Validation Programs and Advanced Security Testing and Measurement

Validation Programs

Cryptographic Modules and Algorithms

• CAVP: Cryptographic Algorithm Validation Program
• CMVP: Cryptographic Module Validation Program
• Testing Laboratories (CMVP/CAVP)
• Validation Lists: Algorithms, Modules, Modules In Process, Vendors

Personal Identity Verification (PIV)

• NIST PIV Program (NPIVP)
    Testing program for compliance/conformance of PIV middleware and PIV card applications to specifications in NIST Special Publication (SP) 800-73.
• NPIVP Validation Lists
• NPIVP Testing Laboratories

Security Content Automation Protocol (SCAP)

• SCAP Validation Program
• SCAP Validated Tools

Advanced Security Testing and Measurement

Combinatorial Testing

• ACTS: Automated Combinatorial Testing for Software

Continuous Monitoring

Hardware Roots of Trust

Technical Security Metrics

• Measuring Security Risk in Enterprise Networks
• Forensic Examinations - Using Attack Graphs in Forensic Examinations (DOI)

Universal Credential Revocation

• See NISTIR 7817, A Credential Reliability and Revocation Model for Federal Entities and information on the IDtrust symposia and workshops.