CICI: Center of Excellence: Center for Trustworthy Scientific Cyberinfrastructure

美国国家科学基金会每年为超过70亿美元的研究提供资金，几乎所有这些研究都严重依赖信息技术。该研究产生的数字数据和使用的计算系统与互联网上的其他数据和计算系统面临同样的风险。为了使今天的科学发现成为可能，并确保科学值得信赖，适当的网络安全是必要的。然而，美国国家科学基金会的科学通常是在开放的、合作的环境中进行的，这种环境跨越了组织和国家的界限。这些限制限制了传统网络安全模式和技术的使用。此外，对于许多非信息技术专家的科学家来说，在提供网络安全的同时保持计算机系统的可用性是至关重要的。不同的科学领域对数据的机密性和完整性也有不同的要求。作为NSF网络安全卓越中心，值得信赖的科学网络基础设施中心(CTSC)汇集了网络安全方面的专家，他们在科学工作中知识渊博，经验丰富，他们将为NSF社区提供必要的领导和支持，以应对在最大限度地产生值得信赖的NSF科学成果方面的独特网络安全挑战。CTSC将通过满足特定项目需求的协作参与，直接支持NSF的单个网络基础设施项目和大型设施。CTSC项目活动包括(但不限于)安全审查、安全架构设计、身份和访问管理以及软件保证。CTSC将通过及时的咨询和通知向NSF网络基础设施社区提供网络安全态势感知。CTSC将与能源部的能源科学网络合作，开发和发布一个针对开放科学界特定资产和利益的信息安全威胁模型。CTSC将继续为大型设施和网络基础设施举办一年一度的NSF网络安全峰会，为社区提供机会分享最佳实践，参加实践培训课程，并就解决共同挑战进行合作。反恐委员会将通过反恐委员会网站(http://trustedci.org)，博客文章、电子邮件列表和在线聊天)进行外联和传播最佳做法，并亲自和通过在线课程提供网络安全培训。

The National Science Foundation funds over seven billion dollars of research annually, nearly all of which relies heavily on information technology. The digital data produced and computing systems used by that research are subject to the same risks as other data and computing systems on the Internet. Appropriate cybersecurity is necessary both to make today's scientific discoveries possible and to ensure that the science is trustworthy. However, NSF science is often necessarily performed in open, collaborative environments that span organizational and national boundaries. These constraints limit the use of traditional cybersecurity paradigms and technologies. Moreover, maintaining the usability of computer systems while providing cybersecurity is critical for many scientists who are not information technology experts. Different science domains also have varying requirements for data confidentiality and integrity. As the NSF Cybersecurity Center of Excellence, the Center for Trustworthy Scientific Cyberinfrastructure (CTSC) brings together experts in cybersecurity, knowledgeable and experienced in the scientific endeavor, who will provide the NSF community with leadership and support necessary to tackle the unique cybersecurity challenges in maximizing the production of trustworthy NSF science.CTSC will directly support individual NSF cyberinfrastructure projects and Large Facilities through collaborative engagements that address specific project needs. CTSC engagement activities include (but are not limited to) security reviews, security architecture design, identity and access management, and software assurance. CTSC will provide cybersecurity situational awareness to the NSF cyberinfrastructure community through timely advisories and notices. In collaboration with the Department of Energy's Energy Science Network, CTSC will develop and publish an information security threat model scoped to the particular assets and interests of the open science community. CTSC will continue to organize the annual NSF Cybersecurity Summit for Large Facilities and Cyberinfrastructure, providing the community with the opportunity to share best practices, attend practical training sessions, and collaborate on solving common challenges. CTSC will perform outreach and dissemination of best practices via the CTSC website (http://trustedci.org), blog posts, email lists, and online chats, as well as providing cybersecurity training in person and via online courses.