Collaborative Research: CICI: Regional: SouthEast SciEntific Cybersecurity for University Research (SouthEast SECURE)

对可通过互联网访问的科学仪器和数据的威胁无处不在。东南科学大学研究网络安全(SECURE)项目有助于保护国家科学基金会在科学研究方面的投资，同时为科学家提供保护知识产权和确保数据完整性的工具。该项目团队为东南部国家科学基金会资助的研究人员提供教育、培训和精选的网络安全服务。该团队是一个多学科的团队，由网络安全专家(包括研究和实践者)、科学家和通信专家组成。团队成员分布在南卡罗来纳州、阿拉巴马州和密西西比州，来自历史悠久的黑人学院和大学(HBCU)的代表很强。这一计划提高了调查人员对他们在创建安全和值得信赖的网络空间中的关键作用的认识，并在风险评估、漏洞测试和缓解方面提供具体援助，以适应NSF资助的科学家的工作流程和计划规模。通过过去的合作，该团队处于有利地位，能够利用国家和地区网络安全组织和计划有效地接触到目标受众。东南安全通过提高网络安全意识、提供简明的培训、评估、工具和一对一帮助以及协助准备选定的网络安全指标来影响该地区。学生实习生正在通过以实践为基础的部署和支持方式开展许多此类活动，从而培养下一代网络专业人员的能力。将对该地区NSF资助的调查人员进行在线调查，以了解他们面临的主要网络安全挑战和关注的问题。然后进行培训，以便在如何进行适当规模的风险评估和缓解方面提供具体和实际的援助。提供了一个“工具包”来测试和验证当地的网络安全，并制定了网络安全措施并进行了实地测试。该团队的方法促进了研究人员和大学IT/数据安全人员之间的沟通。一个长期目标是建立在网络安全方面有共同利益的社区，并致力于帮助他人；以及与其他地区以及与国家中心和项目建立联系。

Threats to scientific instruments and data that are accessible via the Internet are ubiquitous. The SouthEast SciEntific Cybersecurity for University REsearch (SECURE) project helps protect the National Science Foundation's investments in scientific research while providing scientists with tools to safeguard intellectual property and ensure data integrity. The project team provides education, training, and selected cybersecurity services to NSF-funded researchers across the Southeast. The team is multidisciplinary, comprised of cybersecurity experts (both research and practitioner), scientists, and experts in communication. Team members are located in South Carolina, Alabama and Mississippi, with strong representation from Historically Black Colleges and Universities (HBCU). This program raises investigators' awareness of their essential role in creating a secure and trustworthy cyberspace and offers concrete assistance in risk assessment, vulnerability testing, and mitigation tailored to NSF-funded scientists' workflow and program size. Through past collaborations, the team is well positioned to leverage both national and regional cybersecurity organizations and programs to effectively reach the target audience. SouthEast SECURE impacts the region by raising cybersecurity awareness; providing concise training, assessment, tools and one-on-one help; and assisting in preparation of select cybersecurity metrics. Student interns are conducting many of these activities by means of practicum-based deployment and support, thus developing capabilities in the next generation of cyber professionals. An online survey of NSF-funded investigators in the region will be conducted to learn about their primary cybersecurity challenges and concerns. Training is then tailored to provide concrete and practical assistance in how to do right-sized risk assessment and mitigation. A "toolkit" is provided to test and validate local cybersecurity, and measures of cybersecurity are created and field-tested. The team's approach facilitates communication between research faculty and university IT/Data Security staff. A long-term goal is building communities with common interests in cybersecurity and a commitment to helping others; and building connections with other regions and with national centers and programs.