权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

SaTC: CORE: Medium: Knowledge Work and Coordination to Improve O&M and IT Collaboration to Keep Our Buildings Smart AND Secure

SaTC：核心：中：知识工作和协调以提高 O

基本信息

批准号：
1932769
负责人：
Laura Osburn
金额：
$ 72.11万
依托单位：
University of Washington
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2019
资助国家：
美国
起止时间：
2019-10-01 至 2023-03-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1932769&HistoricalAwards=false
关键词：
SaTC CORE Medium Knowledge Work

项目摘要

Government organizations, businesses, and universities are increasingly adding Internet of Things (IoT) devices, such as room occupancy sensors, into their buildings. As these sensors are connected to the internet and networked to building technology (such as heating and lights), an attacker could shut down a building or steal sensitive information. While technical solutions exist, implementation of these solutions are impeded by the challenges that an organization's information technology (IT) staff and a building's operations and management (O&M) staff have when they fail to work closely together and share their knowledge about computer security and how buildings operate. These difficulties arise from different ways of working and different points of view about how technology works. This project addresses these challenges through studying two critical areas: (1) how O&M and IT currently share their knowledge and skills and work together to improve IoT security and (2) how public policies and an organization's own rules regarding privacy and security impact how IT and O&M collaborate. The results of this study will generate knowledge around how IT and O&M professionals can work better together to improve the security of our nation's buildings and offer insights into how public policy may affect professional cybersecurity collaboration.This project will identify how legal and organizational policies and procedures interact with daily work practices to either support or limit how O&M and IT staff share their expertise and coordinate their work to collaborate on IoT security issues. The research team will conduct observations, interviews, and document analyses, first observing and interviewing IT and O&M staff on collaborative cybersecurity efforts in three U.S. universities and analyzing university documents related to IoT cybersecurity. The research team will concurrently conduct interviews with IT and O&M security experts from across the U.S. as well as create a set of comparative case studies of university O&M and IT IoT security efforts. This research will be followed by a final set of expert interviews. The research team will identify key methods that support IT and O&M collaboration and develop a theoretical model to provide a holistic view of how organization, policy, and practice interact and affect collaboration intended to keep IoT safe and secure. This research will also provide clear examples of how policies, procedures, and practices used in organizations today are supporting or impeding collaboration between IT and O&M professionals.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

政府机构、企业和大学越来越多地在其建筑物中添加物联网（IoT）设备，例如房间占用传感器。由于这些传感器连接到互联网，并与建筑技术（如供暖和照明）联网，攻击者可以关闭建筑物或窃取敏感信息。虽然存在技术解决方案，但是当组织的信息技术（IT）人员和建筑物的运营和管理（O&amp；M）人员无法紧密合作并分享他们关于计算机安全性和建筑物如何运行的知识时，这些解决方案的实现受到了挑战的阻碍。这些困难来自不同的工作方式和对技术如何工作的不同观点。该项目通过研究两个关键领域来解决这些挑战：(1)运营管理和IT部门目前如何分享他们的知识和技能，并共同努力改善物联网安全；(2)公共政策和组织自身关于隐私和安全的规则如何影响IT和运营管理部门的合作。本研究的结果将产生有关IT和o&m专业人员如何更好地合作以提高我国建筑安全性的知识，并提供有关公共政策如何影响专业网络安全协作的见解。该项目将确定法律和组织政策和程序如何与日常工作实践相互作用，以支持或限制运维和IT人员如何分享他们的专业知识并协调他们在物联网安全问题上的工作。研究小组将进行观察、访谈和文件分析，首先观察和采访美国三所大学的IT和o&m人员，讨论协同网络安全工作，并分析与物联网网络安全相关的大学文件。研究团队将同时与来自美国各地的IT和IT物联网安全专家进行访谈，并创建一套大学IT和物联网安全工作的比较案例研究。这项研究之后将进行最后一组专家访谈。研究团队将确定支持IT和运营管理协作的关键方法，并开发一个理论模型，以提供组织、政策和实践如何相互作用并影响旨在保持物联网安全的协作的整体视图。本研究还将提供清晰的例子，说明当今组织中使用的策略、过程和实践是如何支持或阻碍IT和o&m专业人员之间的协作的。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。