Federal Plan For Cyber Security And Information Assurance Research And Development PDF Download

The Nation's security, economic progress, and modern lifestyle are increasingly dependent on cyberinfrastructure-the vast, interconnected information networks, communications technologies, and computer systems that handle the processing and flow of information across the many distributed environments and resources of cyberspace. This increasing reliance must be matched with assurances that information and communication technologies can securely support the core activities underpinning cyberspace. However, the history of the creation of the Internet has left a legacy in its structure and design that makes securing cyberinfrastructure today a massive technical challenge. The Internet was originally developed to support a new mode of communication and information sharing between scientists at different institutions. Since all the users were members of a relatively small and exclusive group, flexibility and scalability, not security, were the key attributes of its design. While these attributes have enabled the innovations that have driven rapid growth and adoption of the technology, the community of Internet users is no longer a small and friendly club, but rather a global ecosystem of interconnected players with diverse needs, capabilities, and motives. It is very difficult now to retrofit trust mechanisms into the Internet and to achieve the level of security required for cyberinfrastructure and the systems dependent on it. In December 2011 the NSTC released Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program, outlining a vision for the research needed to develop game-changing technologies to neutralize attacks on the cyber systems of today, and to establish scientific foundations to meet the challenges of securing the cyber systems of tomorrow. The Strategic Plan surfaced intersections of common interest and mutual benefit in cybersecurity research; outlined specific research and development areas that span multiple disciplines; and emphasized collaboration among researchers and technical experts in government, industry, academia, and international contexts. Since the release of the Strategic Plan, Federal agencies have responded vigorously by adapting their existing cybersecurity R&D programs and initiating new activities that align with the Plan's strategic priorities. This report summarizes the broad Federal response, highlighting the specific research activities that agencies are supporting. This report finds that, since the release of the Strategic Plan, agencies have coordinated successfully to minimize duplication among R&D efforts and made excellent progress in creating and leveraging partnerships with other agencies and external parties on key research areas. Agencies have also put proper focus on transitioning research to practice and maximizing the impact of their R&D investments.