NIST · ИТ

ITL Bulletin

Policy Machine: Towards a General-Purpose Enterprise-Wide Operating Environment

Photonic-assisted Endoscopic Analysis of Guided W-band Pulses

Photonic-assisted Endoscopic Analysis of Guided W-band Pulses

We present a photonic-assisted time-domain measurement technique for exploring millimeter-wave propagation through a W-band waveguide. The electric fields, guided inside a rectangular waveguide, are sampled using a sub-millimeter-scale electro-optic probe

A 100 Tohm Guarded Hamon Transfer Standard

A 100 Tohm Guarded Hamon Transfer Standard

Guarded Hamon transfer standards are used at NIST for scaling to high resistance levels. An improved design for a guarded Hamon transfer standard in the range from 1 TΩ to 100 TΩ is described. Measurements taken to select the primary and guard resistor

Single-shot security for one-time memories in the isolated qubits model

Single-shot security for one-time memories in the isolated qubits model

One-time memories (OTM's) are simple, tamper-resistant cryptographic devices, which can be used to implement sophisticated functionalities such as one-time programs. OTM's cannot exist in a fully-classical world, or in a fully-quantum world, but there is

The Future of Cybersecurity Education

The Future of Cybersecurity Education

By fostering public-private partnerships in cybersecurity education, the US government is motivating federal agencies, industry, and academia to work more closely together to defend cyberspace.

Journal Article

The Future of Cybersecurity Education

Broadband Rydberg Atom Based Self-Calibrating RF E-field Probe

Broadband Rydberg Atom Based Self-Calibrating RF E-field Probe

We present a significantly new approach for an electric (E) field probe. The probe is based on the interaction of RF-fields with Rydberg atoms, where alkali atoms are excited optically to Rydberg states and the applied RF-field alters the resonant state of

On the Unification of Access Control and Data Services

On the Unification of Access Control and Data Services

A primary objective of enterprise computing (via a data center, cloud, etc.) is the controlled delivery of data services (DS). Typical DSs include applications such as email, workflow, and records management, as well as system level features, such as file

Conference Paper

On the Unification of Access Control and Data Services

IT Pro Conference on Information Systems Governance

IT Pro Conference on Information Systems Governance

Approximately 100 IT professionals participated in the 2014 IT Pro Conference on Information Systems Governance, held at the National Institute of Standards and Technology (NIST) on May 22, 2014 ( www.computer.org/itproconf ). Information systems governance

SP 800-85B-4

PIV Data Model Test Guidelines

Journal Article

IT Pro Conference on Information Systems Governance

Characterizing a Device's susceptibility to broadband signals: A case study

Characterizing a Device's susceptibility to broadband signals: A case study

It is common for electronic devices to be tested for their susceptibility to radiated signals they may be exposed to during their normal operation. A reverberation chamber is well suited to perform this type of testing because it can expose the device

Journal Article

Elliptic Curves Arising from Brahmagupta Quadrilaterals

Energy Harvesting from the Human Leg Motion

Energy Harvesting from the Human Leg Motion

Kinetic energy harvested from the human body motion seems to be one of the most attractive and convenient solution for wearable wireless sensors in healthcare applications. Due to their small size, such sensors typically have a very limited battery-powered

Dielectric characterization by microwave cavity perturbation corrected for non-uniform fields

Dielectric characterization by microwave cavity perturbation corrected for non-uniform fields

The non-uniform fields that occur due to the slot in the cavity through which the sample is inserted and those due to the sample geometry itself decrease the accuracy of dielectric characterization by cavity perturbation at microwave frequencies. To

Release of NIST Interagency Report 7946, CVSS Implementation Guidance

Release of NIST Interagency Report 7946, CVSS Implementation Guidance

The Common Vulnerability Scoring System (CVSS) is an open standard designed to convey severity and risk of information system vulnerabilities. CVSS was commissioned by the National Infrastructure Advisory Council (NIAC) in support of the global

ITL Bulletin

Release of NIST Interagency Report 7946, CVSS Implementation Guidance

Colored Noise and Regularization Parameter Selection for Waveform Metrology

Colored Noise and Regularization Parameter Selection for Waveform Metrology

We study six regularization parameter selection algorithms applied to deconvolution problems relevant for characterization of high-speed communication measurement systems. In particular we investigate the performance of these selectors in the presence of

Approximate Matching: Definition and Terminology

Approximate Matching: Definition and Terminology

This document provides a definition of and terminology for approximate matching. Approximate matching is a promising technology designed to identify similarities between two digital artifacts. It is used to find objects that resemble each other or to find

SP 800-168

Approximate Matching: Definition and Terminology

Using Network Tainting to Bound the Scope of Network Ingress Attacks

Using Network Tainting to Bound the Scope of Network Ingress Attacks

This research describes a novel security metric, network taint, which is related to software taint analysis. We use it here to bound the possible malicious influence of a known compromised node through monitoring and evaluating network flows. The result is

Conference Paper

Using Network Tainting to Bound the Scope of Network Ingress Attacks

Persistence-based Structural Recognition

Persistence-based Structural Recognition

This paper presents a framework for object recognition using topological persistence. In particular, we show that the so-called persistence diagrams built from functions defined on the objects can serve as compact and informative descriptors for images and

Preserving Privacy More Than Reading a Message

Preserving Privacy More Than Reading a Message

Social media has become a mainstream activity where people share all kinds of personal and intimate details about their lives. These social networking sites (SNS) allow users to conveniently authenticate to the third party website by using their SNS

NIST SGIP Priority Action Plan 2, Guidelines for Assessing Wireless Standards for Smart Grid Applications

NIST SGIP Priority Action Plan 2, Guidelines for Assessing Wireless Standards for Smart Grid Applications

This report is a draft of key tools and methods to assist smart grid system designers in making informed decisions about existing and emerging wireless technologies. An initial set of quantified requirements have been brought together for advanced metering

IR 8006

NIST Cloud Computing Forensic Science Challenges

I Can't Type That! P@$$w0rd Entry on Mobile Devices

I Can't Type That! P@$$w0rd Entry on Mobile Devices

Given the numerous constraints of onscreen keyboards, such as smaller keys and lack of tactile feedback, remembering and typing long, complex passwords — an already burdensome task on desktop computing systems —becomes nearly unbearable on small mobile

Development of a Scale to Assess the Linguistic and Phonological Difficulty of Passwords

Development of a Scale to Assess the Linguistic and Phonological Difficulty of Passwords

Increasingly, institutions are requiring or recommending that their employees use secure, system-generated passwords. It is not clear how well linguistic and phonological language properties map onto complex, randomly-generated passwords. Passwords

A Cognitive-Behavioral Framework of User Password Management Lifecycle

A Cognitive-Behavioral Framework of User Password Management Lifecycle

Passwords are the most commonly used mechanism in controlling users’ access to information systems. Little research has been established on the entire user password management lifecycle from the start of generating a password, maintaining the password