Developing our capability in cyber security Academic Centres of Excellence in Cyber Security Research Updated July 2020 2 Developing Our Capability in Cyber Security Developing Our Capability in Cyber Security 3 Contents Developing our knowledge and capability to secure cyber space Ministerial Foreword: Jeremy Fleming, Director, GCHQ .......................................................................3 Much has changed since the and recognition of the UK’s academic research first Academic Centres of excellence on an international stage. The ACE- Academic Centres of Excellence in Cyber Security Research .............................................................4 Excellence in Cyber Security CSR universities are testament to what can be Key areas of expertise and specialism ................................................................................................5 Research (ACE-CSR) call was achieved when the public, private and academic launched in late 2011. The UK’s sectors unite to achieve a common goal. It is University of Birmingham ....................................................................................................................8 first National Cyber Security this sense of innovation, enthusiasm, shared Strategy was in its infancy; endeavour and deep expertise which is the University of Bristol ........................................................................................................................... 10 the concept of a National Cyber Security Centre hallmark of the ACE-CSR community. (NCSC) had not even been conceived, and cyber University of Cambridge ................................................................................................................... 12 security research in UK universities was often I would like to thank colleagues in the NCSC Cardiff University .............................................................................................................................. 14 fragmented along the fault lines of academic and our partners in the Engineering and Physical disciplines. Sciences Research Council (EPSRC) for their De Montfort University ...................................................................................................................... 16 collaboration and leadership in this space. I am Fast forward to 2020, two successive Cyber grateful to industry leaders who continue to look University of Edinburgh ..................................................................................................................... 18 Security Strategies and a decade of sustained for ways to harness academic research, support government investment have seen the UK researchers and develop our research base. Imperial College London ...................................................................................................................20 develop into an international Cyber Power. And finally, I would like to thank and congratulate University of Kent .............................................................................................................................22 This has led to enormous advances in the the Vice Chancellors and their senior leaders for nation’s ability to benefit from the opportunities their continued investment in and support of the King’s College London ..................................................................................................................... 24 of new technologies and in keeping its citizens ACEs-CSR within their universities, as well as all safe online. The NCSC has played a central role the academic and support staff for their ongoing University of Lancaster .....................................................................................................................26 in that and is now a thriving organisation, with a dedication to this important discipline. broad customer base and a record of innovative Newcastle University ........................................................................................................................28 ways of working, backed by deep expertise. The challenges facing us are immense, Northumbria University .....................................................................................................................30 but the excellence demonstrated by the ACE- In 2012, an initial group of eight universities CSR universities gives me confidence we are in University of Oxford ..........................................................................................................................32 were recognised as Academic Centres of a strong position to build on the success to date Excellence in Cyber Security Research. and cement the UK’s position as a world leader Queen’s University Belfast ................................................................................................................34 This has now grown to an active community in creating a safe, resilient and prosperous of 19 universities encompassing hundreds of cyber nation. Royal Holloway, University of London ...............................................................................................36 academics and spanning disciplines as diverse University of Southampton ...............................................................................................................38 as computer science, engineering, psychology, sociology, maths, law and humanities. University of Surrey...........................................................................................................................40 The impact of their work has been far-reaching: University College London ................................................................................................................42 from expert academic input to government policy, to training the next generation of University of Warwick .......................................................................................................................44 Jeremy Fleming, researchers through vibrant Doctoral training Director GCHQ Contact Address Book ..................................................................................................................... 47 programmes; from the establishment of mutually beneficial partnerships between ACEs-CSR Glossary of terms ............................................................................................................................. 51 and private sector companies, to the promotion 4 Developing Our Capability in Cyber Security Developing Our Capability in Cyber Security 5 Academic Centres of Key areas of expertise Excellence in Cyber and specialism Security Research Page Name of centre Key Areas of expertise/specialism 08 - 09 University of Birmingham • Design of secure systems • Security of embedded systems Academic Centres of Excellence in Cyber Developing our capability in • Cloud computing security • Privacy technologies for individuals Security Research (ACEs–CSR) have been cyber security • Network security and malware part of the UK Government’s National Cyber • Analysis and verification of systems Security Strategies since 2011 and continue By recognising the ACEs-CSR, the UK 10 - 11 University of Bristol • Cryptography to play a key role in helping Government make Government aims to: • Cyber-Physical Systems • Human Factors the UK secure and resilient in cyberspace. • Adversarial Behaviours • Enhance the quality and scale of academic • Privacy & Online Rights The ACEs–CSR are based at UK universities cyber security research and postgraduate • Network Security • Software Security which have been recognised as having an training undertaken in the UK. • Secure Software Lifecycle established critical mass and pedigree of good • Hardware Security quality cyber security research. The initiative • Make it easier for potential users of research • Risk Management & Governance is led by the National Cyber Security Centre to identify the best cyber security research 12 - 13 University of Cambridge • Socio-technical security, including human factors, user authentication, education (NCSC), which is a part of GCHQ and is the UK’s and postgraduate training that the UK has • Hardware security and anti-tampering Technical Authority for cyber security, and the to offer. • Network and operating system security Engineering and Physical Sciences Research • Strategic technologies including processors, architectures, compilers, operating systems Council (EPSRC), which is a part of UK Research • Develop a shared vision and objectives • Methodologies including static and dynamic analysis and Innovation (UKRI). among all those involved in cyber security • Cybercrime, frauds and phishing • Privacy and anonymisation research in the UK. • Compromising electromagnetic emanations From small beginnings, the community of ACEs- 14 - 15 Cardiff University • Artificial Intelligence-driven Security Operations CSR has grown to 19 universities which regularly • Showcase UK academia’s internationally- & Incident Management meet, hold conferences, collaborate, challenge leading research expertise. • Malware & Attack Technologies • Risk Management & Governance and support one another. In partnership with • Human Factors – susceptibility, individual differences and public and private sector organisations, our aim This document contains details of all 19 organised cybercrime is to build and maintain a flourishing community ACEs–CSR and is intended to be a useful • Privacy and Online Rights • Web Security of commissioners, producers