NIST · ИТ

Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements

Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements

This report defines the requirements and associated test procedures necessary for products or modules to achieve one or more Security Content Automation Protocol (SCAP) validations. Validation is awarded based on a defined set of SCAP capabilities by

IR 7511 Rev. 5

Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements

Codes for the Identification of Federal and Federally-Assisted Organizations

Codes for the Identification of Federal and Federally-Assisted Organizations

The Homeland Security Presidential Directive HSPD-12 called for new standards to be adopted governing the interoperable use of identity credentials to allow physical and logical access to Federal government locations and systems. The Personal Identity

SP 800-87 Rev. 2

Codes for Identification of Federal and Federally-Assisted Organizations

A Software Assurance Reference Dataset: Thousands of Programs With Known Bugs

A Software Assurance Reference Dataset: Thousands of Programs With Known Bugs

The Software Assurance Reference Dataset (SARD) is a growing collection of over 170 000 programs with precisely located bugs. The programs are in C, C++, Java, PHP, and C# and cover more than 150 classes of weaknesses, such as SQL injection, cross-site

Framework for Improving Critical Infrastructure Cybersecurity Version 1.1

Framework for Improving Critical Infrastructure Cybersecurity Version 1.1

This publication describes a voluntary risk management framework ("the Framework") that consists of standards, guidelines, and best practices to manage cybersecurity-related risk. The Framework's prioritized, flexible, and cost-effective approach helps to

SP 800-56C Rev. 1

Recommendation for Key-Derivation Methods in Key-Establishment Schemes

SP 800-56A Rev. 3

Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography

SP 1800-13

Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders

Journal Article

Bad Security Metrics Part 2: Solutions

Journal Article

A Software Assurance Reference Dataset: Thousands of Programs With Known Bugs

CSWP 6

Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1

Poster: What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors?

Poster: What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors?

The analysis reported in this poster developed from questions that arose in discussions of the Reducing Software Vulnerabilities working group, sponsored by the White House Office of Science and Technology Policy in 2016 [1]. The key question we sought to

Combinatorial Security Testing Course

Combinatorial Security Testing Course

Combinatorial methods have attracted attention as a means of providing strong assurance at reduced cost, but when are these methods practical and cost-effective? This tutorial comprises two parts. The first introductory part will briefly explain the back-

SP 800-125A Rev. 1

Security Recommendations for Server-based Hypervisor Platforms

Conference Paper

What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors? [poster]

Conference Paper

Combinatorial Security Testing Course

IR 8179

Criticality Analysis Process Model: Prioritizing Systems and Components

Conference Paper

HFERP - A New Multivariate Encryption Scheme

Conference Paper

Improved Cryptanalysis of HFEv- via Projection

Superconducting optoelectronic networks II: receiver circuits

Superconducting optoelectronic networks II: receiver circuits

Circuits using superconducting single-photon detectors and Josephson junctions to perform signal reception, synaptic weighting, and integration are investigated. The circuits convert photon-detection events into flux quanta, the number of which is

Superconducting optoelectronic networks I: general principles

Superconducting optoelectronic networks I: general principles

The design of neural hardware is informed by the prominence of differentiated processing and information integration in cognitive systems. The central role of communication leads to the principal assumption of the hardware platform: signals between neurons

SP 800-57 Part 2 Rev. 1

Recommendation for Key Management, Part 2: Best Practices for Key Management Organization

IR 8011 Vol. 3

Automation Support for Security Control Assessments: Software Asset Management

Journal Article

The Multiplicative Complexity of 6-variable Boolean Functions

Improved Cryptanalysis of HFEv- via Projection

Improved Cryptanalysis of HFEv- via Projection

The HFEv- signature scheme is one of the most studied multivariate schemes and one of the major candidates for the upcoming standardization of post-quantum digital signature schemes. In this paper, we propose three new attack strategies against HFEv-, each

HFERP -- A New Multivariate Encryption Scheme

HFERP -- A New Multivariate Encryption Scheme

In 2016, Yasuda et al.presented a new multivariate encryption technique based on the Square and Rainbow primitives and utilizing the plus modifier that they called SRP. The scheme achieved a smaller blow-up factor between the plaintext space and ciphertext

Safeguards for Securing Virtualized Servers

Safeguards for Securing Virtualized Servers

This bulletin summarizes the information found in NIST SP 800-125A: Security Recommendations for Hypervisor Deployment on Servers, which provides technical guidelines regarding the secure execution of baseline functions of the hypervisor and are therefore

ITL Bulletin

Safeguards for Securing Virtualized Servers

Testing IoT Systems

Testing IoT Systems

The ability to test systems that are based on the underlying products and services commonly referred to as the Internet of 'things' (IoT) is discussed. The role of a static metric that can be applied to design, architectures, hardware, 'things', and