Search | CSRC

Search Results

Showing 675 matching records.

Series	Number	Title Publications	Status	Release Date
NISTIR	8235	Security Guidance for First Responder Mobile and Wearable Devices NISTIR 8235 Security Guidance for First Responder Mobile and Wearable Devices 7/20/2022 Status: Final Download: NISTIR 8235 (DOI); Local Download	Final	7/20/2022
NISTIR	8413	Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8413 Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process 7/05/2022 Status: Final Download: NISTIR 8413 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	7/05/2022
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 6/24/2022 Status: Final Download: SP 800-219 (DOI); Local Download; mSCP GitHub site; mSCP project documentation	Final	6/24/2022
White Paper	NIST CSWP 26	Ordered t-way Combinations for Testing State-based Systems White Paper NIST CSWP 26 Ordered t-way Combinations for Testing State-based Systems 6/13/2022 Status: Final Download: White Paper (DOI); NIST CSWP 26	Final	6/13/2022
NISTIR	8403	Blockchain for Access Control Systems NISTIR 8403 Blockchain for Access Control Systems 5/26/2022 Status: Final Download: NISTIR 8403 (DOI); Local Download	Final	5/26/2022
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140C Rev. 1 (DOI); Local Download	Final	5/20/2022
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140D Rev. 1 (DOI); Local Download	Final	5/20/2022
White Paper	NIST CSWP 25	A Data Structure for Integrity Protection with Erasure Capability White Paper NIST CSWP 25 A Data Structure for Integrity Protection with Erasure Capability 5/20/2022 Status: Final Download: White Paper (DOI); NIST CSWP 25	Final	5/20/2022
White Paper	NIST CSWP 20	Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators White Paper NIST CSWP 20 Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators 5/06/2022 Status: Final Download: White Paper (DOI); NIST CSWP 20	Final	5/06/2022
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final Download: SP 800-161 Rev. 1 (DOI); Local Download; EO 14028: Software Security in Supply Chains; NIST’s Cyber Supply Chain Risk Management Program; NIST news article	Final	5/05/2022
NISTIR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases NISTIR 8320 Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 5/04/2022 Status: Final Download: NISTIR 8320 (DOI); Local Download; Trusted Cloud projects	Final	5/04/2022
NISTIR	8320B	Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms NISTIR 8320B Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms 4/20/2022 Status: Final Download: NISTIR 8320B (DOI); Local Download; Trusted Cloud projects	Final	4/20/2022
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/20/2022 Status: Final Download: SP 1800-19 (DOI); Local Download; Project homepage	Final	4/20/2022
NISTIR	8419	Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives NISTIR 8419 Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives 4/07/2022 Status: Final Download: NISTIR 8419 (DOI); Local Download	Final	4/07/2022
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final Download: SP 1800-31 (DOI); Local Download; Project homepage	Final	4/06/2022
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 4/06/2022 Status: Final Download: SP 800-40 Rev. 4 (DOI); Local Download	Final	4/06/2022
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 3/16/2022 Status: Final Download: SP 1800-10 (DOI); Local Download; Project homepage	Final	3/16/2022
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A Assessing Enhanced Security Requirements for Controlled Unclassified Information 3/15/2022 Status: Final Download: SP 800-172A (DOI); Local Download; Assessment Procedures Spreadsheet; Assessment Procedures CSV; README for CSV	Final	3/15/2022
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C Implementation of DevSecOps for a Microservices-based Application with Service Mesh 3/08/2022 Status: Final Download: SP 800-204C (DOI); Local Download	Final	3/08/2022
White Paper		Getting Started with Cybersecurity Risk Management: Ransomware White Paper Getting Started with Cybersecurity Risk Management: Ransomware 2/24/2022 Status: Final Download: Quick Start Guide; Portuguese translation; Spanish translation	Final	2/24/2022
NISTIR	8374	Ransomware Risk Management: A Cybersecurity Framework Profile NISTIR 8374 Ransomware Risk Management: A Cybersecurity Framework Profile 2/23/2022 Status: Final Download: NISTIR 8374 (DOI); Local Download; Translations of NIST IR 8374	Final	2/23/2022
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 Securing Telehealth Remote Patient Monitoring Ecosystem 2/22/2022 Status: Final Download: SP 1800-30 (DOI); Local Download; SP 1800-30 files; Project homepage	Final	2/22/2022
NISTIR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management NISTIR 8286B Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/10/2022 Status: Final Download: NISTIR 8286B (DOI); Local Download; See NISTIR 8286 Supplemental Material	Final	2/10/2022
White Paper	NIST CSWP 24	Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products White Paper NIST CSWP 24 Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products 2/04/2022 Status: Final Download: White Paper (DOI); Local Download; IoT Product Criteria page	Final	2/04/2022
