FEDERAL CYBERSECURITY RESEARCH AND DEVELOPMENT STRATEGIC PLAN (2019) Introduction Information technology (IT) continues to be woven into every aspect of modern life. Emerging technologies of the 21st century, such as high-speed mobile networking and smart cities, promise that cyberspace will continue to offer exceptional benefits to society. However, the more society relies on IT, the greater the potential disruption and destruction that adversaries can create via malicious cyber activities. Today, U.S. intellectual property is being stolen, critical infrastructure is at risk, commercial and government computer systems are being compromised, and consumers are worried about their privacy. As currently deployed, the Internet places both public and private sectors at a disadvantage versus cyber criminals and other malicious adversaries. Advances in cybersecurity are urgently needed to preserve the Internet’s societal and economic benefits by establishing a position of assurance and trust for cyber systems and professionals. Strategic R&D investments by the Federal Government can contribute to advances in cybersecurity, help secure the cyberspace, and ultimately, strengthen the U.S. economy. In September 2018, the President released the National Cyber Strategy of the United States of America, outlining how the Administration will, “(1) defend the homeland by protecting networks, systems, functions, and data; (2) promote American prosperity by nurturing a secure, thriving digital economy and fostering strong domestic innovation; (3) preserve peace and security by strengthening the ability of the United States—in concert with allies and partners—to deter and, if necessary, punish those who use cyber tools for malicious purposes; and (4) expand American influence abroad to extend the key tenets of an open, interoperable, reliable, and secure Internet.”1 Through its National Cyber Strategy and FY 2021 Research and Development Budget Priorities Memorandum,2 this Administration has established the following areas as priorities for cybersecurity and related R&D: • Maintaining military superiority supported by advanced cyber capabilities derived from new • • • • • computing and technology paradigms. Improving the security and resilience of the Nation’s critical infrastructure. Maintaining leadership in artificial intelligence (AI) and quantum information science (QIS), and advancing a secure computational infrastructure and ecosystem. 3 Developing advanced communications networks and R&D to secure networks and manage wireless spectrum. Maintaining leadership in semiconductor design, including assured access to advanced microelectronics. Prioritizing initiatives that provide education and job opportunities in science, technology, engineering, mathematics, and computer science to a wide spectrum of American students and workers. In support of these priorities, this 2019 Federal Cybersecurity Research and Development Strategic Plan provides guidance and defines priorities for Federal agencies that conduct or sponsor R&D in cybersecurity. This Plan updates the 2016 Federal Cybersecurity Research and Development Strategic Plan4 as required 1 2 3 4 https://www.whitehouse.gov/wp-content/uploads/2018/09/National-Cyber-Strategy.pdf, p. I. https://www.whitehouse.gov/wp-content/uploads/2019/08/FY-21-RD-Budget-Priorities.pdf (Memorandum M-19-25). NSTC. National Strategic Computing 2019 Update: Enabling the Future of Computing (November 2019); https://www.whitehouse.gov/wp-content/uploads/2019/11/National-Strategic-Computing-Initiative-Update2019.pdf. https://www.nitrd.gov/pubs/2016-Federal-Cybersecurity-Research-and-Development-Strategic-Plan.pdf –1–