How MIT students are helping to prevent cyberattacks

2026-07-13 · Source: MIT News - Artificial intelligence · Field: Technology & Digital — Cybersecurity & Data Privacy, Public Safety & Security, Skill Development & Professional Training · Depth: Novice, medium

Summary

The MIT Cybersecurity Clinic, launched in 2019 by Lecturer Jungwoo Chun and Professor Lawrence Susskind within the Department of Urban Studies and Planning, provides pro-bono cybersecurity vulnerability assessments to local governments and healthcare organizations. Since its inception, the clinic has delivered over 40 confidential assessments, helping clients implement low-cost measures that can prevent 80% or more of cyberattack costs. The program emphasizes "defensive social engineering," acknowledging that human factors are the primary attack vector, complementing technical solutions. Students undergo instructional modules, pass a certification exam, and work in teams to assess client vulnerabilities, recommending steps like hardware/software inventory, regular patching, multi-factor authentication, and employee training. This model is expanding, with online modules available via *MITx* and MIT co-founding a consortium of 61 cybersecurity clinics in 2021.

Key takeaway

For IT Directors or CTOs in underfunded public or non-profit organizations, this clinic model offers a proven pathway to bolster your cybersecurity posture. You can leverage external expertise, like that from a clinic, to identify vulnerabilities and secure budget approval for essential, low-cost improvements. Prioritize foundational steps such as comprehensive asset inventory, multi-factor authentication, and employee training to mitigate over 80% of potential cyberattack risks.

Key insights

Cybersecurity is a human-centric challenge requiring "defensive social engineering" and organizational capacity building, not just technical fixes.

Principles

• Human factors are the biggest attack vector.
• Low-cost measures prevent most cyberattack costs.
• Cybersecurity requires cross-disciplinary understanding.

Method

The MIT Cybersecurity Clinic's method involves instructional modules, certification, team-based client vulnerability assessments, and report generation with actionable, low-cost recommendations for improvement.

In practice

• Inventory all network hardware and software.
• Implement multi-factor authentication and data backups.
• Train employees against opening unknown attachments.

Topics

• Cybersecurity Clinics
• Defensive Social Engineering
• Ransomware Attacks
• Critical Infrastructure Security
• Public Sector Cybersecurity
• Organizational Capacity Building

Best for: IT Professional, Consultant, Policy Maker

Related on AIssential

• Is your robot vacuum safe? Here’s why it matters. — Systemic identity failures, unpatched systems, and social engineering remain critical cybersecurity vulnerabilities across industries.
• One Month In: My First Steps Into Cybersecurity — Mastering cybersecurity involves embracing initial confusion and iterative problem-solving, shifting from memorization to understanding attacker mindsets.
• Why Cybersecurity Is No Longer About Preventing Breaches — It’s About Limiting Their Impact — Cybersecurity's core objective has shifted from breach prevention to rapid detection, containment, and resilience against inevitable intrusions.
• Announcing The Forrester Wave™: Cybersecurity Skills And Training Platforms, Q1 2026 — Cybersecurity training platforms must now prioritize team-based readiness and continuous, AI-informed skill verification over individual certifications.
• Why People Can Be Digital Security's Strongest Link — Properly trained employees can transform from a security vulnerability into an organization's most robust defense.
• Mitigata Raises $15 Mn Series B Funding to Expand AI-Driven Cyber Resilience Platform - CXO Digitalpulse — AI-driven cyber resilience platforms are attracting significant investment to address evolving enterprise cybersecurity and financial risk.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by MIT News - Artificial intelligence.