White Paper		Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e White Paper Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e 2/04/2022 Status: Final Download: Paper; Software Supply Chain Security page	Final	2/04/2022
White Paper	NIST CSWP 23	Recommended Criteria for Cybersecurity Labeling of Consumer Software White Paper NIST CSWP 23 Recommended Criteria for Cybersecurity Labeling of Consumer Software 2/04/2022 Status: Final Download: White Paper (DOI); Local Download; Consumer Software Criteria page	Final	2/04/2022
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 2/03/2022 Status: Final Download: SP 800-218 (DOI); Local Download; Potential updates; SP 800-218 Table in Excel; Delta from April 2020 paper; Delta from September 2021 public draft; SSDF Project homepage; Executive Order 14028, Improving the Nation's Cybersecurity	Final	2/03/2022
SP	1800-32	Securing Distributed Energy Resources: An Example of Industrial Internet of Things Cybersecurity SP 1800-32 Securing Distributed Energy Resources: An Example of Industrial Internet of Things Cybersecurity 2/02/2022 Status: Final Download: SP 1800-32 (DOI); Local Download; SP 1800-32 files; Project homepage	Final	2/02/2022
SP	800-53A Rev. 5	Assessing Security and Privacy Controls in Information Systems and Organizations SP 800-53A Rev. 5 Assessing Security and Privacy Controls in Information Systems and Organizations 1/25/2022 Status: Final Download: SP 800-53A Rev. 5 (DOI); Local Download; Potential updates [3-30-2022]; Download Spreadsheet; Download Plain Text; Download CSV; README for CSV; OSCAL GitHub	Final	1/25/2022
FIPS	201-3	Personal Identity Verification (PIV) of Federal Employees and Contractors FIPS 201-3 Personal Identity Verification (PIV) of Federal Employees and Contractors 1/24/2022 Status: Final Download: FIPS 201-3 (DOI); Local Download; Potential Updates [3-23-2022]; Web version; Federal Register Notice; NIST news article; 2020 Draft - Public Comments and Resolutions	Final	1/24/2022
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 Guide to Bluetooth Security 1/19/2022 Status: Final Download: SP 800-121 Rev. 2 (DOI); Local Download	Final	1/19/2022
SP	800-160 Vol. 2 Rev. 1	Developing Cyber-Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Rev. 1 Developing Cyber-Resilient Systems: A Systems Security Engineering Approach 12/09/2021 Status: Final Download: SP 800-160 Vol. 2 Rev. 1 (DOI); Local Download; Systems Security Engineering (SSE) Project	Final	12/09/2021
SP	800-213A	IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog SP 800-213A IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog 11/29/2021 Status: Final Download: SP 800-213A (DOI); Local Download; Blog post	Final	11/29/2021
SP	800-213	IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements SP 800-213 IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements 11/29/2021 Status: Final Download: SP 800-213 (DOI); Local Download; Blog post	Final	11/29/2021
NISTIR	8286A	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management NISTIR 8286A Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 11/12/2021 Status: Final Download: NISTIR 8286A (DOI); Local Download; Risk Register Schema (JSON); Risk Detail Record Schema (JSON); Risk Detail Record Example (JSON)	Final	11/12/2021
White Paper	NIST CSWP 21	Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards White Paper NIST CSWP 21 Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards 9/29/2021 Status: Final Download: White Paper (DOI); Local Download; Public Data Resource	Final	9/29/2021
SP	800-214	2020 Cybersecurity and Privacy Annual Report SP 800-214 2020 Cybersecurity and Privacy Annual Report 9/28/2021 Status: Final Download: SP 800-214 (DOI); Local Download	Final	9/28/2021
NISTIR	8360	Machine Learning for Access Control Policy Verification NISTIR 8360 Machine Learning for Access Control Policy Verification 9/16/2021 Status: Final Download: NISTIR 8360 (DOI); Local Download	Final	9/16/2021
White Paper	NIST Technical Note (TN) 2060	BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards White Paper NIST Technical Note (TN) 2060 BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards 9/15/2021 Status: Final Download: White Paper (DOI); Local Download; BGP-SRx Prototype; Public Data Resource	Final	9/15/2021
NISTIR	8379	Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance NISTIR 8379 Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance 9/09/2021 Status: Final Download: NISTIR 8379 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/09/2021
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders SP 1800-13 Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders 8/25/2021 Status: Final Download: SP 1800-13 (DOI); Local Download; SP 1800-13 files; Project homepage	Final	8/25/2021
NISTIR	8259B	IoT Non-Technical Supporting Capability Core Baseline NISTIR 8259B IoT Non-Technical Supporting Capability Core Baseline 8/25/2021 Status: Final Download: NISTIR 8259B (DOI); Local Download	Final	8/25/2021
NISTIR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework 8/17/2021 Status: Final Download: NISTIR 8170 (DOI); Local Download; Cybersecurity Framework homepage	Final	8/17/2021
