⌕ Поиск по атласу

NIST · ИТ

Выбранные официальные каталоги по ИТ, безопасности, приватности, ИИ и связи.

Реестр · 6 880 документов

Enterprise Impact of Information & Communications Technology Risk

Enterprise Impact of Information & Communications Technology Risk

All enterprises should ensure that information and communications technology (ICT) risk receives appropriate attention within their enterprise risk management (ERM) programs. This document is intended to help individual organizations within an enterprise

SP 800-221

Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio

SP 800-221A

Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

SP 800-140B Rev. 1

Cryptographic Module Validation Program (CMVP) Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B

NIST Phish Scale User Guide

NIST Phish Scale User Guide

The phishing cyber threat exploits vulnerabilities in the U.S. and around the world across private and public sectors. Embedded phishing awareness training programs, where simulated phishing emails are sent to employees, are designed to prepare employees

Analysis of Neural Network Detectors for Network Attacks

Analysis of Neural Network Detectors for Network Attacks

While network attacks play a critical role in many advanced persistent threat (APT) campaigns, an arms race exists between the network defenders and the adversary: to make APT campaigns stealthy, the adversary is strongly motivated to evade the detection

TN 2276

NIST Phish Scale User Guide

Journal Article

Analysis of Neural Network Detectors for Network Attacks

IR 8496

Data Classification Concepts and Considerations for Improving Data Protection

SP 800-171 Rev. 3

Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

SP 800-171A Rev. 3

Assessing Security Requirements for Controlled Unclassified Information

Labeling Software Security Vulnerabilities - Poster

Labeling Software Security Vulnerabilities - Poster

Motivation: Crucial need for systematic comprehensive labeling of the more than 228 000 publicly disclosed cybersecurity CVE vulnerabilities to enable advances in modern AI cybersecurity research. Objective: Utilize the Bugs Framework (BF) formalism for BF

Bugs Framework (BF) - Poster

Bugs Framework (BF) - Poster

Motivation: Crucial need of a formal classification system allowing unambiguous specification of software security bugs and weaknesses, and the vulnerabilities that exploit them. Objective: Create bug models, weakness taxonomies, and vulnerability models

Bug, Fault, Error, Weakness, or Vulnerability - Poster

Bug, Fault, Error, Weakness, or Vulnerability - Poster

Motivation: Software security vulnerabilities are leveraged to attack cyberspace and critical infrastructure, leading to security failures. When communicating about them, however, even security experts might conflate essential related software concepts

SP 1800-36

Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security

Security Analysis of Trust on the Controller in the Matter Protocol

Security Analysis of Trust on the Controller in the Matter Protocol

Matter is an open-source connectivity standard for the purpose of allowing smart home IoT devices from different vendors to interoperate with one another. A controller in a Matter system commissions new devices into the Matter fabric. The device needs to

Conference Paper

Security Analysis of Trust on the Controller in the Matter Protocol

Energy-Efficient Access Point Deployment for Industrial IoT Systems

Energy-Efficient Access Point Deployment for Industrial IoT Systems

Internet of Things (IoT) technologies have impacted many fields by opening up much deeper and more extensive integration of communications connectivity, sensing, and embedded processing. The industrial sector is among the areas that have been impacted

Other

Meta learning with language models: Challenges and opportunities in the classification of imbalanced text

Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure

Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure

This document is the Cybersecurity Framework Profile (Profile) developed for the Electric Vehicle Extreme Fast Charging (EV/XFC) ecosystem and the subsidiary functions that support each of the four domains: (i) Electric Vehicles (EV); (ii) Extreme Fast

IR 8473

Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure

SP 800-92 Rev. 1

Cybersecurity Log Management Planning Guide

Cybersecurity Framework Profile for Liquefied Natural Gas

Cybersecurity Framework Profile for Liquefied Natural Gas

This document is the Cybersecurity Framework Profile developed for the Liquefied Natural Gas (LNG) industry and the subsidiary functions that support the overarching liquefaction process, transport, and distribution of LNG. The LNG Cybersecurity Framework

IR 8406

Cybersecurity Framework Profile for Liquefied Natural Gas

Other 2023/1535

A Total Break of the 3WISE Digital Signature Scheme

Capture and Analysis of Traffic Traces on a Wide-Area NDN Testbed

Capture and Analysis of Traffic Traces on a Wide-Area NDN Testbed

High-quality network traffic measurements from realistic network deployments are crucial to analyze and better understand emerging network technologies for the purpose of maturing them. However, achieving this measurement goal for the Named Data Networking

2022 OpenFAD Evaluation Plan (Open Fine-grained Activity Detection)

2022 OpenFAD Evaluation Plan (Open Fine-grained Activity Detection)

This document describes an evaluation of the 2022 Open Fine-grained Activity Detection (OpenFAD) challenge. The evaluation plan covers resources, task definitions, task conditions, file formats for system inputs and outputs, evaluation metrics, scoring

Other 2023/1481

A Total Break of the Scrap Digital Signature Scheme

Labeling Software Security Vulnerabilities

Labeling Software Security Vulnerabilities

Labeling software security vulnerabilities would benefit greatly modern artificial intelligence cybersecurity research. The National Vulnerability Database (NVD) partially achieves this via assignment of Common Weakness Enumeration (CWE) entries to Common