安全计算的研究生态系统
A Research Ecosystem for Secure Computing
摘要：
计算设备对现代生活的各个领域都至关重要，并渗透到我们社会的各个方面。2019冠状病毒病疫情加速并扩大了计算的普及和我们对计算的依赖。从教育到工作环境，再到医疗保健，再到国防，再到娱乐，很难想象现代生活中还有哪一部分没有被计算所触及。计算机、系统和应用程序的安全性几十年来一直是计算机科学的一个活跃研究领域。然而，随着互联系统的规模和人工智能的日益普及，社区必须面对许多研究挑战，以便我们的社会能够继续受益，并将风险降至最低，而不是成倍增加。这些挑战从信息生态系统的安全和信任到对抗性人工智能和机器学习。除了基础研究的挑战，通常情况下，保护系统的安全是在设计甚至部署之后发生的，这意味着安全社区通常会迎头赶上，并试图修补随时可能被利用的漏洞。虽然加密和认证等安全措施已被广泛采用，但安全问题往往比应用程序功能次要。我们处理这个问题的这一至关重要的方面的方式需要发生根本性的变化：新的激励措施和教育是这种变化的核心。现在是时候将研究社区的工作重点重新放在开发具有“设计”安全性的互联技术上，并创建一个确保采用有前途的研究开发的生态系统。为了实现这一愿景，生态系统还需要两个额外的要素--适当的采用激励结构和受过良好教育的公民，他们熟悉脆弱性和风险。
英文摘要：
Computing devices are vital to all areas of modern life and permeate every aspect of our society. The ubiquity of computing and our reliance on it has been accelerated and amplified by the COVID-19 pandemic. From education to work environments to healthcare to defense to entertainment - it is hard to imagine a segment of modern life that is not touched by computing. The security of computers, systems, and applications has been an active area of research in computer science for decades. However, with the confluence of both the scale of interconnected systems and increased adoption of artificial intelligence, there are many research challenges the community must face so that our society can continue to benefit and risks are minimized, not multiplied. Those challenges range from security and trust of the information ecosystem to adversarial artificial intelligence and machine learning. Along with basic research challenges, more often than not, securing a system happens after the design or even deployment, meaning the security community is routinely playing catch-up and attempting to patch vulnerabilities that could be exploited any minute. While security measures such as encryption and authentication have been widely adopted, questions of security tend to be secondary to application capability. There needs to be a sea-change in the way we approach this critically important aspect of the problem: new incentives and education are at the core of this change. Now is the time to refocus research community efforts on developing interconnected technologies with security "baked in by design" and creating an ecosystem that ensures adoption of promising research developments. To realize this vision, two additional elements of the ecosystem are necessary - proper incentive structures for adoption and an educated citizenry that is well versed in vulnerabilities and risks.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
