NCDI Industry Workshop

提案编号：0856317 PI：Terry Benzel机构：南加州大学，信息科学研究所领导标题：NCDI行业研讨会我们的国家？计算机和网络控制着许多关键的基础设施。 由于这些基础设施依赖于未被定义为安全的系统，因此有决心的对手可以轻松地通过底层网络和计算机中的漏洞攻击这些基础设施而不受惩罚。 多年来，实现安全性的方法一直是修补系统，以在发现漏洞时（通常是由对手发现）删除漏洞，或者在攻击发起时或之后不久检测攻击。 NSF和其他研究资助机构一直在寻求新的研究思路，以实现安全和隐私，但通常这样的研究并没有导致适合行业的产品和服务？的商业模式。 本次研讨会将试图加速安全研究社区和行业的合作，以实现安全和隐私的合理想法，但行业认为这是未来产品和服务的基础。研讨会将产生一份详细的报告，将张贴在NSF网站上

Proposal Number: 0856317PI: Terry BenzelInstitution: University of Southern California, Information Sciences InstituteLeadTitle: NCDI Industry WorkshopOur Nation?s computers and networks control many critical infrastructures. Because these infrastructures depend on systems that were not defined to be secure, determined adversaries can easily attack with impunity these infrastructures through vulnerabilities in the underlying networks and computers. For years, the approach to achieving security has been to patch systems to remove vulnerabilities as they are discovered, often by adversaries, or to detect attacks as they are launched or, hopefully, shortly thereafter. This approach will not work against determined adversaries.NSF and other research funding agencies has been pursing new research ideas towards security and privacy, but usually such research does not lead to products and services that are fit into industry?s business models. This workshop will attempt to accelerate the collaboration of the security research community and industry towards sound ideas for the attainment of security and privacy but which industry sees as the basis for future products and services. The workshop will produce a detailed report to be posted on the NSF web site