Forum on Cyber Resilience

该项目为国家科学院圆桌会议--网络复原力论坛提供支持。论坛将促进和加强关注计算和通信系统(包括互联网、关键基础设施和其他社会重要系统)的弹性的科学家、从业者和政策制定者之间的思想交流。复原力不仅包括面对攻击时的安全性、对退化的抵抗力和从不利事件中恢复的能力，还包括创新和适应能力，以及以反映基础设施许多利益相关者的价值(如隐私)和需求的方式吸收快速技术中断的能力。信息技术系统的部署规模越来越大，对人类活动的几乎每一个领域都有影响。网络安全在政策制定者和联邦研究赞助者中的可见性和优先级越来越高，信息和通信基础设施的需求也越来越大，这些基础设施能够承受其他形式的损害、破坏和不利事件，并满足使用者不断变化的其他需求和要求。该论坛将为来自学术界、工业界和政府的利益攸关方提供一个独特的场所，广泛地考虑弹性和这些其他属性，以及它们之间可能出现的紧张关系。论坛将召集来自政府、大学和行业的高级代表，以确定和探讨共同感兴趣的关键问题；框架关键问题和需求；并孵化对参与者具有持续价值的活动。讨论将围绕研究方向、新兴技术、设计和工程方法、人-系统互动、政策和社会影响、教育和劳动力考虑以及机构作用等问题展开。模式将包括关于目标和挑战的跨部门和公私对话；审议实现系统所有者、最终用户和其他利益攸关方共同目标的技术和(或)政策手段；探索案例研究，以吸取其他领域适用的经验教训。该论坛将促进科学家、从业者和政策制定者之间的跨部门思想交流，共同探索挑战和机遇，并使人们能够及早确定有前景的方法，以提高网络弹性和软件密集型系统和关键基础设施的活力。

This project provides support for a National Academies Roundtable, the Forum on Cyber Resilience. The Forum will facilitate and enhance the exchange of ideas among scientists, practitioners, and policy makers concerned with the resilience of computing and communications systems, including the Internet, critical infrastructure, and other societally important systems. Resilience encompasses not only security in the face of attacks, resistance to degradation, and the ability to recover from adverse events but also the capacity for innovation and adaptation and the ability to absorb rapid technological disruption in a way that reflects the values, such as privacy, and needs of the infrastructure's many stakeholders. Information technology systems are deployed at ever-increasing scale and have an impact on nearly every area of human activity. Cybersecurity has taken on increasing visibility and priority among policymakers and federal research sponsors, as has the need for information and communications infrastructure that can withstand other forms of damage, disruption, and adverse events and that meet the other evolving needs and demands of those who use them. The Forum would provide a unique venue for stakeholders from academia, industry, and government to consider resilience and these other attributes broadly along with the tensions that may arise among them. The Forum will convene senior representatives from government, universities, and industry to define and explore critical issues that are of shared interest; to frame critical questions and needs; and to incubate activities of on-going value to participants. Discussions will encompass such issues as research directions, emerging technologies, design and engineering approaches, human-system interactions, policy and social implications, education and workforce considerations, and institutional roles. Modalities would include cross-sector and public-private dialogue about goals and challenges; consideration of technical and/or policy means to achieve goals shared by system owners, end users and other stakeholders; and exploration of case studies to extract lessons applicable in other domains. The forum would facilitate cross-sector exchange of ideas among scientists, practitioners, and policy makers, joint exploration of challenges and opportunities, and enable the early identification of promising approaches to improve cyber resilience and the vitality of software-intensive systems and critical infrastructure.