Abstract:Computing devices are vital to all areas of modern life and permeate every aspect of our society. The ubiquity of computing and our reliance on it has been accelerated and amplified by the COVID-19 pandemic. From education to work environments to healthcare to defense to entertainment - it is hard to imagine a segment of modern life that is not touched by computing. The security of computers, systems, and applications has been an active area of research in computer science for decades. However, with the confluence of both the scale of interconnected systems and increased adoption of artificial intelligence, there are many research challenges the community must face so that our society can continue to benefit and risks are minimized, not multiplied. Those challenges range from security and trust of the information ecosystem to adversarial artificial intelligence and machine learning. Along with basic research challenges, more often than not, securing a system happens after the design or even deployment, meaning the security community is routinely playing catch-up and attempting to patch vulnerabilities that could be exploited any minute. While security measures such as encryption and authentication have been widely adopted, questions of security tend to be secondary to application capability. There needs to be a sea-change in the way we approach this critically important aspect of the problem: new incentives and education are at the core of this change. Now is the time to refocus research community efforts on developing interconnected technologies with security "baked in by design" and creating an ecosystem that ensures adoption of promising research developments. To realize this vision, two additional elements of the ecosystem are necessary - proper incentive structures for adoption and an educated citizenry that is well versed in vulnerabilities and risks.

A Secure Future for Open-Source Computational Science and Engineering

2020 State of the Octoverse: Securing the World's Software

Cycling on the Freeway: The Perilous State of Open Source Neuroscience Software

Advancements in Automated Code Scanning Techniques for Detecting Security Vulnerabilities in Open Source Software

A Research Ecosystem for Secure Computing

Sustainable Software Ecosystems for Open Science

Programmable System Security in a Software Defined World–Research Challenges and Opportunities

Software Security Analysis in 2030 and Beyond: A Research Roadmap

FAIR and Open Computer Science Research Software

Open Science in Software Engineering

Position: How Regulation Will Change Software Security Research

Enterprise-Driven Open Source Software: A Case Study on Security Automation

An Overview of Cyber Security Funding for Open Source Software

Toward a Research Software Security Maturity Model

Open Source Software: An Approach to Controlling Usage and Risk in Application Ecosystems

Open Source Software Opportunities and Risks

Ambush from All Sides: Understanding Security Threats in Open-Source Software CI/CD Pipelines

An Open Community-Driven Model For Sustainable Research Software: Sustainable Research Software Institute

Open-source and FAIR Research Software for Proteomics

The Changing Nature of Computational Science Software

Secure Software Development: Issues and Challenges