Advanced search    Help

Clear all search criteria

Only 2/3! You are seeing results from the Public Collection, not the complete Full Collection. Sign in to search everything (see eligibility).

• Advisory: APT29 Targets COVID-19 Vaccine Development

  Show summary     Open resource [pdf]     (open full abstract)

  From the Introduction: "The United Kingdom's National Cyber Security Centre (NCSC) and Canada's Communications Security Establishment (CSE) assess that APT29 (also known as 'the Dukes' or 'Cozy Bear') is a cyber espionage group, almost certainly part of the Russian intelligence services. The United States' National Security Agency (NSA) agrees with this attribution and the details provided in this report. The United States' Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (DHS CISA) endorses the technical detail and mitigation advice provided in this advisory. The group uses a variety of tools and techniques to predominantly target governmental, diplomatic, think-tank, healthcare and energy targets for intelligence gain. Throughout 2020, APT29 has targeted various organisations involved in COVID-19 [coronavirus disease 2019] vaccine development in Canada, the United States and the United Kingdom, highly likely with the intention of stealing information and intellectual property relating to the development and testing of COVID-19 vaccines. APT29 is using custom malware known as 'WellMess' and 'WellMail' to target a number of organisations globally. This includes those organisations involved with COVID-19 vaccine development. WellMess and WellMail have not previously been publicly associated to APT29."

  United Kingdom. National Cyber Security Centre; Communications Security Establishment (Canada); United States. Department of Homeland Security. Cybersecurity and Infrastructure Security Agency . . .

  2020-07-16
• NSA and CISA Recommend Immediate Actions to Reduce Exposure Across All Operational Technologies and Control Systems

  Show summary     Open resource [pdf]     (open full abstract)

  From the Summary: "Over recent months, cyber actors have demonstrated their continued willingness to conduct malicious cyber activity against Critical Infrastructure (CI) by exploiting Internet-accessible Operational Technology (OT) assets. Due to the increase in adversary capabilities and activity, the criticality to U.S. national security and way of life, and the vulnerability of OT systems, civilian infrastructure makes attractive targets for foreign powers attempting to do harm to US interests or retaliate for perceived US aggression. OT assets are critical to the Department of Defense (DoD) mission and underpin essential National Security Systems (NSS) and services, as well as the Defense Industrial Base (DIB) and other critical infrastructure. At this time of heightened tensions, it is critical that asset owners and operators of critical infrastructure take the following immediate steps to ensure resilience and safety of US systems should a time of crisis emerge in the near term. The National Security Agency along with the Cybersecurity and Infrastructure Security Agency recommend that all DoD, NSS, DIB, and U.S. Critical Infrastructure facilities take immediate actions to secure their OT assets."

  United States. National Security Agency; United States. Department of Homeland Security. Cybersecurity and Infrastructure Security Agency

  2020-07
• Automating NIAP Requirements Testing for Mobile Apps

  Show summary     Open resource [pdf]     (open full abstract)

  From the Executive Summary: "In the past decade, mobility has evolved from a differentiator or key enabler within the modern information technology (IT) enterprise to a business necessity and operational imperative. Organizations large and small, across all market sectors, have embraced mobility for its benefits, but in the process have assumed all of mobility's endemic risks as well. For federal agencies, the majority of which have made improved mobility core to their enterprise IT strategies, the stakes are particularly high given their critical role. [...] For many years, the National Security Agency (NSA)-funded National Information Assurance Partnership (NIAP) has been responsible for overseeing a program that certifies the security of commercial products used in National Security Systems (NSS). While NSS are a special category of systems whose requirements do not apply to most government IT, the success of NIAP's requirements and evaluation model has led many other agencies to adopt its standards as well as the results of its product evaluations when they make IT procurement decisions. Even so, some agencies may prefer a lightweight vetting process that enables them to quickly assess whether their myriad mobile apps comply with NIAP standards, while reserving full and thorough NIAP evaluation for their most critical and sensitive enterprise apps."

