Workshop: Security of the Cyber Infrastructure

这项提议计划举办一次研讨会，审查有关网络基础设施安全的问题，旨在聚集在数据访问、信息安全、计算机网络安全、数据和数据库安全、隐私和数据机密性方面具有跨学科专业知识的主要基础设施安全利益攸关方，以就未来保护基础设施的战略提供见解和方向。讲习班的目标是加强各级基础设施的安全，以确定短期和长期战略要取得成功必须回答哪些问题。这项工作着眼于技术和政策问题以及两者之间的相互作用，解决了基础设施保护的根本问题。计算机安全有三个主要目标：机密性、完整性和可用性(CIA)。基础设施安全涉及多个组件在不同级别的动态交互：身份验证、授权、访问控制、审计和保障(AAAAA)。许多说明基础设施安全必要性的问题仍然悬而未决。因此，重点包括：*应如何定义和测量基础设施中的安全性*应如何定义安全策略，应将哪些安全策略应用于各种基础设施组件，以及应如何在必要时协调策略*应如何将信任分配给控制整个网络中的路由的消息，等等。此外，研讨会还可研究：*学术基础设施在提供安全基础设施方面可以发挥的作用，*机构和基础设施系统管理者之间的伙伴关系，可促进创建安全的全球基础设施，伙伴关系要求确保能够应对技术、计算机和信息科学研究方面的挑战。更广泛的影响：由于互联网的基础设施虽然脆弱，但却是大多数人生活的基础，是许多组织、公司和国家的经济基础，研讨会预计将提出一套加强基础设施安全的战略和一系列指导实施的问题。预计讲习班将有助于获得足够的保证，使人们对基础设施以及支持基础设施的工具和技术产生所需程度的信心。

This proposal, planning a workshop to examine questions regarding the security of the cyber infrastructure, aims at gathering the main infrastructure security stakeholders with interdisciplinary expertise on data access, information security, computer network security, data and database security, privacy, and data confidentiality to provide insights and directions toward future strategies for protecting the infrastructure. With the goal of strengthening the security of the infrastructure at all levels, the workshop seeks to determine what questions have to be answered for short and long-term strategies to be successful. Looking at both technical and policy issues and the interaction between the two, the work addresses fundamental questions of infrastructure protection. Computer security has three main thrusts: Confidentiality, Integrity, and Availability (CIA). Security of Infrastructure involves the dynamic interaction of many components and at different levels: Authentication, Authorization, Access control, Auditing, and Assurance (AAAAA). Many questions illustrating the need for security in the infrastructure remain open. Hence, highlights include: * How security in the infrastructure should be defined and measured * How security policies should be defined, whose security policies should apply to various infrastructure components, and how policies should be reconciled when necessary * How trust should be assigned to messages that control routing throughout the network, etc. Additionally, the workshop may also look into: * The role that academic infrastructure can play in providing a secure infrastructure, * Partnerships between agencies and managers of infrastructure systems that may facilitate the creation of a secure world-wide infrastructure, and * Partnerships required ensuring that the technological and computer and information science research challenges can be met. Broader Impact: Since the infrastructure of the Internet, albeit fragile, underlies the fabric of most people's lives, economy of many organizations, companies, and nations, the workshop expects to present a set of strategies for strengthening security of infrastructure and a set of questions to guide their implementation. The workshop is expected to contribute in attaining sufficient assurance to lead to a desired level of confidence in the infrastructure and the tools and technologies that support it.