NIST · ИТ

Conference Paper

Peering into the Phish Bowl: An Analysis of Real-World Phishing Cues

Mind the Gap: Exploring Human-Centered Security Researcher-Practitioner Interactions (Extended Abstract)

Mind the Gap: Exploring Human-Centered Security Researcher-Practitioner Interactions (Extended Abstract)

Our work-in-progress study aims to develop an understanding of current researcher-practitioner interaction points and associated challenges throughout the entire human-centered security research life cycle.

Cybersecurity Definitions for Non-Experts

Cybersecurity Definitions for Non-Experts

Despite the importance of cybersecurity, there is no standard definition nor common terminology for explaining cybersecurity. Existing definitions largely target academics or technical experts but not non-experts (those without cybersecurity proficiency)

Conference Paper

Mind the Gap: Exploring Human-Centered Security Researcher-Practitioner Interactions (Extended Abstract)

Conference Paper

How to Scale a Phish: An Investigation into the Use of the NIST Phish Scale

Conference Paper

Cybersecurity Definitions for Non-Experts

Towards 5G New Radio Sidelink Communications: a Versatile Link-Level Simulator and Performance Evaluation

Towards 5G New Radio Sidelink Communications: a Versatile Link-Level Simulator and Performance Evaluation

Sidelink in cellular networks enables direct exchange of data packets between devices without the need for network infrastructure, resulting in various benefits, including communication in out-of-coverage areas and potential significantly reduced latency

Development of a Bias Compensating Q-Learning Controller for a Multi-Zone HVAC Facility

Development of a Bias Compensating Q-Learning Controller for a Multi-Zone HVAC Facility

We present the development of a bias compensating reinforcement learning (RL) algorithm that optimizes thermal comfort (by minimizing tracking error) and control utilization (by penalizing setpoint deviations) in a multi-zone heating, ventilation, and air

Critical Software Security Weaknesses

Critical Software Security Weaknesses

In this work, we append our historical study on the most significant software security weaknesses, re-evaluate our findings, and look closely at the Injection and Memory Corruption/Disclosure weaknesses through the NIST Bugs Framework (BF) lenses. Our goal

Retrieval of Raman signals from broadband CARS intensity measurements using an autoencoder trained with a prior excitation function

Retrieval of Raman signals from broadband CARS intensity measurements using an autoencoder trained with a prior excitation function

Broadband coherent anti-Stokes Raman scattering (BCARS) is capable of producing high-quality Raman spectra spanning broad bandwidths, 400–4000 cm−1, with millisecond acquisition times. Raw BCARS spectra, however, are a coherent combination of vibrationally

Conference Paper

Analyzing Cybersecurity Definitions for Non-experts

Introduction to Cybersecurity for Commercial Satellite Operations

Introduction to Cybersecurity for Commercial Satellite Operations

Space is a newly emerging commercial critical infrastructure sector that is no longer the domain of only national government authorities. Space is an inherently risky environment in which to operate, so cybersecurity risks involving commercial space –

A Deep Learning Framework for Industrial Wireless Networks

A Deep Learning Framework for Industrial Wireless Networks

In this report, we introduce a framework to analyze, monitor, and identify the state of industrial wireless networks and their impact on industrial use cases. This framework is based on a deep learning approach for modeling the interactions between the

CMVP Approved Sensitive Security Parameter Generation and Establishment Methods

CMVP Approved Sensitive Security Parameter Generation and Establishment Methods

The approved sensitive security parameter generation and establishment methods listed in this publication replace the ones listed in International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 19790 Annex D and ISO

CMVP Approved Security Functions

CMVP Approved Security Functions

The approved security functions listed in this publication replace the ones listed in International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 19790 Annex C and ISO/IEC 24759 6.15, within the context of the

SP 800-140D Rev. 2

Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759

SP 800-140C Rev. 2

Cryptographic Module Validation Program (CMVP)-Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759

IR 8270

Introduction to Cybersecurity for Commercial Satellite Operations

Enabling FAIR Data in Additive Manufacturing to Accelerate Industrialization

Enabling FAIR Data in Additive Manufacturing to Accelerate Industrialization

Additive manufacturing (AM) is an important enabler of Industry 4.0 but there are several hurdles that need to be overcome to fully realize the potential of AM. These challenges include the need for a data infrastructure to enable the scaling of the

'They're not risky' vs 'It can ruin your whole life': How youth/parent dyads differ in their understandings of online risk

'They're not risky' vs 'It can ruin your whole life': How youth/parent dyads differ in their understandings of online risk

Encountering and/or engaging in risky online behavior is an inherent aspect of being an online user. In particular, youth are vulnerable to such risky be-havior, making it important to know how they understand and think about this risk-taking behavior

Smart Home Device Loss of Support: Consumer Perspectives and Preferences

Smart Home Device Loss of Support: Consumer Perspectives and Preferences

Unsupported smart home devices can pose serious safety and security issues for consumers. However, unpatched and vulnerable devices may remain connected because consumers may not be alerted that their devices are no longer supported or do not understand

Parents, passwords, and parenting: How parents think about passwords and are involved in their children's password practices

Parents, passwords, and parenting: How parents think about passwords and are involved in their children's password practices

Though much is known about how adults understand and use passwords, little research attention has been paid specifically to parents or, more importantly, to how parents influence their children's password practices. To better understand both the password

Data Guardians: Behaviors and Challenges While Caring for Others' Personal Data

Data Guardians: Behaviors and Challenges While Caring for Others' Personal Data

Many professional domains require the collection and use of personal data. Protecting systems and data is a major concern in these settings, necessitating that workers who handle personal data under- stand and practice good security and privacy habits

SP 800-219 Rev. 1

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

Jim, Our Mentor: Inspiring Our Data-driven Sensitivity Analysis for Real-world Problems and Our Lives

Jim, Our Mentor: Inspiring Our Data-driven Sensitivity Analysis for Real-world Problems and Our Lives

Jim Filliben has inspired many scientists in a variety of domains across the National Institute of Standard and Technology (NIST) with his statistical data analysis. In our talk we will highlight the impact of his insights and methodologies on our projects

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

The macOS Security Compliance Project (mSCP) provides resources that system administrators, security professionals, security policy authors, information security officers, and auditors can leverage to secure and assess macOS desktop and laptop system

SP 1800-35

Implementing a Zero Trust Architecture

Conference Paper

Measuring the Effectiveness of U.S. Government Security Awareness Programs: A Mixed-Methods Study

RECENT DEVELOPMENTS IN ONTOLOGY STANDARDS AND THEIR APPLICABILITY TO BIOMANUFACTURING

RECENT DEVELOPMENTS IN ONTOLOGY STANDARDS AND THEIR APPLICABILITY TO BIOMANUFACTURING

ISO and IEC have jointly initiated, and recently issued, a series of standards (the ISO/IEC 21838 series) for top-level ontologies. These standards have been used by industrial consortia to develop and disseminate standards for mid-level ontologies to ease

IR 8473

Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure