Technical Guide to Information Security Testing and Assessment
The purpose of this document is to assist organizations in planning and conducting technical information security tests and examinations, analyzing findings, and developing mitigation strategies. The guide provides practical recommendations for designing
[Superseded by SP 800-121 Rev. 1 (June 2012): http://www.nist.gov/manuscript-publication-search.cfm ? pub_id=911133] Bluetooth is an open standard for short-range radio frequency communication. Bluetooth technology is used primarily to establish wireless
Allan Variance of Time Series Models of Measurement Data
The uncertainty of the mean of autocorrelated measurements from a stationary process has been discussed in the literature. However, when the measurements are from a non-stationary process, how to assess their uncertainty remains unresolved. Allan variance
[Superseded by SP 800-73-3 (February 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=504797 ] SP 800-73-2 specifies the PIV data model, Application Programming Interface (API) and card interface requirements necessary to comply with the
QOS-Aware Channel Scanning for IEEE 802.11 Wireless LAN
Channel scanning is an important aspect of seamless handovers since it is required in order to find a target point of attachment (PoA). In the IEEE 802.11 WLAN, scanning of other channels causes service disruptions with the current AP so that the provided
IEEE 802.21 Transport Solution Using Cross-Layer Optimized Stream Control Transmission Protocol
The Media Independent Handover (MIH) architecture is designed to facilitate the signaling and enable seamless handovers in heterogeneous networks. In this paper, we propose a solution using the Stream Control Transmission Protocol (SCTP) to efficiently
Can Economics-based Resource Allocation Prove Effective in a Computation Marketplace?
Several companies offer computation on demand for a fee. More companies are expected to enter this business over the next decade, leading to a marketplace for computation resources. Resources will be allocated through economic mechanisms that establish the
A Robust Model-Based Approach to Indoor Positioning Using Signal Strength
A simple technique to estimate the position of a mobile node inside a building is based on the Received Signal Strength (RSS). In previous publications, we investigated the effectiveness of using circular array antennas and beamforming in order to enable
Guide to Industrial Control Systems (ICS) Security (final draft)
[Superseded by NIST SP 800-82 (June 2011): http://www.nist.gov/manuscript-publication-search.cfm ? pub_id=907249] The purpose of this document is to provide guidance for securing industrial control systems (ICS), including supervisory control and data
On the shortest linear straight-line program for computing linear forms
We study the complexity of the Shortest Linear Program (SLP) problem, which is to the number of linear operations necessary to compute a set of linear forms. SLP is shown to be NP-hard. Furthermore, a special case of the corresponding decision problem is
Linguistic Resources and Evaluation Techniques for Evaluation of Cross-Document Automatic Content Extraction
The NIST Automatic Content Extraction (ACE) Evaluation expands its focus in 2008 to encompass the challenge of cross-document and cross-language global integration and reconciliation of information. While past ACE evaluations were limited to local (within
Phone managers are non-forensic software tools designed to carry out a range of tasks for the user, such as reading and updating the contents of a phone, using one or more of the communications protocols supported by the phone. Phone managers are sometimes
The goal of this style guide is to provide specific guidance to improve the usability of documentation used by poll workers and election support staff. The Voting System Documentation Style Guide incorporates best practices for writing documentation as it
The Maps captured by robots in real environment are usually incomplete, distorted, and noisy. To evaluate the quality of these kind of maps is an important problem in the field. In this paper we present an algorithm to assess the quality of the map
A Frequency-Dependence Model for the Ultra-Wideband Channel based on Propagation Events
While the frequency dependence of the wireless channel may be negligible for narrow to wideband signals, it has been shown that modeling this dependence for bandwidths in excess of 2 GHz improves channel reconstruction up to 40%.Yet to our knowledge, only
One of the holy grail questions in computer security is how secure are my organization systems? This paper describes our new approach to answering this question. This approach is distinguished from previous efforts in three ways: 1) uses evidence-based
Guide for Mapping Types of Information and Information Systems to Security Categories (2 vols.)
Title III of the E-Government Act, titled the Federal Information Security Management Act (FISMA) of 2002, tasked NIST to develop (1) standards to be used by all Federal agencies to categorize information and information systems collected or maintained by
Architectural Considerations for Mapping Distribution Protocols
In this paper, we present a discussion of some architectural ideas pertaining to the mapping distribution protocol. The efficiency of this protocol in terms of response time and the volume of traffic load it generates are important considerations. We