首页/论文/2511.19331

arXiv 2511.193312025-11-24cs.CR

网络安全子学科的演变：一项科学研究科学的研究

Evolution of Cybersecurity Subdisciplines: A Science of Science Study

Yao Chen, Jeff Yan

备注：: 17 pages, 18 figures

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

摘要英文摘要相关论文

AI总结：

本文从科学研究科学的角度研究网络安全学科的演变，分析了两个跨学科社区的发展。

摘要：

科学研究科学是一个新兴领域，研究科学本身的做法。我们提出了对网络安全学科的第一个从科学研究科学视角的研究。我们考察了两个在网络安全中具有可比性的跨学科社区的发展：可用隐私与安全研讨会（SOUPS）和金融密码学与数据安全（FC）。\n

英文摘要：

The science of science is an emerging field that studies the practice of science itself. We present the first study of the cybersecurity discipline from a science of science perspective. We examine the evolution of two comparable interdisciplinary communities in cybersecurity: the Symposium on Usable Privacy and Security (SOUPS) and Financial Cryptography and Data Security (FC).

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

摘要英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity

Cybersecurity Dynamics is new concept that aims to achieve the modeling, analysis, quantification, and management of cybersecurity from a holistic perspective, rather than from a building-blocks perspective. It is centered at modeling and analyzing the attack-defense interactions in cyberspace, which cause a ``natural'' phenomenon -- the evolution of the global cybersecurity state. In this Chapter, we systematically introduce and review the Cybersecurity Dynamics foundation for the Science of Cybersecurity. We review the core concepts, technical approaches, research axes, and results that have…

2020-10-09cs.CR

Trusted CI Experiences in Cybersecurity and Service to Open Science

This article describes experiences and lessons learned from the Trusted CI project, funded by the US National Science Foundation to serve the community as the NSF Cybersecurity Center of Excellence. Trusted CI is an effort to address cybersecurity for the open science community through a single organization that provides leadership, training, consulting, and knowledge to that community. The article describes the experiences and lessons learned of Trusted CI regarding both cybersecurity for open science and managing the process of providing centralized services to a broad and diverse community.

2019-08-07cs.CR

Cybersecurity Dynamics

We explore the emerging field of {\em Cybersecurity Dynamics}, a candidate foundation for the Science of Cybersecurity.

2015-02-18cs.CR

Using Camouflaged Cyber Simulations as a Model to Ensure Validity in Cybersecurity Experimentation

Experimental research methods describe standards to safeguard scientific integrity and reputability. These methods have been extensively integrated into traditional scientific disciplines and studied in the philosophy of science. The field of cybersecurity is just beginning to develop preliminary research standards and modeling practices. As such, the science of cybersecurity routinely fails to meet empirical research criteria, such as internal validity, external validity, and construct validity. These standards of experimentation enable the development of metrics, create assurance of experime…

2019-05-16cs.CR

Data Science Methodology for Cybersecurity Projects

Cyber-security solutions are traditionally static and signature-based. The traditional solutions along with the use of analytic models, machine learning and big data could be improved by automatically trigger mitigation or provide relevant awareness to control or limit consequences of threats. This kind of intelligent solutions is covered in the context of Data Science for Cyber-security. Data Science provides a significant role in cyber-security by utilising the power of data (and big data), high-performance computing and data mining (and machine learning) to protect users against cyber-crime…

2018-03-12cs.CRcs.CY

A UK Case Study on Cybersecurity Education and Accreditation

This paper presents a national case study-based analysis of the numerous dimensions to cybersecurity education and how they are prioritised, implemented and accredited; from understanding the interaction of hardware and software, moving from theory to practice (and vice versa), to human factors, policy and politics (as well as various other important facets). A multitude of model curricula and recommendations have been presented and discussed in international fora in recent years, with varying levels of impact on education, policy and practice. This paper address three key questions: i) what i…

2019-07-30cs.CRcs.CY

更多相关论文收起更多论文

Towards Understanding the Skill Gap in Cybersecurity

Given the ongoing "arms race" in cybersecurity, the shortage of skilled professionals in this field is one of the strongest in computer science. The currently unmet staffing demand in cybersecurity is estimated at over 3 million jobs worldwide. Furthermore, the qualifications of the existing workforce are largely believed to be insufficient. We attempt to gain deeper insights into the nature of the current skill gap in cybersecurity. To this end, we correlate data from job ads and academic curricula using two kinds of skill characterizations: manual definitions from established skill framework…

2022-04-28cs.CR

网络安全作为贯穿本科计算机科学课程的横切概念：一份经验报告

Cybersecurity as a Crosscutting Concept Across an Undergrad Computer Science Curriculum: An Experience Report

本文报告了在欧洲一所顶尖大学将网络安全作为横切概念融入三门本科核心计算机科学课程的经验，覆盖超2200名学生，并从学生、教师和安全专家三方视角反思了该干预的成效与可持续性挑战。

2024-01-16cs.CRcs.CY

数据安全综述：来自网络安全的实践与机器学习的挑战

A Survey of Data Security: Practices from Cybersecurity and Challenges of Machine Learning

