Collaborative Research: CICI: Regional: SouthEast SciEntific Cybersecurity for University Research (SouthEast SECURE)

合作研究：CICI：区域：东南大学研究科学网络安全 (SouthEast SECURE)

• 批准号: 1812404
• 负责人: Anthony Skjellum
• 金额: $ 5.3万
• 依托单位: University of Tennessee Chattanooga
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-10-01 至 2019-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1812404&HistoricalAwards=false
• 关键词: Collaborative; Research; CICI; Regional; SouthEast

Threats to scientific instruments and data that are accessible via the Internet are ubiquitous. The SouthEast SciEntific Cybersecurity for University REsearch (SECURE) project helps protect the National Science Foundation's investments in scientific research while providing scientists with tools to safeguard intellectual property and ensure data integrity. The project team provides education, training, and selected cybersecurity services to NSF-funded researchers across the Southeast. The team is multidisciplinary, comprised of cybersecurity experts (both research and practitioner), scientists, and experts in communication. Team members are located in South Carolina, Alabama and Mississippi, with strong representation from Historically Black Colleges and Universities (HBCU). This program raises investigators' awareness of their essential role in creating a secure and trustworthy cyberspace and offers concrete assistance in risk assessment, vulnerability testing, and mitigation tailored to NSF-funded scientists' workflow and program size. Through past collaborations, the team is well positioned to leverage both national and regional cybersecurity organizations and programs to effectively reach the target audience. SouthEast SECURE impacts the region by raising cybersecurity awareness; providing concise training, assessment, tools and one-on-one help; and assisting in preparation of select cybersecurity metrics. Student interns are conducting many of these activities by means of practicum-based deployment and support, thus developing capabilities in the next generation of cyber professionals. An online survey of NSF-funded investigators in the region will be conducted to learn about their primary cybersecurity challenges and concerns. Training is then tailored to provide concrete and practical assistance in how to do right-sized risk assessment and mitigation. A "toolkit" is provided to test and validate local cybersecurity, and measures of cybersecurity are created and field-tested. The team's approach facilitates communication between research faculty and university IT/Data Security staff. A long-term goal is building communities with common interests in cybersecurity and a commitment to helping others; and building connections with other regions and with national centers and programs.

通过互联网获取的科学仪器和数据面临的威胁无处不在。 东南大学研究科学网络安全（SECURE）项目有助于保护国家科学基金会在科学研究方面的投资，同时为科学家提供保护知识产权和确保数据完整性的工具。该项目团队为东南部NSF资助的研究人员提供教育，培训和选定的网络安全服务。 该团队是多学科的，由网络安全专家（研究和实践者），科学家和通信专家组成。 团队成员分布在南卡罗来纳州、亚拉巴马和密西西比，其中历史上的黑人学院和大学（HBCU）的代表性很强。 该计划提高了研究人员对他们在创建安全和值得信赖的网络空间中的重要作用的认识，并为风险评估，脆弱性测试和缓解提供了具体的帮助，以适应NSF资助的科学家的工作流程和计划规模。 通过过去的合作，该团队能够充分利用国家和区域网络安全组织和计划，有效地接触目标受众。SouthEast SECURE通过提高网络安全意识影响该地区;提供简明的培训，评估，工具和一对一的帮助;并协助准备选定的网络安全指标。 学生实习生正在通过基于实践的部署和支持进行许多这些活动，从而培养下一代网络专业人员的能力。 将对该地区NSF资助的调查人员进行在线调查，以了解他们的主要网络安全挑战和担忧。 然后，针对具体情况提供培训，以帮助进行适当规模的风险评估和缓解。 提供了一个“工具包”，以测试和验证当地的网络安全，并制定和实地测试了网络安全措施。 该团队的方法促进了研究人员和大学IT/数据安全人员之间的沟通。 长期目标是建立在网络安全方面有共同利益的社区，并致力于帮助他人;与其他地区以及国家中心和计划建立联系。

项目成果

A Hardware-Software Codesign Approach to Identity, Trust, and Resilience for IoT/CPS at Scale

• DOI: 10.1109/ithings/greencom/cpscom/smartdata.2019.00191
• 发表时间: 2019-07
• 期刊: 2019 International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData)
• 作者: Farah I. Kandah;Joseph Cancelleri;D. Reising;Amani Altarawneh;A. Skjellum

SCRaaPS: X.509 Certificate Revocation Using the Blockchain-based Scrybe Secure Provenance System

SCRaaPS：使用基于区块链的 Scrybe 安全来源系统撤销 X.509 证书

• DOI: 10.1109/malware.2018.8659364
• 发表时间: 2018
• 期刊: 2018 13th International Conference on Malicious and Unwanted Software (MALWARE
• 作者: Medury, Sai;Skjellum, Anthony;Brooks, Richard R.;Yu, Lu
• 通讯作者: Yu, Lu