NIST · ИТ

IR 7799

Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications

IR 7756

CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture

Initiating Mobile Software Development - Lessons Learned From a 12-Month Project

Initiating Mobile Software Development - Lessons Learned From a 12-Month Project

As mobile devices’ capabilities keep on improving, today’s mobile software ecosystem evolves at an unprecedented speed. This evolution makes mobile software development more common and critical. Moreover, the ever-increasing number of new development

Foreword to Information Modeling for Interoperable Dimensional Metrology

Foreword to Information Modeling for Interoperable Dimensional Metrology

The value of information exchange standards development is described and defended against other data exchange interoperability options in the context of dimensional metrology in manufacturing.

Vulnerability Hierarchies in Access Control Configurations

Vulnerability Hierarchies in Access Control Configurations

This paper applies methods for analyzing fault hierarchies to the analysis of relationships among vulnerabilities in misconfigured access control rule structures. Hierarchies have been discovered previously for faults in arbitrary logic formulae, such that

Conference Paper

Vulnerability Hierarchies in Access Control Configurations

Recommendation for Existing Application-Specific Key Derivation Functions

Recommendation for Existing Application-Specific Key Derivation Functions

Cryptographic keys are vital to the security of internet security applications and protocols. Many widely-used internet security protocols have their own application-specific Key Derivation Functions (KDFs) that are used to generate the cryptographic keys

SP 800-135 Rev. 1

Recommendation for Existing Application-Specific Key Derivation Functions

Revised Guideline for Electronic Authentication of Users Helps Organizations Protect the Security of their Information Systems

Revised Guideline for Electronic Authentication of Users Helps Organizations Protect the Security of their Information Systems

This bulletin summarizes the information presented in NIST Special Publication (SP) 800-63-1, Electronic Authentication Guideline. This revised guideline, which supersedes an earlier guideline, NIST SP 800-63, updates information about, and recommendations

ITL Bulletin

Revised Guideline for Electronic Authentication of Users Helps Organizations Protect the Security of Their Information Systems

Universal Low-rank Matrix Recovery from Pauli Measurements

Universal Low-rank Matrix Recovery from Pauli Measurements

We study the problem of reconstructing an unknown matrix M of rank r and dimension d using O(rd poly log d) Pauli measurements. This has applications in quantum state tomography, and is a non- commutative analogue of a well-known problem in compressed

Electronic Authentication Guideline

Electronic Authentication Guideline

[Superseded by SP 800-63-2 (August 2013): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=914476 ] This recommendation provides technical guidelines for Federal agencies implementing electronic authentication and is not intended to constrain

SP 800-63-1

Electronic Authentication Guideline

Guidelines on Security and Privacy in Public Cloud Computing

Guidelines on Security and Privacy in Public Cloud Computing

Cloud computing can and does mean different things to different people. The common characteristics most interpretations share are on-demand scalability of highly available and reliable pooled computing resources, secure access to metered services from

SP 800-144

Guidelines on Security and Privacy in Public Cloud Computing

Role Engineering: Methods and Standards

Role Engineering: Methods and Standards

This article explains problems and approaches to designing permission structures for role based access control. RBAC and the RBAC standard are summarized, common approaches to role engineering described, and the current status and plans for the INCITS role

SP 800-155

BIOS Integrity Measurement Guidelines

Journal Article

Role Engineering: Methods and Standards

Journal Article

Mobile-App Addiction: Threat to Security?

IR 7831

Common Remediation Enumeration (CRE) Version 1.0

Objective Evaluation of Imager Performance

Objective Evaluation of Imager Performance

We describe a method by which the evaluation and characterization of the performance of an imager can be done objectively and scientifically, that is, without routine operator interpretation. Although this method is demonstrated herein for passive long

Distributed Application of the Traffic Scheduling Technique for Smart Grid Advanced Metering Applications Using Multi-Gate Mesh Networks

Distributed Application of the Traffic Scheduling Technique for Smart Grid Advanced Metering Applications Using Multi-Gate Mesh Networks

In this paper, we present a multi-gate mesh network architecture that has been developed to ensure high performance and reliability under emergency conditions when a system expects to receive power outage notifications and exchanges. In order to handle the

Cooperative Self-Deployment Strategies in a Mobile Sensor Network with Prioritized Coverage Plan

Cooperative Self-Deployment Strategies in a Mobile Sensor Network with Prioritized Coverage Plan

Efficient deployment strategies are proposed for a mobile sensor network, where the coverage priority of different points in the field is specified by a prescribed weight function. According to these strategies, each sensor detects coverage holes within

Other

The ICT SCRM Community Framework Development Project: Final Report

QCMA with One-sided Error Equals QCMA with Two-sided Error

QCMA with One-sided Error Equals QCMA with Two-sided Error

QCMA is the set of decision problems such that if the answer is yes, there exists a classical bitstring, or proof, that can be efficiently verified by a quantum computer. The verifier is allowed a small probability of rejecting a valid proof or accepting

VM Leakage and Orphan Control in Open-Source Clouds

VM Leakage and Orphan Control in Open-Source Clouds

Computer systems often exhibit degraded performance due to resource leakage caused by erroneous programming or malicious attacks, and computers can even crash in extreme cases of resource exhaustion. The advent of cloud computing provides increased

On the Differential Security of Multivariate Public Key Cryptosystems

On the Differential Security of Multivariate Public Key Cryptosystems

Since the discovery of an algorithm for factoring and computing discrete logarithms in polynomial time on a quantum computer, the cryptographic community has been searching for an alternative for security in the approaching post-quantum world. One

Comparing VM-Placement Algorithms for On-Demand Clouds

Comparing VM-Placement Algorithms for On-Demand Clouds

Much recent research has been devoted to investigating algorithms for allocating virtual machines (VMs) to physical machines (PMs) in infrastructure clouds. Many such algorithms address distinct problems, such as initial placement, consolidation, or

Conference Paper

On the Differential Security of Multivariate Public Key Cryptosystems

Recommendation for Key Derivation through Extraction-then-Expansion

Recommendation for Key Derivation through Extraction-then-Expansion

This Recommendation specifies techniques for the derivation of keying material from a shared secret established during a key establishment scheme defined in NIST Special Publications 800-56A or 800-56B through an extraction-then-expansion procedure.