Remarks Roadmapping and Hard Problems Sally E Howe

Remarks: Roadmapping and Hard Problems Sally E. Howe, Ph. D. Associate Director National Coordination Office for Networking and Information Technology Research and Development (NCO/NITRD) October 5, 2006

Suggested Features of R&D Roadmap l l l Timeline Milestones Assessment Metrics Identification of Interdependencies Strategy for Deploying R&D Results Complete, Minimal Overlap 2

Possible Aviation Safety Roadmap (11/11/05 Workshop Planning Meeting) l Human Resources l – Professional Development l l Manufacturers Regulators l – Education and Training l l l Curricula Large scale exemplars l Requirements – Functionalilties – Properties l l Safety Completeness – Timing – Consistency l l l Design – … Development – … Verification and Validation – … Certification – … Operations – … Economic Aspects – … 3

Example Roadmap (11/11/05) 4

Hard Problems Example: Infosec Research Council Hard Problems List l This material was presented by Doug Maughan, DHS, at 1/26/06 CSIA IWG meeting l 5

2005 IRC Hard Problem List Topics 1. GLOBAL SCALE IDENTITY MANAGEMENT 2. INSIDER THREAT 3. AVAILABILITY OF TIME-CRITICAL SYSTEMS 4. BUILDING SCALABLE SECURE SYSTEMS 5. ATTACK ATTRIBUTION AND SITUATIONAL UNDERSTANDING 6. INFORMATION PROVENANCE 7. SECURITY WITH PRIVACY 8. ENTERPRISE LEVEL SECURITY METRICS Courtesy Doug Maughan, DHS 6

3. AVAILABILITY OF TIME-CRITICAL SYSTEMS l Motivation: SCADA, military, home-land security first responders often – Value availability over secrecy – Work in lossy, ad hoc wireless environments l Challenges: limited resources – Computational processing power – Service quality guarantees given dynamics – Distributed systems compound problem l Metric: Range of circumstances over which results can be guaranteed Courtesy Doug Maughan, DHS 7

IRC Hard Problems List Summary “Stake in the ground” from the front-line l Topics selected because of their importance to Government missions and the lack of solutions l Not the only challenges in the IT security space l Information security is not only about technology l Courtesy Doug Maughan, DHS 8