Olivia was born and raised in Hilo on Hawaii Island. She graduated from Waiakea High School in 2016 as a valedictorian. She is a Regents Scholarship recipient at the University of Hawaii at Manoa where she is an Honors student majoring in Computer Science with a focus in Security Science. This is her second year in the Akamai program. She currently works with the Center on Disability Studies on the Ka Pilina grant, writing and testing math and science lesson plans for grades K-8. She is also a college consultant with NexTech where she helps plan and run STEM workshops. After graduating, she hopes to enter the field of Cyber Security. In her very limited free time, Olivia enjoys roller skating and participating in roller derby and inline hockey.
Home Island: Big Island
High School: Waiakea High School
Institution when accepted: University of Hawaii at Manoa
Akamai Project: Planning, Executing and Evaluating an Information Security Incident Response Preparedness Drill
Project Site: Gemini Observatory – Hilo, Hawai’i Island HI
Mentors: Jerry Brower
Project Abstract:
In order to sustain itself, the Gemini Observatory relies on its ability to maintain various services, such as access to Gemini accounts and resources, for both internal users and the astronomical community. If there is ever a security incident such as a breach or event that compromises or has the potential to compromise any Gemini information asset, personnel must follow the Incident Response Procedures. The Incident Response Procedures is a document containing what to do during such an event. This document recommends that there are to be unannounced simulated incidents at least annually to test these procedures. The first time these procedures are put in place must not be during an actual incident. The purpose of this project is to examine these procedures and create the first incident response preparedness drill, execute and analyze the results of the said drill, and propose changes to the Incident Response Procedures including instructions to conduct future drills. Different incident scenarios and different approaches as to how to perform the simulation were proposed to the ITS staff. We decided to simulate a Distributed Denial of Service (DDoS) attack on the Gemini External Website. The simulation was conducted in a manner to test if the procedures are clear, accurate, and effective, as well as observe the communication between parties, but not test the technical capabilities of staff members. Post-simulation, a meeting was held to collect feedback and input to improve both the simulation and procedures. We concluded that future simulations should not be completely unannounced, and more indicators of compromise should be sent to staff. As for changes to the procedures, a use-case scenario was created for incidents involving the Gemini External Website, and more communication paths were added to keep others informed, such as other observatories, the University of Hawaii, and the MKO Crisis Communications Working Group. These changes will improve the overall process of handling an incident, as well as improve future simulations. Gemini can use these lessons learned to continuously try to update and improve these procedures.