: $125,000
Duration: 2022–2024
PI/Co-PI: Dr. Luis M. Vicente

A Multifaceted Approach to Expanding Engineering Pathways
Amount: $2,500,000
Duration: 2020–2025
PI/Role: Dr. Luis M. Vicente, Strategy I Leader

NSF Cyber Corps Scholarship for Service Opportunities

Student SFS Toolkit

NSF-SFS Flyer

Application Form for NSF Scholarship for Service

Study Plan for NSF Scholarship

Cybersecurity Faculty Members

Polytechnic University of Puerto Rico (PUPR) has very competent faculty teaching courses in the Cybersecurity Program at PUPR. PUPR counts with faculty with many years of experience that offer courses that are highly significant to the cybersecurity program and provide insight to the student’s learning experience.

Cruz, Alfredo, PhD
Contact: alcruz@pupr.edu
Education: PhD in Computer Engineering 1992, University of Cincinnati; PhD in Computer Information Systems (CIS) 2002, Nova Southeastern University.
Dr. Alfredo Cruz is a Full Professor and Graduate Program Director at the Polytechnic University of Puerto Rico. He is the Point of Contact (POC) for the CAE Designation and serves as Director of the MS in Computer Science and MS in Computer Engineering. He is also the founder and Executive Director of the Information Assurance for Research and Education Center (CIARE) and Head of the Cybersecurity Program.

As Head of the Cybersecurity Program, Dr. Cruz has overall responsibility for the Cyber Defense curriculum path and leads the CAE Designation efforts at PUPR. He recruits and coordinates faculty responsible for the Cyber Defense program of study and helps ensure that PUPR maintains sufficient qualified full-time and part-time faculty to support continuity of the program, as required by the NCAE. He teaches key courses in the Cybersecurity Program, including Principles of Information Security, IT Operations, Computer Security, E-Discovery, Advanced Database Systems, and related graduate courses.

Dr. Cruz has led three Centers of Academic Excellence in Cyber Defense designations for PUPR, in 2009, 2015, and 2021, designated by NSA and DHS. He has served as PI of two NSF CyberCorps Scholarship for Service awards, including the 2016–2021 award and the current 2022–2027 award. He has also secured significant federal and external funding from NSF-SFS, PRIDCO, NRC, NSA, DoD CySP, NCAE, and other sources to support cybersecurity education, scholarships, research, and institutional capacity building.

Dr. Cruz is an active researcher with more than 50 publications in international refereed conferences in areas such as artificial intelligence, machine learning, Internet of Things, genetic algorithms, VLSI testing, cryptography, cybersecurity, and parallel processing. In recent years, he has coauthored multiple student and faculty publications in AI and cybersecurity, including work presented at the Annual Security Conference. His recent products include papers on machine learning for malware detection, AI-driven audits and ethics, genetic algorithms for cybersecurity, credit card fraud detection, contactless payment security, ransomware recognition, and post-quantum cryptography for cybersecurity education.

Dr. Cruz advises students in the Doctoral Program in Applied Engineering and Science, the Master of Science in Computer Science, and the Master of Science in Computer Engineering. His leadership has been central to the development, growth, and national recognition of cybersecurity education at PUPR.

Vicente, Luis M., PhD
Contact: lvicente@pupr.edu
Education: PhD in Electrical and Computer Engineering, 2009, University of Missouri-Columbia.

Dr. Luis M. Vicente is Director and Associate Professor of the Electrical and Computer Engineering and Computer Science Department at the Polytechnic University of Puerto Rico. He teaches undergraduate and graduate courses related to cybersecurity, digital forensics, ethical hacking, network security, artificial intelligence, data science, pattern recognition, and signal processing. He has also contributed to the development and strengthening of cybersecurity education initiatives, including CAE-CD related activities, curriculum development, student research, workshops, and outreach activities.

Dr. Vicente holds a Graduate Certificate in Digital Forensics, as well as certificates in Database Security and Secure Operations, and Digital Evidence and Auditing. He is also certified in Artificial Intelligence and Machine Learning in Cybersecurity through EC-Council Academia. His research and academic interests include cybersecurity, digital forensics, artificial intelligence, machine learning, statistical signal processing, adaptive filters, high performance computing, and cybersecurity education.

