CICI: UCSS: CloudSec: Collaborative Policy Alignment for Secure Scientific Computing Infrastructures

NSF Award Search · 01002526DB NSF RESEARCH & RELATED ACTIVIT · $597,124 · view on nsf.gov ↗

Abstract

The CloudSec project leverages Artificial Intelligence (AI) to protect sensitive scientific resources and data. Scientific computing relies heavily on secure and efficient access control systems to protect sensitive resources and data. However, there is no effective tool to ensure these critical access control policies truly reflect the intentions of users. As a result, sensitive data and resources have been exposed and this threat persists despite the best intentions of both scientists and cybersecurity experts. To counter this threat, CloudSec helps researchers and developers of scientific infrastructure to collaboratively work to develop access control policies that align with user intent. Improving the security of access control policies requires overcoming the disconnect between high-level scientific workflows and low-level infrastructure policies. To accomplish this, CloudSec uses Large Language Models (LLMs) and Natural Language Processing (NLP) to provide a new tool-assisted approach. CloudSec supports cross-layer policy analysis to compare user level policy with system-level policy to detect discrepancies. When mismatches are found, Cloudsec explains how they may lead to security vulnerabilities, guiding suggestions to refine policies to better align with user intent. The project’s intellectual contributions advance foundational tools and methods for securing cyberinfrastructure, including innovative policy analysis techniques, intuitive tools for capturing use

Key facts

NSF award ID
2530889
Awardee
University of Texas at Austin (TX)
SAM.gov UEI
V6AFQPN18437
PI
Joseph Stubbs
Primary program
01002526DB NSF RESEARCH & RELATED ACTIVIT
All programs
Estimated total
$597,124
Funds obligated
$597,124
Transaction type
Standard Grant
Period
09/01/2025 → 08/31/2028