NIST · ИТ

SP 800-204B

Attribute-based Access Control for Microservices-based Applications using a Service Mesh

Other

The membership problem for constant-sized quantum correlations is undecidable

Experimental comparison of performance monitoring using neural networks trained with parameters derived from delay-tap plots and eye diagrams

Experimental comparison of performance monitoring using neural networks trained with parameters derived from delay-tap plots and eye diagrams

We experimentally demonstrate the use of artificial neural networks trained with parameters derived from both delay-tap plots and eye diagrams for multi-impairment monitoring in a 40-Gbit/s non-return-to-zero on-off keying system.

Other

Toward a PEC Use-Case Suite

A system of quantities from software metrology

A system of quantities from software metrology

International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 80000, the International System of Quantities, collects and organizes the most important physical quantities into a coherent system of quantities whose

Workshop Summary Report for "Building the Federal Profile for IoT Device Cybersecurity" Virtual Workshop

Workshop Summary Report for "Building the Federal Profile for IoT Device Cybersecurity" Virtual Workshop

This report summarizes the feedback received on the work of the NIST Cybersecurity for IoT program on device cybersecurity at a virtual workshop in July 2020. NISTIR 8259, Foundational Cybersecurity Activities for IoT Device Manufacturers and NISTIR 8259A

IR 8322

Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop

Requirements Analysis of Large Policy Corpora

Requirements Analysis of Large Policy Corpora

Regulators, policy makers, and consumers are interested in proactively identifying services with acceptable or compliant data use policies, privacy policies, and terms of service. Academic requirements engineering researchers and legal scholars have

Securing Picture Archiving and Communication System (PACS) Cybersecurity for the Healthcare Sector

Securing Picture Archiving and Communication System (PACS) Cybersecurity for the Healthcare Sector

Medical imaging plays an important role in diagnosing and treating patients. The system that manages medical images is known as the picture archiving communication system (PACS) and is nearly ubiquitous in healthcare environments. PACS is defined by the

SP 1800-24

Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector

Conference Paper

Apply Quantum Search to the Safety Check for Mono Operational Attribute Based Protection Systems

An Integrated Set of XML Tools User Guide

An Integrated Set of XML Tools User Guide

This user guide describes an integrated set of C++ software tools for manipulating XML (eXtensible Markup Language) schemas and XML instance files. The tools are: - xmlSchemaParser - parses and reformats XML schema files, prints type derivation hierarchies

Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers

Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers

The purpose of this document is to leverage the strength of technical knowledge provided by the Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs) and the application of consistent and unbiased CVE record metadata provided by the

SP 800-213

IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements

IR 8259D

Profile Using the IoT Core Baseline and Non-Technical Baseline for the Federal Government

IR 8259C

Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline

IR 8259B

IoT Non-Technical Supporting Capability Core Baseline

IR 8246

Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers

IR 8286A

Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management (ERM)

Technical Language Processing: Unlocking Maintenance Knowledge

Technical Language Processing: Unlocking Maintenance Knowledge

Out-of-the-box natural-language processing (NLP) pipelines need re-imagining to understand and meet the requirements of the engineering sector. Text-based documents account for a significant portion of data collected during the life cycle of asset

Control Baselines for Information Systems and Organizations

Control Baselines for Information Systems and Organizations

This publication provides security and privacy control baselines for the Federal Government. There are three security control baselines (one for each system impact level: low-impact, moderate- impact, and high-impact), as well as a privacy baseline that is

Security and Privacy Controls for Information Systems and Organizations

Security and Privacy Controls for Information Systems and Organizations

This publication provides a catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and the Nation from a diverse set of threats and risks

SP 800-53 Rev. 5

Security and Privacy Controls for Information Systems and Organizations

SP 800-53B

Control Baselines for Information Systems and Organizations

Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

Ransomware, destructive malware, insider threats, and even honest user mistakes present ongoing threats to organizations. Organizations' data, such as database records, system files, configurations, user files, applications, and customer data, are all

Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events

Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events

Ransomware, destructive malware, insider threats, and even honest mistakes present an ongoing threat to organizations that manage data in various forms. Database records and structure, system files, configurations, user files, application code, and

SP 1800-26

Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events

SP 1800-25

Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

Smart Home Consumers' Privacy and Security Perceptions & Practices

Smart Home Consumers' Privacy and Security Perceptions & Practices

Smart home technologies may expose adopters to increased risk to network security, information privacy, and physical safety. However, consumers may lack understanding of the privacy and security implications, while devices fail to provide transparency and

IR 8320A

Hardware-Enabled Security: Container Platform Security Prototype