Выбранные официальные каталоги по ИТ, безопасности, приватности, ИИ и связи.
Реестр · 6 880 документов
Static Analysis is not enough: The Role of Architecture and Design in Software Assurance
Static analysis testing of software source code is necessary but not sufficient. Over 40 percent of the Common Weakness Enumeration (CWE) are likely to be introduced in the architecture and design phase of the development life cycle. By their very nature
Flat lens criterion by small-angle phase
It is sometimes possible to image using a flat lens consisting of planar, uniform media. There is conceptual division between theoretical flat lens proposals, which require exotic properties such as negative index or counter-intuitive behavior such as
Cryptographic Module Validation Program (CMVP)
The Cryptographic Module Validation Program (CMVP) validates cryptographic modules for compliance with Federal Information Processing Standard (FIPS) Publication 140-2, Security Requirements for Cryptographic Modules, and other cryptography based standards
Cryptographic Module Validation Program (CMVP)
Electrodermal Activity and Eye Movements Inform the Usability of Passwords
While measuring physiological responses is a common practice in the field of neuroscience, it is rare in the usability arena and in password usability studies, in particular. This is unfortunate, as the use of such implicit measures could complement more
Electrodermal Activity and Eye Movements Inform the Usability of Passwords [poster]
An Access Control Scheme for Big Data Processing
Access Control (AC) systems are among the most critical of network security components. A system's privacy and security controls are more likely to be compromised due to the misconfiguration of access control policies rather than the failure of
An Access Control Scheme for Big Data Processing
Classical simulation of Yang-Baxter gates
A unitary operator that satisfies the constant Yang-Baxter equation immediately yields a unitary representation of the braid group Bn for every n ≥ 2. If we view such an operator as a quantum-computational gate, then topological braiding corresponds to a
Screening for factors affecting application performance in profiling measurements
This report provides an example application of screening techniques in experimental computer science, including validation and selection of metrics and measures, the screening experiment itself, and supporting statistical methods. Together with related
Release of NIST SP 800-147B, BIOS Protection Guidelines for Servers
Modern computers rely on fundamental system firmware, commonly known as the Basic Input/Output System (BIOS), to enable system components to communicate and work together. The BIOS is typically developed by both original equipment manufacturers (OEMs) and
Optimal Deployment of Pico Base Stations in LTE-Advanced Heterogeneous Networks
As data traffic demand in cellular networks grows exponentially, operators need to add new cell sites to keep up; unfortunately, it is costly to build and operate macrocells. Moreover, it may not be possible to obtain the needed approvals for additional
Release of NIST Special Publication 800-147B, BIOS Protection Guidelines for Servers
Spatial Computations over Terabyte-Sized Images on Hadoop Platforms
Our objective is to lower the barrier of executing spatial image computations in a computer cluster/cloud environment instead of in a desktop/laptop computing environment. We research two related problems encountered during an execution of spatial
On Systemic Risk in the Cloud Computing Model
The major benefits of the emerging cloud computing infrastructure include elimination of the fixed cost and reduction in the marginal cost for the users due to the economy of scale and dynamic resource sharing. This paper argues that these unquestionable
US Government Cloud Computing Technology Roadmap Volume I: High-Priority Requirements to Further USG Agency Cloud Computing Adoption; and Volume II: Useful Information for Cloud Adopters
The National Institute of Standards and Technology (NIST), consistent with its mission, has a technology leadership role in support of United States Government (USG) secure and effective adoption of the Cloud Computing model to reduce costs and improve
Security Recommendations for Hypervisor Deployment
Avoiding Catastrophes in Cyberspace through Smarter Testing: How to prevent Heartbleed-like disasters using readily available testing technologies
The recently discovered Heartbleed bug in OpenSSLs implementation of Internet security protocols and the aftermath from dealing with its consequences highlights a critical problem in the software industry. Software is routinely, inadequately tested
Avoiding Cyberspace Catastrophes through Smarter Testing
Parameter Estimation and Uncertainty Evaluation in a Low Rician K-Factor Reverberation-Chamber Environment
In this paper we study statistical methods for estimating the Rician K-factor when this parameter is small. A fiducial approach for making statistical inference on the K-factor is discussed. The approach requires a Monte Carlo method to compute the
An ACT-R Model of Elliptical Endpoint Error Distributions in a Mobile Touchscreen 2-D Fitts' Law Task
Given the high propensity of users' motoric errors with smaller touchscreen buttons, knowing the endpoint distributions for finger- based pointing and tapping is especially important for higher-fidelity predictive modeling of tasks on such devices. One of
A Cybersecurity Testbed for Industrial Control Systems
The National Institute of Standards and Technology (NIST) is developing a cybersecurity testbed for industrial control systems (ICS). The goal of this testbed is to measure the performance of an ICS when instrumented with cybersecurity protections in
On Statistical Modeling and Forecasting of Energy Usage in Smart Grid
Developing effective energy resource management in the smart grid is challenging because the entities in both the demand and supply sides experience various uncertainties. This paper addresses the issue of quantifying uncertainties on the energy demand
Lightweight Packing of Log Files for Improved Compression in Mobile Tactical Networks
Devices in mobile tactical edge networks are often resource constrained due to their lightweight and mobile nature, and often have limited access to bandwidth. In order to maintain situational awareness in the cyber domain, security logs from these devices
On Cascading Failures and Countermeasure based on Energy Storage in the Smart Grid
Recently, there are growing concerns about smart grid security and resilience. The performance of smart grid may suffer from component failures or targeted attacks. A sophisticated adversary may target critical components in a smart grid, leading to
Lightweight Packing of Log Files for Improved Compression in Mobile Tactical Networks
A Cybersecurity Testbed for Industrial Control Systems
Optimizing Information Set Decoding Algorithms to Attack Cyclosymetric MDPC Codes
The most important drawback to code-based cryptography has historically been its large key sizes. Recently, several promising approaches have been proposed to reduce keysizes. In particular, significant keysize reduction has been achieved by using
Estimation of uncertainty in application profiles
Performance is an important facet of software quality, and application profiling tools are the instruments used to measure software performance at the function and application levels. The most powerful measurement method available in application profiling
An Asymptotically Optimal Structural Attack on the ABC Multivariate Encryption Scheme
Historically, multivariate public key cryptography has been less than successful at offering encryption schemes which are both secure and efficient. At PQCRYPTO '13 in Limoges, Tao, Diene, Tang, and Ding introduced a promising new multivariate encryption