  United States. Department of Homeland Security; United States. National Security Agency

  2020-06-29
• Next Wave: Machine Learning (Vol. 22 No. 2, 2019)

  Show summary     Open resource [pdf]     (open full abstract)

  This 2019 issue of "The Next Wave," titled "Machine Learning," features the following articles: "Toward a deep learning system for making sense of unlabeled multimodal data" by Barry Chen, T. Nathan Mundhenk, and Karl Ni; "Adversarial issues in machine learning" by W. Philip Kegelmeyer; "Advances in recommender-system theory" by Mark T. Jacobson; "Applying deep learning to implement a wideband radio frequency classifier for dynamic spectrum access" by Rob Miller, Marc Lichtman, and Edward Laird; "Smart digital assistance for intelligence analysis" by Paul Jones, S. Lynch, and Kathleen M. Vogel; "In-Q-Tel and Algorithmia partner to make ML [machine learning] algorithms and tools more accessible"; and "NSA [National Security Agency] and University of Texas: Joining forces in machine learning."

  United States. National Security Agency/Central Security Service

  2019
• Next Wave: Machine Learning (Vol. 22 No. 1, 2018)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2018 issue of "The Next Wave," titled "Machine Learning," featuring the following articles: "Some Basic Ideas and Vocabulary in Machine Learning" by Steven Knox; "Machine Learning for Autonomous Cyber Defense" by Ahmad Ridley; "Rethinking Neuromorphic Computation: Why a New Paradigm is Needed" by Mark R. McLean and Christopher D. Krieger; "How Deep Learning Changed Computer Vision" by Bridget Kennedy and Brad Skaggs; "Deep Learning for Scientific Discovery" by Courtney Corley and Nathan Hodas, et al.; "Extremely Rare Phenomena and Sawtooths in La Jolla" by Anthony Gamst and Skip Garibaldi; "Machine Learning Programs Across the Government"; and "AlgorithmHub Provides Robust Environment for NSA Machine Learning Research."

  United States. National Security Agency/Central Security Service

  2018
• Next Wave: 5G (Vol. 21 No. 3, 2017)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2017 issue of "The Next Wave," titled "5G [fifth generation]," featuring the following articles: "Introducing 5G" by Sam Farroha, Jared S. Everett, Jason J. Uher, Jason R. Harper, Jessica K. Bridgland, and Pamela M. Patton; "Virtualizing the 5G Architecture"; "5G and the Automotive Industry"; and "From Lab to Market."

  United States. National Security Agency/Central Security Service

  2017
• Next Wave: 5G Security & Privacy (Vol. 21 No. 4, 2017)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2017 issue of "The Next Wave," titled "5G [fifth generation] Security & Privacy," featuring the following articles: "Investigating End-to-End Security in 5G Capabilities and IoT [Internet of Things] Extensions" by Jason J. Uher, Jason R. Harper, R. G. Mennecke III, Pamela M. Patton, and Sam Farroha; "Models for Organizing the Quantification of Privacy Risk" by Duane Einfeld; "Device-to-Device Communication: LTE [Long-Term Evolution] Direct"; and "Improving Encryption via an NSA [National Security Agency] PLA [patent license agreement]."

  United States. National Security Agency/Central Security Service

  2017
• Transparency Report: THE USA FREEDOM Act Business Records FISA Implementation

  Show summary     Open resource [pdf]     (open full abstract)

  "The National Security Agency's Civil Liberties and Privacy Office (CLPO) conducted a civil liberties and privacy impact assessment examining how the National Security Agency (NSA) is implementing the changes effected by the USA FREEDOM Act to the telephone metadata program that the Agency had conducted pursuant to the 'Business Records' provision in Section 215 of the USA PATRIOT Act. The latter section amended the Foreign Intelligence Surveillance Act (FISA) and authorized NSA to collect and analyze certain telephone metadata. The USA FREEDOM Act, which was enacted in June 2015 and became effective on November 29, 2015, made significant changes to NSA's authority in this regard. This report summarizes CLPO's assessment and its underlying analysis of how this new authority is being implemented."