White Paper		On the Multiplicative Complexity of Cubic Boolean Functions White Paper On the Multiplicative Complexity of Cubic Boolean Functions 8/11/2021 Status: Final Download: Paper	Final	8/11/2021
SP	800-204B	Attribute-based Access Control for Microservices-based Applications using a Service Mesh SP 800-204B Attribute-based Access Control for Microservices-based Applications using a Service Mesh 8/06/2021 Status: Final Download: SP 800-204B (DOI); Local Download	Final	8/06/2021
SP	1271	Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide SP 1271 Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide 8/06/2021 Status: Final Download: SP 1271 (DOI); Local Download; Translations of NIST SP 1271	Final	8/06/2021
White Paper		[Project Description] Migration to Post-Quantum Cryptography White Paper [Project Description] Migration to Post-Quantum Cryptography 8/04/2021 Status: Final Download: Project Description; Project homepage	Final	8/04/2021
NISTIR	8319	Review of the Advanced Encryption Standard NISTIR 8319 Review of the Advanced Encryption Standard 7/23/2021 Status: Final Download: NISTIR 8319 (DOI); Local Download; Potential updates to NISTIR 8319	Final	7/23/2021
White Paper		[Project Description] Data Classification Practices: Facilitating Data-Centric Security Management White Paper [Project Description] Data Classification Practices: Facilitating Data-Centric Security Management 7/22/2021 Status: Final Download: Project Description; Project homepage	Final	7/22/2021
NISTIR	8369	Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process NISTIR 8369 Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process 7/21/2021 Status: Final Download: NISTIR 8369 (DOI); Local Download; Lightweight Cryptography Project	Final	7/21/2021
SP	800-47 Rev. 1	Managing the Security of Information Exchanges SP 800-47 Rev. 1 Managing the Security of Information Exchanges 7/20/2021 Status: Final Download: SP 800-47 Rev. 1 (DOI); Local Download	Final	7/20/2021
White Paper		[Project Description] Automation of the Cryptographic Module Validation Program (CMVP) White Paper [Project Description] Automation of the Cryptographic Module Validation Program (CMVP) 7/01/2021 Status: Final Download: Project Description; Project homepage	Final	7/01/2021
NISTIR	8320A	Hardware-Enabled Security: Container Platform Security Prototype NISTIR 8320A Hardware-Enabled Security: Container Platform Security Prototype 6/17/2021 Status: Final Download: NISTIR 8320A (DOI); Local Download; Trusted Cloud projects	Final	6/17/2021
SP	1800-15	Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 5/26/2021 Status: Final Download: SP 1800-15 (DOI); Local Download; SP 1800-15 files; Project homepage	Final	5/26/2021
White Paper		[Project Description] Addressing Visibility Challenges with TLS 1.3 White Paper [Project Description] Addressing Visibility Challenges with TLS 1.3 5/26/2021 Status: Final Download: Project Description; Project homepage	Final	5/26/2021
White Paper		[Project Description] Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security White Paper [Project Description] Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 5/20/2021 Status: Final Download: Project Description; Project homepage	Final	5/20/2021
White Paper		On the Effect of Projection on Rank Attacks in Multivariate Cryptography White Paper On the Effect of Projection on Rank Attacks in Multivariate Cryptography 5/19/2021 Status: Final Download: Paper; Related Project	Final	5/19/2021
White Paper	NIST CSWP 15	Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic Algorithms White Paper NIST CSWP 15 Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic Algorithms 4/28/2021 Status: Final Download: White Paper (DOI); Local Download; NCCoE--Crypto Agility: Considerations for Migrating to Post-Quantum Cryptographic Algorithms; Post-Quantum Cryptography project	Final	4/28/2021
White Paper		Recovering the Key from the Internal State of Grain-128AEAD White Paper Recovering the Key from the Internal State of Grain-128AEAD 4/03/2021 Status: Final Download: Paper; NIST Lightweight Cryptography project	Final	4/03/2021
NISTIR	8347	NIST Test Personal Identity Verification (PIV) Cards Version 2 NISTIR 8347 NIST Test Personal Identity Verification (PIV) Cards Version 2 4/02/2021 Status: Final Download: NISTIR 8347 (DOI); Local Download; NIST PIV Test Cards info; NIST Special Database 33	Final	4/02/2021
White Paper		New Practical Multivariate Signatures from a Nonlinear Modifier White Paper New Practical Multivariate Signatures from a Nonlinear Modifier 4/01/2021 Status: Final Download: Paper; NIST Post-Quantum Cryptography project	Final	4/01/2021
NISTIR	8212	ISCMA: An Information Security Continuous Monitoring Program Assessment NISTIR 8212 ISCMA: An Information Security Continuous Monitoring Program Assessment 3/31/2021 Status: Final Download: NISTIR 8212 (DOI); Local Download; ISCMAx: Recommended Judgments; ISCMAx: Alternate Judgments	Final	3/31/2021
SP	1800-27	Securing Property Management Systems SP 1800-27 Securing Property Management Systems 3/30/2021 Status: Final Download: SP 1800-27 (DOI); Local Download; SP 1800-27 files; Project homepage; NIST News article	Final	3/30/2021
