NIST · ИТ

ITL Bulletin

Federal Desktop Core Configuration (FDCC): Improving Security for Windows Desktop Operating Systems

A Quantum Network Manager That Supports A One-Time Pad Stream

A Quantum Network Manager That Supports A One-Time Pad Stream

We have begun to expand the NIST quantum key distribution (QKD) system into a quantum network to support secure cryptography. We are starting with a simple three-node network, one Alice switched between Bob1 and Bob2. To support such a quantum network, we

Secure Web Servers: Protecting Web Sites That Are Accessed by the Public

Secure Web Servers: Protecting Web Sites That Are Accessed by the Public

This bulletin summarizes the contents of NIST Special Publication 800-44, Version 2, Guidelines on Securing Public Web Servers. The publication details the steps that organizations should take to plan, install, and maintain secure Web server software and

ITL Bulletin

Secure Web Servers Protecting Web Sites that are Accessed by the Public

Operation of an X-ray transition-edge sensor cooled by tunnel junction refrigerators

Operation of an X-ray transition-edge sensor cooled by tunnel junction refrigerators

We demonstrate successful cooling of an X-ray transition-edge sensor (TES) using solid-state refrigerators based on normal-metal/insulator/superconductor (NIS) tunnel junctions. Above the TES transition temperature (Tc), we use Johnson noise thermometry to

Conference Paper

Overcoming Impediments to Cell Phone Forensics

GSM Mobile Device and Associated Media Tool Test Assertions and Test Plan

GSM Mobile Device and Associated Media Tool Test Assertions and Test Plan

Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4

Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4

This report specifies the data model and Extensible Markup Language (XML) representation for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4. An XCCDF document is a structured collection of security configuration rules for

Soft-Decision Metrics for Coded Orthogonal Signaling in Symmetric Alpha-Stable Noise

Soft-Decision Metrics for Coded Orthogonal Signaling in Symmetric Alpha-Stable Noise

This paper derives new soft decision metrics for coded orthogonal signaling in impulsive noise, more specifically symmetric alpha-stable noise. For the case of a known channel amplitude and known noise dispersion, exact metrics are derived both for Cauchy

Peridynamic Simulation of Electromigration

Peridynamic Simulation of Electromigration

A theoretical framework, based upon the peridynamic model, is presented for analytical and computational simulation of electromigration. The framework allows four coupled physical processes to be modeled simultaneously: mechanical deformation, heat

IR 7275 Rev. 3

Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4

Multi-Channel Mobile Ad-Hoc Links for Multimedia Communications

Multi-Channel Mobile Ad-Hoc Links for Multimedia Communications

This paper is mainly concerned with multi-channel transmission of real-time information such as video over multi-hop ad-hoc links. We propose two multi-channel routing protocols. The first is based on single-path routing and aims at suppressing the intra

Securing External Computers and Other Devices Used by Teleworkers

Securing External Computers and Other Devices Used by Teleworkers

This bulletin summarizes the recommendations developed by NIST to help workers secure their external devices that they need for teleworking. The bulletin covers background information on telework technologies and the security issues related to the use of

Recommended Security Controls for Federal Information Systems

Recommended Security Controls for Federal Information Systems

[Superseded by NIST SP 800-53 Rev. 3 (August 2009): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918663 ] This publication revises NIST SP 800-53 Revision 1 by adding specific guidance on the application of security controls to Industrial

SP 800-53 Rev. 2

Recommended Security Controls for Federal Information Systems

ITL Bulletin

Securing External Computers and Other Devices Used by Teleworkers

RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role Based Access Control"

RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role Based Access Control"

[This is a response to comments on INCITS Standard 359-2004, Role Based Access Control. For original paper see Ninghui Li et al., IEEE Security & Privacy, vol. 5, no. 6, p.41, (2007).] Some notion of roles for access control predates the research papers

Physics-based Numerical Simulation for Design of High-Voltage, Extremely-High Current Density SiC Power Devices

