CICI: Center of Excellence: Center for Trustworthy Scientific Cyberinfrastructure

美国国家科学基金会每年为超过70亿美元的研究提供资金，几乎所有这些研究都严重依赖信息技术。该研究产生的数字数据和使用的计算系统与互联网上的其他数据和计算系统一样面临同样的风险。适当的网络安全对于使今天的科学发现成为可能和确保科学是值得信赖的都是必要的。然而，美国国家科学基金会的科学常常是在开放的、协作的、跨越组织和国家边界的环境中进行的。这些制约因素限制了传统网络安全范式和技术的使用。此外，在提供网络安全的同时保持计算机系统的可用性对许多不是信息技术专家的科学家来说至关重要。不同的科学领域对数据的保密性和完整性也有不同的要求。作为卓越的NSF网络安全中心，值得信赖的科学网络基础设施中心（CTSC）汇集了网络安全专家，在科学努力方面知识渊博，经验丰富，他们将为NSF社区提供必要的领导和支持，以最大限度地提高可信赖的NSF科学的生产，以解决独特的网络安全挑战。CTSC将通过协作方式直接支持NSF网络基础设施项目和大型设施，以满足特定项目的需求。CTSC参与的活动包括（但不限于）安全审查、安全架构设计、身份和访问管理以及软件保证。CTSC将通过及时的咨询和通知向NSF网络基础设施社区提供网络安全态势感知。CTSC将与能源部的能源科学网络合作，开发并发布一个信息安全威胁模型，该模型的范围涉及开放科学社区的特定资产和利益。CTSC将继续为大型设施和网络基础设施组织年度NSF网络安全峰会，为社区提供分享最佳实践的机会，参加实践培训课程，并合作解决共同挑战。CTSC将通过CTSC网站（http://trustedci.org）、博客文章、电子邮件列表和在线聊天，以及通过亲自和在线课程提供网络安全培训，开展推广和传播最佳实践。

The National Science Foundation funds over seven billion dollars of research annually, nearly all of which relies heavily on information technology. The digital data produced and computing systems used by that research are subject to the same risks as other data and computing systems on the Internet. Appropriate cybersecurity is necessary both to make today's scientific discoveries possible and to ensure that the science is trustworthy. However, NSF science is often necessarily performed in open, collaborative environments that span organizational and national boundaries. These constraints limit the use of traditional cybersecurity paradigms and technologies. Moreover, maintaining the usability of computer systems while providing cybersecurity is critical for many scientists who are not information technology experts. Different science domains also have varying requirements for data confidentiality and integrity. As the NSF Cybersecurity Center of Excellence, the Center for Trustworthy Scientific Cyberinfrastructure (CTSC) brings together experts in cybersecurity, knowledgeable and experienced in the scientific endeavor, who will provide the NSF community with leadership and support necessary to tackle the unique cybersecurity challenges in maximizing the production of trustworthy NSF science.CTSC will directly support individual NSF cyberinfrastructure projects and Large Facilities through collaborative engagements that address specific project needs. CTSC engagement activities include (but are not limited to) security reviews, security architecture design, identity and access management, and software assurance. CTSC will provide cybersecurity situational awareness to the NSF cyberinfrastructure community through timely advisories and notices. In collaboration with the Department of Energy's Energy Science Network, CTSC will develop and publish an information security threat model scoped to the particular assets and interests of the open science community. CTSC will continue to organize the annual NSF Cybersecurity Summit for Large Facilities and Cyberinfrastructure, providing the community with the opportunity to share best practices, attend practical training sessions, and collaborate on solving common challenges. CTSC will perform outreach and dissemination of best practices via the CTSC website (http://trustedci.org), blog posts, email lists, and online chats, as well as providing cybersecurity training in person and via online courses.