{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T16:30:32Z","timestamp":1779381032848,"version":"3.53.1"},"reference-count":13,"publisher":"Association for Computing Machinery (ACM)","issue":"9","license":[{"start":{"date-parts":[[2025,8,28]],"date-time":"2025-08-28T00:00:00Z","timestamp":1756339200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCR-0335324"],"award-info":[{"award-number":["CCR-0335324"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Commun. ACM"],"published-print":{"date-parts":[[2025,9]]},"abstract":"<jats:p>To commemorate the 20th anniversary of the 2003 Computing Research Association (CRA) Gordon-style Conference on Grand Challenges in Trustworthy Computing, the original attendees were invited to a virtual retrospective. This landmark conference, held November 16\u201319, 2003, at Airlie House in Northern Virginia, brought together 50 technology and policy experts in security, privacy, and networking to identify transformative research challenges. The resulting report became a cornerstone for researchers and funding agencies at a pivotal moment in the evolution of cybersecurity. In 2023, participants met online for a six-week period to review the progress made on these challenges, assessing successes, failures, and lessons learned. This article distills those discussions, offering insight for a new generation of cybersecurity professionals who face many of the same threats today in an ever-evolving landscape. As many of the original participants remain active in the field, this retrospective not only provides a historical perspective but also serves as an inspiration to tackle new challenges and secure the future of computing infrastructure.<\/jats:p>","DOI":"10.1145\/3720534","type":"journal-article","created":{"date-parts":[[2025,8,27]],"date-time":"2025-08-27T15:26:03Z","timestamp":1756308363000},"page":"54-61","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Grand Challenges in Trustworthy Computing at 20: A Retrospective Look at the Second CRA Grand Challenges Conference"],"prefix":"10.1145","volume":"68","author":[{"given":"Richard A.","family":"DeMillo","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, School of Cybersecurity and Privacy, Atlanta, Georgia, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Eugene H.","family":"Spafford","sequence":"additional","affiliation":[{"name":"Purdue University, Computer Sciences, West Lafayette, Indiana, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,8,28]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"publisher","DOI":"10.1089\/elj.2019.0619"},{"key":"e_1_3_1_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.106"},{"key":"e_1_3_1_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00071"},{"key":"e_1_3_1_5_2","unstructured":"Chappell W. The intertwined history of DARPA and Moore\u2019s law. Defense Media Network (Nov. 19 2018)."},{"key":"e_1_3_1_6_2","unstructured":"DeMillo R. and Spafford E. Four grand challenges in trustworthy computing. Computing Research Association (2006)."},{"key":"e_1_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/2786.314984"},{"key":"e_1_3_1_8_2","unstructured":"INFOSEC Research Council.\u00a0Hard Problem List\u00a0(Nov. 2005);\u00a0https:\/\/www.nitrd.gov\/documents\/cybersecurity\/documents\/IRC_Hard_Problem_List.pdf"},{"key":"e_1_3_1_9_2","doi-asserted-by":"publisher","DOI":"10.1145\/3456629"},{"key":"e_1_3_1_10_2","volume-title":"Pursuant to 28 CFR \u00a7 6008(c)","author":"Mueller R.","year":"2018","unstructured":"Mueller, R. Report on the investigation into Russian interference in the 2016 presidential election. Pursuant to 28 CFR \u00a7 6008(c). U.S. Department of Justice (2018)."},{"key":"e_1_3_1_11_2","volume-title":"Toward a Safer and More Secure Cyberspace","author":"National Research Council and National Academy of Engineering","year":"2007","unstructured":"National Research Council and National Academy of Engineering. Toward a Safer and More Secure Cyberspace. National Academy of Sciences (2007)."},{"key":"e_1_3_1_12_2","unstructured":"Office of the Science and Technology Policy. National Cybersecurity Strategy (Mar. 2023)."},{"key":"e_1_3_1_13_2","volume-title":"Cyber Security: A Crisis of Prioritization","author":"President's Information Technology Advisory Committee","year":"2005","unstructured":"President's Information Technology Advisory Committee. Cyber Security: A Crisis of Prioritization. National Coordination Office for Information Technology Research and Development (2005); https:\/\/www.nitrd.gov\/historical\/Pitac\/Reports\/20050301_cybersecurity\/cybersecurity.pdf"},{"key":"e_1_3_1_14_2","unstructured":"The White House. The National Strategy to Secure Cyberspace (Feb. 2003); https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/cyberspace_strategy.pdf"}],"container-title":["Communications of the ACM"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3720534","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,28]],"date-time":"2025-08-28T13:56:11Z","timestamp":1756389371000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3720534"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,28]]},"references-count":13,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2025,9]]}},"alternative-id":["10.1145\/3720534"],"URL":"https:\/\/doi.org\/10.1145\/3720534","relation":{},"ISSN":["0001-0782","1557-7317"],"issn-type":[{"value":"0001-0782","type":"print"},{"value":"1557-7317","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8,28]]},"assertion":[{"value":"2024-02-05","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-08-28","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}