Выбранные официальные каталоги по ИТ, безопасности, приватности, ИИ и связи.
Реестр · 6 880 документов
Cloud Security Automation Framework
Cloud services have gained tremendous attention as a utility paradigm and have been deployed extensively across a wide range of fields. However, Cloud security is not catching up to the fast adoption of its services and remains one of the biggest
TLS Server Certificate Management
Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector
Mitigating IoT-based Automated Distributed Threats
Security Assurance Requirements for Linux Application Container Deployments
In order for security solutions for application container environments to effectively meet their security objectives, it is necessary to analyze those security solutions and detail the metrics they must satisfy in the form of security assurance
Internet of things: Sensing without power
A recent advance in micromechanical sensing of thermal radiation is reviewed.
Security Assurance Requirements for Linux Application Container Deployments
A Layered Graphical Model for Mission Attack Impact Analysis
vPROM: vSwitch Enhanced Programmable Measurement in SDN
Network programmability is a salient feature of Software Defined Networking (SDN), which allows users to program network applications with the perception that the underlying network is a single device. While still at an early stage of development, SDN
Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario
Phishing, the transmission of a message spoofing a legitimate sender about a legitimate subject with intent to perform malicious activity, causes a tremendous and rapidly-increasing amount of damage to American information systems and users annually. This
Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario
Organizational Practices in Cryptographic Development and Testing
Organizations developing cryptographic products face significant challenges, including usability and human factors, that may result in decreased security, increased development time, and missed opportunities to use the technology to its fullest potential
Organizational Practices in Cryptographic Development and Testing
Adaptive synchronization reference selection for out-of-coverage Proximity Services (ProSe)
Proximity services (ProSe) is a Long Term Evolution Advanced (LTE-A) feature that allows User Equipments (UEs) to communicate without the need of routing the data throughout the network. In this paper, we studied the synchronization protocol used by ProSe
Cryptocurrency Smart Contracts for Distributed Consensus of Public Randomness
Most modern electronic devices can produce a random number. However, it is dicult to see how a group of mutually distrusting entities can have con dence in any such hardware-produced stream of random numbers, since the producer could control the output to
Cryptocurrency Smart Contracts for Distributed Consensus of Public Randomness
Towards Detecting Data Integrity Attacks in Smart Grid
An effective operation of the smart grid relies on the integration of sensing, computing, and communication. Attempting to disrupt the system, an adversary may launch cyber-attacks against the smart grid by compromising components, including meters
Attribute Based Access Control
Alexa, Can I Trust You?
Security diagnostics expose vulnerabilities and privacy threats that exist in commercial Intelligent Virtual Assistants (IVA)-- diagnostics offer the possibility of securer IVA ecosystems. This paper explores security and privacy concerns with these
Derived Personal Identity Verification (PIV) Credentials
Phase Retrieval Without Small-Ball Probability Assumptions: Recovery Guarantees for PhaseLift
We study the problem of recovering an unknown vector x in R^n from measurements of the form y_i = |a_i^T x|^2 (for i=1,...,m), where the vectors a_i in R^n are chosen independently at random, with each coordinate a_ij} being chosen independently from a
Identifying Evidence for Implementing a Cloud Forensic Analysis Framework
Cloud computing provides several benefits to organizations such as increased flexibility, scalability and reduced cost. However, it provides several challenges for digital forensics and criminal investigation. Some of these challenges are the dependence of
Combinatorial Coverage Measurement of Test Vectors used in Cryptographic Algorithm Validation (Presentation)
We measured the combinatorial coverage of test vectors provided by the NIST Cryptographic Algorithm Validation Program (CAVP). Input models were defined and test vectors measured and analyzed for 2-way, 3-way, and 4-way combinatorial coverage. The results
Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy
2016 NIST/ITL Cybersecurity Program Annual Report
Wireless Activities in the 2 GHz Radio Bands in Industrial Plants
Wireless connections are becoming popular in industrial environments that increasingly carry sensing and actuation data over the air. In industrial plants, activities of legacy wireless systems have shaped the channel usage in the radio spectrum bands for
Updating the Keys for DNS Security
To help maintain the reliability and integrity of the Internets Domain Name System (DNS), NIST is working with specialists from around the world to update the keys used by the DNS Security Extensions (DNSSEC) protocol to authenticate DNS data and avoid
Timestamp Temporal Logic (TTL) for Time Testing of Cyber-Physical Systems
In order to test the performance and verify the correctness of Cyber-Physical Systems (CPS), the timing constraints on the system behavior must be met. Signal Temporal Logic (STL) can efficiently and succinctly capture the timing constraints on a given
Updating the Keys for DNS Security
Local measurements of photocurrent and band gap in CdTe solar cells
Polycrystalline thin film technology has shown great promise for low cost, high efficiency photovoltaics. To further increase the power efficiency, a firm understanding of microstructural properties of the devices is required. In this work, we investigate