CICI: CCoE: Trusted CI: Advancing Trustworthy Science

CICI：CCoE：可信 CI：推进可信科学

• 批准号: 1920430
• 负责人: Von Welch
• 金额: $ 1248.66万
• 依托单位: Indiana University
• 依托单位国家: 美国
• 项目类别: Cooperative Agreement
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2022-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1920430&HistoricalAwards=false
• 关键词: CICI; CCoE; Trusted; CI; Advancing

The National Science Foundation funds over seven billion dollars of research annually, nearly all of which relies heavily on information technology. The digital data produced and computing systems used by that research are subject to risks from cyber attacks, in some cases similar to other data and computing systems on the Internet and in other cases particular to their research mission. Cybersecurity appropriate to the research mission is necessary both to make today's scientific discoveries possible and to ensure that the science is trustworthy. Appropriate cybersecurity must respect the collaborative environments that span organizational and national boundaries, the high-performance technologies used to manage large scale data and computation, and the dynamic information technology demands common in NSF research. Different science domains also have varying requirements for data confidentiality, availability, and integrity. These aspects challenge the use of traditional cybersecurity paradigms and technologies to manage the risks to trustworthy, reproducible research.As the NSF Cybersecurity Center of Excellence, Trusted CI brings together experts in cybersecurity, knowledgeable and experienced in the NSF research endeavor, who provide the NSF community with the leadership and support necessary to tackle the cybersecurity challenges to NSF research. Trusted CI directly supports individual NSF cyberinfrastructure projects and Major Facilities through collaborative engagements that address specific project needs. Trusted CI engagement activities include (but are not limited to) security reviews, security architecture design, identity and access management, and software assurance. Trusted CI provides cybersecurity situational awareness to the NSF cyberinfrastructure community through timely advisories and notices. Trusted CI organizes the annual NSF Cybersecurity Summit for Large Facilities and Cyberinfrastructure, providing the community with the opportunity to share lessons learned, attend practical training sessions, and collaborate on solving common challenges. Trusted CI performs outreach and dissemination of best practices via the Trusted CI website (http://trustedci.org), blog posts, email lists, and online chats, as well as providing cybersecurity training in person and via online courses. Leadership activities of Trusted CI include developing a cybersecurity framework for NSF science and fostering the transition to practice of NSF cybersecurity research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

国家科学基金会每年都有超过70亿美元的研究资金，几乎所有研究都依赖于信息技术。该研究使用的数字数据和计算系统受到网络攻击的风险，在某些情况下，类似于Internet上的其他数据和计算系统，在其他情况下，与其研究任务相似。适合研究任务的网络安全是使当今科学发现成为可能的必要条件，并确保科学值得信赖。适当的网络安全必须尊重跨越组织和民族边界的协作环境，用于管理大规模数据和计算的高性能技术以及动态信息技术在NSF研究中要求使用。不同的科学领域对数据机密性，可用性和完整性也有不同的要求。这些方面挑战使用传统的网络安全范式和技术来管理可信赖的，可重复的研究的风险。作为NSF网络安全卓越中心，可信赖的CI聚集在网络安全方面，在NSF研究中知识渊博和经验丰富的NSF研究，为NSF研究提供了挑战，以挑战NSF的领导社区，并支持领导力和支持该社区。受信任的CI直接通过满足特定项目需求的协作参与，直接支持单个NSF网络基础设施项目和主要设施。值得信赖的CI参与活动包括（但不限于）安全审查，安全架构设计，身份和访问管理以及软件保证。 Trusted CI通过及时的咨询和通知为NSF网络基础设施社区提供网络安全情境意识。值得信赖的CI组织了大型设施和网络基础设施的年度NSF网络安全峰会，为社区提供了分享经验教训，参加实践培训课程并协作解决共同挑战的机会。受信任的CI通过受信任的CI网站（http://trustedci.org），博客文章，电子邮件列表和在线聊天以及通过个人和在线课程提供网络安全培训，通过信任的CI网站（http://trustedci.org）进行宣传和传播。受信任的CI的领导活动包括为NSF科学开发网络安全框架，并促进了向NSF网络安全研究实践的过渡。该奖项反映了NSF的法定任务，并被认为是值得通过基金会的知识分子优点和更广泛影响的评估标准通过评估来进行评估的。

项目成果

An In-Depth Security Assessment of Maritime Container Terminal Software Systems

• DOI: 10.1109/access.2020.3008395
• 发表时间: 2020-06
• 期刊: IEEE Access
• 影响因子: 3.9
• 作者: Joseph O. Eichenhofer;E. Heymann;B. Miller;Arnold Kang