Future Research Goals and Directions for Foundational Science in Cybersecurity, Phase Two

一个指定的国家研究委员会将进行第二阶段的研究，以考虑网络安全基础科学未来的研究目标和方向，以及对基础工作的投资如何支持民用和国家安全任务的长期需求。它将考虑社会和行为科学中的相关主题，以及更“传统”的网络安全主题。该委员会将审查当前的联邦网络安全研究战略、计划和计划，以及对民用和国家安全应用的要求。它将审议重大挑战问题，探索拟议的新方向，找出当前组合中的差距，审议研究在非机密和机密环境中的补充作用，并考虑如何将非机密环境中的基础工作转化为实现国家安全目标。在第一阶段，研究委员会进行了初步的数据收集和分析，该阶段已经用单独的资金完成。在这项活动资助的第二阶段，委员会将进行更多的数据收集、分析和审议，并编写一份报告，为基础网络安全研究提供高级别路线图。能够产生新技术和新方法的基础性网络安全研究是国家应对网络安全挑战的重要因素。这项研究的结果预计将为进行网络安全研究的联邦机构以及联邦信息技术和网络安全协调机构未来的活动提供参考。预计它还将向网络安全研究人员以及作为网络安全技术和服务的开发商和消费者的行业通报需求、机会和未来方向。

An appointed National Research Council committee will conduct the second phase of a study to consider future research goals and directions for foundational science in cybersecurity and how investments in foundational work support civilian and national security mission needs in the long term. It will consider relevant topics in social and behavioral sciences as well as more "traditional" cybersecurity topics. The committee will review current federal cybersecurity research strategies, plans, and programs as well as requirements for both civilian and national security applications. It will consider major challenge problems, explore proposed new directions, identify gaps in the current portfolio, consider the complementary roles of research in unclassified and classified settings, and consider how foundational work in an unclassified setting can be translated to meet national security objectives. In Phase 1, already completed with separate funding, the study committee conducted initial data gathering and analysis. In Phase 2, to be funded under this activity, the committee will undertake additional data-gathering, analysis and deliberations and produce a report providing a high-level roadmap for foundational cybersecurity research. Foundational cybersecurity research that yields yield new technologies and approaches is an important element of the nation's response to the cybersecurity challenge. The results of this study are expected to inform future activities by federal agencies that conduct cybersecurity research and federal coordinating bodies for IT and cybersecurity. It is also expected to inform cybersecurity researchers as well as industry -- which is both a developer and consumer of cybersecurity technologies and services -- about needs, opportunities, and future directions.