  United States. National Security Agency

  2016-01-15
• Next Wave: Internet of Things: It's a Wonderfully Integrated Life (Vol. 21 No. 2, 2016)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2016 issue of "The Next Wave," titled "Internet of Things: It's a Wonderfully Integrated Life," featuring the following articles: "The Internet of Things: It's a wonderfully integrated life"; "Privacy in the Internet of Things" by Roy Dong and Lillian J. Ratliff; "Security and the Internet of Things: When your refrigerator steals your identity"; "Simon and Speck: Agile block ciphers for the Internet of Things" by Ray Beaulieu, Douglas Shors, Jason Smith, Stefan Treatman-Clark, Bryan Weeks, and Louis Wingers; "Smart Cities"; and "NSA's [National Security Agency] NiFi [Niagrafiles] available via open source, improves flow of Big Data."

  United States. National Security Agency

  2016
• Issues in British and American Signals Intelligence, 1919-1932

  Show summary     Open resource [pdf]     (open full abstract)

  From the Summary: "The best-known element of signals intelligence during the First World War is work against the operational traffic of armies and navies, centering on cryptanalysis and traffic analysis; however, overwhelmingly its largest form, and the area where it was most frequently used, lay in blockade and economic warfare. This paper will center on Britain's role in this area, but British efforts were simply the main element of an allied system. From the start of the war, France pursued independent, essential, and parallel actions; Italy and Japan were less cooperative and important. When the United States entered the war, it worked with the existing system, and left management of the blockade and censorship of maritime cables to Britain and France."

  United States. National Security Agency

  Ferris, John Robert, 1956-

  2015
• Next Wave: Building a Science of Cybersecurity: The Next Move (Vol. 21 No. 1, 2015)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2015 issue of "The Next Wave," titled "Building a Science of Cybersecurity: The Next Move," featuring the following articles: "Resilient and secure cyber-physical systems" by William Emfinger, Pranav Srinavas Kumar, and Gabor Karsai; "Improving power grid cybersecurity"; "Analyzing the cost of securing control systems" by Zhenqi Huang, Yu Wang, Sayan Mitra, and Geir Dullerud; "Build it, break it, fix it: Competing to build secure systems" by Michael Hicks and Andrew Ruef; "The social engineering behind phishing" by Christopher B. Mayhorn, Emerson Murphy-Hill, Olga A. Zielinska, and Allaire K. Welk; "NSA [National Security Agency] Science of Security research network"; "Science of Security research and events highlights"; "NSA shares cyber software via open source."

  United States. National Security Agency/Central Security Service

  2015
• Release of Documents Related to Vietnam War POW/MIA Cases

  Show summary     Open resource [pdf]     (open full abstract)

  "(Fort Meade, MD)--The National Security Agency / Central Security Service (NSA/CSS) will release 1,600 declassified documents related to the agency's support to Vietnam War Prisoner of War/Missing in Action (POW/MIA) cases. These documents will be released in a series with the first 170 documents now available on nsa.gov. The publication of these documents supports NSA's commitment to increased transparency. The documents consist of NSA intelligence reports, memoranda and notes by NSA analysts that were directly or potentially related to incidents where a member of the U.S. military was known to have been taken prisoner or declared MIA. The Agency completed three 'Correlation Studies' for the Senate Select Committee on Vietnam POW/MIA Affairs throughout the 1990s, beginning in 1992 and ending in 1996. These studies were released on nsa.gov in September 2014. The continuing need to protect information contained in the documents which remains properly classified required a small number of redactions to the information."

  United States. National Security Agency/Central Security Service

  2014-12-11
• Cybersecurity Threats: The Way Forward, Hearing before the Permanent Select Committee on Intelligence, House of Representatives, One Hundred and Thirteenth Congress, November 20, 2014

  Show summary     Open resource [pdf]     (open full abstract)

  This testimony compilation is from the November 20, 2014 hearing, "Cybersecurity Threats: The Way Forward," before the U.S. House Permanent Select Committee on Intelligence. From Representative Mike Rogers' Opening Statement: "The brazen Chinese government campaign was no secret in the United States government or the private-sector cybersecurity community. But no one was talking about it publicly at the time. The United States was unwilling to call Beijing to account, and U.S. companies feared the Chinese government would punish them with crushing cyberattacks for having that public debate. […] China's economic cyberespionage has certainly not diminished in that time. In fact, it's grown exponentially in terms of volume and damage done to our nation's economic future. Chinese intelligence services that conduct these attacks have little fear, because we have no practical deterrence that threft (sic) - that theft. […] The U.S. government has an obligation to help the private sector by sharing this threat information about potential attacks before they happen." Statements, witnesses and submissions for the record include those of: Rep. Mike Rogers, Rep. Dutch Ruppersberger, and Admiral Michael Rogers.

