NIST · ИТ

SP 1800-12

Derived Personal Identity Verification (PIV) Credentials

Conference Paper

Quantifying Information Exposure in Internet Routing

Conference Paper

Managed Blockchain Based Cryptocurrencies with Consensus Enforced Rules and Transparency

Voices of First Responders - Identifying Public Safety Communication Problems: Findings from User-Centered Interviews, Phase 1, Volume 1

Voices of First Responders - Identifying Public Safety Communication Problems: Findings from User-Centered Interviews, Phase 1, Volume 1

The public safety community is in the process of transitioning from the use of land mobile radios to a technology ecosystem including a variety of broadband data sharing platforms. Successful deployment and adoption of new communication technology relies

Cybertrust in the IoT Age

Cybertrust in the IoT Age

The Internet of Things generates new opportunities but creates new challenges with respect to trustworthiness. Computing, architecture, and verification changes are inevitable to meet these challenges, particularly if predictions of 20 billion to 50

Journal Article

Cybertrust in the IoT Age

Securing Electronic Health Records on Mobile Devices

Securing Electronic Health Records on Mobile Devices

Health care providers increasingly use mobile devices to receive, store, process, and transmit patient clinical information. According to our own risk analysis, discussed here, and in the experience of many health care providers, mobile devices can present

Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements

Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements

This bulletin summarizes the information found in NIST SP 800-171A: Assessing Security Requirements for Controlled Unclassified Information (CUI) which provides federal and nonfederal organizations with assessment procedures and a methodology that can be

SP 1800-1

Securing Electronic Health Records on Mobile Devices

ITL Bulletin

Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements

IR 8214

Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography

Journal Article

A Survey of Physics-Based Attack Detection in Cyber-Physical Systems

SP 800-163 Rev. 1

Vetting the Security of Mobile Applications

Randomness Classes in Bugs Framework (BF): True-Random Number Bugs (TRN) and Pseudo-Random Number Bugs (PRN)

Randomness Classes in Bugs Framework (BF): True-Random Number Bugs (TRN) and Pseudo-Random Number Bugs (PRN)

Random number generators may have weaknesses (bugs) and the applications using them may become vulnerable to attacks. Formalization of randomness bugs would help researchers and practitioners identify them and avoid security failures. The Bugs Framework

SP 800-131A Rev. 2

Transitioning the Use of Cryptographic Algorithms and Key Lengths

Frequency -and electric field-dependent physical model of ferroelectric materials in the 10s of GHz

Frequency -and electric field-dependent physical model of ferroelectric materials in the 10s of GHz

Ferroelectric materials are attractive for tunable components because their permittivity can be controlled by an applied electric field. The permittivity of these materials depends on frequency, and can have a strongly nonlinear electric field dependence

User Context: An Explanatory Variable in Phishing Susceptibility

User Context: An Explanatory Variable in Phishing Susceptibility

Extensive research has been performed to examine the effectiveness of phishing defenses, but much of this research was performed in laboratory settings. In contrast, this work presents 4.5 years of workplace-situated, embedded phishing email training

In IoT We Trust?

In IoT We Trust?

In this short article, we review an abbreviated list of trust challenges that we foresee as increased adoption transforms the IoT into another ubiquitous technology just as the Internet is. These challenges are in no specific order, and are by no means a

Identity and Access Management for Electric Utilities

Identity and Access Management for Electric Utilities

To protect power generation, transmission, and distribution, energy companies need to control physical and logical access to their resources, including buildings, equipment, information technology (IT), and operational technology (OT). They must

SP 1800-2

Identity and Access Management for Electric Utilities

Journal Article

In IoT We Trust?

Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds

Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds

As today's cloud providers strive to attract customers with better services and less downtime in a highly competitive market, they increasingly rely on remote administrators including those from third party providers for fulfilling regular maintenance

The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form

The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form

This paper describes the evolution of a community-developed, standardized specification language for representing and exchanging information in the broadest possible range of cyber-investigation domains, including digital forensic science, incident

Assessing the Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs

Assessing the Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs

In a business-process-support enterprise network, cyber defense and cyber resilience usually become ineffective and even fail in defeating cyberattacks. One of the primary causes is the ineffectiveness of business process impact assessment in the

SP 800-56B Rev. 2

Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography

Conference Paper

Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds

Conference Paper

Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs

Towards Efficient Offloading in Fog/Edge Computing by Approximating Effect of Externalities

Towards Efficient Offloading in Fog/Edge Computing by Approximating Effect of Externalities

Fog/Edge computing is an emerging architecture, which extends the Cloud computing paradigm to the edge of the network, enabling new applications and services, including Internet of Things (IoT). End devices have certain computation tasks, which can be

Sub-nanosecond Tuning of Microwave Resonators Fabricated on Ruddlesden-Popper Dielectric Thin Films

Sub-nanosecond Tuning of Microwave Resonators Fabricated on Ruddlesden-Popper Dielectric Thin Films

Voltage-tunable dielectric materials are widely used for microwave-frequency signal processing. Among tunable dielectric thin films, (SrTiO3)nSrO Ruddlesden-Popper (RP) superlattices have exceptionally low loss at high frequencies. This paper reports the

Economics of Networked Infrastructures at the Edge of Undesirable Contagion: A Case of SIS Infection

Economics of Networked Infrastructures at the Edge of Undesirable Contagion: A Case of SIS Infection

This paper reports on managing systemic risk of undesirable contagion in a networked system in a practically important case of high losses due to contagion. In this case, both socially optimal as well as selfish investments in the risk mitigation keep the