Security Metrics Guide for Information Technology Systems
[Superseded by SP 800-55 Rev. 1 (July 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152183 ] This document provides guidance on how an organization, through the use of metrics, identifies the adequacy of in-place security controls
Multihop Sensor Network Design for Wideband Communications
This paper presents a master/slave cellular based mobile ad-hoc network architecture for multihop multimedia communications. The proposed network is based on a new paradigm for solving the problem of cluster-based ad-hoc routing when utilizing existing
A Link-Level Simulator of the cdma2000 Reverse-Link Physical Layer
The cdma2000 system is an evolutionary enhancement of the IS-95 standards which support 3G services defined by the International Telecommunications Union(ITU). cdma2000 comes in two phases: 1XRTT and 3XRTT (1X and 3X indicatesthe number of 1.25 MHz wide
A Link-Level Simulator of the CDMA2000 Reverse-Link Layer
This paper presents the design and implementation of a simulation model for the cdma2000 reverse link. The model includes all the radio configurations and their corresponding data rates in accordance with the IS-2000 specifications. The paper first
A Framework for Multi-mode Authentication: Overview and Implementation Guide
The use of mobile handheld devices within the workplace is expanding rapidly. These devices are no longer viewed as coveted gadgets for early technology adopters, but have instead become indispensable tools that offer competitive business advantages for
Specification and Validation of Enterprise Access Control Data for Conformance to Model and Policy Constraints
The effectiveness of an enterprise access control framework depends upon the integrity of the various components or the building blocks used in that framework. The essential components of that framework are: (a) an Enterprise Access Control Model (b) a
Government Smart Card Interoperability Specification, Version 2.1
This Government Smart Card Interoperability Specification (GSC-IS) provides solutions to a number of the interoperability challenges associated with smart card technology. The original version of the GSC-IS (version 1.0, August 2000) was developed by the
An Overview of Issues in Testing Intrusion Detection Systems
While intrusion detection systems are becoming ubiquitous defenses in today's networks, currently we have no comprehensive and scientifically rigorous methodology to test the effectiveness of these systems. This paper explores the types of performance
Picture Password: A Visual Login Technique for Mobile Devices
Adequate user authentication is a persistent problem, particularly with handheld devices, which tend to be highly personal and at the fringes of an organization's influence. Yet, these devices are being used increasingly in corporate settings where they
Silicon Carbide Power MOSFET Model and Parameter Extraction Sequence
A compact circuit simulator model is used to describe the performance of a 2000-V, 5-A 4-H Silicon Carbide (SiC) power DiMOSFET and to perform a detailed comparison with the performance of a widely used 400-V, 5-A Silicon (Si) power MOSFET. The model's
The Role Control Center: Features and Case Studies
Role-based Access Control (RBAC) models have been implemented not only in self-contained resource management products such as DBMSs and Operating Systems but also in a class of products called Enterprise Security Management Systems (ESMS). ESMS products
Banishing Quasiparticles From Josephson-Junction Qubits: Why and How To Do It
Current-biased Josephson junctions are prime candidates for the implementation of quantum bits; however, a present limitation is their coherence time. In this paper we qualitatively describe the role of quasiparticles in decoherence. We discuss two methods
ASSET: Security Assessment Tool for Federal Agencies
This ITL Bulletin describes the features and capabilities of the Automated Security Self-Evaluation Tool (ASSET), ITL's governmentwide IT security assessment tool. ASSET automates the completion of the security questionnaire in NIST Special Publication 800
National Institute of Standards and Technology (Handbook Chapter)
The submission is a chapter describing NIST security standards (FIPS and Special Publication series 800). The author's instructions were that NIST prepare chapter summarizing standards indicating title, dates, publications, and brief summaries.
Hierarachical Restoration Scheme for Multiple Failures in GMPLS Networks
It is expected that GMPLS-based recovery could become a viable option for obtaining faster restoration than layer 3 rerouting. Even though dedicated restoration ensures restorability of connections, exclusive use of dedicated scheme would result in wasting
Broadband Impedance Parameters of Asymmetric Coupled CMOS Interconnects: New Closed-Form Expressions and Comparison with Measurements
New broadband closed-form expressions for the frequencydependent impedance parameters of asymmetric coupled coplanar interconnects on a conductive silicon substrate are presented. The closed-form expressions are based on a complex image approach that
Techniques to Improve the Performance of TCP in a Mixed Bluetooth and WLAN Environment
A major challenge for the WLAN technology stems from having to share the 2.4 GHz ISM band with other wireless devices such as Bluetooth radios. The main goal of this paper is to investigate the use of techniques to mitigate the effects of interference for
On Shortest Random Walks under Adversarial Uncertainty
Finding shortest feasible paths in a weighted graph has numerous applications including admission and routing in communication networks. This paper discusses a game theoretic framework intended to incorporate a concept of path stability into the process of
QoS Recovery Schemes Based on Differentiated MPLS Services in All-Optical Transport Next Generation Internet
The Internet is evolving from best-effort service toward an integrated or differentiated service framework with Quality-of-Service (QoS) assurances that are required for new multimedia service applications. Given this increasing demand for high bandwidth
Traditional approaches to network provisioning assume availability of the reliable estimates for the expected demands. This assumption, however, oversimplifies many practical situations when some incomplete information on the expected demands is available