On cultivation of cybersecurity and safety talents and responsible developers  

作　　者：Jiangxing Wu Hong Zou Jiaxi Chen Fan Zhang Yuting Shang Xinsheng Ji 

机构地区：[1]Fudan University,Shanghai 200433,China [2]Purple Mountain Laboratory,Nanjing 211111,China [3]Digital Switching System Engineering and Technological R&D Center(NDSC),Zhengzhou 450000,China

出　　处：《Security and Safety》2024年第3期29-49,共21页一体化安全(英文)

基　　金：supported by the Chinese Academy of Engineering Strategic Research and Consulting Program (No. 2023-XZ-11)

摘　　要：To address the serious imbalance between the supply and demand of the cybersecurity workforce, this paper proposes to embrace the latest trend of a fundamental shift in the“underlying dynamics of the digital ecosystem”, focusing on a shared liability for cybersecurity between the application side and the manufacturing side. Assuming that product providers shall take more responsibility by implementing secure defaults, this paper explores the establishment of an S&S talent cultivation system to strike the right balance of cybersecurity liabilities by nurturing more responsible developers. This paper proposes a Knowledge, Skill, and Awareness(KSA) model for Security and Safety(S&S) talent cultivation, proves the feasibility of this model by analyzing the theoretical, disciplinary, methodological, practical, and societal foundations of S&S talent cultivation. Additionally, this paper proposes principles and strategies for building a S&S talent cultivation system based on its unique characteristics and patterns. It gives a talent cultivation scheme, supported by an “Independent Knowledge System, Education and Cultivation System, Practice and Training system, Evaluation and Certification system,and Awareness Popularization System”. Finally, this paper puts forward a proposal for coordinating efforts and adopting multiple measures to accelerate the cultivation of S&S talents.

关 键 词：Security and safety Talent cultivation system CYBERSECURITY Endogenous Security and Safety(ESS)theory 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]