CICI:TCR: Enhancing Security and Privacy of Community Cyberinfrastructures for Collaborative Research

网络基础设施（CI）系统，包括高性能计算和数据中心，在支持学术机构的研究方面发挥着关键作用。随着科学工作变得更加复杂和协作，有必要加强CI的安全和隐私方面，以应对不断变化的威胁。该项目利用现有的CI系统作为开发平台，并整合新的网络安全研究，以创建一个更安全和更有弹性的CI环境。具体而言，该项目侧重于开发用于CI系统内安全数据管理和计算的先进技术。它有三个推力。推力1：在集中式计算中保护数据，采用尖端技术来保护集中式计算环境中数据的安全性和隐私性。推力2：保护分布式计算中的数据，部署最先进的技术来保护协同计算场景中数据的安全性和隐私性。在推力3中：保护数据计算，创新的统计和机器学习为基础的计划，以检测和减轻内存拒绝服务攻击，确保计算的安全性。通过实施最先进的安全协议和隐私增强技术，该项目旨在增强CI系统对不断变化的网络威胁的抵御能力。该项目包括网络安全研究的技术转型，增强CI的能力，并在科学和工程领域实现高度安全和值得信赖的应用。它推进了CI安全的最新发展，为尖端发现和创新铺平了道路，同时确保了科学数据和计算的安全性。此外，它还促进了网络安全领域的进一步研究、实验和进步，并有助于增强国家CI生态系统的安全和隐私保护能力。该项目为学生提供全面的培训机会、研究生和本科生参与者的合作研究前景、教师的参与以及K-12学生的参与。该奖项反映了NSF的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

Cyberinfrastructure (CI) systems, including high-performance computing and data centers, play a critical role in supporting research in academic institutions. As scientific endeavors become more complex and collaborative, it is necessary to enhance CI’s security and privacy aspects to address evolving threats. This project leverages an existing CI system as a development platform and integrate novel cybersecurity research to create a more secure and resilient CI environment. Specifically, the project focuses on developing advanced techniques for secure data management and computation within CI systems. It has three thrusts. In thrust 1: Protect Data in Centralized Computing, cutting-edge techniques are employed to safeguard the security and privacy of data in centralized computing environments. In thrust 2: Protect Data in Distributed Computing, state-of-the-art techniques are deployed to protect the security and privacy of data in collaborative computing scenarios. In thrust 3: Protect Data Computation, innovative statistical and machine learning-based schemes are developed to detect and mitigate memory denial-of-service attacks, ensuring the security of computation. By implementing state-of-the-art security protocols and privacy-enhancing technologies, the project aims to enhance the resilience of CI systems against evolving cyber threats.This project encompasses technology transitions in cybersecurity research, empowering CIs and enabling highly secure and trustworthy applications in scientific and engineering domains. It advances the state-of-the-art in CI security, paving the way for cutting-edge discoveries and innovations while ensuring the security of scientific data and computation. Additionally, it facilitates further research, experimentation, and advancements in the field of cybersecurity, and contributes to enhancing the security and privacy protection capabilities of the national CI ecosystem. This project provides comprehensive training opportunities for students, collaborative research prospects for graduate and undergraduate participants, faculty engagement, and involvement of K-12 students. Special attention are given to recruiting students from underrepresented groups to foster inclusivity and diversity.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.