  United States. National Security Agency

  2014-11-20
• NSA Director of Civil Liberties and Privacy Office Report: NSA's Civil Liberties and Privacy Protections for Targeted SIGINT Activities Under Executive Order 12333

  Show summary     Open resource [pdf]     (open full abstract)

  In the context of this report, SIGINT stands for Signals Intelligence. "This report, from the NSA [National Security Agency] Civil Liberties and Privacy Office, addresses the general civil liberties and privacy protections employed by the NSA and more specifically documents additional procedures for targeted Signals Intelligence activities under Executive Order (E.O.) 12333. The Fair Information Practice Principles (FIPPs), which are widely accepted framework of defining principles used by federal agencies to evaluate how systems, processes, or programs affect individual privacy, were used as the basis for assessment. The report finds that NSA has multiple activities that provide civil liberties and privacy protections for six of the eight FIPPs ('Purpose Specification', 'Data Minimization', 'Use Limitation', 'Data Quality and Integrity', 'Security', and 'Accountability and Auditing'). These protections are underpinned by NSA's management activities, documented compliance program, and investments in people, training, tools, and technology. […] The report provides an overview of the signals intelligence lifecycle (Acquire, Analyze, Retain and Disseminate), and describes existing civil liberties and privacy protections that are built into each step. Agency-wide policies, directives, procedures training, and education activities also help protect the civil liberties and privacy of ordinary individuals. All employees also have responsibilities for protecting and upholding laws and policies."

  United States. National Security Agency

  Richards, Rebecca J.

  2014-10-07
• Next Wave: Technology Forecasting (Vol. 20 No. 3, 2014)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2014 issue of "The Next Wave," titled "Technology Forecasting," featuring the following articles: "Forecasting superconductive electronics technology"; "Plasmonics: A promising path for future interconnects"; Innovation in materials science: Electromagnetic metamaterials" by Jane E. Heyes, Nathaniel K. Grady, Diego A. R. Dalvit, and Antionette J. Taylor; "Securing the cloud with homomorphic encryption"; "Today's Tiny Transistors"; and "Searching the future enterprise."

  United States. National Security Agency

  2014
• Next Wave: Big Data (Vol. 20 No. 4, 2014)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2014 issue of "The Next Wave," titled "Big Data," featuring the following articles: "An Overview of Big Data" and "Big Graphs" by Paul Burkhardt; "Visual analytics for Big Data" by Randall Rohrer, Celeste Lyn Paul, and Bohdan Nebesh; "The Graph500 top 11 supercomputers"; "NSA [National Security Agency] nurtures growth of a science of security community"; and "Finding and correcting errors in Big Data."

  United States. National Security Agency

  2014
• Next Wave: 20th Anniversary Issue of The Next Wave (TNW) (Vol. 20 No. 1, 2013)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2013 issue of "The Next Wave," titled "20th Anniversary Issue of The Next Wave (TNW)," featuring the following articles: "Twenty years of technology: What's changed, what hasn't?"; "The next user interface"; "Forecasting single-photon detector technology"; and "Radio noise: Global economic and political impact."

  United States. National Security Agency

  2013
• Next Wave: High Performance Computing (HPC) (Vol. 20 No. 2, 2013)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2013 issue of "The Next Wave," titled "High Performance Computing (HPC)," featuring the following articles: "Defining the future with modeling, simulation, and emulation" by Benjamin Payne and Noel Wheeler; "Predicting the performance of extreme-scale supercomputer networks" by Scott Pakin, Xin Yuan, and Michael Lang; "Doing more with less: Cooling computers with oil pays off" by David Prucnal; "Energy-efficient superconducting computing coming up to speed" by Marc A. Manheimer; and "Beyond digital: A brief introduction to quantum computing" by Paul Lopata.

