CAREER: Inclusive Cybersecurity Through the Lens of Accessible Identity and Access Management

-------------------------------------------------------------------------------------------------------------------------------- 这老师早期职业发展(职业)项目增加了网络安全意识个体识别的种族和族裔群体的成员历史上排除在科学和工程(S& E)。这种代表性不足可能导致s&p；E中发展网络安全技能的机会减少。因此，本研究的重点是关于适当使用和管理用户身份认证的身份凭证的网络安全意识。这种关注很重要，因为与凭证相关的账户泄露是最常见的网络攻击类型之一，而历史上被排除在外的种族和族裔群体的成员更容易成为网络攻击的目标。此外，虽然对包容性认证的研究正在增长，但对历史上被排斥的种族和民族群体的包容性用户认证方案的研究还不足。通过综合研究和教育活动，该项目开发了新颖的、包容性的用户认证系统，以降低网络安全风险，并以种族和民族为中心。该项目的成果还为K-12和大学生以及更广泛的人群提供以网络安全为重点的教育材料，从而扩大国家的网络安全防御。本项目邀请来自S&amp；E中历史上被排斥的种族和族裔群体的个人，为包容性身份验证系统的设计、实施和适当使用提供信息。研究小组正在进行一系列焦点小组，以确定现有认证系统的当前使用和看法，各种网络安全实践如何在日常生活中应用，以及各种因素，包括种族平等和文化价值观，如何塑造对计算和网络安全的看法。还研究了认证系统的性能，包括基于知识和人工智能衍生的生物识别系统，以识别数据驱动和算法偏差。这种性能分析是通过多会话数据收集来促进的，通过这些数据收集来自志愿研究参与者的模拟证书和物理和行为生物特征线索。有了这些见解和数据，使用各种方法（包括软生物识别分类、特征选择和多模态融合）开发了新的身份验证系统，以解决与用户子组、身份验证类型或身份验证模型相关的不良泛化、故障趋势和身份验证错误。该CAREER项目为身份验证系统的设计和实施提供信息，这些系统有助于实现包容性和可访问的网络安全解决方案，通过揭示何时以及如何隔离某些群体，识别知识和基于生物识别的身份验证系统中的偏见，改变最先进的身份验证系统，为网络安全研究提供新颖、多样化的数据集，并为包容性身份和访问管理的未来方向提供信息。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

--------------------------------------------------------------------------------------------------------------------------------This Faculty Early Career Development (CAREER) project increases the cybersecurity awareness of individuals identifying as members of racial and ethnic groups historically excluded in Science and Engineering (S&E). Such underrepresentation could lead to reduced opportunities in S&E in which cybersecurity skills are developed. Thus, this research focuses on cybersecurity awareness concerning the appropriate use and management of identity credentials for user authentication. This focus is important as credential-related account compromises are among the most common types of cyberattacks, while members of historically excluded racial and ethnic groups are more frequently targeted by cyberattacks. Further, while research on inclusive authentication is growing, inclusive user authentication schemes for historically excluded racial and ethnic groups are understudied. Through integrated research and education activities, this project develops novel, inclusive user authentication systems to reduce cybersecurity risk, with race and ethnicity central foci. Outcomes of this project also provide cybersecurity-focused education material for K-12 and university students and the broader population, thereby expanding the nation's cybersecurity defense.This project engages individuals from historically excluded racial and ethnic groups in S&E to inform the design, implementation, and appropriate use of inclusive authentication systems. The research team is conducting a series of focus groups to identify current use and perceptions of existing authentication systems, how various cybersecurity practices are applied in everyday life, and how various factors, including racial equity and cultural values, shape perceptions of computing and cybersecurity. Performance of authentication systems, including knowledge-based and AI-derived biometric systems, is also investigated to identify data-driven and algorithmic biases. This performance analysis is facilitated through a multi-session data collection, through which mock credentials and physical and behavioral biometric cues are gathered from volunteering research participants. With these insights and data, novel authentication systems that address poor generalization, failure trends, and authentication errors associated with subgroups of users, the authentication type, or the authentication model are developed using a variety of approaches, including soft biometric classification, feature selection, and multimodal fusion. This CAREER project informs the design and implementation of authentication systems that contribute to inclusive and accessible cybersecurity solutions, transforms state-of-the-art authentication systems by exposing when and how they isolate certain groups and identifying biases in knowledge and biometric-based authentication systems, contributes a novel, diverse dataset for cybersecurity research, and informs future directions for inclusive identity and access management.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.