NIST · ИТ

SP 800-95

Guide to Secure Web Services

Standardizing Measurements of Autonomy in the Artificially Intelligent

Standardizing Measurements of Autonomy in the Artificially Intelligent

The amount of control that an intelligent system has over their actions, whether they are able to act independently from their creator, plays a major factor in describing systems and in distinguishing them from each other. Different levels of autonomy

Secure Web Services

Secure Web Services

This bulletin provides information on current and emerging standards that have been developed for Web services, and provides background information on the most common security threats to service-oriented architectures (SOAs). The bulletin discusses Web

ITL Bulletin

Secure Web Services

Estimation and Testing for the Common Intersection Point

Estimation and Testing for the Common Intersection Point

The problem of estimating a common intersection point from a collection of straight lines and of testing the hypothesis that such a point exists are considered. The relationship to the error-in-variables regression and to the intersection-union principle

An Electrical Method for Measuring Fatigue and Tensile Properties of Thin Films on Substrates

An Electrical Method for Measuring Fatigue and Tensile Properties of Thin Films on Substrates

A novel approach for measuring thermal fatigue lifetime and ultimate strength of patterned thin films on substrates is presented. The method is based on controlled application of cyclic joule heating by means of low-frequency, high-density alternating

Where EAP Security Claims Fail

Where EAP Security Claims Fail

The Extensible Authentication Protocol (EAP) is widely used as an authentication framework to control the access to wireless networks, e.g. in IEEE 802.11 and IEEE 802.16 networks. In this paper, we discuss limitations of EAP security and demonstrate how

Key nonlinear measurement events

Key nonlinear measurement events

In this article, we describe two engineer-friendly events - the Automatic RF Techniques Group (ARFTG) Nonlinear Measurements Workshop and the Nonlinear Vector Network Analyzer (NVNA) Users' Forum - designed to let participants learn about and discuss

Cryptographic Algorithms and Key Sizes for Personal Identity Verification

Cryptographic Algorithms and Key Sizes for Personal Identity Verification

[Superseded by SP 800-78-2(February 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=904962 ] SP 800-78-1 has been modified to enhance interoperability, simplify the development of relying party applications, and enhance alignment with

SP 800-78-1

Cryptographic Algorithms and Key Sizes for Personal Identity Verification

CVSS-SIG Version 2 History

CVSS-SIG Version 2 History

This document attempts to interpret the history and rationale behind changes made in the Common Vulnerability Scoring System (CVSS) from version 1 to version 2 (referred to as CVSS v1 and v2 in this document.) This document contains multiple appendices

A Complete Guide to the Common Vulnerability Scoring System Version 2.0

A Complete Guide to the Common Vulnerability Scoring System Version 2.0

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. CVSS consists of three groups: Base, Temporal and Environmental. Each group produces a numeric score ranging

Border Gateway Protocol Security

Border Gateway Protocol Security

The Border Gateway Protocol (BGP) plays a critical role in the effective operation of the Internet. BGP is used to update routing information between major systems, which makes it possible for systems connected to the Internet to receive and transmit

ITL Bulletin

Border Gateway Protocol (BGP) Security

Conformance Checking of Access Control Policies Specified in XACML

Conformance Checking of Access Control Policies Specified in XACML

Access control is one of the most fundamental and widely used security mechanisms. Access control mechanisms control which principals such as users or processes have access to which resources in a system. To facilitate managing and maintaining access

SP 800-38C

Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality

Border Gateway Protocol Security

Border Gateway Protocol Security

This document introduces the Border Gateway Protocol (BGP), explains its importance to the internet, and provides a set of best practices that can help in protecting BGP. Best practices described here are intended to be implementable on nearly all

SP 800-54

Border Gateway Protocol Security

FIPS 140-3

Security Requirements for Cryptographic Modules

Robust Indoor Positioning Based on Received Signal Strength

Robust Indoor Positioning Based on Received Signal Strength

RF-based indoor positioning is a challenging task due to the harsh indoor propagation environment. Techniques based on the received signal strength are simple to implement and offer low cost and effective alternatives for some applications. The main

NIST Delivers Strong and Flexible Security Standards Managing Enterprise Risk in a World of Sophisticated Cyber Threats

NIST Delivers Strong and Flexible Security Standards Managing Enterprise Risk in a World of Sophisticated Cyber Threats

This article summarizes the fundamental concepts of the FISMA project and reinforces the core principles that have guided the project from its initiation in 2003.

Verification of an EMC facility retro fit using time domain and field uniformity measurements

Verification of an EMC facility retro fit using time domain and field uniformity measurements

This paper summarizes a joint NIST Industry measurement effort. Time domain and field uniformity measurements are used to verify a retro-fit of RF absorber in an EMC Compliance Chamber from 30 MHz to 6 GHz. Time gating and dense frequency packing of

Using nested reverberation chambers to determine the shielding effectiveness of a material

Using nested reverberation chambers to determine the shielding effectiveness of a material

We examine the current method for determining the shielding effectiveness of a material using nested reverberation chambers and show a simplified approach. Included in our examination is a discussion of the purpose for using a four antenna measurement

Free Space Antenna Factors through the use of Time-Domain Signal Processing

Free Space Antenna Factors through the use of Time-Domain Signal Processing

This paper demonstrates the usefulness of time domain processing to determine free-space antenna factors,FSAF, for EMC antennas. Procedures are explained and data is provided from 30 MHz to 9 GHz. We investigate time gating of dense frequency packed

Distributed Sensor Location through Linear Programming with Triangle Inequality Constraints

Distributed Sensor Location through Linear Programming with Triangle Inequality Constraints

The falling price and reduced size of sensors for monitoring spatially-sensitive environmental properties such as temperature, light, sound, and vibration have motivated research in location algorithms in recent years. To our knowledge, the algorithm which

RFID Devices and Systems in Homeland Security Applications

RFID Devices and Systems in Homeland Security Applications

This article reports on activities being carried out by the National Institute of Standards and Technology to ensure secure, reliable use of Radio-Frequency Identification (RFID) technology in homeland security and public safety applications. These

A Scheme for PIV Visual Card Topography

A Scheme for PIV Visual Card Topography

[Superseded. Incorporated into FIPS 201-2 (August 2013): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=914530 ] The purpose of this document is to provide additional recommendations on the Personal Identity Verification (PIV) Card color

SP 800-104

A Scheme for PIV Visual Card Topography

Forensic Techniques for Cell Phones

Forensic Techniques for Cell Phones

The data that is captured on mobile phones can be a source of valuable information to organizations that are investigating crimes, policy violations and other security incidents. The science of recovering digital evidence from mobile phones, using

ITL Bulletin

Forensic Techniques for Cell Phones