ISCMA: An Information Security Continuous Monitoring Program Assessment
This publication describes an example methodology for assessing an organization's Information Security Continuous Monitoring (ISCM) program. It was developed directly from NIST guidance and is applicable to any organization, public or private. It can be
Atividades Fundamentais de Ciberseguranca para Fabricantes de Dispositivos IoT
Os dispositivos da Internet das Coisas (IoT) muitas vezes não possuem recursos de segurança cibernética de acordo com os dispositivos que os seus clientes — organizações e indivíduos — querem usar para ajudar a mitigar riscos de segurança cibernética. Os
Actividades fundamentales de ciberseguridad para los fabricantes de dispositivos de IoT
Los dispositivos de internet de las cosas (IoT) suelen carecer de las capacidades de ciberseguridad de dispositivo que los clientes (organizaciones y personas) pueden usar para mitigar sus riesgos a la ciberseguridad. Los fabricantes pueden ayudar a los
Hotels have become targets for malicious actors wishing to exfiltrate sensitive data, deliver malware, or profit from undetected fraud. Property management systems, which are central to hotel operations, present attractive attack surfaces. This example
A Machine Learning Based Scheme for Dynamic Spectrum Access
In this paper, we present a machine learning (ML) based dynamic spectrum access (DSA) scheme which can be used in a system in which primary user (PU) spectrum occupancy can be represented as a sequence of busy (on) and idle (off) periods. We use real world
Workshop Summary Report for "Cybersecurity Risks in Consumer Home Internet of Things (IoT) Devices" Virtual Workshop
This report provides a summary of the discussion and findings from the NIST Cybersecurity Risks in Consumer Home IoT Devices virtual workshop in October 2020. NIST Interagency Report (NISTIR) 8259, Foundational Cybersecurity Activities for IoT Device
Consideracoes para Gerenciar Riscos de Privacidade e Seguranca Cibernetica na Internet das Coisas (IoT)
A Internet das Coisas (IoT) é uma coleção em rápida evolução e expansão de diversas tecnologias que interagem com o mundo físico. Muitas organizações não estão necessariamente cientes do grande número de dispositivos IoT que já estão usando e como eles
Consideraciones para la gestion de riesgos a la ciberseguridad y la privacidad de internet de las cosas (IoT)
La internet de las cosas (IoT) es un conjunto de diversas tecnologías que evolucionan y se difunden con rapidez, y que interactúan con el mundo físico. Muchas organizaciones no se dan cuenta del gran número de dispositivos de IoT que ya están utilizando
We discuss the measurement of aggregate levels of encounters in a population, a concept we call encounter metrics. Encounter metrics are designed so that they can be deployed while preserving the privacy of individuals. To this end, encounters are labeled
Cybersecurity Standards and Guidelines to Assist Small and Medium-Sized Manufacturers
Cybersecurity standards and guidelines produced by NIST can assist small and medium-sized manufacturers to protect their operational technology from cybersecurity threats. NIST cybersecurity standards, guidelines, and research underway at NIST is described
Intelligent Task Caching in Edge Cloud via Bandit Learning
Task caching, based on edge cloud, aims to meet the latency requirements of computation- intensive and data-intensive tasks (such as augmented reality). However, current task caching strategies are generally based on the unrealistic assumption of knowing
Sensors and Machine Learning Models to Prevent Cooktop Ignition and Ignore Normal Cooking
Cooking equipment is involved in nearly half of home fires in the United States, with cooktop fires the leading cause of deaths and injuries in cooking-related fires. In this study, we evaluate 16 electrochemical, optical, temperature and humidity sensors
Combinatorial Test Generation for Multiple Input Models with Shared Parameters
Combinatorial testing typically considers a single input model and creates a single test set that achieves t-way coverage. This paper addresses the problem of combinatorial test generation for multiple input models with shared parameters. We formally
Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security
Pandemic parallels: What can cybersecurity learn from COVID?
While the threats may appear to be vastly different, further investigation reveals that the cybersecurity community can learn much from the COVID-19 response.
The NIST Phish Scale: Method for rating human phishing detection difficulty
Developed based on over 4 years of NIST phishing training data, the NIST Phish Scale is a DIY method for rating human phishing detection difficulty – key to understanding variability in phishing click rates.