EAGER: SaTC: Early-Stage Interdisciplinary Collaboration: Developing the Concept of a Near Misses Analysis Capability and NTSB-Model for Cyber Incidents

EAGER：SaTC：早期跨学科合作：开发网络事件的未遂事件分析能力和 NTSB 模型的概念

• 批准号: 1915819
• 负责人: Stephen Flynn
• 金额: $ 4.99万
• 依托单位: Northeastern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-07-15 至 2021-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1915819&HistoricalAwards=false
• 关键词: EAGER; SaTC; Early; Stage; Interdisciplinary

The idea of extracting information out of cyber incidents that can be used to prevent other, similar incidents at other organizations has often been compared to creating a National Transportation Safety Board (NTSB) for cybersecurity incidents. This project would further this idea by holding a workshop engaged in exploring the barriers to information sharing and data use among organizations, the possible costs and rewards of such a board, the steps required for implementation through policy proposals, and alternative mechanisms, other than a security incident sharing board. The workshop focuses on the financial or banking industry. It will achieve enhanced understanding of cyber incident sharing in industry and have a broader impact of increased partnerships between academia, industry, and others through the workshop activities. Workshop participants will be invited from government agencies, victim organizations, financial services organizations, cybersecurity providers, incident responders, and the insurance industry. Further workshops will be planned with the ultimate goal being to provide a substantial new source of data on cyber incidents for research in security, for organizations that must protect themselves against cyber incidents, and for the security industry.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

从网络事件中提取信息的想法通常将其他组织的其他类似事件与创建国家运输安全委员会（NTSB）进行比较。 该项目将通过举办一个研讨会来探讨组织之间信息共享和数据使用的障碍，此类董事会的可能成本和回报，通过政策建议进行实施所需的步骤以及替代机制，除了安全事件共享委员会以外，该委员会的可能成本和回报。研讨会着重于金融或银行业。它将增强对行业中网络事件共享的了解，并通过研讨会活动对学术界，工业和其他人之间的伙伴关系增加更广泛的影响。将邀请参加政府机构，受害者组织，金融服务组织，网络安全提供者，事件响应者和保险业的研讨会参与者。最终目标是为了为必须保护自己免受网络事件的组织以及安全行业提供有关安全研究的网络事件的新数据来源，并为安全行业提供了大量的新数据来源。该奖项反映了NSF的法定任务，并被认为是通过基金会的智力功能和广泛的影响来评估CRETIRIA，这是值得的。