CICI: CCoE: Trusted CI: Advancing Trustworthy Science

美国国家科学基金会每年为超过70亿美元的研究提供资金，几乎所有这些研究都严重依赖信息技术。该研究产生的数字数据和使用的计算系统受到网络攻击的风险，在某些情况下类似于互联网上的其他数据和计算系统，而在其他情况下则特别适用于其研究任务。适合研究任务的网络安全对于使今天的科学发现成为可能和确保科学是值得信赖的都是必要的。适当的网络安全必须尊重跨组织和国家边界的协作环境，用于管理大规模数据和计算的高性能技术，以及NSF研究中常见的动态信息技术需求。不同的科学领域对数据的机密性、可用性和完整性也有不同的要求。这些方面挑战了传统网络安全范例和技术的使用，以管理可信赖的、可重复的研究的风险。作为卓越的NSF网络安全中心，可信的CI汇集了网络安全专家，在NSF研究努力中有知识和经验，他们为NSF社区提供了解决NSF研究的网络安全挑战所必需的领导和支持。可信CI直接支持NSF的网络基础设施项目和主要设施，通过合作解决特定项目需求。可信CI业务活动包括（但不限于）安全审查、安全体系结构设计、身份和访问管理以及软件保证。可信CI通过及时的咨询和通知向NSF网络基础设施社区提供网络安全态势感知。可信CI组织了一年一度的大型设施和网络基础设施NSF网络安全峰会，为社区提供了分享经验教训、参加实践培训课程和合作解决共同挑战的机会。可信CI通过可信CI网站（http://trustedci.org）、博客文章、电子邮件列表和在线聊天执行最佳实践的推广和传播，并通过亲自或在线课程提供网络安全培训。可信CI的领导活动包括为NSF科学开发网络安全框架，并促进向NSF网络安全研究实践的过渡。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The National Science Foundation funds over seven billion dollars of research annually, nearly all of which relies heavily on information technology. The digital data produced and computing systems used by that research are subject to risks from cyber attacks, in some cases similar to other data and computing systems on the Internet and in other cases particular to their research mission. Cybersecurity appropriate to the research mission is necessary both to make today's scientific discoveries possible and to ensure that the science is trustworthy. Appropriate cybersecurity must respect the collaborative environments that span organizational and national boundaries, the high-performance technologies used to manage large scale data and computation, and the dynamic information technology demands common in NSF research. Different science domains also have varying requirements for data confidentiality, availability, and integrity. These aspects challenge the use of traditional cybersecurity paradigms and technologies to manage the risks to trustworthy, reproducible research.As the NSF Cybersecurity Center of Excellence, Trusted CI brings together experts in cybersecurity, knowledgeable and experienced in the NSF research endeavor, who provide the NSF community with the leadership and support necessary to tackle the cybersecurity challenges to NSF research. Trusted CI directly supports individual NSF cyberinfrastructure projects and Major Facilities through collaborative engagements that address specific project needs. Trusted CI engagement activities include (but are not limited to) security reviews, security architecture design, identity and access management, and software assurance. Trusted CI provides cybersecurity situational awareness to the NSF cyberinfrastructure community through timely advisories and notices. Trusted CI organizes the annual NSF Cybersecurity Summit for Large Facilities and Cyberinfrastructure, providing the community with the opportunity to share lessons learned, attend practical training sessions, and collaborate on solving common challenges. Trusted CI performs outreach and dissemination of best practices via the Trusted CI website (http://trustedci.org), blog posts, email lists, and online chats, as well as providing cybersecurity training in person and via online courses. Leadership activities of Trusted CI include developing a cybersecurity framework for NSF science and fostering the transition to practice of NSF cybersecurity research.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.