1. 1 Cyber Security Grand Challenges and Prognosis Prof. Ravi Sandhu Executive Director and Endowed Chair ravi.sandhu@utsa.edu www.profsandhu.com www.ics.utsa.edu © Ravi Sandhu World-Leading Research with Real-World Impact! Institute for Cyber Security

2.  Cyber technologies and systems have evolved  Cyber security goals have evolved  Computer security  Information security = Computer security + Communications security  Information assurance  Mission assurance  Cyber security research and practice are loosing ground © Ravi Sandhu 2 World-Leading Research with Real-World Impact! Cyber Security Status

3. Cyber Security Characteristics  Cyber Security is all about tradeoffs © Ravi Sandhu 3 World-Leading Research with Real-World Impact! ProductivitySecurity Let’s build it Cash out the benefits Next generation can secure it Let’s not build it Let’s bake in super-security to make it unusable/unaffordable Let’s sell unproven solutions There is a sweet spot We don’t know how to predictably find it

4.  Microsec versus Macrosec  Most cyber security thinking is microsec  Most big cyber security threats are macrosec  Rational microsec behavior can result in highly vulnerable macrosec © Ravi Sandhu 4 World-Leading Research with Real-World Impact! Cyber Security Characteristics

5. 5 World-Leading Research with Real-World Impact! Cyber Security Characteristics Tech- Light Tech- Heavy Tech- Medium High-tech + High-touch © Ravi Sandhu

6.  Develop a scientific discipline  to predictably find the sweet spots for different application and mission contexts  to predictably find, incentivize and deploy microsec that leads to desirable macrosec outcomes  that can be meaningfully taught in Universities at all levels: BS, MS, PhD  Prognosis  we shall succeed (we have no choice)  UTSA aims to be a world-leader in this endeavor © Ravi Sandhu 6 World-Leading Research with Real-World Impact! Grand Challenges