本文综述了机器学习系统带来的数据安全新挑战，并系统介绍密码学、零信任、同态加密、差分隐私和联邦学习等跨领域基础技术，以促进网络安全与数据科学领域的协同发展。

2023-12-04cs.CR

网络安全的跨学科方法：一个鼓励跨学科思维的框架

A Transdisciplinary Approach to Cybersecurity: A Framework for Encouraging Transdisciplinary Thinking

针对网络安全需突破传统学科边界的需求，本文受利益相关者理论启发，提出基于“思考-规划-执行”方法的跨学科思维框架，可用于评估、发展和指导网络安全实践，助力专家应对复杂挑战。

2024-05-16cs.CR

应用控制论和控制论构建网络安全新范式

Application of Cybernetics and Control Theory for a New Paradigm in Cybersecurity

当前网络安全研究和技术的一个重要局限性是其反应性和应用性。这导致了攻击者扫描网络、开发漏洞和攻击系统的连续“网络周期”，防御者检测攻击、分析漏洞和修补系统。这种反应性的性质使敏感系统非常容易受到攻击，由于未修补的系统和未检测到的漏洞。目前的一些研究试图通过引入实现移动目标防御的系统来解决这一主要限制。然而，这些想法通常是基于直觉，即移动目标防御将使攻击者更难找到和扫描易受攻击的系统，而不是基于理论数学基础。由于持续缺乏开发更安全系统的基础科学和原则，人们对建立“网络安全科学”的兴趣越来越大。本文介绍了使用控制论的概念，控制论，控制理论，系统理论，信息论和博弈论应用于监管系统的跨学科方法，作为发展网络安全原则的基础方法。它从防御的角度探讨了控制论在网络安全中的潜在应用，同时提出了攻击性应用的潜在用途。此外，本文还介绍了建立非平稳系统的基本原理，这是一种比移动目标防御更通用的解决方案。最后，本文讨论了移动目标防御的局限性和一种基于非平稳原理的实现方法。

2013-11-01cs.CR

Identifying Emerging Technologies and Leading Companies using Network Dynamics of Patent Clusters: a Cybersecurity Case Study

Strategic decisions rely heavily on non-scientific instrumentation to forecast emerging technologies and leading companies. Instead, we build a fast quantitative system with a small computational footprint to discover the most important technologies and companies in a given field, using generalisable methods applicable to any industry. With the help of patent data from the US Patent and Trademark Office, we first assign a value to each patent thanks to automated machine learning tools. We then apply network science to track the interaction and evolution of companies and clusters of patents (i.…

2022-09-21cs.CRcs.SI

想提升网络安全意识？从未来的 IT 专业人员做起

Want to Raise Cybersecurity Awareness? Start with Future IT Professionals

本文介绍一门免费在线网络安全意识课程，并通过 138 名计算机科学本科生的课后问卷评估其学习、观念与实践迁移效果，提炼课程设计启示。

2023-07-14cs.CRcs.CY

TopVenues：一个可复现的网络安全文献综述语料库与工具基础

TopVenues: A Reproducible Corpus and Tooling Substrate for Cybersecurity Literature Reviews

提出TopVenues开源系统，通过DBLP元数据骨架和API构建版本化语料库，实现网络安全文献综述的可复现基础，支持高效检索和可重复测量。

2026-06-18cs.CR

The SFS Summer Research Study at UMBC: Project-Based Learning Inspires Cybersecurity Students

May 30-June 2, 2017, Scholarship for Service (SFS) scholars at the University of Maryland, Baltimore County (UMBC) analyzed the security of a targeted aspect of the UMBC computer systems. During this hands-on study, with complete access to source code, students identified vulnerabilities, devised and implemented exploits, and suggested mitigations. As part of a pioneering program at UMBC to extend SFS scholarships to community colleges, the study helped initiate six students from two nearby community colleges, who transferred to UMBC in fall 2017 to complete their four-year degrees in computer…

2018-11-12cs.CR

Web应用安全中认知偏差的人类研究

A Human Study of Cognitive Biases in Web Application Security

本文研究了认知偏差（搜索满足和损失厌恶）对CTF挑战中Web应用漏洞攻击效果的影响，通过受控人类研究发现搜索满足偏差显著降低参与者成功率，为利用认知偏差增强网络安全教育提供了见解。

2025-05-30cs.CR

Yuan：基于苏州园林模式的数字世界模拟科学基础设施与科普传播研究

Yuan: Research on the Concept of Digital World Analogue Scientific Infrastructure and Science Popularization Communication Based on Suzhou Gardens Pattern

本文借鉴苏州园林设计原则与大型语言模型，提出“Yuan”数字园林及“空间蜘蛛网”超大型科学基础设施构建原则，以增强数字基础设施安全性，并促进网络安全科普传播与人才培养。

2024-10-14cs.CR

LogGuardQ：一种用于安全日志网络安全异常检测的认知增强强化学习框架

LogGuardQ: A Cognitive-Enhanced Reinforcement Learning Framework for Cybersecurity Anomaly Detection in Security Logs

Universidade de Uberaba（乌贝拉巴大学）

针对传统强化学习在动态环境中探索效率低的问题，提出认知增强框架 LogGuardQ，结合双记忆系统与自适应探索策略，在安全日志异常检测中实现了 96.0% 的高检测率与优越稳定性。

2025-09-02cs.AIcs.CRcs.LG