  United States. National Security Agency

  2013
• History of Traffic Analysis: World War I - Vietnam

  Show summary     Open resource [pdf]     (open full abstract)

  "A key purpose of this brochure is to improve the public's and intelligence professionals' understanding of T/A [Traffic Analysis] as an intelligence discipline. Further, it is intended that this will be a living document, to be amplified and expanded as the necessary research is completed, especially in light of new real-world examples of traffic analysis at work. In its present form, the report also can be used for historical reference and could even serve as a basis for developing museum displays."

  United States. National Security Agency

  Borrmann, Donald A.; Kvetkas, William T.; Brown, Charles V. . . .

  2013
• Joint Statement of Lisa O. Monaco, John C. Inglis, and Robert S. Litt at a Hearing Concerning 'FISA Amendments Act Reauthorization' Before the Permanent Select Committee on Intelligence, House of Representatives, February 9, 2012

  Show summary     Open resource [pdf]     (open full abstract)

  This is the joint statement of Lisa O. Monaco, John C. Inglis, and Robert S. Litt, before the Permanent Select Committee on Intelligence of the United States House of Representatives, at a Hearing concerning "FISA [Foreign Intelligence Surveillance Act] Amendments Act Reauthorization," on February 9, 2012. The document was declassified and heavily redacted for publication, to protect ongoing National Security objectives. "On October 3, 2011, the FISC [Foreign Intelligence Surveillance Court] issued an opinion addressing the Government's submission of replacement certifications under section 702. [...] The FISC approved most of the Government's submission. It upheld NSA's [National Security Agency's] and FBI's [Federal Bureau of Investigation's] targeting procedures, CIA's [Central Intelligence Agency's] and FBI's minimization procedures, and most of NSA's minimization procedures. Nevertheless, the FISC denied in pert the Government's requests because of its concerns about the rules governing the retention of certain non-targeted Internet communications acquired through NSA's upstream collection. […] On October 31, 2011, after extensive consultations among the Department, ODNI [Office of the Director of National Intelligence], and NSA, the Attorney General submitted amended minimization procedures to the FISC addressing the deficiencies noted by the court. […] On November 30, the FISC granted the Government's request for approval of the amended procedures, stating that, with regard to information acquired pursuant to 2011 certifications, 'the government has adequately corrected the deficiencies identified in the October 3 Opinion,' and that the amended procedures, when 'viewed as a whole, meet the applicable statutory and constitutional requirements.'"

  United States. Office of the Director of National Intelligence; United States. Department of Justice; United States. National Security Agency

  Inglis, John C.; Litt, Robert S. (Robert Stephen), 1949-; Monaco, Lisa Oudens, 1968-

  2012-02-09
• Next Wave: NSA's Technology Transfer Program (Vol. 19 No. 3, 2012)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2012 issue of "The Next Wave," titled "NSA's [National Security Agency] Technology Transfer Program," featuring the following articles: "NSA technology transfer: Access to innovation"; "Federal technology transfer legislation highlights"; "Intellectual property: What it is and how it benefits NSA"; "From Fort Meade to the marketplace: Successes in technology transfer"; "Technology transfer with the University of Maryland -regional partner, national implications"; and "Bringing technology inside NSA."

  United States. National Security Agency

  2012
• Next Wave: National Program for Cybersecurity Science (Vol. 19 No. 4, 2012)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2012 issue of "The Next Wave," titled "National Program for Cybersecurity Science," featuring the following articles: "Introducing the federal cybersecurity R&D [research and development] strategic plan"; "NSA [National Security Agency] initiatives in cybersecurity science"; "Barriers to achieving a science of cybersecurity"; "Funding research for a science of cybersecurity: The Air Force makes it a mission"; "Advancing the science of cybersecurity with a virtual organization"; "UK's new Research Institute investigates the science of cybersecurity"; "Securing America's digital infrastructure through education"; and "Toward a secure and trustworthy cyberspace."

