NIST · ИТ

Journal Article

Building Caring Healthcare Systems in the Internet of Things

Guide for Cybersecurity Incident Recovery

Guide for Cybersecurity Incident Recovery

This bulletin summarizes the information presented in NIST SP 800-184: Guide for Cybersecurity Event Recovery. The publication provides organizations with strategic guidance for planning, playbook developing, testing and improvements of recovery planning

ITL Bulletin

Guide for Cybersecurity Incident Recovery

TRECVID 2016 AD-HOC VIDEO SEARCH TASK : OVERVIEW

TRECVID 2016 AD-HOC VIDEO SEARCH TASK : OVERVIEW

This is the overview presentation slides for the task of Ad-hoc video search that took part in the TRECVID 2016 workshop

Email Authentication Mechanisms: DMARC, SPF and DKIM

Email Authentication Mechanisms: DMARC, SPF and DKIM

In recent years the IETF has been making a range of efforts to secure the email infrastructure and its use. Infrastructure protection includes source authentication by RFC 7208 Sender Policy Framework (SPF), message integrity authentication by RFC 6376

SP 1800-7

Situational Awareness for Electric Utilities

LTE impacts on GPS

LTE impacts on GPS

This report describes the test methodology from “LTE impacts on GPS: Test and Metrology Plan” developed by National Advanced Spectrum and Communications Test Network (NASCTN), and data that are the result of executing the test method. The fundamental goals

Open Source Private Cloud Platforms for Big Data

Open Source Private Cloud Platforms for Big Data

Due to its availability, Cloud computing is the de facto platform of choice for big data, where Big Data as a Service (BDaaS) is believed to be the next best thing. In this book chapter we will first introduce cloud computing, defining the advantages it

Impact of Code Complexity On Software Analysis

Impact of Code Complexity On Software Analysis

The Software Assurance Metrics and Tool Evaluation (SAMATE) team evaluated approximately 800 000 warnings from static analyzers.We learned that elements that we call “code complexities” make the detection of warnings more difficult. Most tools cannot not

Effects of Wireless Packet Loss in Industrial Process Control Systems

Effects of Wireless Packet Loss in Industrial Process Control Systems

Timely and reliable sensing and actuation control are essential in networked control. This depends on not only the precision/quality of the sensors and actuators used but also on how well the communications links between the field instruments and the

IR 8165

Impact of Code Complexity on Software Analysis

Micro-Signatures: The Effectiveness of Known Bad N-Grams for Network Anomaly Detection

Micro-Signatures: The Effectiveness of Known Bad N-Grams for Network Anomaly Detection

The field of intrusion detection is divided into signature detection and anomaly detection. The former involves identifying patterns associated with known attacks and the latter involves attempting to learn a 'normal' pattern of activity and then producing

IR 8139

Identifying Uniformity with Entropy and Divergence

HPC in the Small: Current Results, Lessons Learned, and Future Work

HPC in the Small: Current Results, Lessons Learned, and Future Work

THE USE AND CHALLENGES OF PRECISE TIME IN ELECTRIC POWER SYNCHROPHASOR SYSTEMS

THE USE AND CHALLENGES OF PRECISE TIME IN ELECTRIC POWER SYNCHROPHASOR SYSTEMS

Today, the principal way that power system owners and operators use precision timing is for fault recording, protection system operation and in synchrophasor applications. Synchrophasor applications have among the most stringent precision time and time

2016 PSCR Analytics Summit Report

2016 PSCR Analytics Summit Report

PSCR hosted over 80 stakeholders from industry, academia, public safety, and government to the NIST Boulder campus in August 2016. The August summit was a follow-up to the Public Safety Analytics R&D Roadmap, published earlier in 2016. This document

2015 Location-Based Services R&D Summit Report

2015 Location-Based Services R&D Summit Report

The Public Safety Communications Research Program (PSCR) convened over 80 stakeholders at the National Institute of Standards and Technology (NIST) Boulder, CO campus to build on the findings presented in the 2015 Location-Based Services (LBS) Summit- held

SP 800-63-3

Digital Identity Guidelines

IR 8136

An Overview of Mobile Application Vetting Services for Public Safety

Measuring and Improving the Effectiveness of Defense-in-Depth Postures

Measuring and Improving the Effectiveness of Defense-in-Depth Postures

Defense-in-depth is an important security architecture principle that has significant application to industrial control systems (ICS), cloud services, storehouses of sensitive data, and many other areas. We claim that an ideal defense-in-depth posture is

Conference Paper

Measuring and Improving the Effectiveness of Defense-in-Depth Postures

SP 800-12 Rev. 1

An Introduction to Information Security

Timing Challenges in the Smart Grid

Timing Challenges in the Smart Grid

Correct time and timing is one of the foundational elements in enabling the communication and orchestration of technologies for accurate and optimal wide area monitoring, protection and control in the power industry. NIST and IEEE-SA conducted a workshop

Systemic Risks in the Cloud Computing Model: Complex Systems Perspective

Systemic Risks in the Cloud Computing Model: Complex Systems Perspective

This paper reports on quantification and management of inherent systemic risk/performance tradeoff in the cloud computing model. We view Cloud as a Complex System and associate the systemic risks with a possibility of system phase transition to the

Dramatically Reducing Software Vulnerabilities

Dramatically Reducing Software Vulnerabilities

This bulletin summarized the information presented in NISTIR 8151: Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy. The publication starts by describing well known security risks and

ITL Bulletin

Dramatically Reducing Software Vulnerabilities

Other

Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1

Conference Paper

Full Disk Encryption: Bridging Theory and Practice

Impact of timing on the Proximity Services (ProSe) synchronization function

Impact of timing on the Proximity Services (ProSe) synchronization function

Long Term Evolution Advanced (LTE-A) introduces a new feature called Proximity Services (ProSe), which enables device-to-device (D2D) communication between User Equipment (UE) and the capability to operate out-of-network. In order to establish a D2D

MAC-Layer Coexistence Analysis of LTE and WLAN Systems Via Listen-Before-Talk

MAC-Layer Coexistence Analysis of LTE and WLAN Systems Via Listen-Before-Talk

With the congestion and scarcity of available spectrum resources, spectrum sharing between long-term evolution (LTE) and the IEEE 802.11 (aka. WLAN) systems is an ongoing research topic. Considering the LTE license assisted access (LAA) with the listen