NIST · ИТ

IR 8240

Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process

Conference Paper

Determining Forensic Data Requirements for Detecting Hypervisor Attacks

A Method-Level Test Generation Framework for Debugging Big Data Applications

A Method-Level Test Generation Framework for Debugging Big Data Applications

Big data applications are now widely used to process massive amounts of data we create every day. When a failure occurs in a big data application, debugging at the system-level input can be expensive due to the large amount of data being processed. This

A Method Level Test Generation Framework for Debugging Big Data Applications

A Method Level Test Generation Framework for Debugging Big Data Applications

When a failure occurs in a big data application, debugging with the original dataset can be difficult due to the large amount of data being processed. This paper introduces a framework for effectively generating method-level tests to facilitate debugging

Possible hundredfold enhancement in the direct magnetic coupling of a single-atom electron spin to a circuit resonator

Possible hundredfold enhancement in the direct magnetic coupling of a single-atom electron spin to a circuit resonator

We report on the challenges and limitations of direct coupling of the magnetic eld from a circuit resonator to an electron spin bound to a donor potential. We propose a device consisting of a lumped-element superconducting resonator and a single donor

Threat Modeling for Cloud Infrastructures

Threat Modeling for Cloud Infrastructures

Today's businesses are increasingly relying on the cloud as an alternative IT solution due to its flexibility and lower cost. Compared to traditional enterprise networks, a cloud infrastructure is typically much larger and more complex. Understanding the

Network Attack Surface: Lifting the Attack Surface Concept to Network Level for Evaluating the Resilience against Zero-Day Attacks

Network Attack Surface: Lifting the Attack Surface Concept to Network Level for Evaluating the Resilience against Zero-Day Attacks

The concept of attack surface has seen many applications in various domains, e.g., software security, cloud security, mobile device security, Moving Target Defense (MTD), etc. However, in contrast to the original attack surface metric, which is formally

Generating Domain Terminologies using Root- and Rule-Based Terms

Generating Domain Terminologies using Root- and Rule-Based Terms

Motivated by the need for exible, intuitive, reusable, and normalized ter- minology for the semantic web, we present a general approach for generat- ing sets of such terminologies from nat- ural language documents. The terms that this approach generates

Journal Article

Threat Modeling for Cloud Infrastructures

Journal Article

Network Attack Surface: Lifting the Attack Surface Concept to Network Level for Evaluating the Resilience against Zero-Day Attacks

Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

This publication describes the Risk Management Framework (RMF) and provides guidelines for applying the RMF to information systems and organizations. The RMF provides a disciplined, structured, and flexible process for managing security and privacy risk

SP 800-37 Rev. 2

Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

Securing Wireless Infusion Pumps

Securing Wireless Infusion Pumps

This bulletin summarizes the information found in NIST SP 1800-8: Securing Wireless Infusion Pumps in Healthcare Delivery Organizations which discusses the cybersecurity risks associated with medical devices, such as infusion pumps, which -- in today’s

ITL Bulletin

Securing Wireless Infusion Pumps

A New SCAP Information Model and Data Model for Content Authors

A New SCAP Information Model and Data Model for Content Authors

The Security Content Automation Protocol (SCAP) data model for source data stream collections standardizes the packaging of security content into self-contained bundles for easy deployment. But no single data model can satisfy all requirements. The source

SP 800-189

Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation

IR 8241

Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs

Scalable method to find the shortest path in a graph with circuits of memristors

Scalable method to find the shortest path in a graph with circuits of memristors

Finding the shortest path in a graph has applications to a wide range of optimization problems. However, algorithmic methods scale with the size of the graph in terms of time and energy. We propose a method to solve the shortest path problem using circuits

Book Section

Comprehensive Security Assurance Measures for Virtualized Server Environments

Exact Moments of Mutual Information of Jacobi MIMO Channels in High-SNR Regime

Exact Moments of Mutual Information of Jacobi MIMO Channels in High-SNR Regime

In this paper, we propose an analytical framework to derive all positive integer moments of MIMO mutual information in high-SNR regime. The approach is based on efficient use of the underlying matrix integrals of the high-SNR mutual information. As an

Conference Paper

A Method-Level Test Generation Framework for Debugging Big Data Applications

Comprehensive Security Assurance Measures for Virtualized Server Environments

Comprehensive Security Assurance Measures for Virtualized Server Environments

Server or Hardware virtualization is an established technology in data centers used for supporting enterprise IT resources as well as cloud services. The components of this virtualized server environment are: (a) A hardware with features to support

Automation Support for Security Control Assessments: Software Asset Management

Automation Support for Security Control Assessments: Software Asset Management

The NISTIR 8011 volumes focus on each individual information security capability, adding tangible detail to the more general overview given in NISTIR 8011 Volume 1, and providing a template for transition to a detailed, NIST standards-compliant automated

IR 8011 Vol. 3

Automation Support for Security Control Assessments: Software Asset Management

IR 8196

Security Analysis of First Responder Mobile and Wearable Devices

The Trouble with Terms

The Trouble with Terms

Thousands of new words have been invented in the last decade to help us talk about technology. An analysis of the NIST glossary database shows insights into how we invent and define these words, and the impact of those definitions.

Journal Article

Toward Cyberresiliency in the Context of Cloud Computing

Journal Article

The Trouble with Terms

Towards Cyber Resiliency in the Context of Cloud Computing

Towards Cyber Resiliency in the Context of Cloud Computing

Correct and accurate mission impact assessment is the essential prerequisite of mission-aware cyber resilience. However, an overlooked gap has been existing between mission impact assessment and cyber resilience. This article attempts to bridge the gap by

Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT)

Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT)

The Interagency International Cybersecurity Standardization Working Group (IICS WG) was established in December 2015 by the National Security Council's Cyber Interagency Policy Committee (NSC Cyber IPC). Its purpose is to coordinate on major issues in