Collaborative Research: CICI: Regional: SouthEast SciEntific Cybersecurity for University Research (SouthEast SECURE)

合作研究：CICI：区域：东南大学研究科学网络安全 (SouthEast SECURE)

• 批准号: 1812404
• 负责人: Anthony Skjellum
• 金额: $ 5.3万
• 依托单位: University of Tennessee Chattanooga
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-10-01 至 2019-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1812404&HistoricalAwards=false
• 关键词: Collaborative; Research; CICI; Regional; SouthEast

Threats to scientific instruments and data that are accessible via the Internet are ubiquitous. The SouthEast SciEntific Cybersecurity for University REsearch (SECURE) project helps protect the National Science Foundation's investments in scientific research while providing scientists with tools to safeguard intellectual property and ensure data integrity. The project team provides education, training, and selected cybersecurity services to NSF-funded researchers across the Southeast. The team is multidisciplinary, comprised of cybersecurity experts (both research and practitioner), scientists, and experts in communication. Team members are located in South Carolina, Alabama and Mississippi, with strong representation from Historically Black Colleges and Universities (HBCU). This program raises investigators' awareness of their essential role in creating a secure and trustworthy cyberspace and offers concrete assistance in risk assessment, vulnerability testing, and mitigation tailored to NSF-funded scientists' workflow and program size. Through past collaborations, the team is well positioned to leverage both national and regional cybersecurity organizations and programs to effectively reach the target audience. SouthEast SECURE impacts the region by raising cybersecurity awareness; providing concise training, assessment, tools and one-on-one help; and assisting in preparation of select cybersecurity metrics. Student interns are conducting many of these activities by means of practicum-based deployment and support, thus developing capabilities in the next generation of cyber professionals. An online survey of NSF-funded investigators in the region will be conducted to learn about their primary cybersecurity challenges and concerns. Training is then tailored to provide concrete and practical assistance in how to do right-sized risk assessment and mitigation. A "toolkit" is provided to test and validate local cybersecurity, and measures of cybersecurity are created and field-tested. The team's approach facilitates communication between research faculty and university IT/Data Security staff. A long-term goal is building communities with common interests in cybersecurity and a commitment to helping others; and building connections with other regions and with national centers and programs.

通过互联网访问的科学工具和数据的威胁无处不在。 东南科学网络研究（Secure）项目（Secure）项目有助于保护国家科学基金会在科学研究中的投资，同时为科学家提供维护知识产权并确保数据完整性的工具。该项目团队为东南部的NSF资助的研究人员提供教育，培训和选定的网络安全服务。 该团队是多学科的，由网络安全专家（研究和从业者），科学家和交流专家组成。 团队成员位于南卡罗来纳州，阿拉巴马州和密西西比州，具有历史悠久的黑人学院和大学（HBCU）的强烈代表。 该计划提高了调查人员对创建安全且值得信赖的网络空间中至关重要的意识，并在风险评估，脆弱性测试以及针对NSF资助的科学家的工作流程和程序规模方面提供了具体的帮助。 通过过去的合作，该团队有能力利用国家和地区网络安全组织和计划有效地吸引目标受众。东南部的安全通过提高网络安全意识来影响该地区；提供简洁的培训，评估，工具和一对一的帮助；并协助准备精选的网络安全指标。 学生实习生正在通过基于实践的部署和支持进行许多此类活动，从而在下一代网络专业人员中发展能力。 将对该地区的NSF资助的调查人员进行在线调查，以了解其主要网络安全挑战和关注点。 然后，对培训进行量身定制，以提供具体和实践的帮助，以进行正确的风险评估和缓解。 提供了一个“工具包”来测试和验证局部网络安全，并创建并进行了现场测试的网络安全度量。 该团队的方法有助于研究教师与大学/数据安全人员之间的沟通。 一个长期目标是建立具有网络安全方面共同利益的社区，并致力于帮助他人。并与其他地区以及国家中心和计划建立联系。

项目成果

A Hardware-Software Codesign Approach to Identity, Trust, and Resilience for IoT/CPS at Scale

• DOI: 10.1109/ithings/greencom/cpscom/smartdata.2019.00191
• 发表时间: 2019-07
• 期刊: 2019 International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData)
• 作者: Farah I. Kandah;Joseph Cancelleri;D. Reising;Amani Altarawneh;A. Skjellum

SCRaaPS: X.509 Certificate Revocation Using the Blockchain-based Scrybe Secure Provenance System

SCRaaPS：使用基于区块链的 Scrybe 安全来源系统撤销 X.509 证书

• DOI: 10.1109/malware.2018.8659364
• 发表时间: 2018
• 期刊: 2018 13th International Conference on Malicious and Unwanted Software (MALWARE
• 作者: Medury, Sai;Skjellum, Anthony;Brooks, Richard R.;Yu, Lu
• 通讯作者: Yu, Lu