NIST · ИТ

IR 8055

Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research

Network Diversity: A Security Metric for Evaluating the Resilience of Networks Against Zero Day Attacks

Network Diversity: A Security Metric for Evaluating the Resilience of Networks Against Zero Day Attacks

Diversity has long been regarded as a security mechanism for improving the resilience of software and networks against various attacks. More recently, diversity has found new applications in cloud computing security, Moving Target Defense (MTD), and

Journal Article

Network Diversity: A Security Metric for Evaluating the Resilience of Networks Against Zero-Day Attacks

ITL Bulletin

Securing Interactive and Automated Access Management Using Secure Shell (SSH)

Survey Statistics of Automated Segmentations Applied to Optical Imaging of Mammalian Cells

Survey Statistics of Automated Segmentations Applied to Optical Imaging of Mammalian Cells

The goal of this survey paper is to overview cellular measurements using optical microscopy imaging followed by automated image segmentation. The cellular measurements of primary interest are taken from mammalian cells and their components. They are

A metamodel for optimization problems

A metamodel for optimization problems

In mathematics, computer science, and operations research, mathematical optimization is the process of finding best feasible values (oftentimes maxima or minima) of a given objective that is modeled mathematically. This paper introduces the concept of a

The Influence of Realism on Congestion in Network Simulations

The Influence of Realism on Congestion in Network Simulations

Many researchers have used simulation to investigate the spread of congestion in networks. These researchers often find that congestion can be modeled as a percolation process, spreading slowly under increasing load until a critical point. After the

A Simulation Study of the LTE Interference on WiFi Signal Detection

A Simulation Study of the LTE Interference on WiFi Signal Detection

To address the spectrum scarcity problem and enhance spectrum utilization efficiency, spectrum sharing and coexistence of different wireless communication systems are important ongoing research topics. Unlicensed use of the ISM band by the long-term

Testing Spectrum Sensing Networks by UAV

Testing Spectrum Sensing Networks by UAV

We consider here the use of hovering unmanned aerial vehicles (UAVs) to test spectrum sensing capabilities of Citizen's Broadband Radio Service (CBRS) systems at 3.5 GHz. Aircraft transmit synthesized LTE or pulsed radar modulation to excite spectrum

Spectrum Sensing with WLAN Access Points

Spectrum Sensing with WLAN Access Points

With wireless communication becoming more and more common in simple everyday devices, the available spectrum is quickly filling up and the risk of interference is increasing. This interference could be a slight nuisance to or it could be a more significant

An Effective Video Synopsis Approach with Seam Carving

An Effective Video Synopsis Approach with Seam Carving

With a growth of surveillance cameras, the amount of captured videos expands. Manually analyzing and retrieving surveillance video is labor intensive and expensive. It would be much more convenient to generate a video digest, with which we can view the

Message FROM THE EDITOR-IN-CHIEF: A Wider Coverage to Include Industry, Policy, and Regulatory Issues

Message FROM THE EDITOR-IN-CHIEF: A Wider Coverage to Include Industry, Policy, and Regulatory Issues

This Editor In Chief's (EiC) message is expected to appear in the next issue of the IEEE wireless communications.

SP 800-116 Rev. 1

A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS)

INTERNATIONAL TECHNOLOGY ROADMAP FOR SEMICONDUCTORS 2015 EDITION OUTSIDE SYSTEM CONNECTIVITY

INTERNATIONAL TECHNOLOGY ROADMAP FOR SEMICONDUCTORS 2015 EDITION OUTSIDE SYSTEM CONNECTIVITY

Identify and assess capabilities needed to connect most elements of the internet of everything (IoE) and highlight technology needs and gaps. This includes supporting connection of a broad range of sensors, devices, and products and to support information

Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity

Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity

This report provides background information and analysis in support of NISTIR 8074 Volume 1, Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity. It provides a current

Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity

Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity

This report sets out proposed United States Government (USG) strategic objectives for pursuing the development and use of international standards for cybersecurity and makes recommendations to achieve those objectives. The recommendations cover interagency

IR 8074 Vol. 2

Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity

IR 8074 Vol. 1

Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity

Third-Party Software's Trust Quagmire

Third-Party Software's Trust Quagmire

Integrating software developed by third-party organizations into a larger system raises concerns about the software's quality, origin, functionality, security, and interoperability. Addressing these concerns requires rethinking the roles of software's

Managing Risk in a Cloud Ecosystem

Managing Risk in a Cloud Ecosystem

The article focuses on the tier 3 security risks related to the operation and use of cloud-based information systems. To prevent and mitigate any threats, adverse actions, service disruptions, attacks, or compromises, organizations need to quantify their

Journal Article

Third-Party Software's Trust Quagmire

Journal Article

Managing Risk in a Cloud Ecosystem

IR 8085

Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags

A Hybrid Task Graph Scheduler for High Performance Image Processing Workflows

A Hybrid Task Graph Scheduler for High Performance Image Processing Workflows

The scalability of applications is a key requirement to improving performance in hybrid and cluster computing. Scheduling code to utilize parallelism is difficult, particularly when dealing with dependencies, memory management, data motion, and processor

Towards a Systematic Threat Modeling Approach for Cyber-physical Systems

Towards a Systematic Threat Modeling Approach for Cyber-physical Systems

Cyber-Physical Systems (CPS) are systems with seamless integration of physical, computational and networking components. These systems can potentially have an impact on the physical components, hence it is critical to safeguard them against a wide range of

ITL Bulletin

Stopping Malware and Unauthorized Software through Application Whitelisting

Trusted Geolocation in the Cloud: Proof of Concept Implementation

Trusted Geolocation in the Cloud: Proof of Concept Implementation

This publication explains selected security challenges involving Infrastructure as a Service (IaaS) cloud computing technologies and geolocation. It then describes a proof of concept implementation that was designed to address those challenges. The

National Checklist Program for IT Products: Guidelines for Checklist Users and Developers

National Checklist Program for IT Products: Guidelines for Checklist Users and Developers

[Superseded by SP 800-70 Rev. 3 (December 2015, updated 12/8/2016): https://www.nist.gov/node/1125056?pubid=922414 ] A security configuration checklist is a document that contains instructions or procedures for configuring an information technology (IT)

An Industrial Control System Cybersecurity Performance Testbed

An Industrial Control System Cybersecurity Performance Testbed

The National Institute of Standards and Technology (NIST) is developing a cybersecurity performance testbed for industrial control systems. The goal of the testbed is to measure the performance of industrial control systems (ICS) when instrumented with

SP 800-70 Rev. 3

National Checklist Program for IT Products: Guidelines for Checklist Users and Developers