Cybersecurity Risk Conference

网络安全风险会议

• 批准号: 1748395
• 负责人: Florence Hudson
• 金额: $ 4.98万
• 依托单位: Columbia University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-09-01 至 2023-02-28
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1748395&HistoricalAwards=false
• 关键词: Cybersecurity; Risk; Conference

In the past several years, cyber-crime and cyber-breaches have exploded, due to the increase in commerce conducted on the Internet, as well as increasing quantities of sensitive information being stored in databases that can be accessed by outside parties. In addition, cyber-criminals have advanced, not only employing technical acumen but also preying on human error by using sophisticated techniques like phishing. To address these challenges, the Northeast Big Data Innovation Hub (NEBDIH) will convene two workshops to bring together experts from academia, government, and industry in the fields of insurance, cybersecurity, data science, and policy. The ultimate goal is to develop a collaborative model (e.g., a cross sector consortium) that will help to define the frequency and economic/social severity related to successful attacks, and to begin to develop baselines for measuring and managing cyber risk more effectively. NEBDIH will seek to gather leading academic, government, risk management, general industry and healthcare participants, whose mission will be to identify, quantify, and to help mitigate risk associated with cyber-related criminal activity. The workshops will serve as a forum for these experts to collaborate on: 1) better understanding and defining the interrelated cybersecurity landscape across sectors, and 2) planning for the resources necessary to develop baselines for measuring and managing cybersecurity risk. Expected outcomes from these activities include developing a framework for filling the gaps in quantifying and managing cybersecurity risk across organizations and sectors. This may take the form of an initiative that captures the best of breed technologies, vendors, and best practices; captures a substantial portion of the data that is required, in aggregate, to make a cybersecurity risk assessment at multiple levels (by industry, by region, by company); provides the tools to make the data discoverable and interoperable; and provides a basic suite of tools to allow for high level analysis of the data within the context of cybersecurity risk.

在过去几年中，由于在互联网上进行的商业活动增加，以及外部各方可以访问的数据库中存储的敏感信息数量不断增加，网络犯罪和网络入侵呈爆炸式增长。 此外，网络犯罪分子已经取得了进步，不仅利用技术上的敏锐性，而且还利用网络钓鱼等复杂技术来捕捉人为错误。为了应对这些挑战，东北大数据创新中心（NEBDIH）将举办两次研讨会，汇集来自保险、网络安全、数据科学和政策领域的学术界、政府和行业专家。最终目标是开发一个协作模型（例如，一个跨部门联盟），这将有助于确定与成功攻击有关的频率和经济/社会严重性，并开始制定基线，以更有效地衡量和管理网络风险。 NEBDIH将寻求聚集领先的学术，政府，风险管理，一般行业和医疗保健参与者，其使命将是识别，量化和帮助减轻与网络相关的犯罪活动相关的风险。这些研讨会将作为这些专家合作的论坛：1）更好地理解和定义跨部门相互关联的网络安全格局，以及2）规划必要的资源，以制定衡量和管理网络安全风险的基线。这些活动的预期成果包括制定一个框架，以填补各组织和部门在量化和管理网络安全风险方面的差距。 这可能采取的形式是一项计划，该计划收集最佳技术、供应商和最佳实践;收集在多个级别进行网络安全风险评估所需的大部分数据（按行业、地区、公司）;提供使数据可共享和可互操作的工具;并提供了一套基本工具，以允许在网络安全风险背景下对数据进行高级别分析。