EAGER: Creating a TTP Ecosystem Discovery and Support Resource for Cybersecurity Technology Transfer to Practice

EAGER：为网络安全技术转移到实践创建 TTP 生态系统发现和支持资源

• 批准号: 1636470
• 负责人: Alec Yasinsac
• 金额: $ 24.93万
• 依托单位: University of South Alabama
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1636470&HistoricalAwards=false
• 关键词: EAGER; Creating; TTP; Ecosystem; Discovery

The 2011 Federal Cybersecurity Research and Development Plan cites "Accelerating Transition to Practice (TTP)" as one of five strategic objectives in the Cyber Security and Information Assurance (CSIA) Program Component Area. TTP remains a strategic objective of Agencies which fund cybersecurity research, including NSF. However, the NSF cybersecurity portfolio contains only a small amount of security research that has been transitioned into operational activities. The Office of Science and Technology Policy (OSTP) of the White House defines transition to practice as research that "creates measurable improvements in the cybersecurity landscape". Although NSF encourages security researchers with promising applied research projects to submit TTP (Transition to Practice) projects, a very low percentage of researchers take advantage of this opportunity. This EAGER will serve as an outreach vehicle to cybersecurity Principal Investigators (PIs), informing them of the advantages of engaging in a TTP and instructing them on the differences between a traditional research proposal and a TTP-focused one. The PI's will conduct workshops at three PI meetings for NSF programs - Cybersecurity Innovation for Cyberinfrastructure (CICI), Campus Cyberinfrastructure (CC*) and Secure and Trustworthy Cyberspace (SaTC) as well as at several academic conferences, including USENIX Security and Security and Privacy (S&P) among others.In 2015, NSF sponsored two workshops which brought together key stakeholders to provide insights on how to improve the TTP process and encourage more TTP submissions. An important outcome of that workshop was the identification of specific barriers to TTP. In order to keep momentum going from these workshops, this follow-on project identifies specific ways in which PI's can overcome these barriers as they consider how to address TTP. The project establishes workshops for PI's to write more focused proposals, and provides opportunities for the PI's to engage with the NSF-funded cybersecurity community to foster more transition of cybersecurity research into the hands of the operational Information Technology Community. The expected outcome is that NSF expands the impact of the cybersecurity research it funds by producing more TTP results in the near to mid-term in order to make cyberspace safer.

2011年联邦网络安全研究和发展计划将“加速向实践过渡(TTP)”列为网络安全和信息保障(CSIA)计划组成部分领域的五个战略目标之一。TTP仍然是包括NSF在内的为网络安全研究提供资金的机构的战略目标。然而，NSF的网络安全组合只包含少量已转变为业务活动的安全研究。白宫科技政策办公室(OSTP)将向实践过渡定义为“在网络安全格局中创造可衡量的改善”的研究。尽管NSF鼓励有前景的应用研究项目的安全研究人员提交TTP(过渡到实践)项目，但利用这一机会的研究人员比例非常低。该中心将作为网络安全首席调查员(PI)的外展工具，告知他们参与TTP的好处，并指导他们传统研究方案与侧重TTP的研究方案之间的区别。美国国家科学基金会将在网络安全创新(CICI)、校园网络基础设施(CC*)和安全值得信赖的网络空间(SATC)等三个国家科学基金会项目的网络安全创新会议上举办研讨会，并在几个学术会议上举办研讨会，包括USENIX安全与安全与隐私(S和P；P)等。2015年，美国国家科学基金会赞助了两个研讨会，聚集了关键的利益相关者，就如何改进第三方协议流程并鼓励更多提交第三方协议提供见解。该讲习班的一个重要成果是查明了TTP的具体障碍。为了保持这些研讨会的势头，这个后续项目确定了PI在考虑如何解决TTP时克服这些障碍的具体方法。该项目为PI建立研讨会，以编写更有针对性的提案，并为PI提供与NSF资助的网络安全社区接触的机会，以促进将网络安全研究更多地过渡到操作信息技术社区手中。预期的结果是，NSF通过在中短期内产生更多的TTP结果来扩大其资助的网络安全研究的影响，以使网络空间更加安全。