CICI: CCoE: Trusted CI: Advancing Trustworthy Science

美国国家科学基金会每年为超过70亿美元的研究提供资金，几乎所有这些研究都严重依赖信息技术。该研究产生的数字数据和使用的计算系统面临网络攻击的风险，在某些情况下类似于因特网上的其他数据和计算系统，在另一些情况下则特定于其研究任务。为了使今天的科学发现成为可能，并确保科学值得信赖，适合研究任务的网络安全是必要的。适当的网络安全必须尊重跨越组织和国界的协作环境、用于管理大规模数据和计算的高性能技术以及NSF研究中常见的动态信息技术需求。不同的科学领域对数据的机密性、可用性和完整性也有不同的要求。这些方面对使用传统的网络安全范例和技术来管理值得信赖的、可重复的研究的风险提出了挑战。作为NSF网络安全卓越中心，Trusted CI汇集了网络安全专家，他们在NSF研究工作中知识渊博，经验丰富，他们为NSF社区提供必要的领导和支持，以应对NSF研究面临的网络安全挑战。Trusted CI通过满足特定项目需求的协作活动，直接支持各个NSF网络基础设施项目和主要设施。可信的CI项目活动包括(但不限于)安全审查、安全架构设计、身份和访问管理以及软件保证。Trusted CI通过及时的建议和通知向NSF网络基础设施社区提供网络安全态势感知。Trusted CI为大型设施和网络基础设施组织了一年一度的NSF网络安全峰会，为社区提供了分享经验教训、参加实践培训课程和合作解决共同挑战的机会。可信CI通过可信CI网站(http://trustedci.org)，博客文章、电子邮件列表和在线聊天)进行扩展和传播最佳实践，并通过面对面和在线课程提供网络安全培训。可信CI的领导活动包括为NSF科学开发网络安全框架，并促进NSF网络安全研究向实践的过渡。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

The National Science Foundation funds over seven billion dollars of research annually, nearly all of which relies heavily on information technology. The digital data produced and computing systems used by that research are subject to risks from cyber attacks, in some cases similar to other data and computing systems on the Internet and in other cases particular to their research mission. Cybersecurity appropriate to the research mission is necessary both to make today's scientific discoveries possible and to ensure that the science is trustworthy. Appropriate cybersecurity must respect the collaborative environments that span organizational and national boundaries, the high-performance technologies used to manage large scale data and computation, and the dynamic information technology demands common in NSF research. Different science domains also have varying requirements for data confidentiality, availability, and integrity. These aspects challenge the use of traditional cybersecurity paradigms and technologies to manage the risks to trustworthy, reproducible research.As the NSF Cybersecurity Center of Excellence, Trusted CI brings together experts in cybersecurity, knowledgeable and experienced in the NSF research endeavor, who provide the NSF community with the leadership and support necessary to tackle the cybersecurity challenges to NSF research. Trusted CI directly supports individual NSF cyberinfrastructure projects and Major Facilities through collaborative engagements that address specific project needs. Trusted CI engagement activities include (but are not limited to) security reviews, security architecture design, identity and access management, and software assurance. Trusted CI provides cybersecurity situational awareness to the NSF cyberinfrastructure community through timely advisories and notices. Trusted CI organizes the annual NSF Cybersecurity Summit for Large Facilities and Cyberinfrastructure, providing the community with the opportunity to share lessons learned, attend practical training sessions, and collaborate on solving common challenges. Trusted CI performs outreach and dissemination of best practices via the Trusted CI website (http://trustedci.org), blog posts, email lists, and online chats, as well as providing cybersecurity training in person and via online courses. Leadership activities of Trusted CI include developing a cybersecurity framework for NSF science and fostering the transition to practice of NSF cybersecurity research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.