Collaborative Research: The Road to Tomorrow: Cybersecurity Experimentation of the Future

随着社会的几乎每一个方面都在向普及计算和网络化发展，网络空间正在迅速发展。这些变化带来了真实而广泛的网络安全威胁和挑战，需要基于可靠的科学原则的新解决方案。挑战的规模和复杂性要求研究人员使用实验基础设施来实现发现、验证和持续分析。通往未来之路：未来网络安全实验项目正在探索当前和未来网络安全研究挑战背景下当前和预期的实验基础设施需求，并为开发可访问的、广泛的、多组织的网络安全实验能力制定路线图，以支持未来的研究。基于社区的协作工作包括三个主要重点：(1)调查和评估现有的实验基础设施和用户社区体验；(2)确定未来网络安全实验基础设施需求；(3)将需求和所需能力纳入未来网络安全基础设施发展的战略计划和路线图。通过一系列基于社区的研究小组来确定未来的需求，以了解可以从实验驱动的研究中受益的硬网络安全问题和用例，确定促进研究所需的实验基础设施，并确定所需能力与当前能力之间的差距，并根据领域需求对能力进行优先排序。该战略计划将有助于塑造可持续实验基础设施的发展，以支持不断变化的网络安全研究需求。由此产生的实验能力将为研究团体提供必要的手段，以发展对网络安全解决方案的基本理解和推理，并最终提供安全可靠的网络空间。

Cyberspace is rapidly evolving with nearly every aspect of society moving toward pervasive computing and networking. These changes bring real and wide-ranging cybersecurity threats and challenges that require new solutions based on sound scientific principles. The scale and complexity of the challenges require that researchers employ experimentation infrastructure to enable discovery, validation, and ongoing analysis. The Road To Tomorrow: Cybersecurity Experimentation of the Future project is exploring current and expected experimentation infrastructure needs in the context of current and future cybersecurity research challenges and producing a roadmap for developing an accessible, broad, and multi-organizational cybersecurity experimentation capability that supports tomorrow's research. The collaborative, community-based effort includes three main thrusts: (1) investigate and assess existing experimentation infrastructure and user community experience; (2) identify future cybersecurity experimentation infrastructure needs; and (3) organize the requirements and needed capabilities into a strategic plan and roadmap for future cybersecurity infrastructure development. The future needs are being identified through a series of community-based study groups to understand hard cybersecurity problems and use cases that can benefit from experiment-driven research, identify the experimentation infrastructure needed to facilitate research, and identify gaps between needed and current capabilities and prioritize capabilities based on domain needs. The strategic plan will help shape the development of sustainable experimentation infrastructure to support evolving cybersecurity research needs. The resulting experimentation capabilities will provide essential means for research communities to develop a fundamental understanding of and to reason about cybersecurity solutions and ultimately provide for secure and trustworthy cyberspace.