NISTIR	8333	Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop NISTIR 8333 Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop 3/29/2021 Status: Final Download: NISTIR 8333 (DOI); Local Download	Final	3/29/2021
White Paper		Can you tell? SSNet - a Sagittal Stratum-inspired Neural Network Framework for Sentiment Analysis White Paper Can you tell? SSNet - a Sagittal Stratum-inspired Neural Network Framework for Sentiment Analysis 3/04/2021 Status: Final Download: Paper	Final	3/04/2021
NISTIR	8323	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services NISTIR 8323 Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 2/11/2021 Status: Final Download: NISTIR 8323 (DOI); Local Download; PNT Profile Quick Guide; NIST news article; PNT homepage	Final	2/11/2021
NISTIR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry NISTIR 8276 Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/11/2021 Status: Final Download: NISTIR 8276 (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/11/2021
NISTIR	8301	Blockchain Networks: Token Design and Management Overview NISTIR 8301 Blockchain Networks: Token Design and Management Overview 2/09/2021 Status: Final Download: NISTIR 8301 (DOI); Local Download	Final	2/09/2021
SP	800-172	Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 SP 800-172 Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 2/02/2021 Status: Final Download: SP 800-172 (DOI); Local Download; Enhanced Security Requirements Spreadsheet; Enhanced Security Requirements CSV; README for CSV; NIST news article	Final	2/02/2021
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 1/28/2021 Status: Final Download: SP 800-171 Rev. 2 (DOI); Local Download; Security Requirements Spreadsheet; Security Requirements CSV; README for CSV; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 2	Final	1/28/2021
White Paper		The membership problem for constant-sized quantum correlations is undecidable White Paper The membership problem for constant-sized quantum correlations is undecidable 1/26/2021 Status: Final Download: Paper	Final	1/26/2021
NISTIR	8322	Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop NISTIR 8322 Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop 1/07/2021 Status: Final Download: NISTIR 8322 (DOI); Local Download; Virtual Workshop homepage; NIST Cybersecurity for IoT Program	Final	1/07/2021
SP	1800-24	Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector SP 1800-24 Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector 12/21/2020 Status: Final Download: SP 1800-24 (DOI); Local Download; SP 1800-24 files; Project homepage	Final	12/21/2020
NISTIR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers NISTIR 8246 Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final Download: NISTIR 8246 (DOI); Local Download; National Vulnerability Database (NVD)	Final	12/15/2020
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53B (DOI); Local Download; Control Baselines spreadsheet; Security Control Overlay Repository (SCOR); OSCAL [an OSCAL version of 800-53B is in development]; NIST news article	Final	12/10/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53 Rev. 5 (DOI); Local Download; Control Catalog (spreadsheet); Analysis of updates between 800-53 Rev. 5 and Rev. 4, by MITRE Corp. for ODNI; Mapping: Appendix J Privacy Controls (Rev. 4) to Rev. 5; Mappings: Cybersecurity Framework and Privacy Framework to Rev. 5; Mapping: Rev. 5 to ISO/IEC 27001; OSCAL Version of Rev. 5 controls; Control Collaboration Index Template; Control Collaboration Index Template; Blog post	Final	12/10/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-25 (DOI); Local Download; SP 1800-25 files; Project homepage	Final	12/08/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-26 (DOI); Local Download; SP 1800-26 files; Project homepage	Final	12/08/2020
NISTIR	8278A	National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers NISTIR 8278A National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 11/20/2020 Status: Final Download: NISTIR 8278A (DOI); Local Download; OLIR homepage; Focal Document Templates; OLIR Validation Tool; OLIR catalog	Final	11/20/2020
NISTIR	8278	National Online Informative References (OLIR) Program: Program Overview and OLIR Uses NISTIR 8278 National Online Informative References (OLIR) Program: Program Overview and OLIR Uses 11/20/2020 Status: Final Download: NISTIR 8278 (DOI); Local Download; OLIR homepage; OLIR catalog	Final	11/20/2020
SP	800-181 Rev. 1	Workforce Framework for Cybersecurity (NICE Framework) SP 800-181 Rev. 1 Workforce Framework for Cybersecurity (NICE Framework) 11/16/2020 Status: Final Download: SP 800-181 Rev. 1 (DOI); Local Download; NICE Framework homepage; Blog post: "Back to the Basics: Announcing the New NICE Framework"; Translations	Final	11/16/2020
White Paper		Observations on COMET White Paper Observations on COMET 11/16/2020 Status: Final Download: Paper; NIST Lightweight Cryptography project	Final	11/16/2020
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 Recommendation for Stateful Hash-Based Signature Schemes 10/29/2020 Status: Final Download: SP 800-208 (DOI); Local Download; Comments received	Final	10/29/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 Security Guidelines for Storage Infrastructure 10/26/2020 Status: Final Download: SP 800-209 (DOI); Local Download	Final	10/26/2020
