Ouwen Dai shares his experiences as a computer science student with a focus on cybersecurity and his work as a Security Analyst at DoIT. He highlights the importance of practical experience and the opportunity to connect coursework with work opportunities in college. Ouwen emphasizes the detective nature of cybersecurity work and encourages new students to seek help and engage fully in their learning process.

Passion for Cybersecurity

He discusses his passion for cybersecurity, likening it to detective work. Ouwen enjoys solving puzzles and believes his interest in technology made cybersecurity an ideal field for him.

Experience at DoIT

Ouwen describes his time at DoIT as enriching, due to direct exposure to various tools that are relevant to the cybersecurity industry. He believes that this hands-on experience is crucial for his future career.

Advice for New Students

Ouwen advises new students not to hesitate to reach out for help. He emphasizes that college is a unique time for learning, and combining coursework with work experience can provide a competitive edge upon graduation.

Future Career Aspirations

Looking ahead, Ouwen aims to continue working in the cybersecurity field, with interests in defense contracting, startups, and penetration testing.

Click here to watch the full video!

For more information about UMBC’s cybersecurity initiatives, go to doit.umbc.edu/security.

Thank you Dustin Roddy, Manager of UMBC’s New Media Studio, for this great video!

What is multi-factor authentication?

Multi-factor authentication adds a second layer of security to your online accounts. Verifying your identity using an additional factor (like your phone or other mobile device) prevents anyone but you from logging in, even if they know your password.

This additional factor of authentication is separate and independent from your username and password — Duo never sees your password.

How It Works

1. Enter username and password as usual

2. Use your phone to verify your identity

3. Securely log in

Why do I need this?

Passwords are surprisingly easy to compromise. They can often be stolen, guessed, or hacked — you might not even know someone is accessing your account. Multi-factor authentication helps keep your account secure even if your password is compromised. With Duo Push, you'll be alerted immediately (on your phone) if someone is trying to log in as you.

What services are supported by Duo?

Duo has apps for iOS and Android. Duo also allows you to authenticate using SMS passcodes sent to your cell phone, hardware tokens, or via a phone call (faculty/staff only). Duo is checked whenever you authenticate using WebAuth or myUMBC. This also applies to systems such as PeopleSoft and services such as Box, Microsoft Office, VPN, and Google Apps (Drive).  Those who are identified as having access to sensitive data are administratively enrolled in Duo.

What should you do if you receive a Duo push notification that you didn’t initiate?

If you receive a Duo push notification that you didn’t initiate, DO NOT APPROVE IT! Instead, mark it as fraudulent and change your password on a trusted machine. 

1. Use Unique Passwords: 

• UMBC requires all students and staff to have a strong password for their account to help keep it secure. Find the UMBC requirements for creating strong passwords here.

2. Do Not Reuse Passwords:

• Use different secure passwords for all of your personal, banking, and UMBC accounts. If one password were to appear in a data breach that you actively use in other accounts, attackers may try to use this password to access these accounts.

• A password manager can be used to manage your different passwords easily. For an additional level of security for sensitive accounts, you can store part of the password in the password manager and add additional characters to the password when you are logging in. 

3. Do Not Use Similar Passwords:

• When changing your password, UMBC will not let you use a password that has been previously set.

• Refrain from using your old passwords and slightly modifying them. For example, if your previous password was D0gL0vEr1, do not change the new password to D0gL0vEr2. This makes it easier for the hacker to guess the new password if they already know the previous password.

For more information about UMBC’s cybersecurity initiatives, go to doit.umbc.edu/security.