NIST · ИТ

IR 8054

NSTIC Pilots: Catalyzing the Identity Ecosystem

Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium

Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium

Direct Digital Manufacturing (DDM) involves fabricating physical objects from a data file using computer-controlled processes with little to no human intervention. It includes Additive Manufacturing (AM), 3D printing, rapid prototyping, etcetera. The

IR 8041

Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium

Password Entry Errors: Memory or Motor?

Password Entry Errors: Memory or Motor?

As we increasingly rely upon our computer information systems to store and operate on sensitive information, the methods we use to authenticate user identity also become more important. One of the most important such methods is the password. However

SP 800-63-3

PRE-DRAFT Call for Comments: Electronic Authentication Guideline

Conference Paper

Password Entry Errors: Memory or Motor?

Towards a "Periodic Table" of Bugs

Towards a "Periodic Table" of Bugs

Our vision for a "periodic table" of bugs is a "natural" organization of a catalog or dictionary or taxonomy to describe software weaknesses and vulnerabilities. Such an organization will help the community to: a) more closely explain the nature of

Supply Chain Risk Management Practices for Federal Information Systems and Organizations

Supply Chain Risk Management Practices for Federal Information Systems and Organizations

Federal agencies are concerned about the risks associated with information and communications technology (ICT) products and services that may contain potentially malicious functionality, are counterfeit, or are vulnerable due to poor manufacturing and

SP 800-161

Supply Chain Risk Management Practices for Federal Information Systems and Organizations

Analysis of VAES3 (FF2)

Analysis of VAES3 (FF2)

The National Institute of Standards and Technology (NIST) specified three methods for format-preserving encryption (FPE) in Draft NIST Special Publication (SP) 800-38G, which was released for public comment in July, 2013. Each method was a mode of

ACT-R Modeling of Password Entry Errors

ACT-R Modeling of Password Entry Errors

Validated predictive models of human error for password-related tasks could better inform password requirements for both government and civilian systems. Here, we build upon prior modeling work focused on disentangling the source of password entry errors

Other

Analysis of VAES3 (FF2)

IR 8050

Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps

Conference Paper

ACT-R Modeling of Password Entry Errors [poster]

Compact Nano-Mechanical Plasmonic Phase Modulators

Compact Nano-Mechanical Plasmonic Phase Modulators

The miniaturization of photonic devices is fundamentally limited by the index of refraction of the constituent materials if light is confined in dielectric nanostructures. By coupling electromagnetic fields to metal's free electrons plasmonic devices

Project Description

Attribute Based Access Control

Combinatorial Coverage as an Aspect of Test Quality

Combinatorial Coverage as an Aspect of Test Quality

There are relatively few good methods for evaluating test set quality, after ensuring basic requirements traceability. Structural coverage, mutation testing, and related methods can be used if source code is available, but these approaches may entail

Journal Article

Combinatorial Coverage as an Aspect of Test Quality

Considerations for Identity Management in Public Safety Networks

Considerations for Identity Management in Public Safety Networks

This document analyzes approaches to identity management for public safety networks in an effort to assist individuals developing technical and policy requirements for public safety use. These considerations are scoped into the context of their

IR 8014

Considerations for Identity Management in Public Safety Mobile Networks

Assessing Effects of Asymmetries, Dynamics, and Failures on a Cloud Simulator

Assessing Effects of Asymmetries, Dynamics, and Failures on a Cloud Simulator

We characterize the effects of asymmetries, dynamics, and failures when introduced into a cloud computing simulator, which had previously been characterized under static, homogeneous configurations with various patterns of demand and supply. We aim to

A comparison of 3D shape retrieval methods based on a large-scale benchmark supporting multimodal queries

A comparison of 3D shape retrieval methods based on a large-scale benchmark supporting multimodal queries

Large-scale 3D shape retrieval has become an important research direction in content-based 3D shape retrieval. To promote this research area, two Shape Retrieval Contest (SHREC) tracks on large scale comprehensive and sketch-based 3D model retrieval have

TRECVID 2014 -- An Overview of the Goals, Tasks, Data, Evaluation Mechanisms, and Metrics

TRECVID 2014 -- An Overview of the Goals, Tasks, Data, Evaluation Mechanisms, and Metrics

The TREC Video Retrieval Evaluation (TRECVID) 2014 was a TREC-style video analysis and retrieval evaluation, the goal of which remains to promote progress in content-based exploitation of digital video via open, metrics-based evaluation. Over the last

Guidance for Secure Authorization of Mobile Applications in the Corporate Environment

Guidance for Secure Authorization of Mobile Applications in the Corporate Environment

This bulletin provides an overview of NIST Special Publication (SP) 800-163, "Vetting the Security of Mobile Applications." The NIST SP helps organizations understand the process for vetting the security of mobile applications, plan for the implementation

ITL Bulletin

Guidance for Secure Authorization of Mobile Applications in the Corporate Environment

The Multiplicative Complexity of Boolean Functions on Four and Five Variables

The Multiplicative Complexity of Boolean Functions on Four and Five Variables

A generic way to design lightweight cryptographic primitives is to construct simple rounds using small nonlinear components such as 4x4 S-boxes and use these iteratively (e.g., PRESENT and SPONGENT). In order to efficiently implement the primitive, optimal

Conference Paper

The Multiplicative Complexity of Boolean Functions on Four and Five Variables

Nationwide Public Safety Broadband Network Deployment: Network Parameter Sensitivity Analysis

Nationwide Public Safety Broadband Network Deployment: Network Parameter Sensitivity Analysis

The legislation included in the middle class tax relief and job creation act of 2012 established the First Responder Network Authority (FirstNet) for the purpose of deploying and running a nationwide Long Term Evolution (LTE) network for Public Safety

Measuring a Device's Susceptibility to LTE: Preliminary Approaches

Measuring a Device's Susceptibility to LTE: Preliminary Approaches

Previous testing has shown that measuring a device’s susceptibility to a radiated, broadband signal can present a different set of challenges than those faced when testing with a narrow-band signal. Decisions ranging from choosing a measurement facility to

SATE V Workshop - CVE-selected Analysis Results

SATE V Workshop - CVE-selected Analysis Results