White Paper	NIST Technical Note (TN) 2111	An Empirical Study on Flow-based Botnet Attacks Prediction White Paper NIST Technical Note (TN) 2111 An Empirical Study on Flow-based Botnet Attacks Prediction 10/22/2020 Status: Final Download: White Paper (DOI); Local Download	Final	10/22/2020
White Paper		[Project Description] Implementing a Zero Trust Architecture White Paper [Project Description] Implementing a Zero Trust Architecture 10/21/2020 Status: Final Download: Project Description; Project homepage	Final	10/21/2020
NISTIR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) NISTIR 8286 Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final Download: NISTIR 8286 (DOI); Local Download; Risk Register Schema (JSON); Risk Detail Record Schema (JSON); Risk Detail Record Example (JSON); OLIR Mapping NISTIR 8286 to Cybersecurity Framework v1.1; Playbook: Enterprise Risk Management for the U.S. Federal Government; Association for Federal Enterprise Risk Management (AFERM); RMA - GCOR Conference; 2022 RMA GCOR Conference Session: Prioritizing Cybersecurity Risk for Enterprise Risk Management	Final	10/13/2020
NISTIR	8183 Rev. 1	Cybersecurity Framework Version 1.1 Manufacturing Profile NISTIR 8183 Rev. 1 Cybersecurity Framework Version 1.1 Manufacturing Profile 10/07/2020 Status: Final Download: NISTIR 8183 Rev. 1 (DOI); Local Download; NIST Cybersecurity Framework	Final	10/07/2020
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events 9/22/2020 Status: Final Download: SP 1800-11 (DOI); Local Download; SP 1800-11 files; Project homepage	Final	9/22/2020
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final Download: SP 1800-21 (DOI); Local Download; SP 1800-21 files; Project homepage	Final	9/15/2020
NISTIR	8006	NIST Cloud Computing Forensic Science Challenges NISTIR 8006 NIST Cloud Computing Forensic Science Challenges 8/25/2020 Status: Final Download: NISTIR 8006 (DOI); Local Download	Final	8/25/2020
SP	800-211	2019 NIST/ITL Cybersecurity Program Annual Report SP 800-211 2019 NIST/ITL Cybersecurity Program Annual Report 8/24/2020 Status: Final Download: SP 800-211 (DOI); Local Download	Final	8/24/2020
SP	1500-16	Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report SP 1500-16 Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report 8/20/2020 Status: Final Download: SP 1500-16 (DOI); Local Download	Final	8/20/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 8/18/2020 Status: Final Download: SP 800-56C Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 2	Final	8/18/2020
SP	800-207	Zero Trust Architecture SP 800-207 Zero Trust Architecture 8/11/2020 Status: Final Download: SP 800-207 (DOI); Local Download; ZTA project at NCCoE; Japanese translation (unofficial--from PwC Consulting LLC for IPA, Japan)	Final	8/11/2020
ITL Bulletin		Security Considerations for Exchanging Files Over the Internet ITL Bulletin Security Considerations for Exchanging Files Over the Internet 8/03/2020 Status: Final Download: August 2020 ITL Bulletin; Infographic: Play the Secure File Exchange Game	Final	8/03/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final Download: SP 800-210 (DOI); Local Download	Final	7/31/2020
White Paper	NIST Technical Note (TN) 2066	OpenFMB Proof of Concept Implementation Research White Paper NIST Technical Note (TN) 2066 OpenFMB Proof of Concept Implementation Research 7/29/2020 Status: Final Download: White Paper (DOI); NIST TN 2066	Final	7/29/2020
NISTIR	8309	Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8309 Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process 7/22/2020 Status: Final Download: NISTIR 8309 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	7/22/2020
NISTIR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection NISTIR 8219 Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 7/16/2020 Status: Final Download: NISTIR 8219 (DOI); Local Download; Project Homepage	Final	7/16/2020
NISTIR	8214A	NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives NISTIR 8214A NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives 7/07/2020 Status: Final Download: NISTIR 8214A (DOI); Local Download; NIST news article; Diff file - shows changes from draft & public comment resolutions	Final	7/07/2020
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 Guide to IPsec VPNs 6/30/2020 Status: Final Download: SP 800-77 Rev. 1 (DOI); Local Download	Final	6/30/2020
ITL Bulletin		NIST Privacy Framework: An Overview ITL Bulletin NIST Privacy Framework: An Overview 6/24/2020 Status: Final Download: June 2020 ITL Bulletin	Final	6/24/2020
White Paper		Rainbow Band Separation is Better than we Thought White Paper Rainbow Band Separation is Better than we Thought 6/20/2020 Status: Final Download: Paper; NIST Post-Quantum Cryptography project	Final	6/20/2020
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 Securing Web Transactions: TLS Server Certificate Management 6/16/2020 Status: Final Download: SP 1800-16 (DOI); Local Download; SP 1800-16 files; Project homepage	Final	6/16/2020
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 Recommendation for Cryptographic Key Generation 6/04/2020 Status: Final Download: SP 800-133 Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-133 Rev. 2	Final	6/04/2020
