syssec_red_book

15 Cyber Security: A Crisisof PrioritizationPushing the state of the art, “Cyber Security: A Crisis of Prioritization”is considered one of the seminal works in this area [100, 249].Ordered by the US President and implemented by the President’s InformationTechnology Advisory Committee, the report suggested that InformationTechnology Infrastructure is “Critical,” treated software as a major vulnerability,suggested that current solutions (such as endless patching) are notadequate, urged for the development of fundamentally new security modelsand methods, and elevated Cyber Security to the level of National Importance.15.1 Problems - Priorities IdentifiedThe report outlined several Cyber Security Research Priorities, including:• “Usable and Reliable Authentication. Although there exist a lot ofuseful work on cryptographic protocols we need more research in usableand large-scale authentication which at the same time would decoupleauthentication from identification in order to address privacy issues.”• “Secure fundamental Internet protocols including BGP (Border GatewayProtocol) and DNS (Domain Name Service).”• “Secure software engineering and Software assurance. Research isneeded to develop secure programming languages and code that remainssecure even when executed in different environments.”• “Provide a holistic approach to System Security. That is, the securityof an integrated system is much more than just securing its individualcomponents. For example, we need ways to build secure systems bothfrom trusted and untrusted components.”• “Facilitate continuous Monitoring and Detection of malicious activitiesand attacks, including Intrusion Detection, real-time data collection,anomaly detection and appropriate data presentation that will allowoperators to better understand incidents in progress.”