NIST · ИТ

SP 800-63-3

Digital Identity Guidelines

Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations [including updates as of 11-28-2017]

Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations [including updates as of 11-28-2017]

[Superseded by SP 800-171 Rev. 1 (December 2016, updated 02/20/2018): https://doi.org/10.6028/NIST.SP.800-171r1 ] The protection of Controlled Unclassified Information (CUI) while residing in nonfederal information systems and organizations is of paramount

SP 800-171 Rev. 1

Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

SP 800-171A

Assessing Security Requirements for Controlled Unclassified Information

Project Description

Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

Project Description

Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events

Journal Article

It Doesn't Have to Be Like This: Cybersecurity Vulnerability Trends

Towards a Hybrid Human-Computer Scientific Information Extraction Pipeline

Towards a Hybrid Human-Computer Scientific Information Extraction Pipeline

The emerging field of materials informatics has the potential to greatly reduce time-to-market and development costs for new materials. The success of such efforts hinges on access to large, high-quality databases of material properties. However, many such

ITL Bulletin

Guidance on TDEA Block Ciphers

Challenges to Automating Security Configuration Checklists in Manufacturing Environments

Challenges to Automating Security Configuration Checklists in Manufacturing Environments

Information technology is essential for today's manufacturing systems, making them more vulnerable to cybersecurity threats than ever before. This paper discusses the challenge of developing automatable configuration checklists for the manufacturing

NIST MEP CYBERSECURITY Self-Assessment Handbook for Assessing NIST SP 800-171 Security Requirements in Response to DFARS Cybersecurity Requirements

NIST MEP CYBERSECURITY Self-Assessment Handbook for Assessing NIST SP 800-171 Security Requirements in Response to DFARS Cybersecurity Requirements

This Handbook provides guidance on implementing NIST SP 800-171 in response to the Defense Federal Acquisition Regulation Supplement (DFARS) clause 202.254-7012 "Safeguarding Covered Defense Information and Cyber Incident Reporting." The Handbook provides

SP 800-67 Rev. 2

Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher

SP 800-52 Rev. 2

Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations

Project Description

Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector

Overview of the NIST 2016 LoReHLT Evaluation

Overview of the NIST 2016 LoReHLT Evaluation

Initiated in conjunction with DARPA's Low Resource Languages for Emergent Incidents (LORELEI) Program, the NIST LoReHLT (Low Re-source Human Language Technology) evaluation series seeks to incubate research on fundamental natural language processing tasks

Project Description

TLS Server Certificate Management

IR 8193

National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles

Journal Article

SARD: Thousands of Reference Programs for Software Assurance

Journal Article

Rigidity of the Magic Pentagram Game

Using realistic factors to simulate catastrophic congestion events in a network

Using realistic factors to simulate catastrophic congestion events in a network

With the rapid growth of the Internet, there has been increased interest in the use of computer models to study the dynamics of communication networks in the research literature. An important example of this has been the study of dramatic, but relatively

A Design Methodology for Developing Resilient Cloud Services (RCS)

A Design Methodology for Developing Resilient Cloud Services (RCS)

Cloud Computing is emerging as a new paradigm that aims at delivering computing as a utility. For the cloud computing paradigm to be fully adopted and effectively used, it is critical that the security mechanisms are robust and resilient to malicious

Journal Article

Integral isosceles triangle-parallelogram and Heron triangle-rhombus pairs with a common area and common perimeter

SARD: Thousands of Reference Programs for Software Assurance

SARD: Thousands of Reference Programs for Software Assurance

A corpus of computer programs with known bugs is useful in determining the ability of tools to find bugs. This article describes the content of NIST's Software Assurance Reference Dataset (SARD), which is a publicly available collection of thousands of

Towards Probabilistic Identification of Zero-day Attack Paths

Towards Probabilistic Identification of Zero-day Attack Paths

Zero-day attacks continue to challenge the enterprise network security defense. A zero-day attack path is formed when a multi- step attack contains one or more zero-day exploits. Detecting zero-day attack paths in time could enable early disclosure of zero

ITL Bulletin

NIST Guidance on Application Container Security

NSRL Kaspersky dataset documentation

NSRL Kaspersky dataset documentation

The National Institute of Standards and Technology (NIST) National Software Reference Library (NSRL) has created curated releases of the Reference Data Set (RDS) consisting of hashes of Kaspersky products. This is in response to the DHS directive on

2016 NIST/ITL Cybersecurity Program: Annual Report

2016 NIST/ITL Cybersecurity Program: Annual Report

Title III of the E-Government Act of 2002, entitled the Federal Information Security Management Act (FISMA) of 2002, requires NIST to prepare an annual public report on activities undertaken in the previous year, and planned for the coming year, to carry

Other

NSRL Kaspersky dataset documentation

Conference Paper

Key Recovery Attack on the Cubic ABC Simple Matrix Multivariate Encryption Scheme

Dynamic Network Model for Smart City Data-Loss Resilience Case Study: City-to-City Network for Crime Analytics

Dynamic Network Model for Smart City Data-Loss Resilience Case Study: City-to-City Network for Crime Analytics

Today's cities generate tremendous amounts of data thanks to a boom in affordable smart devices and sensors. The resulting big data creates opportunities to develop diverse sets of context- aware services and systems, ensuring smart city services are