Tuesday, August 14, 2018

Trusted CI Begins Engagement with the Environmental Data Initiative

The Environmental Data Initiative (NSF DBI-1565103 and DEB-1629233) is an NSF-funded project accelerating curation and archive of environmental data, emphasizing data from projects funded by NSF’s Divisions of Biological Infrastructure and Environmental Biology.  EDI provides support, training, and resources to help archive and publish high-quality data and metadata. They operate a secure data repository and work closely with the Long Term Ecological Research Network (LTER) and DataONE to promote data management best practices.

The goals of this engagement are to review current authentication and authorization mechanisms, identify features and requirements for the future version of the EDI Data Portal and associated backend API, and document currently available authentication and authorization solutions. 

The Trusted CI-Environmental Data Initiative engagement began August 2018 and is scheduled to conclude by the end of December 2018.

Monday, August 13, 2018

CCoE Webinar August 27th at 11am ET: NIST 800-171 Compliance Program at U. Connecticut

Jason Pufahl is presenting the talk "NIST 800-171 Compliance Program at University of Connecticut" on Monday August 27th at 11am (Eastern).

Please register here. Be sure to check spam/junk folder for registration confirmation email.
The Department of Defense established DFARS 252. 204-701 which specifies that any research containing Controlled Unclassified Information (CUI) be protected using NIST 800-171. This presentation will discuss the University of Connecticut's approach to implementing the NIST 800-171 framework, including: Contracting, Faculty Engagement, Infrastructure Implementation, Training and Controls Review. 
The intention of this presentation is to provide a complete picture of what compliance with the NIST Standard requires. I will endeavor to describe the entire compliance process starting from conceptualization of the technology solution through to the post implementation review. The talk will be designed to appeal to compliance staff, technical staff and project managers and will emphasize elements required to build and sustain the compliance program. I will discuss the technology elements of our solution, generally, but will focus on how the technologies chosen met our goals of managing as many of the compliance requirements centrally as practical while providing a flexible solution.
Jason Pufahl is the Chief Information Security Officer for the University of Connecticut. He has 20 years of infrastructure and information security experience and has spent the last 10 years dedicated to information security and privacy. He has responsibility for information security for the institution, encompassing security awareness and training, disaster recovery, risk management, identity management, security policy and regulatory compliance, security analytics, and controls implementation.

Jason works closely with both the administrative and academic areas of the University. He is a member of the University’s Data Governance Committee, Joint Audit and Compliance Committee, and Public Safety Advisory Committee. He is also member of the University IRB with a primary focus of improving data privacy and security practices related to institutional research.

Jason has a Master’s in Education Technology and has a passion for professional development, security training and awareness. He designed and ran an information security and awareness game called HuskyHunt, founded the Connecticut Higher Education Roundtable on Information Security (CHERIS) to provide a quarterly forum for sharing of best practices in the field of information security targeted at higher education institutions in Connecticut and is active in the security community nationally. He is a frequent conference speaker and is a member of the NERCOMP vendor and licensing committee.

Presentations are recorded and include time for questions with the audience.

Join Trusted CI's announcements mailing list for information about upcoming events. To submit topics or requests to present, see our call for presentations. Archived presentations are available on our site under "Past Events."

Wednesday, August 8, 2018

Broader Impacts Project Report

In early 2018 Trusted CI undertook an effort to develop and implement a strategy to help meet the cybersecurity needs of a broader set of NSF projects through awareness and outreach; i.e., to broaden the impact of Trusted CI.
The project involved analyzing our existing impact on the NSF community, applying our observations to Trusted CI’s 5-year vision for an NSF cybersecurity ecosystem, and identifying six strategies for broader impacts.

The full report is available online. Some highlights of the report are summarized below.

The analysis portion of the project helped to identify a few major accomplishments for the project thus far:
  • Trusted CI has impacted over 190 NSF projects.
  • Over 150 members of NSF projects attended our NSF Cybersecurity Summit. 
  • Members of 70 NSF projects attended our webinars.
  • Almost 100 of these NSF projects are funded at $1 million or more.
  • 35 engagements have been conducted.
  • Over 250 hours of training seminars have been presented or hosted.

