NIST · ИТ

SP 800-22 Rev. 1

A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications

Toward Understanding of Metastability in Large-Scale Loss Networks with Mobile Users: Emergence and Implications for Performance

Toward Understanding of Metastability in Large-Scale Loss Networks with Mobile Users: Emergence and Implications for Performance

We investigate the behavior of a distributed server loss network with mobile users.While the Markov model provides an accurate ¿microscopic¿ model of the network behavior, the dimension of this model grows exponentially with the number of nodes precluding

Guide to Securing Legacy IEEE 802.11 Wireless Networks

Guide to Securing Legacy IEEE 802.11 Wireless Networks

The purpose of this document is to provide guidance to organizations in securing their legacy Institute of Electrical and Electronics Engineers (IEEE) 802.11 wireless local area networks (WLAN) that cannot use IEEE 802.11i. The document provides an

Guide to General Server Security

Guide to General Server Security

The purpose of this document is to assist organizations in understanding the fundamental activities performed as part of securing and maintaining the security of servers that provide services over network communications as a main function. The document

SP 800-48 Rev. 1

Guide to Securing Legacy IEEE 802.11 Wireless Networks

SP 800-123

Guide to General Server Security

Forensic Protocol Filtering of Phone Managers

Forensic Protocol Filtering of Phone Managers

Phone managers are non-forensic tools sometimes used by forensic investigators to recover data from a cell phone when no suitable forensic tool is available for the device. While precautions can be taken to preserve the integrity of data on a cell phone

Conference Paper

Forensic Protocol Filtering of Phone Managers

ITL Bulletin

Guidelines on Implementing A Secure Sockets Layer (SSL) Virtual Private Network (VPN)

Web Services Security: Techniques and Challenges (Extended Abstract)

Web Services Security: Techniques and Challenges (Extended Abstract)

Web services-based computing is currently an important driver for the software industry. While several standards bodies (such as W3C and OASIS) are laying the foundation for Web services security, several research problems must be solved to make secure Web

Conference Paper

Web Services Security: Techniques and Challenges (Extended Abstract)

Performance Measurement Guide for Information Security

Performance Measurement Guide for Information Security

This document provides guidance on how an organization, through the use of metrics, identifies the adequacy of in-place security controls, policies, and procedures. It provides an approach to help management decide where to invest in additional security

The Keyed-Hash Message Authentication Code (HMAC)

The Keyed-Hash Message Authentication Code (HMAC)

This Standard describes a keyed-hash message authentication code (HMAC), a mechanism for message authentication using cryptographic hash functions. HMAC can be used with any iterative Approved cryptographic hash function, in combination with a shared

An Attack Graph Based Probabilistic Security Metric

An Attack Graph Based Probabilistic Security Metric

To protect critical resources in today's networked environments, it is desirable to quantify the likelihood of potential multi-step attacks that combine multiple vulnerabilities. This now becomes feasible due to a model of causal relationships between

SP 800-55 Rev. 1

Performance Measurement Guide for Information Security

FIPS 198-1

The Keyed-Hash Message Authentication Code (HMAC)

Conference Paper

An Attack Graph-Based Probabilistic Security Metric

Dynamic Routing and Congestion Control Through Random Assignment of Routes

Dynamic Routing and Congestion Control Through Random Assignment of Routes

We introduce an algorithm for maximizing utility through congestion control and random allocation of routes to users. The allocation is defined by a probability distribution whose degree of randomness as measured by its entropy, is controlled. We seek to

A Profile for IPv6 in the U.S. Government - Version 1.0

A Profile for IPv6 in the U.S. Government - Version 1.0

This publication seeks to assist Federal agencies in formulating plans for the acquisition of IPv6 technologies. To achieve this, we define a standards profile for IPv6 in the USG that is intended to be applicable to all future uses of IPv6 in non-

Guide for Assessing the Security Controls in Federal Information Systems: Building Effective Security Assessment Plans

Guide for Assessing the Security Controls in Federal Information Systems: Building Effective Security Assessment Plans

[Superseded by NIST SP 800-53A, Rev. 1 (June 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=906065 ] The purpose of NIST Special Publication 800-53A is to provide guidelines for building effective security assessment plans and

SP 800-53A

Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans

SP 800-113

Guide to SSL VPNs

A Framework for Measuring the Vulnerability of Hosts

A Framework for Measuring the Vulnerability of Hosts

This paper proposes a framework for measuring the vulnerability of individual hosts based on current and historical operational data for vulnerabilities and attacks. Previous approaches have not been scalable because they relied on complex manually

Conference Paper

A Framework for Measuring the Vulnerability of Hosts

Guidelines for the Accreditation of Personal Identity Verification Card Issuers

Guidelines for the Accreditation of Personal Identity Verification Card Issuers

[Superseded by SP 800-79-2 (July 2015): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918845 ] The purpose of this publication is to provide appropriate and useful guidelines for accrediting the reliability of issuers of Personal Identity

SP 800-79-1

Guidelines for the Accreditation of Personal Identity Verification Card Issuers

Contradictions and Justifications: Extensions to the Textual Entailment Task

Contradictions and Justifications: Extensions to the Textual Entailment Task

The third PASCAL Recognizing Textual Entailment Challenge (RTE-3) contained an optional task that extended the main entailment task by requiring a system to make three-way entailment decisions (entails, contradicts, neither) and to justify its response

Multisine Signals for Wireless System Test and Design

Multisine Signals for Wireless System Test and Design

We discuss the use of multisine test signals for system verification and model development in the laboratory. We highlight the utility of multisine excitation for test and verification of telecommunication systems, where nonlinear elements such as power

Conference Paper

A Meta Model for Access Control: Why is it needed and Is it even possible to achieve?

Uncertainty Analysis for Noise-Parameter Measurements

Uncertainty Analysis for Noise-Parameter Measurements

A brief summary is presented for the uncertainty analysis for measurements of noise parameters of amplifiers and transistors, in both connectorized (coaxial) and on-wafer environments. We treat both the X-parameters, which are based on the wave