NIST · ИТ

IR 8149

Developing Trust Frameworks to Support Identity Federations

IR 8138

Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities

Government Data De-Identification Stakeholders Meeting June 29, 2016 Meeting Report

Government Data De-Identification Stakeholders Meeting June 29, 2016 Meeting Report

Journal Article

Security Fatigue

Demystifying the Internet of Things

Demystifying the Internet of Things

This bulletin summarizes the information presented in NIST SP 800-183, Networks of 'Things'. This publication offers an underlying and foundational science to IoT based on the realization that IoT involves sensing, computing, communication, and actuation.

What's a Special Character Anyway? Effects of Ambiguous Terminology in Password Rules

What's a Special Character Anyway? Effects of Ambiguous Terminology in Password Rules

Although many aspects of passwords have been studied, no research to date has systematically examined how ambiguous terminology affects the user experience during password rule comprehension, a necessary precursor to password generation. Our research

ITL Bulletin

Demystifying the Internet of Things

Mostly sunny with a chance of cyber

Mostly sunny with a chance of cyber

Counting known vulnerabilities and correlating different factors with the vulnerability track records of software products after the fact is obviously feasible. The harder challenge is to produce “evidence to tell how vulnerable a piece of software is”

Framework for learning agents in quantum environments

Framework for learning agents in quantum environments

In this paper we provide a broad framework for describing learning agents in general quantum environments. We analyze the types of environments which allow for quantum enhancements in learning, by contrasting environments to quantum oracles. We show that

SP 800-160

Systems Security Engineering Guideline: An Integrated Approach to Building Trustworthy Resilient Systems

A Probabilistic Network Forensics Model for Evidence Analysis

A Probabilistic Network Forensics Model for Evidence Analysis

Modern-day attackers tend to use sophisticated multi-stage/multi-host attack techniques and anti-forensics tools to cover their attack traces. Due to the current limitations of intrusion detection and forensic analysis tools, reconstructing attack

Project Description

Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector

Conference Paper

A Probabilistic Network Forensics Model for Evidence Analysis

Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps

Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps

On January 12-13, 2016 the National Institute of Standards and Technology's (NIST) Applied Cybersecurity Division (ACD) hosted the "Applying Measurement Science in the Identity Ecosystem" workshop to discuss the application of measurement science to

IR 8103

Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps

Other

Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance

Project Description

Authentication for Law Enforcement Vehicle Systems

IR 8144

Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue

Book Section

Managing Risk in the Cloud

Book Section

Cloud Computing Security Essentials and Architecture

Conference Paper

What’s a Special Character Anyway? Effects of Ambiguous Terminology in Password Rules

Entropy as a Service: Unlocking Cryptography's Full Potential

Entropy as a Service: Unlocking Cryptography's Full Potential

Securing the Internet of Things (IoT) requires strong cryptography, which depends on the availability of good entropy for generating unpredictable keys and accurate clocks. Attacks abusing weak keys or old inputs portend challenges for IoT. EaaS is a novel

SP 800-177

Trustworthy Email

Other

Cybersecurity Framework Manufacturing Profile

Journal Article

Entropy as a Service: Unlocking Cryptography's Full Potential

Conference Paper

Estimating t-Way Fault Profile Evolution During Testing

Trustworthy Email

Trustworthy Email

This document gives recommendations and guidelines for enhancing trust in email. The primary audience includes enterprise email administrators, information security specialists and network managers. This guideline applies to federal IT systems and will

PerfLoc (Part 1): An Extensive Data Repository for Development of Smartphone Indoor Localization Apps

PerfLoc (Part 1): An Extensive Data Repository for Development of Smartphone Indoor Localization Apps

This paper describes a major effort to collect smartphone data useful for indoor localization. Data has been collected with four Android phones according to numerous scenarios in each of four large buildings. The data includes time-stamped traces of

Serialized Quantum Error Correction Protocol for High-Bandwidth Quantum Repeaters

Serialized Quantum Error Correction Protocol for High-Bandwidth Quantum Repeaters

Advances in single photon creation, transmission, and detection suggest that sending quantum information over optical fibers may have losses low enough to be correctable using a quantum error correcting code. Such error-corrected communication is

Should ontologies be evaluated?

Should ontologies be evaluated?

Ontologies are semantic tools for Artificial Intelligence. Ontologies list and define objects in a domain and the relationship among objects such as to do reasoning within and among systems. Mistakes within ontologies bring system errors if their use in a