  United States. National Security Agency

  2012
• Next Wave: Cybersecurity (Vol. 19 No. 2, 2012)

  Show summary     Open resource [pdf]     (open full abstract)

  This is the 2012 issue of "The Next Wave," titled "Cybersecurity," featuring the following articles: "Cybersecurity: From engineering to science" by Carl Landwehr; "The evolution of information security" by Adam Shostack; "Making experiments dependable" by Roy Maxion; "On bugs and elephants: Mining for a science of security" by Dusko Pavlovic; "Programming language methods for compositional security" by Anupam Datta and John Mitchell; "Proof-carrying data: Secure computation on untrusted platforms" by Alessandro Chiesa and Eran Tromer; and "Blueprint for a science of cybersecurity" by Fred Schneider.

  United States. National Security Agency

  2012
• Securing America's Digital Infrastructure through Education

  Show summary     Open resource [pdf]     (open full abstract)

  "'Building capacity for a digital nation,' part II of the president's cyberspace policy review, included recommendations around the idea that the general public needs to be well informed to use technology safely, that the US needs a technologically advanced workforce to remain competitive in the twenty-first century economy, and that math and science must be a priority in schools. The review suggested that the US should initiate a K--12 cybersecurity education program for digital safety, ethics, and security; expand university curricula; and set the conditions to create a competent workforce for the digital age. To help achieve these goals, the review stated that the nation should: [1] Promote cybersecurity risk awareness for all citizens; [2] Build an education system that will enhance understanding of cybersecurity and allow the US to retain and expand upon its scientific, engineering, and market leadership in information technology; [3] Expand and train the workforce to protect the nation's competitive advantage; and [4] Help organizations and individuals make smart choices as they manage risk. In response to the president's cyberspace policy review, the National Security Staff (NSS)'s Cybersecurity Directorate and the Office of the Director of National Intelligence (ODNI)'s Joint Interagency Cyber Task Force formed an interagency working group to expand the Comprehensive National Cybersecurity Initiative (CNCI)'s initiative #8--Expand Cyber Education--to encompass a national, rather than federal, focus. The goal of the working group was to formulate a recommendation for the Information and Communications Infrastructure Interagency Policy Committee (ICIIPC) on a way forward for a national program to improve cybersecurity awareness, education, workforce structure, and training."

  United States. National Security Agency

  Newhouse, Bill

  2012
• Toward a Secure and Trustworthy Cyberspace

  Show summary     Open resource [pdf]     (open full abstract)

  "Cyberspace, a global 'virtual' village enabled by hyperconnected digital infrastructures, has transformed the daily lives of people for the better. Regardless of distance and location, families and friends can see and talk with one another as if in the same room. Cyber economies create new opportunities. Every sector of the society, every discipline, has been transformed by cyberspace. It is no surprise that today cyberspace is critical to our national priorities in commerce, education, energy, financial services, healthcare, manufacturing, and defense. The rush to adopt cyberspace, however, has exposed its fragility. The risks of hyperconnectedness have become painfully obvious. The privacy of personally identifiable information is often violated on a massive scale by persons unknown. Competitive advantage is eroded by the exfiltration of significant intellectual property. Law enforcement is hobbled by the difficulty of attribution, by national boundaries, and by uncertain legal and ethical frameworks. All these concerns now affect the public's trust of cyberspace and the ability of institutions to fulfill their missions."

  United States. National Security Agency

  Atluri, Vijayalakshmi; Greenspan, Sol J., 1950-; Pollington, Andrew D., 1953 . . .

  2012
• Advancing the Science of Cybersecurity with a Virtual Organization

  Show summary     Open resource [pdf]     (open full abstract)

  "The National Science Foundation (NSF)'s Cyber-Physical Systems (CPS) program is a research initiative to support the development of systems that combine physical, computing, and communications components at very large scale and high complexity. Cyber-physical systems are not the traditional desktop computers, embedded/real-time systems, and sensor nets with which we are familiar today. They are characterized by cyber capabilities in all physical components, networking at multiple and extreme scales, high degrees of automation, dynamic reconfiguration and reorganization, and extreme requirements for dependability and reliability. Although cyber-physical systems are currently being planned and developed to support applications in numerous areas (e.g., the smart power grid, smart healthcare, and smart transportation), the scientific understanding and engineering tools needed to realize such systems with high-confidence reliability and dependability are lacking."

