NIST · ИТ

SP 800-100 Rev. 1

PRE-DRAFT Call for Comments | Information Security Handbook: A Guide for Managers

Design Trends in Lightweight Ciphers

Design Trends in Lightweight Ciphers

Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations

Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations

This NIST AI report develops a taxonomy of concepts and defines terminology in the field of adversarial machine learning (AML). The taxonomy is built on survey of the AML literature and is arranged in a conceptual hierarchy that includes key types of ML

AI 100-2 E2023

Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations

Towards Opportunistic Radar Sensing Using Millimeter-wave WiFi

Towards Opportunistic Radar Sensing Using Millimeter-wave WiFi

Sensing with communication waveforms has drawn growing interest thanks to the ubiquitous availability of wireless networks. However, the required sensing resources may not always be available in a communication system. In addition, the communication system

Employing Word-Embedding for Schema Matching in Standard Lifecycle Management

Employing Word-Embedding for Schema Matching in Standard Lifecycle Management

Today, businesses rely on numerous information systems to achieve their production goals and improve their global competitiveness. Semantically integrating those systems is essential for businesses to achieve both. To do so, businesses must rely on

System-Level Evaluation of 5G NR UE-Based Relays

System-Level Evaluation of 5G NR UE-Based Relays

The notion of UE-based relays started with the introduction of Proximity Services (ProSe) and Device-to-Device (D2D) communication, and evolved with the adaptation of the Fifth Generation (5G) New Radio (NR) interface. While the main goal of relays is to

Overview and Considerations of Access Control Based on Attribute Encryption

Overview and Considerations of Access Control Based on Attribute Encryption

Encryption technology can be incorporated into access control mechanisms based on user identities, user attributes, or resource attributes. Traditional public-key encryption requires different data to have different keys that can be distributed to users

Cybersecurity of Genomic Data

Cybersecurity of Genomic Data

Genomic data has enabled the rapid growth of the U.S. bioeconomy and is valuable to the individual, industry, and government because it has multiple intrinsic properties that in combination make it different from other types of high value data which

IR 8450

Overview and Considerations of Access Control Based on Attribute Encryption

IR 8432

Cybersecurity of Genomic Data

Raytracing Digital Trees at Millimeter-Wave: Calibration Against 60 GHz Channel Measurements in Summer and Winter

Raytracing Digital Trees at Millimeter-Wave: Calibration Against 60 GHz Channel Measurements in Summer and Winter

Accurate channel propagation modeling of foliage is critical to the design and deployment of wireless networks, given its pervasive nature in rural, suburban, and urban environments. Its blockage effects can be particularly devastating at millimeter-wave

SP 1800-38

Migration to Post-Quantum Cryptography: Preparation for Considering the Implementation and Adoption of Quantum Safe Cryptography

Enhancing Digital Twins with Advances in Simulation and Artificial Intelligence: Opportunities and Challenges

Enhancing Digital Twins with Advances in Simulation and Artificial Intelligence: Opportunities and Challenges

Simulations are used to investigate physical systems. A digital twin goes beyond this by connecting a simulation with the physical system with the purpose of analyzing and controlling that system in real-time. In the past five years, there has been a

Artificial Intelligence Driven Experiments at User Facilities

Artificial Intelligence Driven Experiments at User Facilities

n/a

SP 800-79 Rev. 3

Guidelines for the Authorization of PIV Card and Derived PIV Credential Issuers

SP 1800-29

Data Confidentiality: Detect, Respond to, and Recover from Data Breaches

SP 1800-28

Data Confidentiality: Identifying and Protecting Assets Against Data Breaches

SP 800-226

Guidelines for Evaluating Differential Privacy Guarantees

The Design and Application of a Unified Ontology for Cyber Security

The Design and Application of a Unified Ontology for Cyber Security

Ontology enables semantic interoperability, making it highly valuable for cyber threat hunting. Community-driven frameworks like MITRE ATT&CK, D3FEND, ENGAGE, CWE and CVE have been developed to combat cyber threats. However, manually navigating these

Automation Support for Control Assessments - Project Update and Vision

Automation Support for Control Assessments - Project Update and Vision

In 2017, NIST published a methodology for supporting the automation of SP 800-53 control assessments in the form of IR 8011. IR 8011 is a multi-volume series that starts with an overview of the methodology (volume 1) and provides guidance and

CSWP 30

Automation Support for Control Assessments: Project Update and Vision

Usability and Accessibility of Electronic Pollbooks, Part 2: A Usability Test Protocol

Usability and Accessibility of Electronic Pollbooks, Part 2: A Usability Test Protocol

This document is the second part of a series of documents on the usability of electronic pollbooks. It contains a procedure for how e-pollbooks might be evaluated, including a preliminary protocol for running a usability test. It can be used by people

Conference Paper

The Design and Application of a Unified Ontology for Cyber Security

Usability and Accessibility of Electronic Pollbooks, Part 1: Usability in the Polling Place

Usability and Accessibility of Electronic Pollbooks, Part 1: Usability in the Polling Place

This publication is a report on the exploration of the use of electronic pollbooks (e-pollbooks) in elections. The scope of this report is on usability and accessibility of e-pollbooks, that is, their use by poll workers and voters, rather than on

Transferability Analysis of Data-Driven Additive Manufacturing Knowledge: A Case Study Between Powder Bed Fusion and Directed Energy Deposition

Transferability Analysis of Data-Driven Additive Manufacturing Knowledge: A Case Study Between Powder Bed Fusion and Directed Energy Deposition

Data-driven research in Additive Manufacturing (AM) has gained significant success in recent years. This has led to a plethora of scientific literature to emerge. The knowledge in these works consists of AM and Artificial Intelligence (AI) contexts that

Knowledge Management for Data Analytics in Additive Manufacturing

Knowledge Management for Data Analytics in Additive Manufacturing

As a multi-staged digital manufacturing process, Additive manufacturing (AM) inherently benefits from data analytics (DA) decision-making opportunities. The abundance of data associated with the various observations and measurements taken throughout the

Facilitating Stakeholder Communication around AI-Enabled Systems and Business Processes

Facilitating Stakeholder Communication around AI-Enabled Systems and Business Processes

Artificial Intelligence (AI) is often critical to the success of modern business processes. Leveraging it, however, is non-trivial. A major hurdle is communication: discussing system requirements among stakeholders with different backgrounds and goals

Robust Measurements for RF Fingerprinting with Constellation Patterns of Radiated Waveforms

Robust Measurements for RF Fingerprinting with Constellation Patterns of Radiated Waveforms

We introduce a type of RF fingerprint for nondestructive, cellular device identification. The new fingerprinting algorithm, termed Eigenphones, is a data-driven technique based on a singular value decomposition of a user equipment's symbol-constellation

Information and Communications Technology (ICT) Risk Outcomes

Information and Communications Technology (ICT) Risk Outcomes

The increasing frequency, creativity, and severity of technology attacks means that all enterprises should ensure that information and communications technology (ICT) risk is receiving appropriate attention within their enterprise risk management (ERM)