White Paper		Notes on Interrogating Random Quantum Circuits White Paper Notes on Interrogating Random Quantum Circuits 5/29/2020 Status: Final Download: White Paper (DOI)	Final	5/29/2020
NISTIR	8259	Foundational Cybersecurity Activities for IoT Device Manufacturers NISTIR 8259 Foundational Cybersecurity Activities for IoT Device Manufacturers 5/29/2020 Status: Final Download: NISTIR 8259 (DOI); Local Download; Blog post; Video overview of NIST recommendations; Portuguese translation; Spanish translation	Final	5/29/2020
NISTIR	8259A	IoT Device Cybersecurity Capability Core Baseline NISTIR 8259A IoT Device Cybersecurity Capability Core Baseline 5/29/2020 Status: Final Download: NISTIR 8259A (DOI); Local Download; Federal Profile of NISTIR 8259A; NIST Cybersecurity for IoT Program; Blog post; Video overview of NIST recommendations; Portuguese translation; Spanish translation	Final	5/29/2020
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final Download: SP 800-204A (DOI); Local Download	Final	5/27/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 5/21/2020 Status: Final Download: SP 800-137A (DOI); Local Download; Element Catalog for SP 800-137A	Final	5/21/2020
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 5/20/2020 Status: Final Download: SP 1800-23 (DOI); Local Download; SP 1800-23 files; Project homepage	Final	5/20/2020
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 Security Analysis of First Responder Mobile and Wearable Devices 5/11/2020 Status: Final Download: NISTIR 8196 (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Final	5/11/2020
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 Recommendation for Key Management: Part 1 – General 5/04/2020 Status: Final Download: SP 800-57 Part 1 Rev. 5 (DOI); Local Download	Final	5/04/2020
NISTIR	8294	Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) NISTIR 8294 Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) 4/29/2020 Status: Final Download: NISTIR 8294 (DOI); Local Download	Final	4/29/2020
NISTIR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management NISTIR 8011 Vol. 4 Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final Download: NISTIR 8011 Vol. 4 (DOI); Local Download	Final	4/28/2020
White Paper		Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files White Paper Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files 4/24/2020 Status: Final Download: Detailed Guide with Recommendations; Brief Guide; Project: Improving Cybersecurity of Managed Service Providers	Final	4/24/2020
White Paper		5G Cybersecurity: Preparing a Secure Evolution to 5G White Paper 5G Cybersecurity: Preparing a Secure Evolution to 5G 4/13/2020 Status: Final Download: Project Description; Project homepage	Final	4/13/2020
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final Download: SP 800-175B Rev. 1 (DOI); Local Download	Final	3/31/2020
White Paper		[Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise White Paper [Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final Download: Project Description; Project homepage	Final	3/30/2020
White Paper		[Project Description] Validating the Integrity of Computing Devices: Supply Chain Assurance White Paper [Project Description] Validating the Integrity of Computing Devices: Supply Chain Assurance 3/26/2020 Status: Final Download: Project Description; Project homepage	Final	3/26/2020
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140 (DOI); Local Download	Final	3/20/2020
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 SP 800-140E CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 3/20/2020 Status: Final Download: SP 800-140E (DOI); Local Download	Final	3/20/2020
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140F (DOI); Local Download	Final	3/20/2020
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140A (DOI); Local Download	Final	3/20/2020
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 3/20/2020 Status: Final Download: SP 800-140B (DOI); Local Download	Final	3/20/2020
ITL Bulletin		Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions ITL Bulletin Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions 3/18/2020 Status: Final Download: March 2020 ITL Bulletin	Final	3/18/2020
SP	800-206	Annual Report 2018: NIST/ITL Cybersecurity Program SP 800-206 Annual Report 2018: NIST/ITL Cybersecurity Program 3/13/2020 Status: Final Download: SP 800-206 (DOI); Local Download	Final	3/13/2020
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management 3/02/2020 Status: Final Download: SP 800-63B (DOI); Local Download	Final	3/02/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 Digital Identity Guidelines 3/02/2020 Status: Final Download: SP 800-63-3 (DOI); Local Download; FAQ; SP 800-63 (GitHub)	Final	3/02/2020
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C Digital Identity Guidelines: Federation and Assertions 3/02/2020 Status: Final Download: SP 800-63C (DOI); Local Download	Final	3/02/2020
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A Digital Identity Guidelines: Enrollment and Identity Proofing 3/02/2020 Status: Final Download: SP 800-63A (DOI); Local Download	Final	3/02/2020
