NCDI Industry Workshop

提案编号：0856317PI: Terry BenzelInstitution: the University of Southern California， Information Sciences institute teleadtitle: NCDI Industry WorkshopOur Nation？计算机和网络控制着许多关键的基础设施。由于这些基础设施依赖于未定义为安全的系统，因此恶意攻击者可以通过底层网络和计算机中的漏洞轻松攻击这些基础设施而不受惩罚。多年来，实现安全性的方法一直是给系统打补丁，以便在漏洞被发现时（通常是被对手发现）删除漏洞，或者在攻击发起时（希望是在攻击发生后不久）检测攻击。这种方法对付不了意志坚定的对手。NSF和其他研究资助机构一直在追求安全和隐私方面的新研究理念，但通常这样的研究不会产生适合工业的产品和服务。美国的商业模式。这次研讨会将试图加速安全研究界和工业界之间的合作，以实现安全和隐私的合理想法，而工业界认为这是未来产品和服务的基础。研讨会将产生一份详细的报告，并发布在美国国家科学基金会的网站上

Proposal Number: 0856317PI: Terry BenzelInstitution: University of Southern California, Information Sciences InstituteLeadTitle: NCDI Industry WorkshopOur Nation?s computers and networks control many critical infrastructures. Because these infrastructures depend on systems that were not defined to be secure, determined adversaries can easily attack with impunity these infrastructures through vulnerabilities in the underlying networks and computers. For years, the approach to achieving security has been to patch systems to remove vulnerabilities as they are discovered, often by adversaries, or to detect attacks as they are launched or, hopefully, shortly thereafter. This approach will not work against determined adversaries.NSF and other research funding agencies has been pursing new research ideas towards security and privacy, but usually such research does not lead to products and services that are fit into industry?s business models. This workshop will attempt to accelerate the collaboration of the security research community and industry towards sound ideas for the attainment of security and privacy but which industry sees as the basis for future products and services. The workshop will produce a detailed report to be posted on the NSF web site