Metamorphic Testing for Hybrid Simulation Validation
Proper validation of a simulation model is essential to have confidence on its accuracy and credibility. However, many of the most effective approaches for simulation validation require access to data that may not always be available. Metamorphic Testing
Open Media Forensics Challenge (OpenMFC) 2020-2021: Past, Present, and Future
This document describes the online leaderboard public evaluation program, Open Media Forensics Challenge (OpenMFC) 2021-2022. In the report, first, the introduction, objectives, challenges, contributions, and achievements of the evaluation program are
Model-Based Risk Analysis Approach for Network Vulnerability and Security of the Critical Railway Infrastructure
This study focuses on threat modeling, vulnerability analysis, and risk management within the critical railway transportation infrastructure. The Railway Transportation System is a highly complex, national critical infrastructure and its cybersecurity
Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards
This white paper highlights a recent mapping effort between the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards and the NIST Cybersecurity Framework. Mappings of these two frameworks have been
During Fiscal Year 2020 (FY 2020), from October 1, 2019 through September 30, 2020, the NIST Information Technology Laboratory (ITL) Cybersecurity and Privacy Program successfully responded to numerous challenges and opportunities in security and privacy
Baseline Control Systems in the Intelligent Building Agents Laboratory
The goal of the Embedded Intelligence in Buildings program at the National Institute of Standards and Technology (NIST) is to develop and deploy advances in measurement science that will improve building operations to achieve lower operating costs
An exploration of combinatorial testing-based approaches to fault localization for explainable AI
We briefly review properties of explainable AI proposed by various researchers. We take a structural approach to the problem of explainable AI, examine the feasibility of these aspects and extend them where appropriate. Afterwards, we review combinatorial
Machine Learning for Access Control Policy Verification
Access control policy verification ensures that there are no faults within the policy that leak or block access privileges. As a software test, access control policy verification relies on methods such as model proof, data structure, system simulation, and
BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards
In this paper, we first describe the problem space. Following that, we describe the design and implementation of the NIST reference implementation for RPKI-based route origin validation (BGP-OV) and BGPsec path validation (BGP-PV) within a BGP router. The
Towards Absolute Viability Measurements for Bacteria
Quantifying viable, vegetative bacteria is a critical measurand in healthcare diagnostics, food safety, and antimicrobial development. Viability determination has traditionally relied on such techniques as plate counting, colorimetric or fluorescent
Tools, Models and Dataset for IEEE 802.11ay CSI-based Sensing
The ubiquitous deployment and availability of wireless communication devices create the perfect opportunity to provide new wireless local area network (WLAN) use-cases, by implementing new sensing capabilities, while leveraging existing communications
Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance
This report summarizes the feedback received on the work of the NIST Cybersecurity for IoT program on device cybersecurity at a virtual workshop conducted April 22, 2021. NIST conducted the "Workshop Addressing Public Comment on NIST Cybersecurity for IoT
Classifying Memory Bugs Using Bugs Framework Approach
In this work, we present an orthogonal classification of memory corruption bugs, allowing precise structured descriptions of related software vulnerabilities. The Common Weakness Enumeration (CWE) is a well-known and used list of software weaknesses
Real-Time mmWave Channel Sounding Through Switched Beamforming With 3-D Dual-Polarized Phased-Array Antennas
We propose a 28.5-GHz channel sounder that switches through all antennas of multiple dual-polarized 8×8 phased arrays at the transmitter and receiver and performs beamforming in postprocessing through digital weights to synthesize a sweepable beam. To our