Cyber Hard Problems

Cyber technologies underpin every facet of the economy and are critical for national security. Cyber and cyber-enabled systems are rapidly growing in both complexity and scale, and - despite significant progress - are outpacing the capacity to keep them safe, secure, and resilient to disruptions. Cyber hard problems - unsolved technical and research problems for which progress toward solution would have a significant impact on the practical security of cyber systems - are frequently caused or sustained by human or societal factors and misaligned incentives. These in turn are exacerbated by the continuing tremendous growth in the production and use of cyber technologies and their resulting near ubiquity in societally important systems and institutions.This report builds off of the Cyber Hard Problem List originally developed for the Department of Homeland Security in 1996. Cyber Hard Problems reviews that original list, then provides an update by identifying and describing current key hard problems for cyber resiliency. This report explores each of the identified problems, and then proposes ways to use the list to enhance community-wide coordination of research and development activities.