NISTIR	8287	A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce NISTIR 8287 A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce 2/20/2020 Status: Final Download: NISTIR 8287 (DOI); Local Download	Final	2/20/2020
White Paper		[Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector White Paper [Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 2/07/2020 Status: Final Download: Project Description; Project homepage	Final	2/07/2020
White Paper	NIST CSWP 11B	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company White Paper NIST CSWP 11B Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11D	Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic White Paper NIST CSWP 11D Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11F	Case Studies in Cyber Supply Chain Risk Management: Seagate Technology White Paper NIST CSWP 11F Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11A	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company White Paper NIST CSWP 11A Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11	Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations White Paper NIST CSWP 11 Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final Download: White Paper (DOI); Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11E	Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. White Paper NIST CSWP 11E Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11C	Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company White Paper NIST CSWP 11C Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms White Paper On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms 1/29/2020 Status: Final Download: Paper	Final	1/29/2020
White Paper	NIST CSWP 10	NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 White Paper NIST CSWP 10 NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 1/16/2020 Status: Final Download: White Paper (DOI); Local Download; Privacy Framework and Core; Translations of the PF 1.0	Final	1/16/2020
White Paper	NIST CSWP 9	A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper NIST CSWP 9 A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 1/14/2020 Status: Final Download: White Paper (DOI); Local Download	Final	1/14/2020
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final Download: SP 800-189 (DOI); Local Download; NIST RPKI Deployment Monitor	Final	12/17/2019
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
White Paper		A Nonlinear Multivariate Cryptosystem Based on a Random Linear Code White Paper A Nonlinear Multivariate Cryptosystem Based on a Random Linear Code 11/24/2019 Status: Final Download: Paper	Final	11/24/2019
SP	1500-4r2	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 SP 1500-4r2 NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 10/21/2019 Status: Final Download: SP 1500-4r2 (DOI); Local Download; NIST Big Data Interoperability Framework V3.0; NIST news article	Final	10/21/2019
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final Download: SP 800-128 (DOI); Local Download	Final	10/10/2019
NISTIR	8268	Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process NISTIR 8268 Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process 10/07/2019 Status: Final Download: NISTIR 8268 (DOI); Local Download; Lightweight Cryptography project	Final	10/07/2019
NISTIR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance NISTIR 8183A Vol. 1 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 1 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case NISTIR 8183A Vol. 2 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 2 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case NISTIR 8183A Vol. 3 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 3 (DOI); Local Download	Final	9/30/2019
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final Download: SP 800-52 Rev. 2 (DOI); Local Download	Final	8/29/2019
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 Derived Personal Identity Verification (PIV) Credentials 8/27/2019 Status: Final Download: SP 1800-12 (DOI); Local Download; SP 1800-12 files	Final	8/27/2019
White Paper		[Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources White Paper [Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 8/15/2019 Status: Final Download: Project Description; Project homepage	Final	8/15/2019
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 Situational Awareness for Electric Utilities 8/07/2019 Status: Final Download: SP 1800-7 (DOI); Local Download; SP 1800-7 files; Project homepage	Final	8/07/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final Download: SP 800-204 (DOI); Local Download	Final	8/07/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	8/02/2019
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final Download: SP 1800-17 (DOI); Local Download; SP 1800-17 files; Project homepage	Final	7/30/2019
White Paper		Practical Cryptanalysis of k-ary C* White Paper Practical Cryptanalysis of k-ary C* 7/18/2019 Status: Final Download: Paper	Final	7/18/2019
White Paper	NIST Technical Note (TN) 2051	Cybersecurity Framework Smart Grid Profile White Paper NIST Technical Note (TN) 2051 Cybersecurity Framework Smart Grid Profile 7/09/2019 Status: Final Download: White Paper (DOI); Local Download; Cybersecurity Framework	Final	7/09/2019
