NIST · ИТ

SP 800-18 Rev. 2

Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems

Deep Learning for MPC Extraction and False Detection

Deep Learning for MPC Extraction and False Detection

Multipath component (MPC) extraction is critical for channel modeling and joint communications and sensing (JCAS). The super-resolution algorithm known as CLEAN-Space-Alternating Generalized Expectation (CLEANSAGE) is widely used for MPC extraction

Measuring the RCS of Multipoint-Scattering Targets in JCAS Channel Sounding

Measuring the RCS of Multipoint-Scattering Targets in JCAS Channel Sounding

This paper presents a methodology for measuring the radar cross-section (RCS) of a target that scatters power from multiple points on its surface, in the context of joint communication and sensing (JCAS). By leveraging the fine resolution of millimeter

Report of the Virtual Workshop on Usable Cybersecurity and Privacy for Immersive Technologies

Report of the Virtual Workshop on Usable Cybersecurity and Privacy for Immersive Technologies

This document reports on the Virtual Workshop on Usable Cybersecurity and Privacy for Immersive Technologies (the Workshop) hosted by the Symposium in Usable Privacy and Security (SOUPS). The Workshop was held on August 7th, 2024 before the in-person

IR 8557

Report of the Virtual Workshop on Usable Cybersecurity and Privacy for Immersive Technologies

Likely Exploited Vulnerabilities, A Proposed Metric for Vulnerability Exploitation Probability

Likely Exploited Vulnerabilities, A Proposed Metric for Vulnerability Exploitation Probability

This work presents a proposed security metric to determine the likelihood that a vulnerability has been observed to be exploited. Only a small fraction of the tens of thousands of software and hardware vulnerabilities that are published every year will be

CSWP 41

Likely Exploited Vulnerabilities: A Proposed Metric for Vulnerability Exploitation Probability

Workshop Summary Report for "Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers"

Workshop Summary Report for "Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers"

This report summarizes discussions held at the March 5, 2025 "Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers" organized by the NIST Cybersecurity for the Internet of Things (IoT) program. This workshop follows an earlier

IR 8572

Workshop Summary Report for “Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers”

IR 8259 Rev. 1

Foundational Cybersecurity Activities for IoT Product Manufacturers

NIST GenAI (Pilot): an Overview of Text-to-Text Evaluation Results

NIST GenAI (Pilot): an Overview of Text-to-Text Evaluation Results

The 2024 NIST Generative AI (GenAI) Pilot Study focuses on evaluating text-to-text (T2T) generation and discrimination tasks to assess the capabilities and limitations of generative AI models. The study aims to measure the effectiveness of AI-generated

SP 800-234

High-Performance Computing (HPC) Security Overlay

IR 7621 Rev. 2

Small Business Cybersecurity: Non-Employer Firms

A Plan for Global Engagement on AI Standards

A Plan for Global Engagement on AI Standards

This plan has been developed by the Department of Commerce in coordination with the Department of State and agencies across the U.S. Government. It reflects more than 65 comments received in response to a December 2023 Request for Information

The NIST Cybersecurity Framework (CSF) 2.0 (Mandarin Chinese translation)

The NIST Cybersecurity Framework (CSF) 2.0 (Mandarin Chinese translation)

The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization —

"A five-year-old could understand it" versus "This is way too confusing": Exploring Non-expert Understandings and Perceptions of Cybersecurity Definitions

"A five-year-old could understand it" versus "This is way too confusing": Exploring Non-expert Understandings and Perceptions of Cybersecurity Definitions

Experts struggle with explaining cybersecurity in a language and tone appropriate for non-expert audiences. This communication gap may make it difficult for a broad and diverse audience to fully engage in cybersecurity. Fundamental forms of communication

Fiscal Year 2024 Annual Report for NIST Cybersecurity and Privacy Program

Fiscal Year 2024 Annual Report for NIST Cybersecurity and Privacy Program

Throughout Fiscal Year 2024 (FY 2024) — from October 1, 2023, through September 30, 2024 — the NIST Information Technology Laboratory (ITL) Cybersecurity and Privacy Program successfully responded to numerous challenges and opportunities in security and

SP 800-236

Fiscal Year 2024 Cybersecurity and Privacy Annual Report

Conference Paper

"A five-year-old could understand it" versus "This is way too confusing": Exploring Non-expert Understandings and Perceptions of Cybersecurity Definitions

C-V2X Interoperability Analyzer Software Tool: Description and Use

C-V2X Interoperability Analyzer Software Tool: Description and Use

Autonomous vehicles (AVs) can perform driving tasks without any human intervention, relying on advanced technologies to sense their surroundings, exchange information with digital road-side infrastructure, make decisions, and control the vehicle. AVs use

SysML Extension for Logistics Modeling and Analysis (SysLMA)

SysML Extension for Logistics Modeling and Analysis (SysLMA)

Many engineers use analysis tools to predict behavior or find optimal values for properties of systems built to proposed designs, informing system design work by identifying cases where a design will perform incorrectly or in suboptimal ways. Design and

Measuring Out-of-Plane Permittivity of Thin Films to Millimeter Wave Frequencies

Measuring Out-of-Plane Permittivity of Thin Films to Millimeter Wave Frequencies

Modern microchips utilize multilayer stack-ups with many interstitial layers of dielectrics. Optimizing device performance and maximizing yield requires precise measurements of the out-of-plane permittivity of these dielectric layers. At the same time

The NIST Cybersecurity Framework (CSF) 2.0 (Thai translation)

The NIST Cybersecurity Framework (CSF) 2.0 (Thai translation)

The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization —

Summary Report for "Workshop on Updating Manufacturer Guidance for Securable Connected Product Development"

Summary Report for "Workshop on Updating Manufacturer Guidance for Securable Connected Product Development"

This report summarizes the feedback received by the NIST Cybersecurity for the Internet of Things (IoT) program at the in-person and hybrid workshop on "Updating Manufacturer Guidance for Securable Connected Product Development" held in December 2024. The

Combinatorial Methods for Enhancing the Resilience of Production Facilities

Combinatorial Methods for Enhancing the Resilience of Production Facilities

In this paper, we apply combinatorial methods to generate crisis scenarios for production facilities with the goal of strengthening their resilience by identifying weaknesses in operational aspects or crisis response plans, extending previous work from the

IR 8562

Summary Report for “Workshop on Updating Manufacturer Guidance for Securable Connected Product Development”

Conference Paper

Combinatorial Methods for Enhancing the Resilience of Production Facilities

Data Frequency Coverage Impact on AI Performance

Data Frequency Coverage Impact on AI Performance

Artificial Intelligence (AI) models use statistical learning over data to solve complex problems for which straightforward rules or algorithms may be difficult or impossible to design; however, a side effect is that models that are complex enough to

Conference Paper

Data Frequency Coverage Impact on AI Performance

CSWP 42

Towards Automating IoT Security: Implementing Trusted Network-Layer Onboarding