Dr. Vicente advises graduate and doctoral students in areas related to cybersecurity, artificial intelligence, digital forensics, data science, and applied engineering. He also serves as the Alternate CAE Point of Contact (APOC) for the CAE Designation at PUPR. He has participated in cybersecurity education conferences, research projects, and outreach activities that support the preparation of students for cybersecurity careers.

Duffany, Jeffrey L., PhD, CISSP, CEH
Contact: jeffduffany@gmail.com
Education: PhD in Computer and Information Engineering, Stevens Institute of Technology; MS in Electrical Engineering, Columbia University; BS in Electrical Engineering, University of Connecticut.

Dr. Jeffrey L. Duffany is a Full-time Professor in the Electrical and Computer Engineering and Computer Science Department at the Polytechnic University of Puerto Rico. He has been a key resource in the development of the cybersecurity program since its early stages and has taught Computer Science and Cybersecurity courses at PUPR since 2006.

Dr. Duffany teaches key graduate courses in the Cybersecurity Program and related areas, including Network Security, Computer Security, Computer Forensics, Advanced Computer Forensics, Artificial Intelligence, Data Mining, Cloud Computing, Software Assurance, Advanced Design and Analysis of Algorithms, Parallel and Distributed Computing, Computational Theory, Advanced Software Architectures, and Human-Computer Interaction. His teaching background also includes computer networks, telecommunications networks, operating systems, computer architecture, object-oriented programming, and programming fundamentals.

Dr. Duffany has extensive professional and research experience in cybersecurity, artificial intelligence, machine learning, information warfare, situational awareness, UAV swarm intelligence, data mining, and network security. He has served as a faculty fellow or visiting faculty researcher with several major national research organizations, including the Air Force Research Laboratory, Lawrence Livermore National Laboratory, SPAWAR Systems Center/Office of Naval Research, Sandia National Laboratories, and the University of Southern California Center for Risk and Economic Analysis of Terrorism Events. His projects have included machine learning intrusion detection, UAV security, Internet of Things security, human activity recognition, smart meter and power grid security, mobile ad-hoc networks, and enterprise information infrastructure risk.

Before his academic career, Dr. Duffany worked for more than two decades at AT&T Bell Laboratories/Lucent Technologies as a Member of Technical Staff, where he contributed to applied research and development in telecommunications transmission and switching systems. He is the author of more than 100 technical reports and two patents, and he received multiple Bell Labs performance and contribution awards.

Dr. Duffany holds the CISSP and CEH cybersecurity certifications. He is an active researcher and thesis advisor for master’s and doctoral students in areas related to cybersecurity, artificial intelligence, machine learning, computer networks, digital forensics, cloud computing, and information assurance. His publications include work on wireless intrusion detection systems, mobile ad-hoc networks, smart meter and power grid security, cloud computing security and privacy, artificial intelligence in GPS navigation systems, and optimal resource allocation for securing enterprise information infrastructure.

Pabón González, Miriam, Ph.D., P.E. Contact: mpabon@pupr.edu

Contact: MPabon@pupr.edu
Education: Graduate Certificate in Cybersecurity Risk Management, Georgetown University; Ph.D. in Industrial Engineering, University of Massachusetts Amherst; M. in Engineering Management, Universidad Politécnica de Puerto Rico; B.S. in Industrial Engineering, Universidad de Puerto Rico, Mayagüez.

Dr. Miriam Pabón González is Dean of the Graduate School and Professor at the Universidad Politécnica de Puerto Rico. She is a licensed Professional Engineer (P.E.) with expertise in industrial and systems engineering, operations research, data analytics, human factors engineering, biomechanics, project management, contingency planning, and cybersecurity risk management. She has served as Principal Investigator and Co-Principal Investigator on multiple federally funded initiatives supporting workforce development, STEM education, and applied research. Her experience includes developing and delivering cybersecurity awareness and workforce development activities for K–12 students, teachers, and the community through federally sponsored outreach programs. Her research and professional activities focus on risk assessment, continuity of operations, decision-making under uncertainty, and the application of quantitative methods to improve organizational performance.

