IUCRC Phase II Colorado State University: Center for Cybersecurity Analytics and Automation CCAA

在一个日益相互联系的世界里，未能保护系统免受网络攻击会产生严重的后果。网络安全分析与自动化中心(CCAA)及其大学、政府和商业合作伙伴将着手开发科学和技术，以保护、防御和生存由高级、持续和不断发展的对手发起的此类攻击。这种多学科和协作的方法将提供研究和技术解决方案，以改善感知、决策和弹性，以在网络战和复杂的网络攻击事件中维持网络任务。CCAA及其网络安全、正式建模和数据驱动分析方面的专家将以多种方式促进网络安全，包括：(A)使用大规模异类网络人工制品对动态和预测性网络风险分析进行稳健和可扩展的感知；(B)使用任务要求、安全政策和指南以及系统配置，制定经证明正确且操作安全的防御战略和行动方案的自适应和自主决策；(C)使网络和网络物理系统的固有特性具有弹性和灵活性，以实现实时威慑、欺骗和缓解。科罗拉多州立大学(CSU)的网站将在正式方法、网络物理系统、机器学习和网络方面做出贡献。该中心的研究将通过其在互联世界中预防、检测、恢复和生存网络攻击的研究，推动网络安全领域的发展，使系统变得安全、可靠和有弹性。技术转让将通过成员组织的初创企业、学生和教职员工实习进行。各级学生、高中、本科生和毕业生都将参与到这些项目中来。将积极招收少数民族学生，特别是第一代学生。该中心将努力让学生在产业组织和伙伴大学实习。中心将把这个项目中开发的所有文物放在一个中央储存库中，所有成员都可以访问。该储存库将通过中心的网站(http://www.ccaa-nsf.org/).)访问这些构件包括手稿、代码、数据集和实验结果。其中一些材料还将分发给公众、符合中心章程、NSF政策和个别大学要求的选定外部组织。该储存库将在第二阶段项目期间可用，并将在项目结束后认真尝试维护该储存库。该奖项反映了NSF的法定使命，并已通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Failure to protect systems from cyberattacks in an increasingly interconnected world has severe consequences. The Center for Cybersecurity Analytics and Automation (CCAA) with its universities, government and commercial partners will embark on the development of science and technology to protect, defend, and survive such attacks that are launched by advanced, persistent, and evolving adversaries. The multi-disciplinary and collaborative approach will provide research and technological solutions that will improve sense-making, decision making, and resiliency to sustain cyber missions in the event of cyber warfare and sophisticated cyberattacks.CCAA with its experts in cybersecurity, formal modeling, and data-driven analytics will advance cybersecurity in multiple ways including (a) robust and scalable sense-making for dynamic and predictive cyber risk analytics using large-scale heterogeneous cyber artifacts, (b) adaptive and autonomic decision-making for creating defense strategies and courses of action that are provably correct and operationally safe using mission requirements, security policies and guidelines, and system configurations, (c) making resilience and agility inherent properties of cyber and cyber physical systems to enable real-time deterrence, deception, and mitigation. The Colorado State University (CSU) site will contribute in formal methods, cyber physical systems, machine learning, and networking.The Center's research will advance the field of cyber security through its research in preventing, detecting, recovering, and surviving cyberattacks in a connected world and make systems safe, secure, and resilient. Technology transfer will occur through start-ups, student and faculty internships at the member organizations. Students at all levels, high-school, undergraduates, and graduates will be involved in the projects. Minority students, especially first generation, will be actively recruited. Efforts will be made to have students do internships at the industrial organizations and the partner universities.The Center will make all the artifacts developed in this project in a central repository that will be accessible to all its members. The repository will be accessible through the Center's website (http://www.ccaa-nsf.org/). The artifacts include manuscripts, code, datasets, and experimental results. Some of these materials will also be disseminated to the public, selected external organizations conforming to the bylaws of the Center, the NSF policies, and the individual universities requirements. The repository will be available for the duration of the Phase II project, and an earnest attempt will be made to maintain the repository after the project ends.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.