NIST · ИТ

Project Description

Data Integrity: Recovering from a destructive malware attack

SP 800-63-3

Digital Authentication Guideline (Public Preview)

A Simulation Framework for Industrial Wireless Networks and Process Control Systems

A Simulation Framework for Industrial Wireless Networks and Process Control Systems

Factory and process automation systems are increasingly employing information and communications technologies to facilitate data sharing and analysis in integrated control operations. Wireless connections provide flexible access to a variety of field

SP 800-160

Systems Security Engineering Guideline: An Integrated Approach to Building Trustworthy Resilient Systems

They Know Your Weaknesses Do You?: Reintroducing Common Weakness Enumeration

They Know Your Weaknesses Do You?: Reintroducing Common Weakness Enumeration

Knowing what makes your software systems vulnerable to attacks will be exceptionally critical in the emerging future of interdependent clouds, cyber-physical systems, mobile apps, and big data sets. The Common Weakness Enumeration (CWE) is a respectable

Vibrational Modes of Multilayered Ceramic Capacitors

Vibrational Modes of Multilayered Ceramic Capacitors

Micron-scale spacing of interleaved electrodes and high-dielectric ceramics in multilayer ceramic capacitors (MLCCs) provide exceptionally high capacitances in small volumes. This has led to MLCCs being the preferred type of capacitor in a wide range of

Report on Post-Quantum Cryptography

Report on Post-Quantum Cryptography

In recent years, there has been a substantial amount of research on quantum computers - machines that exploit quantum mechanical phenomena to solve mathematical problems that are difficult or intractable for conventional computers. If large-scale quantum

Performance Evaluation of Secure Industrial Control System Design: A Railway Control System Case Study

Performance Evaluation of Secure Industrial Control System Design: A Railway Control System Case Study

Industrial Control Systems (ICS) are composed of sensors, actuators, control processing units, and communication devices all interconnected to provide monitoring and control capabilities. Due to the integral role of the networking infrastructure, such

IR 8105

Report on Post-Quantum Cryptography

Shape Retrieval of Non-Rigid 3D Human Models

Shape Retrieval of Non-Rigid 3D Human Models

3D models of humans are commonly used within computer graphics and vision, and so the ability to distinguish between body shapes is an important shape retrieval problem. We extend our recent paper which provided a benchmark for testing non-rigid 3D shape

Measuring the Usability and Security of Permuted Passwords on Mobile Platforms

Measuring the Usability and Security of Permuted Passwords on Mobile Platforms

Password entry on mobile devices significantly impacts both usability and security, but there is a lack of usable security research in this area, specifically for complex password entry. To address this research gap, we set out to assign strength metrics

Baseline Tailor User Guide

Baseline Tailor User Guide

This guide describes how to use Baseline Tailor, a software tool for navigating the United States Government's Cybersecurity Framework and for tailoring the National Institute of Standards and Technology Special Publication 800-53 Revision 4 security

IR 8040

Measuring the Usability and Security of Permuted Passwords on Mobile Platforms

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

This report provides an overview of the capabilities and usage of software identification (SWID) tags as part of a comprehensive software lifecycle. As instantiated in the International Organization for Standardization/International Electrotechnical

IR 8060

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

Best Practices for Privileged User PIV Authentication

Best Practices for Privileged User PIV Authentication

The Cybersecurity Strategy and Implementation Plan (CSIP), published by the Office of Management and Budget (OMB) on October 30, 2015, requires that federal agencies use Personal Identity Verification (PIV) credentials for authenticating privileged users

SP 800-150

Guide to Cyber Threat Information Sharing

Journal Article

Indifferentiability Security of the Fast Widepipe Hash: Breaking the Birthday Barrier

CSWP 4

Best Practices for Privileged User PIV Authentication

Public Safety Analytics R&D Roadmap

Public Safety Analytics R&D Roadmap

The public safety community is in a period of great transition. Over the next 20 years, technology advancements will increase accessibility of data/video applications to public safety, and allow for the eventual migration of voice communications from

New NIST Security Standard Can Protect Credit Cards, Health Information

New NIST Security Standard Can Protect Credit Cards, Health Information

This bulletin summarizes the information presented in NIST Special Publication (SP) 800-38G, "Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption." The publication specifies two methods for format-preserving

ITL Bulletin

New NIST Security Standard Can Protect Credit Cards, Health Information

PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 compliance)

PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 compliance)

NIST Special Publication (SP) 800-73 contains the technical specifications to interface with the smart card to retrieve and use the Personal Identity Verification (PIV) identity credentials. This document, SP 800-85A, contains the test assertions and test

JPEG 2000 CODEC Certification Guidance for 1000 ppi Fingerprint Friction Ridge Imagery

JPEG 2000 CODEC Certification Guidance for 1000 ppi Fingerprint Friction Ridge Imagery

The document describes the procedure by which applications of JPEG 2000 CODECs will be evaluated with respect to conformance to the NIST guidance for compression of 1000 ppi friction ridge images as detailed in NIST Special Publication 500-289 [NIST5]

SP 800-90C

Recommendation for Random Bit Generator (RBG) Constructions

SP 800-85A-4

PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance)

IR 8071

LTE Architecture Overview and Security Analysis

Conference Paper

Pseudo-Exhaustive Testing of Attribute Based Access Control Rules

Multi-purpose Configurable Range for Antenna Testing Up To 220 GHz*

Multi-purpose Configurable Range for Antenna Testing Up To 220 GHz*

NIST has developed a multi-purpose test range for performing several types of antenna testing including spherical, cylindrical and planar near-field scanning as well as extrapolation measurements. This range uses a commercial, offthe- shelf, six-axis robot

SP 800-175A

Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies