Scientific Software Security Innovation Institute (S3I2)

美国的科技企业需要企业级的安全保障，以确保竞争优势，并有效地推进发现和发明。在NSF资助的活动中，对科学工作流程、资源、数据和个人信息的可用性、完整性和保密性的关注日益普遍和增加。威胁包括由于归档失败或恶意攻击导致的数据丢失和损坏，恶意或意外地释放私有数据，或者由于系统软件故障或妥协导致的计算或网络容量损失。好消息是，目前有许多支持NSF研究人员的通用安全解决方案，但是对这些解决方案的支持是有限的，并且经常留给个人开发或项目团队。这个NSF赞助的研讨会将探索跨学科科学软件安全创新研究所（S3I2）的潜力，以解决研究软件、系统和信息的保护、完整性和可靠性问题。本次研讨会的目标是确定S3I2的需求和模型，以解决美国安全科学网络基础设施的问题。为了实现这一目标，研讨会将汇集来自NSF资助项目的代表、研究人员、开发人员和资源提供者。研讨会将涵盖以下主题：研究安全需求；确保研究活动和数据安全的现有工具、系统、流程和组织；研究保障中有待解决的问题；以及未来安全机构的组织和运作模式，以满足已确定的安全需求。研讨会将对这些需求和解决方案进行分析，并讨论针对美国的S3I2潜在模型的优势。S研究保障需求。

The scientific enterprise in America requires enterprise class security to assure competitive advantage and efficiently advance discovery and invention. Across NSF funded activities there is pervasive and increasing concern with the availability, integrity, and confidentiality of scientific workflows, resources, data, and personal information. Threats include data loss and corruption due to archive failures or malicious attacks, release of private data maliciously or accidentally, or loss of computational or network capacity due to system software failure or compromise. The good news is that there are a number of common security solutions that support NSF researchers today however support for these is limited and often left to the individual development or project teamsThis NSF-sponsored workshop will explore the potential for a cross-disciplinary Scientific Software Security Innovation Institute (S3I2) to address the protection, integrity, and reliability of research software, systems, and information. The goal of this workshop is to identify the needs for, and models of, an S3I2 to address secure scientific cyberinfrastructure in the United States. To accomplish this goal, the workshop will bring together representatives from NSF funded projects, researchers, developers, and resource providers. The workshop will cover the topics of: research security needs; existing tools, systems, processes and organizations that secure research activities and data; outstanding issues to be addressed in research assurance; and organization and operational models for a future security institute targeting the identified security needs. The workshop will result in an analysis of these needs and solutions and discuss the advantages of potential models for a S3I2 to address America?s research assurance needs.