  United States. National Security Agency

  Meushaw, Robert; Lucas, Heather; King, Frankie D.

  2012
• Funding Research for a Science of Cybersecurity: The Air Force Makes it a Mission

  Show summary     Open resource [pdf]     (open full abstract)

  "The Air Force Office of Scientific Research (AFOSR) plans, coordinates, and executes the Air Force Research Laboratory's basic research program. AFOSR's technical experts identify and fund long-range technology options at Air Force, university, and industry research laboratories. This support ensures the timely transition of research results that lead to revolutionary scientific breakthroughs, enabling the Air Force and US industry to produce world-class, militarily significant, and commercially valuable products. Such research is inherently risky, sometimes outside of the mainstream, and often requires an extended period of support. This article describes several AFOSR initiatives that focus on the science of [cyber]security (SoS). The initiatives include a Multidisciplinary University Research Initiative (MURI), a Young Investigator Program (YIP) grant, and a Basic Research Initiative (BRI)."

  United States. National Security Agency

  Herklotz, Robert

  2012
• Introducing the Federal Cybersecurity R&D Strategic Plan

  Show summary     Open resource [pdf]     (open full abstract)

  "December 2011, the White House Office of Science and Technology Policy (OSTP) released the document, 'Trustworthy cyberspace: Strategic plan for the federal cybersecurity research and development program,' which provides a framework for a set of coordinated federal strategic priorities and objectives for cybersecurity research. The release of this strategic plan marked an important milestone by the federal government's research community. It expresses an understanding of key causes of cybersecurity deficiencies and presents research themes with high potential to significantly improve the security of cyber systems and infrastructure. The strategic plan is a culmination of many efforts within the federal government, most notably by the Cyber Security and Information Assurance (CSIA) Senior Steering Group for Cybersecurity Research and Development (R&D), the CSIA Interagency Working Group of the federal Networking and Information Technology Research and Development (NITRD) Program, and by the Special Cyber Operations Research and Engineering (SCORE) Interagency Working Group."

  United States. National Security Agency

  Maughan, Douglas; Newhouse, Bill; Vagoun, Tomas

  2012
• NSA Initiatives in Cybersecurity Science

  Show summary     Open resource [pdf]     (open full abstract)

  "It's undeniable that the Internet has had a profound impact on societies across the world. Digital communications have developed to the point that we use and depend upon them daily in the same way that we depend upon traditional infrastructures and utilities. What began in the 1980's as a novel experiment to improve the survivability of critical military communications has evolved into a broad array of information services and commodity devices used by the masses. Unfortunately there are many risks associated with this technology that are chronicled daily in the news--stolen credit card numbers, loss of personal privacy, theft of corporate secrets, and even infiltration of sensitive government systems by foreign agents. One reason these reports are so commonplace is that the technologies underlying digital communications are inherently vulnerable--despite the best intentions of their designers and decades of development. Knowing this, most users willingly accept the risks because the capabilities of these devices are so compelling and, in many instances, even addictive. NSA [National Security Agency] is taking steps to better understand and develop the science behind cybersecurity."

  United States. National Security Agency

  Meushaw, Robert

  2012
• Barriers to Achieving a Science of Cybersecurity

  Show summary     Open resource [pdf]     (open full abstract)

  "Several recent reports, such as the JASON 'Science of cyber-security' report, point to examples and approaches for achieving success in applying science to cybersecurity. Audiences everywhere enthusiastically agree and thrash themselves for bypassing science all along, bemoaning the fact that we could be 'so much further along' if we only did science. Of course, after the presentation is over, everyone goes back to the methods that have been used throughout our generation to create prototypes and tools with no regard for the scientific principles involved. Why?"

  United States. National Security Agency

  Longstaff, Thomas A.

  2012