Team for Research in Ubiquitous Secure Technology (TRUST)

项目摘要：泛在安全技术研究小组（TRUST）博士。S.尚卡尔·萨斯特里，加州大学伯克利分校首席研究员计算机可靠性作为一个紧迫的科学、经济和社会问题，其重要性不断增加。在过去的十年中，随着越来越多的个人连接到公共网络，以及进行复杂攻击的动机和手段的增加，各级计算机安全攻击迅速增加。在过去十年中，计算和通信在金融、能源分配、电信和运输等关键基础设施系统中的综合作用迅速增长，这是一个并行和加速的趋势，这些系统现在具有植根于信息技术的复杂相互依赖关系。这些重叠和相互作用的趋势和需求迫使我们认识到，我们的计算机系统的可靠性不仅仅是一个IT问题；它对我们国家的关键基础设施和劳动力问题有着直接和直接的影响。因此，迫切需要对网络安全和关键基础设施系统的科学基础有更深入的了解，了解经济和公共政策驱动因素及其对网络安全的影响，并确保研发所需的劳动力。为了满足这些需求，无处不在的安全技术研究团队（TRUST）将致力于开发一种新的科学技术，从根本上改变组织（软件供应商、运营商、地方和联邦机构）为我们的关键基础设施设计、构建和运营可信信息系统的能力。该中心将汇集一个在计算机安全、系统建模和分析、软件技术、经济学和社会科学等相关领域具有良好记录的团队。该小组由来自加州大学伯克利分校、卡内基梅隆大学、康奈尔大学、斯坦福大学、范德比尔特大学和圣何塞州立大学的研究人员组成。研究小组将得到外部咨询委员会（EAC）的建议和支持，该委员会由信息技术供应商、关键基础设施保护提供商和其他相关利益相关者组成。STC团队，包括研究人员、教育小组、知识转移小组、EAC和参与者小组，将促进劳动力多样性。通过积极的协调和努力的整合，TRUST研究人员将从安全的嵌入式系统到复杂的相互依赖的系统的层次方法中考虑安全性，每种方法都通知并建立在其他方法之上。同样重要的是，随着技术被获取并吸收到网络安全产品和关键基础设施中，TRUST将解决经济、社会和隐私方面的问题。中心资助模式使综合的多学科方法成为可能，将使解决方案从计算机安全、软件技术、复杂相互作用系统分析以及经济和公共政策的“整体系统”观点中协同产生。TRUST的统一方法是组件技术的计算机安全，将组件组成安全系统，测试和评估策略，成功安全的社会和经济因素以及将中心的研究与教育和知识转移相结合。利用NSF、国防部和其他机构在各种应用测试平台上的先前投资，TRUST将不断测试其研究产生的技术。测试平台的作用将是在具体和现实的系统中集成和评估技术，使研究走上正轨，以回答社会目标，并在真实系统中为利益相关者演示技术。为了在选定的现实生活测试平台中实现和展示核心目标，TRUST将在以下领域开展强有力的协调研究议程。(2)可信平台；(3)应用密码协议；(4)网络安全系统科学：(1)复杂相互依赖建模与分析；(2)安全网络嵌入式系统；(3)基于模型的可信组件集成；(4)安全的信息管理软件工具。社会科学：(1)经济学、公共政策与社会挑战；(2)数字取证与隐私；(3)人机界面与安全。信托基金将有一个教育和外联部分，重点是整合研究和以探究为基础的教育，并将新的和现有的知识转移到本科学院、为代表性不足的人口服务的教育机构和K-12社区。在这样做的过程中，信托基金将有助于为培训科学家和工程师奠定基础，这些科学家和工程师将开发下一代值得信赖的系统，并帮助培养最终将成为这些系统的用户、消费者和受益者的个人。信托基金还将采取全面的方法进行知识转移。由于TRUST解决了定义明确的长期社会需求，因此计算机安全、隐私和关键基础设施保护的结果将很容易传达给决策者、政策制定者和政府机构。就工业而言，选定的综合试验台将成为与主要利益相关者行业互动的焦点：电力、电信和嵌入式系统。由于TRUST将由多个机构组成，包括技术供应商、基础设施提供商和领先的研究型大学，其结果将是无处不在的安全技术的广泛传播、适应和持续发展。信任对国家的遗产将是为网络安全建立科学和技术基础、政策基础、教育基础和技术转移方法。TRUST的长期研究议程不仅将推动可信计算知识的前沿；它将在全国范围内影响未来的学术研究、工业研发和教育，因为TRUST的研究人员确定了新的研究方向，将他们的发现传播给更广泛的社区，并培养出一批多样化的熟练毕业生，他们将进一步推动该领域的发展。

PROJECT ABSTRACTTeam for Research in Ubiquitous Secure Technology (TRUST)Dr. S. Shankar Sastry, Principal InvestigatorUniversity of California at BerkeleyComputer trustworthiness continues to increase in importance as a pressing scientific, economic, and social problem. The last decade has seen a rapid increase in computer security attacks at all levels, as more individuals connect to common networks and as motivations and means to conduct sophisticated attacks increase. A parallel and accelerating trend of the last decade has been the rapidly growing integration role of computing and communication in critical infrastructure systems, such as financial, energy distribution, telecommunication and transportation which now have complex interdependencies rooted in information technologies. These overlapping and interacting trends and needs force us to recognize that trustworthiness of our computer systems is not an IT issue alone; it has a direct and immediate impact on our nation's critical infrastructure and workforce issues. As a consequence, there is an acute need for developing a much deeper understanding of the scientific foundations of cybersecurity and critical infrastructure systems, understanding the economic and public policy drivers and impacts for cybersecurity, and assuring the workforce required for research and development. In response to these needs, the Team for Research in Ubiquitous Secure Technology (TRUST) will be devoted to the development of a new science and technology that will radically transform the ability of organizations (software vendors, operators, local and federal agencies) to design, build, and operate trustworthy information systems for our critical infrastructure. The Center will bring together a team with a proven track record in relevant areas of computer security, systems modeling and analysis, software technology, economics, and social sciences. The team consists of investigators from the University of California at Berkeley, Carnegie Mellon University, Cornell University, Stanford University, Vanderbilt University, and San Jose State University. The research team will be advised and supported by an External Advisory Committee (EAC) with strong representation of vendors of information technology, critical infrastructure protection