Workshop: Security of the Cyber Infrastructure

该提案计划举办一次研讨会，研究有关网络基础设施安全的问题，旨在收集主要的基础设施安全利益相关者，这些利益相关者在数据访问，信息安全，计算机网络安全，数据和数据库安全，隐私和数据机密性方面具有跨学科的专业知识，为保护基础设施的未来战略提供见解和方向。讲习班的目标是加强各级基础设施的安全，力求确定短期和长期战略要取得成功必须回答哪些问题。这项工作着眼于技术和政策问题以及两者之间的相互作用，解决了基础设施保护的基本问题。计算机安全有三个主要目标：机密性、完整性和可用性（CIA）。基础设施的安全性涉及许多组件和不同级别的动态交互：身份验证，授权，访问控制，审计和保证（AAAAA）。说明基础设施需要安全的许多问题仍然没有解决。因此，重点包括：* 如何定义和衡量基础设施的安全性 * 应如何定义安全策略，哪些安全策略应应用于各种基础架构组件，以及在必要时应如何协调策略 * 如何将信任分配给控制整个网络路由的消息等。此外，研讨会还可能研究：* 学术基础设施在提供安全基础设施方面可以发挥的作用，* 各机构和基础设施系统管理人员之间的伙伴关系，可促进建立安全的全球基础设施，以及 * 需要建立伙伴关系，以确保能够应对技术和计算机及信息科学研究方面的挑战。更广泛的影响：由于互联网的基础设施虽然脆弱，但却是大多数人的生活结构、许多组织、公司和国家的经济结构的基础，讲习班预计将提出一套加强基础设施安全的战略和一套指导其实施的问题。预计讲习班将有助于获得足够的保证，从而使人们对基础设施以及支持基础设施的工具和技术有一个理想的信任度。

This proposal, planning a workshop to examine questions regarding the security of the cyber infrastructure, aims at gathering the main infrastructure security stakeholders with interdisciplinary expertise on data access, information security, computer network security, data and database security, privacy, and data confidentiality to provide insights and directions toward future strategies for protecting the infrastructure. With the goal of strengthening the security of the infrastructure at all levels, the workshop seeks to determine what questions have to be answered for short and long-term strategies to be successful. Looking at both technical and policy issues and the interaction between the two, the work addresses fundamental questions of infrastructure protection. Computer security has three main thrusts: Confidentiality, Integrity, and Availability (CIA). Security of Infrastructure involves the dynamic interaction of many components and at different levels: Authentication, Authorization, Access control, Auditing, and Assurance (AAAAA). Many questions illustrating the need for security in the infrastructure remain open. Hence, highlights include: * How security in the infrastructure should be defined and measured * How security policies should be defined, whose security policies should apply to various infrastructure components, and how policies should be reconciled when necessary * How trust should be assigned to messages that control routing throughout the network, etc. Additionally, the workshop may also look into: * The role that academic infrastructure can play in providing a secure infrastructure, * Partnerships between agencies and managers of infrastructure systems that may facilitate the creation of a secure world-wide infrastructure, and * Partnerships required ensuring that the technological and computer and information science research challenges can be met. Broader Impact: Since the infrastructure of the Internet, albeit fragile, underlies the fabric of most people's lives, economy of many organizations, companies, and nations, the workshop expects to present a set of strategies for strengthening security of infrastructure and a set of questions to guide their implementation. The workshop is expected to contribute in attaining sufficient assurance to lead to a desired level of confidence in the infrastructure and the tools and technologies that support it.