NIST · ИТ

SP 800-165

Computer Security Division 2012 Annual Report

Digital Signature Standard (DSS)

Digital Signature Standard (DSS)

This Standard specifies a suite of algorithms that can be used to generate a digital signature. Digital signatures are used to detect unauthorized modifications to data and to authenticate the identity of the signatory. In addition, the recipient of signed

FIPS 186-4

Digital Signature Standard (DSS)

ITL Issues Guidelines for Managing the Security of Mobile Devices

ITL Issues Guidelines for Managing the Security of Mobile Devices

This ITL Bulletin announces the publication of NIST Special Publication 800-124 Revision 1, Guidelines for Managing the Security of Movile Devices in the Enterprise. The revised guidelines will assist organizations in managing the security of mobile

ITL Bulletin

ITL Issues Guidelines for Managing the Security of Mobile Devices

RECON -- A Controlled English for Business Rules

RECON -- A Controlled English for Business Rules

Capturing business rules in a formal logic representation supports the enterprise in two important ways: it enables the evaluation of logs and audit records for conformance to, or violation of, the rules; and it enables the conforming automation of some

Initial ACT-R Extensions for User Modeling in the Mobile Touchscreen Domain

Initial ACT-R Extensions for User Modeling in the Mobile Touchscreen Domain

Advances in mobile touchscreen computing offer new opportunities to test traditional cognitive architectures and modeling tools in a novel task domain. ACT-Touch, an extension of the ACT-R 6 (Adaptive Control of Thought- Rational) cognitive architecture

IREX VI - Temporal Stability of Iris Recognition Accuracy

IREX VI - Temporal Stability of Iris Recognition Accuracy

Background: Stability is a required definitional property for a biometric to be useful. Quantitative statements of stability are operationally important as they dictate re-enrollment schedules e.g. of a face on a passport. Ophthalmologists consider the

IREX IV: Part 1, Evaluation of Iris Identification Algorithms

IREX IV: Part 1, Evaluation of Iris Identification Algorithms

IREX IV aims to provide a fair and balanced scientific evaluation of the performance of automated iris recognition algorithms. IREX IV evaluated the performance of 66 identification (i.e. one-to-many matching) algorithms submitted by 12 companies and

Biometric Specifications for Personal Identity Verification

Biometric Specifications for Personal Identity Verification

Homeland Security Presidential Directive HSPD-12, Policy for a Common Identification Standard for Federal Employees and Contractors [HSPD-12], called for new standards to be adopted governing interoperable use of identity credentials to allow physical and

SP 800-76-2

Biometric Specifications for Personal Identity Verification

IR 7511 Rev. 3

Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements

Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management

Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management

There is a great demand from federal departments and agencies for supply chain risk management (SCRM) guidance. This document is a summary of a workshop held October 15-16, 2012 to broadly engage all stakeholders in an effort to set a foundation for NIST's

Other

Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management, National Institute of Standards and Technology, October 15-16, 2012

Economic Case Study: The Impact of NSTIC on the Internal Revenue Service

Economic Case Study: The Impact of NSTIC on the Internal Revenue Service

The National Strategy for Trusted Identities in Cyberspace (NSTIC) offers a vision of more secure, efficient, and cost-effective authentication through widespread use of robust third-party credentials standardized to a national strategy. If successful

Strong equivalence of reversible circuits is coNP-complete

Strong equivalence of reversible circuits is coNP-complete

It is well-known that deciding equivalence of logic circuits is a coNP-complete problem. As a corollary, the problem of deciding weak equivalence of reversible circuits, i.e. ignoring the ancilla bits, is also coNP-complete. The complexity of deciding

Overview of the TREC 2012 Medical Records Track

Overview of the TREC 2012 Medical Records Track

The TREC Medical Records track fosters research that allows electronic health records to be retrieved based on the semantic content of free-text fields. The ability to find records by matching semantic content will enhance clinical care and support the

Hybrid quantum-well system for wavelength-channel selection

Hybrid quantum-well system for wavelength-channel selection

We consider a hybrid quantum-well structure consisting of regions whose properties alternate between active Raman gain and electromagnetically induced transparency. We present both analytical and numerical results that indicate a large light beam defection

Guideline for the Implementation of Coexistence for Low Frequency Narrowband Power Line Communication Standards in the Smart Grid

Guideline for the Implementation of Coexistence for Low Frequency Narrowband Power Line Communication Standards in the Smart Grid

The Smart Grid Interoperability Panel (SGIP) was established by NIST to facilitate execution of tasks under the Energy Independence and Security Act (EISA) of 2007. The Priority Action Plan 15 (PAP 15 ) working group of the SGIP was established in 2009 to

The Challenge of Face Recognition From Digital Point-and-Shoot Cameras

The Challenge of Face Recognition From Digital Point-and-Shoot Cameras

Face recognition is appearing in personal and commercial products at an astonishing rate, yet reliable face recognition remains challenging. Users expect a lot; they want to snap pictures and have their friends, family and acquaintances recognized. This

Quantifying Network Topology Robustness Under Budget Constraints

Quantifying Network Topology Robustness Under Budget Constraints

To design robust network topologies that resist strategic attacks, one must first be able to quantify robustness. In a recent line of research, the theory of network blocking games has been used to derive robustness metrics for topologies. A network

Four Measures of Nonlinearity

Four Measures of Nonlinearity

Cryptographic applications, such as hashing, block ciphers and stream ciphers, make use of functions which are simple by some criteria (such as circuit implementations), yet hard to invert almost everywhere. A necessary condition for the latter property is

Conference Paper

Four Measures of Nonlinearity

Guidelines for Managing the Security of Mobile Devices in the Enterprise

Guidelines for Managing the Security of Mobile Devices in the Enterprise

Mobile devices, such as smart phones and tablets, typically need to support multiple security objectives: confidentiality, integrity, and availability. To achieve these objectives, mobile devices should be secured against a variety of threats. The purpose

Exposing Software Security and Availability Risks For Commercial Mobile Devices

Exposing Software Security and Availability Risks For Commercial Mobile Devices

In this manuscript, we present our efforts towards a framework for exposing the functionality of a mobile application through a combination of static and dynamic program analysis that attempts to explore all available execution paths including libraries

Enabling an Enterprise-wide, Data-centric Operating Environment

Enabling an Enterprise-wide, Data-centric Operating Environment

Although access control (AC) currently plays an important role in securing DSs, if properly envisaged and designed, access control can serve a more vital role in computing than one might expect. The Policy Machine (PM), a framework for AC developed at NIST

A Classification of Differential Invariants for Multivariate Post-Quantum Cryptosystems

A Classification of Differential Invariants for Multivariate Post-Quantum Cryptosystems

Multivariate Public Key Cryptography (MPKC) has become one of a few options for security in the quantum model of computing. Though a few multivariate systems have resisted years of effort from the cryptanalytic community, many such systems have fallen to a

SP 800-124 Rev. 1

Guidelines for Managing the Security of Mobile Devices in the Enterprise

Journal Article

Enabling an Enterprise-wide, Data-centric Operating Environment

IR 7933

Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record