providers, and other relevant stakeholders. The STC team, including the researchers, education group, and the knowledge transfer group, the EAC, and participant groups will promote workforce diversity.Through the active coordination and integration of efforts, TRUST researchers will consider security in a hierarchy of approaches that ranges from secure embedded systems to complex interdependent systems, each approach informing and building upon the others. Equally important, TRUST will address economic, social, and privacy considerations as the technology is acquired and absorbed into cybersecurity products and the critical infrastructure. The integrated, multidisciplinary approach made possible by the Center mode of funding will allow solutions to synergistically emerge from a "holistic systems" view of computer security, software technology, analysis of complex interacting systems, and economic and public policy.The unifying approaches of TRUST are computer security for component technologies, composition of components into secure systems, test and evaluation strategies, social and economic factors for successful security and the integration of the Center's research with education and knowledge transfer. Leveraging the prior investments of NSF, DoD and other agencies in various application testbeds, TRUST will continuously test the technologies resulting from its research. The role of the testbeds will be to integrate and evaluate technologies in specific and realistic systems, keep the research on track to answer societal objectives, and demonstrate the technologies for stakeholders in real systems. To achieve and demonstrate the core objectives in the selected real-life testbeds, TRUST will pursue a strongly coordinated research agenda in the following areas Security Science (1) Software Security; (2) Trusted Platforms; (3) Applied Cryptographic Protocols; and (4) Network SecuritySystems Science: (1) Complex Interdependency Modeling and Analysis; (2) Secure Network Embedded Systems; (3) Model-based Integration of Trusted Components; and (4) Secure Information Management Software Tools.Social Science: (1) Economics, Public Policy and Societal Challenges; (2) Digital Forensics and Privacy; and (3) Human Computer Interfaces and Security.TRUST will have an education and outreach component that focuses on integrating research and inquiry-based education and on transferring new and existing knowledge to undergraduate colleges, educational institutions serving under-represented populations, and the K-12 community. In so doing, TRUST will help lay the groundwork for training the scientists and engineers who will develop the next generation of trustworthy systems, as well as to help prepare the individuals who will ultimately become the users, consumers and beneficiaries of such systems.TRUST will also take a comprehensive approach to knowledge transfer. Since TRUST addresses well-defined and long term societal needs, the results in computer security, privacy and critical infrastructure protection will be easily communicated to decision makers, policy makers, and government agencies. With respect to industry, the selected integrative testbeds will be the focal points to interact with major stakeholder industries: power, telecommunication and embedded systems. Since TRUST will comprise multiple institutions, including technology vendors, infrastructure providers and leading research universities, the result will be wide spread dissemination, adaptation and continued evolution of ubiquitous secure technology. The legacy of TRUST to the nation will be the creation of a science and technology base, policy base, educational base, and technology transfer methodology for cybersecurity. The long-term research agenda of TRUST will not only advance the frontiers of knowledge in trustworthy computing; it will influence on a national scale future academic research, industrial R&D and education as TRUST researchers identify new directions of inquiry, disseminate their findings to the broader community, and produce a diverse group of skilled graduates who will advance the field further yet.