Dr. Pabón contributes to cybersecurity risk management, contingency planning, and engineering education initiatives at the Universidad Politécnica de Puerto Rico through curriculum development, graduate education, applied research, and interdisciplinary projects. As Dean of the Graduate School, she supports federally funded initiatives that strengthen workforce development, STEM education, and research capacity. Dr. Pabón serves as a volunteer member of the Industrial and Systems Engineering Professional Engineer Exam Development Committee of the National Council of Examiners for Engineering and Surveying (NCEES) and is a member of the Master’s Advisory Committee of the Council of Graduate Schools (CGS), supporting national efforts to advance graduate education, research, and professional preparation.

Valera, Juan B., PhD
Contact: juan.valera@upr.edu
Education: PhD in Computer and Information Sciences and Engineering, 2013, University of Puerto Rico at Mayagüez.

Dr. Juan B. Valera is a Professor at the Polytechnic University of Puerto Rico. He has extensive academic experience in computer science, information systems, networking, programming languages, data science, signal processing, artificial intelligence, and information security. His academic work includes the development and teaching of advanced courses related to Ethics in AI, Python for Big Data and AI, Data Engineering for Machine Learning, Health Information Systems, Programming Languages, Object-Oriented Programming, Business Intelligence, Networking, and Information Security.

Dr. Valera’s research interests include high performance computing, web analytics, time-frequency analysis, programming languages, artificial intelligence, and applied computational methods. His recent work includes research and conference publications related to artificial intelligence in big data, business decision-making, e-government, healthcare costs, microwave photonics, radar integrated sensing and communications, and computational signal algebra. He has also collaborated on projects involving convolutional neural networks for medical diagnostics, ambiguity function modeling, and post-quantum cryptography for blockchain-based financial systems.

Dr. Valera contributes to AI and cybersecurity-related academic initiatives at PUPR through curriculum development, research, graduate education, and interdisciplinary projects. He is currently a member of the AI Coalition in Puerto Rico.

Torres, Nelliud, DBA
Contact: ntorres@pupr.edu
Education: DBA in Information Systems, 2011, Universidad del Turabo; MS Information Systems, 1995, EDP University.
Dr. Nelliud Torres is a part-time professor at the Graduate School. He teaches graduate courses such as: Advanced Database Systems, Contingency Planning, and Database Security. He is well prepared to teach other cybersecurity courses from the path of study, such as Principles of Information Security, IT Operations, among others.

Prof. Rodriguez, Lisa, Esq.
Contact: lrodriguez@pupr.edu
Education: Juris Doctor, Pontifical Catholic University of Puerto Rico, 2001; Master of Science in Computer Science, 2016, Polytechnic University of Puerto Rico. 
Prof. Lisa Rodriguez is a part-time professor at the Graduate School. She teaches the course Law, Investigation, and Ethics. She is proficient in cybersecurity and is very well prepared to teach the courses: E-discovery and Digital Evidence, Computer Forensics, and Advanced Computer Forensics. She is in the law practice in the area of e-Discovery and digital evidence.

Board of Advisors

The following persons are members of the PUPR CAE-CDE Board of Advisors (BOA) of Polytechnic University of Puerto Rico. We have distinguished security professionals from industry, government, and academia. We have a pioneer in CTF competitions in the BOA, Dr. Daniel Manson. Also, we have a cybersecurity consultant and CEO of his own company that serves the banking, government, and the industry, with more than 40 years of experience, Mr. John Robles. We also have two persons from LLNL that work directly in the area of cybersecurity, among others:

• Celeste Matarazzo – Lawrence Livermore National Laboratories
• John Robles – John Robles and Associates, President
• Ricardo Matos – Claro Telecom Company, Puerto Rico
• Daniel Manson – Professor Emeritus, Computer Information Systems at Cal Poly Pomona
• Jose Germán Gonzalez – Claro Telecom Company, Puerto Rico
• Carlos Velez – US Army
• Juan Carlos Ramos – CEO & President, Cortelco

Point of Contact (POC)

Alternate Point of Contact (APOC)