NIST · ИТ

SP 800-70 Rev. 5

National Checklist Program for IT Products: Guidelines for Checklist Users and Developers

IR 8323 Rev. 2

Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services

SP 800-38F Rev. 1

PRE-DRAFT Call for Comments: Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping

High-Performance Computing (HPC) Security Overlay

High-Performance Computing (HPC) Security Overlay

High-performance computing (HPC) systems provide fundamental computing infrastructure for large-scale and complex simulations, big data analysis, and the training of artificial intelligence (AI) and machine learning (ML) models, all at exceptional speeds

EZ-SAVE: Evaluation of Easy-to-Deploy Source Address Validation Policies

EZ-SAVE: Evaluation of Easy-to-Deploy Source Address Validation Policies

The lack of Source Address Validation (SAV) is a major vulnerability of the Internet, abused in many Denial of Service (DoS) and other attacks. Several IETF RFCs define easy-to-deploy, non-interactive SAV designs; IETF SAVNET group is currently developing

SP 800-234

High-Performance Computing (HPC) Security Overlay

An Open-Source Framework for IEEE 802.11bf Evaluation under Lossy and Jittery Conditions

An Open-Source Framework for IEEE 802.11bf Evaluation under Lossy and Jittery Conditions

Integrated Sensing and Communication (ISAC) is emerging as a key enabler for future wireless systems, offering dual communication and sensing capabilities using the same hardware. One of the most promising realizations of this paradigm is Wi-Fi sensing

End-effector Pose Extrapolation using Wireless Channel State Information

End-effector Pose Extrapolation using Wireless Channel State Information

Wireless communications for real-time control is an emerging field. There are many advantages gained by replacing a wired link with wireless; however, wireless brings unique challenges. Applications may need to be designed with wireless communications in

Foundational Cybersecurity Activities for IoT Product Manufacturers

Foundational Cybersecurity Activities for IoT Product Manufacturers

Internet of Things (IoT) products often lack product cybersecurity capabilities their customers—organizations and individuals—can use to help mitigate their cybersecurity risks. Manufacturers can help their customers by improving the securability of their

IR 8259 Rev. 1

Foundational Cybersecurity Activities for IoT Product Manufacturers

SP 800-133 Rev. 3

Recommendation for Cryptographic Key Generation

SP 1800-40

Automation of the NIST Cryptographic Module Validation Program

CSWP 52

Firmware-Based Monitoring for Bus-Based Computer Systems

CSWP 50

Small Business Cybersecurity: Non-Employer Firms

SP 800-230

Additional SLH-DSA Parameter Sets for Limited Signature Use Cases

Standardized Approach for Assessing Wireless IoT Devices in Millimeter-Wave Industrial Work-Cell Channels

Standardized Approach for Assessing Wireless IoT Devices in Millimeter-Wave Industrial Work-Cell Channels

We present a standardized, repeatable test approach that replicates key features of measured industrial environments in a fully characterized hybrid test chamber. The hybrid chamber consists of an anechoic chamber along with movable metallic spheres that

Information Technology: Data Format for the Interchange of Fingerprint, Facial and Other Biometric Information ANSI/NIST-ITL 1-2025 Revision of ANSI/NIST-ITL 1-2011 Update 2015

Information Technology: Data Format for the Interchange of Fingerprint, Facial and Other Biometric Information ANSI/NIST-ITL 1-2025 Revision of ANSI/NIST-ITL 1-2011 Update 2015

Other

Secure Software Development, Security, and Operations (DevSecOps) Practices

NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide

NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide

This Quick-Start Guide (QSG) draws on concepts and practices from enterprise risk management, cybersecurity risk management, and workforce management to help organizations improve communication about cybersecurity risks and to plan and implement workforce

SP 1347

NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide

SP 1308

NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide

Using Hardware- Enabled Security to Ensure 5G System Platform Integrity Applying 5G Cybersecurity and Privacy Capabilities

Using Hardware- Enabled Security to Ensure 5G System Platform Integrity Applying 5G Cybersecurity and Privacy Capabilities

This white paper provides an overview of employing hardware-enabled [1] security capabilities to provision, measure, attest to, and enforce the integrity of the compute platform to foster trust in a 5G system's server infrastructure. It discusses security

Secure Domain Name System (DNS) Deployment Guide

Secure Domain Name System (DNS) Deployment Guide

This document provides Domain Name System (DNS) deployment guidelines to secure the DNS protocol and infrastructure, mitigate misuse or misconfiguration, and provide an additional layer of network security as part of a zero trust and/or defense-in-depth

Reallocation of Temporary Identities: Applying 5G Cybersecurity and Privacy Capabilities

Reallocation of Temporary Identities: Applying 5G Cybersecurity and Privacy Capabilities

This white paper is part of a series called Applying 5G Cybersecurity and Privacy Capabilities, which covers 5G cybersecurity- and privacy-supporting capabilities that were implemented as part of the 5G Cybersecurity project at the National Cybersecurity

Protecting Subscriber Identifiers with Subscription Concealed Identifier (SUCI) Applying 5G Cybersecurity and Privacy Capabilities

Protecting Subscriber Identifiers with Subscription Concealed Identifier (SUCI) Applying 5G Cybersecurity and Privacy Capabilities

This white paper describes enabling Subscription Concealed Identifier (SUCI) protection, an optional 5G capability which provides important security and privacy protections for subscriber identifiers. 5G network operators are encouraged to enable SUCI on

No SUPI-Based Paging Applying 5G Cybersecurity and Privacy Capabilities

No SUPI-Based Paging Applying 5G Cybersecurity and Privacy Capabilities

This white paper provides an overview of "no Subscription Permanent Identifier (SUPI) based paging," a 5G capability for protecting users from being identified and located by an attacker. Unlike previous generations of cellular systems, new requirements in

Applying 5G Cybersecurity and Privacy Capabilities: Introduction to the White Paper Series

Applying 5G Cybersecurity and Privacy Capabilities: Introduction to the White Paper Series

This document introduces the white paper series titled Applying 5G Cybersecurity and Privacy Capabilities. This series is being published by the National Cybersecurity Center of Excellence (NCCoE) 5G Cybersecurity project. Each paper in the series will

5G Network Security Design Principles: Applying 5G Cybersecurity and Privacy Capabilities

5G Network Security Design Principles: Applying 5G Cybersecurity and Privacy Capabilities

This white paper describes the network infrastructure design principles that commercial and private 5G network operators are encouraged to use to improve cybersecurity and privacy. Such a network infrastructure isolates types of 5G network traffic from

SP 800-81 Rev. 3

Secure Domain Name System (DNS) Deployment Guide

CSWP 36E

5G Network Security Design Principles: Applying 5G Cybersecurity and Privacy Capabilities