EAGER: SaTC: Early-Stage Interdisciplinary Collaboration: Developing the Concept of a Near Misses Analysis Capability and NTSB-Model for Cyber Incidents

EAGER：SaTC：早期跨学科合作：开发网络事件的未遂事件分析能力和 NTSB 模型的概念

• 批准号: 1915819
• 负责人: Stephen Flynn
• 金额: $ 4.99万
• 依托单位: Northeastern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-07-15 至 2021-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1915819&HistoricalAwards=false
• 关键词: EAGER; SaTC; Early; Stage; Interdisciplinary

The idea of extracting information out of cyber incidents that can be used to prevent other, similar incidents at other organizations has often been compared to creating a National Transportation Safety Board (NTSB) for cybersecurity incidents. This project would further this idea by holding a workshop engaged in exploring the barriers to information sharing and data use among organizations, the possible costs and rewards of such a board, the steps required for implementation through policy proposals, and alternative mechanisms, other than a security incident sharing board. The workshop focuses on the financial or banking industry. It will achieve enhanced understanding of cyber incident sharing in industry and have a broader impact of increased partnerships between academia, industry, and others through the workshop activities. Workshop participants will be invited from government agencies, victim organizations, financial services organizations, cybersecurity providers, incident responders, and the insurance industry. Further workshops will be planned with the ultimate goal being to provide a substantial new source of data on cyber incidents for research in security, for organizations that must protect themselves against cyber incidents, and for the security industry.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

从网络事件中提取信息，以防止其他组织发生其他类似事件的想法经常被比作为网络安全事件创建国家运输安全委员会（NTSB）。 该项目将进一步推动这一想法，举办一个研讨会，探讨各组织之间信息共享和数据使用的障碍、设立这一委员会的可能成本和回报、通过政策建议实施所需的步骤以及安全事件共享委员会以外的替代机制。该研讨会侧重于金融或银行业。它将增强对行业网络事件共享的理解，并通过研讨会活动增加学术界，工业界和其他人之间的伙伴关系产生更广泛的影响。研讨会的参与者将来自政府机构、受害者组织、金融服务组织、网络安全提供商、事件响应者和保险业。未来还将举办更多的研讨会，最终目标是为安全研究、必须保护自己免受网络事件影响的组织以及安全行业提供大量新的网络事件数据源。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。