Physics-based Numerical Simulation for Design of High-Voltage, Extremely-High Current Density SiC Power Devices

This paper presents a selection of results from numerical studies addressing various problems highly relevant to the operation of SiC power devices in power systems such as the speed optimization of high-voltage SiC PiN diodes and the operation of SiC

Journal Article

RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role Based Access Control"

Experimental Demonstration of an Active Quantum Key Distribution Network with Over Gbps Clock Synchronization

Experimental Demonstration of an Active Quantum Key Distribution Network with Over Gbps Clock Synchronization

We demonstrate a three-node QKD network that allows multiple users to share secure keys. This QKD network operates on the 850 nm and 1550 nm wavelengths at 1.25 Gbps clock rate. The communication route is controlled by a MEMS optical switch. In this paper

Indoor Localization: Technology That Can Save First Responder Lives

Indoor Localization: Technology That Can Save First Responder Lives

Every year a number of first responders lose their lives while battling fires or rescuing civilians during such emergencies. Indoor localization or location tracking roughly provides the same capability inside buildings that GPS does outdoors. It allows a

Secure Biometric Match-on-Card Feasibility Report

Secure Biometric Match-on-Card Feasibility Report

FIPS 201, "Personal Identity Verification (PIV) of Federal Employees and Contractors," and its associated special publications define a method to perform biometric match-off-card authentication of a PIV cardholder when the PIV card is inserted into a

IR 7452

Secure Biometric Match-on-Card Feasibility Report

Journal Article

IPOG/IPOD: Efficient Test Generation for Multi-Way Combinatorial Testing

Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC

Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC

This Recommendation specifies the Galois/Counter Mode (GCM), an algorithm for authenticated encryption with associated data, and its specialization, GMAC, for generating a message authentication code (MAC) on data that is not encrypted. GCM and GMAC are

Рекомендация по режимам работы блочных шифров: режим Галуа/счётчика (GCM) и GMAC

Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC

Публикация NIST SP 800-38D определяет Galois/Counter Mode (GCM) для аутентифицированного шифрования с присоединёнными данными и его специализацию GMAC для выработки кода аутентификации сообщения над незашифрованными данными. GCM строится на одобренном симметричном блочном шифре с размером блока 128 бит, таком как AES. Документ задаёт алгоритмы аутентифицированного шифрования и расшифрования, матем…

Читать русский перевод →

Using Storage Encryption Technologies to Protect End User Devices

Using Storage Encryption Technologies to Protect End User Devices

This bulletin summarizes the guidance developed by NIST and published in SP 800-111 to help organizations secure their end user devices, and deter unauthorized parties from accessing the stored information. The bulletin explains three classes of storage

A Load Balancing Algorithm to Overcome the Rate-Limiting Effects in IEEE 802.11 Networks

A Load Balancing Algorithm to Overcome the Rate-Limiting Effects in IEEE 802.11 Networks

In an IEEE 802.11 network, a single user can reduce the performance of all other users attached to the same access point. To overcome this problem, we propose to take advantage of the increasing number of devices supporting multiple network interfaces. We

A Frequency-Dependence Model for the Ultra-Wideband Channel based on Propagation Events

A Frequency-Dependence Model for the Ultra-Wideband Channel based on Propagation Events

While the frequency-dependence of the wireless channel may be negligible for narrow to wideband signals, it has been shown that modeling this dependence for bandwidths in excess of 2 GHz improves channel reconstruction up to 40%. Yet to our knowledge, only

Constraint Effect in Deformation of Copper Interconnect Lines Subjected to Cyclic Joule Heating

Constraint Effect in Deformation of Copper Interconnect Lines Subjected to Cyclic Joule Heating

Using finite element analysis, we calculate the temperature range and the resulting cyclic Von Mises strain resulting from Joule heating, generated by the application of alternating current, applied to specimens representative of commercial copper