The project concluded with 6 recommendations:
  1. Fill in gaps in our collection of impact statistics (e.g., affiliation of training attendees).
  2. Explore outreach opportunities to the Education and Human Resources (EHR) and Biological Sciences (BIO) Directorates, which are currently underrepresented in our impact metrics.
  3. Increase attention on developing and maintaining the website, highlighting the content and services we are already providing. Our materials are only useful if our stakeholders can discover them. It’s helpful to consider different stakeholder perspectives when updating and reorganizing the website.
  4. Trusted CI should provide more materials addressing availability and integrity concerns from the community, leveraging external expertise.
  5. Trusted CI should document and share its experiences and expertise related to operating a community-focused center of excellence, to benefit other similar organizations.
  6. When implementing our 2019‐2023 vision, Trusted CI should emphasize outreach as an essential component of each strategic objective.
Our role in the NSF community is stable and growing. Trusted CI’s next five years present an exciting challenge to take what we have learned thus far and continue to support the cybersecurity needs of NSF projects.

Thursday, August 2, 2018

2018 NSF Cybersecurity Summit - TRAINING REGISTRATION OPEN

We are happy to announce that the registration for training sessions for the 2018 NSF Cybersecurity Summit for Large Facilities and Cyberinfrastructure is now open.  The training day sessions will take place on Tuesday, August 21st. If you have not already registered for the Summit, please do so here.

Once you have registered for the summit and if you are planning to attend training day sessions, please use this form to reserve your seat for the available training sessions. A list of training session descriptions is available here.

The deadline for registration for training is Tuesday, August 14th, one week prior to the event.

Wednesday, August 1, 2018

Trusted CI begins engagement with SAGE2
SAGE2 is a multi-site collaboration and visualization tool designed for use with tiled display walls. The mission of SAGE2 is to provide an innovative, user-centered, web-based platform for enabling local and/or distributed teams to display, manage, share, and investigate large-scale datasets on tiled display walls to glean insights and discoveries with greater speed, accuracy, comprehensiveness, and confidence. The project achieves this using web-based technologies such as Node.js that are maintained by large user communities. The project provides installation packages for deployment as well as hardware recommendations for new users who are building display walls for the first time. More information about SAGE2 can be found here.

In the last 4 years, institutions have installed over 90 display walls, half of which are in the US and half international, forming an estimated hardware infrastructure investment in excess of $8M. In addition, SAGE2’s user community is growing to include sectors outside of traditional higher-ed and research communities. The diversity and distributed nature of the SAGE2 user base provides a growing set of security concerns. Identity and access management procedures in particular provide unique challenges given the variety of institutions using SAGE2 to collaborate using display walls.

The primary goal of this engagement is to outline Identity and Access Management (IAM) procedures appropriate for SAGE2’s distributed user base. Trusted CI will also seek to identify and prioritize future security goals and additional opportunities to improve the security of SAGE2.

This engagement began in July 2018 and concludes by the end of December 2018.

Thursday, July 19, 2018

Trusted CI welcomes Engagement and Performance Operations Center as new partner

Trusted CI is happy to welcome the Engagement and Performance Operations Center (EPOC) as a new Trusted CI partner. EPOC was recently established “as a collaborative focal point for operational expertise and analysis and is jointly lead by Indiana University (IU) and the Energy Sciences Network (ESnet). EPOC will enable researchers to routinely, reliably, and robustly transfer data through a holistic approach to understanding the full pipeline of data movement to better support collaborative science.”
Cybersecurity and networking performance often intersect in ways that will benefit from this collaboration. This partnership will allow us to bring expertise together when called for by the community.
EPOC joins a growing list of Trusted CI partners, leading projects and organizations, we collaborate with to serve the open science community:

Wednesday, July 18, 2018

2018 NSF Cybersecurity Summit Agenda is now available

We're happy to announce that we have a tentative agenda for the 2018 NSF Cybersecurity Summit is available from the Summit webpage at https://trustedci.org/2018-nsf-cybersecurity-summit/  In the coming weeks we will be announcing a registration form for training sessions and make more detailed descriptions of plenary talks and training sessions available.

If you have not already registered for the summit, please do so here. You can book your hotel reservation for the conference here or go to the trustedci.org website and click on the link for the 2018 NSF Cybersecurity Summit and click on the link for The Westin Alexandria.  The deadline for the discounted hotel room block is Thursday, July 18th.