Guide to Adopting and Using the Security Content Automation Protocol (SCAP), Version 1.0
The purpose of this document is to provide an overview of the Security Content Automation Protocol (SCAP). This document discusses SCAP at a conceptual level, focusing on how organizations can use SCAP-enabled tools to enhance their security posture. It
Impact of RF Interference between a Passive RFID System and a Frequency Hopping Communications System in the 900 MHz ISM Band
We present experimental measurements and analysis of RF interference between a passive RFID system and a generic frequency hopping communications system in the 902 928 MHz ISM radio band. Interference in both directions is considered, RFID to
Spectral Based Methods That Streamline the Search for Failure Scenarios in Large-Scale Distributed Systems
We report our work on the development of analytical and numerical methods that enable the detection of failure scenarios in distributed grid computing, cloud computing and other large scale systems.
We present Sigma ballots, a new type of ballot to be used in secure elections. Sigma ballots use the random order of candidates introduced by Pret a Voter, combined with the confirmation codes of Scantegrity II. These ballots can be produces by a DRE
Findings of the 2010 Joint Workshop on Statistical Machine Translation and Metrics for Machine Translation
This paper presents the results of the WMT10 and MetricsMATR10 shared tasks, which included a translation task, a system combination task, and an evaluation task. We conducted a large-scale manual evaluation of 104 machine translation systems and 41 system
Contingency Planning for Information Systems: Updated Guide for Federal Organizations
This bulletin summarizes the information presented in NIST Special Publication (SP) 800-34, Rev. 1, Contingency Planning Guide for Federal Information Systems. This publication updates federal contingency planning practices by integrating risk management
What is the state of security engineering today? Are we as an industry making progress? What are prospects for the future? To address these questions we analyze data from the National Vulnerability Database (NVD).
Towards Evolutionary-Pricing Framework for Mobile Sensor Network Self-organization
This paper reports on work in progress on developing a unified co-evolutionary/pricing framework for Mobile Sensor Networks (MSN) self-organization. MSN self-organization involves cooperative sensor positioning and formation of a multi-hop Mobile Ad-hoc
Measuring Security Risk of Networks Using Attack Graphs
Today's computer systems face sophisticated attackers who combine multiple vulnerabilities to penetrate networks with devastating impact. The overall security of a network cannot be determined by simply counting the number of vulnerabilities. To accurately
COMPARISON OF NEAR-FIELD METHODS AT NIST K. MacReynolds, M.H. Francis and D. Tamura
A comparison of the planar, spherical and cylindrical near-field techniques was completed at the National Institute of Standards and Technology (NIST) for a Ku-band Cassegrain reflector antenna. This paper discusses the measurement results for the near-to
The Second Static Analysis Tool Exposition (SATE) 2009
The NIST SAMATE project conducted the second Static Analysis Tool Exposition (SATE) in 2009 to advance research in static analysis tools that find security defects in source code. The main goals of SATE were to enable empirical research based on large test
Calibration service for instruments that measure laser beam diameter
This document describes the calibration service for instruments that measure laser beam diameter. An overview of the measurement procedures, measurement system, and uncertainty analysis is presented. A sample measurement report is included in this document
Vulnerability of Selfish Routing to Attacks: Game-theoretic Models and Initial Results
This paper reports on work in progress on assessing and mitigating selfish routing vulnerability to strategic attacks. We explain mechanisms leading to this vulnerability, propose the corresponding game-theoretic model, solve this model for some particular
Optimal Target Tracking Strategy with Controlled Node Mobility in Mobile Sensor Networks
This paper is concerned with target tracking using a network of collaborative sensors. The objective is to compute (online) the desired sensing and communication radii of sensors as well as their location at each time instant, such that a set of prescribed
Investigating the Bag-of-Words Method for 3D Shape Retrieval
This paper investigates the capabilities of the Bag-of-Words (BW) method in the 3D shape retrieval field. The contributions of this paper are: 1) the 3D shape retrieval task is categorized from different points of view: specific vs. generic, partial-to
Web services are currently a preferred way to architect and provide complex services. This complexity arises due to the composition of new services and dynamically invoking existing services. These compositions create service inter-dependencies that can be
APPROACHES AND BEST PRACTICES: Data Collection of Audio Dialogues to Support the Training of Speech-to-Speech Translation Systems
The purpose of this document is to describe the best practices that personnel from the National Institute of Standards and Technology (NIST) have developed and implemented to efficiently and effectively capture two-way, free-form speech-to-speech audio
Automated Parameter Extraction Software for Silicon and High-Voltage Silicon Carbide Power Diodes
This paper presents an automated parameter extraction software tool developed for constructing Silicon (Si) and Silicon Carbide (SiC) power diode models, which is called DIode Model Parameter extrACtion Tools (DIMPACT). This software tool extracts the data
How To Identify Personnel With Significant Responsibilities For Information Security
This Bulletin is written to assist federal departments and agencies to meet their information security training responsibilities. Determining who has significant responsibilities for information security is the crucial first step that allows an
Authentication Assurance Level Taxonomies for Smart Identity Token Deployments - A New Approach
Authentication assurance level taxonomies that have been specified in many real-world smart identity token deployments do not fully reflect all the security properties associated with their underlying authentication mechanisms. In this paper we describe