Academic Centre of Excellence in Cyber Security Research - Cardiff University

卡迪夫大学是英国领先的网络安全分析和人工智能学术机构，通过对风险、威胁情报、攻击检测和从计算机科学、数据科学、犯罪学和国际关系中汲取的态势感知的跨学科见解，对应用数据科学和人工智能方法进行解释和有效沟通。我们的业绩记录证明了世界领先的出版物，强大的博士生生态系统，以及来自EPSRC， ESRC和行业的总拨款收入超过750万英镑。通过与全球制造公司空中客车公司的战略合作伙伴关系，包括2017年在卡迪夫大学推出的空中客车网络安全分析卓越中心，我们的研究的影响和创新得到了证明。通过学术借调、学生实习和资助博士学位，大学开发的技术已被纳入空客的内部和外部产品和服务（例如咨询和安全运营中心（SOC））。我们通过网络安全分析的重点，将卡迪夫大学网络安全研究的各个方面整合到由9名长期学术人员组成的中心。我们的核心目标是保持这种领先能力，以支持围绕国家重要网络安全问题的创新、决策和政策。我们的理念是，网络安全是一个全球性的，以人为中心的问题，不能单独通过技术来解决，我们的研究努力能够理解，解释和模拟网络空间中的行为和互动，以及开发技术创新来预测和分类系统和人员的风险和威胁。我们资助的研究项目以五个核心研究主题为基础：(1)风险评估和建模-开发新的方法来形式化关键基础设施内的流程，并开发新的风险建模符号，改变了风险捕获的方式。我们的目标是推进网络分析与实时风险评估和建模的整合；(2)风险沟通、治理和集体决策——利用威胁情报和良好实践——能够根据现有信息做出有效决策，这在不断变化的网络威胁环境中至关重要。(3)数据驱动的人类和软件行为分析和威胁情报——我们在数据科学、机器学习和统计分析方面的专业知识正被应用于通过复杂的软件行为分析进行入侵检测的突破性研究（例如通过行为DNA分析进行入侵检测的机器学习）；(4)网络犯罪的动机、动态和社会因素——支持理论数据挖掘和解释性社会过程建模。这包括网络欺诈和动机，以及影响网络攻击后行为和沟通的社会因素；(5)新兴技术（如云、移动设备和物联网）的安全和隐私——利用人工智能进行地平线扫描和预测未来的威胁。卡迪夫大学是EPSRC PETRAS国家物联网（IoT）中心的积极合作伙伴，我们在其中研究工业控制系统背景下物联网的新兴攻击媒介和利用威胁。

Cardiff University is a leading UK academic institution for cyber security analytics and artificial intelligence - the interpretation and effective communication of applied data science and AI methods through interdisciplinary insights into risk, threat intelligence, attack detection and situational awareness drawn from computer science, data science, criminology and international relations.Our track record is evidenced by world leading publications, a strong PhD student ecosystem, and a total grant income over £7.5m from EPSRC, ESRC and industry. The impact and innovation of our research has been evidenced through a strategic partnership with global manufacturing firm Airbus - including the launch of an Airbus Centre of Excellence for Cyber Security Analytics at Cardiff University in 2017. Through academic secondments, student internships, and funded PhDs, University-developed technology has been incorporated into Airbus' internal and external products and services (e.g. consultancy and Security Operations Centre (SOC)).We have consolidated the various aspects of cyber security research at Cardiff through the focus of cyber security analytics into the centre comprising 9 permanent academic staff. We have a core aim to sustain this leading capability to support innovation, decision making and policy surrounding cyber security issues of national importance.Our philosophy is that Cyber Security is a global, human-centred issue that cannot be solved by technology alone, and our research endeavours to be able to understand, explain and model behaviours and interactions in cyber space as well develop technological innovation to predict and classify risks and threats to systems and people. Our funded research programme is underpinned by five core research themes: (1) Risk assessment and modelling - developing novel methods to formalise processes within critical infrastructures and developing new risk modelling notation that has transformed the way risk is captured. We aim to advance the integration of cyber analytics with real-time risk assessment and modelling; (2) Risk communication, governance and collective decision making - using threat intelligence and good practice - being able to make effective decisions based on information available is crucial in an ever evolving cyber threat landscape. (3) Data-driven human and software behavioural analytics and threat intelligence - Our expertise in data science, machine learning and statistical analysis is being applied to ground-breaking research in intrusion detection via the complex analysis of software behaviours (e.g. machine learning for intrusion detection via behavioural DNA profiling); (4) Motivations, dynamics and social factors of cyber crimes - supporting theoretical data mining and explanatory social process modelling. This includes cyber fraud and motivations, and the social factors influencing behaviours and communication following cyber attacks; and (5) Security and Privacy of Emerging Technologies (e.g. cloud, mobile devices and Internet of Things) - horizon scanning and forecasting the threats of the future using AI. Cardiff University is an active partner in the EPSRC PETRAS national hub for Internet of Things (IoT), within which we study the emerging attack vectors and exploitation threats on IoT in an industrial control system context.