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 Glossary of Key Information Security Terms 7/03/2019 Status: Final Download: NISTIR 7298 Rev. 3 (DOI); Local Download; Online Glossary	Final	7/03/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final Download: SP 1800-14 (DOI); Local Download; SP 1800-14 files	Final	6/28/2019
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final Download: NISTIR 8228 (DOI); Local Download; NIST news article; Portuguese translation; Spanish translation	Final	6/25/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 Attribute Considerations for Access Control Systems 6/18/2019 Status: Final Download: SP 800-205 (DOI); Local Download	Final	6/18/2019
NISTIR	8221	A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data NISTIR 8221 A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data 6/05/2019 Status: Final Download: NISTIR 8221 (DOI); Local Download	Final	6/05/2019
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations 5/23/2019 Status: Final Download: SP 800-57 Part 2 Rev. 1 (DOI); Local Download	Final	5/23/2019
NISTIR	8227	Manufacturing Profile Implementation Methodology for a Robotic Workcell NISTIR 8227 Manufacturing Profile Implementation Methodology for a Robotic Workcell 5/22/2019 Status: Final Download: NISTIR 8227 (DOI); Local Download	Final	5/22/2019
NISTIR	8177	Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis NISTIR 8177 Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis 5/21/2019 Status: Final Download: NISTIR 8177 (DOI); Local Download	Final	5/21/2019
ITL Bulletin		FIPS 140-3 Adopts ISO/IEC Standards ITL Bulletin FIPS 140-3 Adopts ISO/IEC Standards 5/20/2019 Status: Final Download: May 2019 ITL Bulletin	Final	5/20/2019
NISTIR	8183	Cybersecurity Framework Manufacturing Profile NISTIR 8183 Cybersecurity Framework Manufacturing Profile 5/20/2019 Status: Final Download: NISTIR 8183 (DOI); Local Download; NIST Cybersecurity Framework	Final	5/20/2019
White Paper		[Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector White Paper [Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector 5/13/2019 Status: Final Download: Project Description; Project homepage	Final	5/13/2019
White Paper	NIST CSWP 8	BowTie – A deep learning feedforward neural network for sentiment analysis White Paper NIST CSWP 8 BowTie – A deep learning feedforward neural network for sentiment analysis 4/22/2019 Status: Final Download: White Paper (DOI); Local Download; Artificial Intelligence at NIST	Final	4/22/2019
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 Vetting the Security of Mobile Applications 4/19/2019 Status: Final Download: SP 800-163 Rev. 1 (DOI); Local Download	Final	4/19/2019
ITL Bulletin		Time to Standardize Threshold Schemes for Cryptographic Primitives ITL Bulletin Time to Standardize Threshold Schemes for Cryptographic Primitives 4/09/2019 Status: Final Download: April 2019 ITL Bulletin	Final	4/09/2019
FIPS	140-3	Security Requirements for Cryptographic Modules FIPS 140-3 Security Requirements for Cryptographic Modules 3/22/2019 Status: Final Download: FIPS 140-3 (DOI); Local Download; Cryptographic Module Validation Program (CMVP); NIST News Article	Final	3/22/2019
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Final Download: SP 800-131A Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-131A Rev. 2	Final	3/21/2019
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Final Download: SP 800-56B Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56B Rev. 2 (July 2018)	Final	3/21/2019
NISTIR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography NISTIR 8214 Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 3/01/2019 Status: Final Download: NISTIR 8214 (DOI); Local Download; Diff file - shows changes from draft & public comment resolutions	Final	3/01/2019
ITL Bulletin		The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk ITL Bulletin The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk 2/28/2019 Status: Final Download: February 2019 ITL Bulletin	Final	2/28/2019
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 Trustworthy Email 2/26/2019 Status: Final Download: SP 800-177 Rev. 1 (DOI); Local Download; High Assurance Domains project	Final	2/26/2019
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 Mobile Device Security: Cloud and Hybrid Builds 2/21/2019 Status: Final Download: SP 1800-4 (DOI); Local Download; SP 1800-4 files; Project homepage	Final	2/21/2019
NISTIR	8240	Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8240 Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process 1/31/2019 Status: Final Download: NISTIR 8240 (DOI); Local Download; NIST PQC Standardization homepage; Round 2 Submissions	Final	1/31/2019
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Final Download: SP 800-37 Rev. 2 (DOI); Local Download	Final	12/20/2018
ITL Bulletin		Securing Wireless Infusion Pumps ITL Bulletin Securing Wireless Infusion Pumps 12/19/2018 Status: Final Download: December 2018 ITL Bulletin	Final	12/19/2018
NISTIR	8241	Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs NISTIR 8241 Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs 12/17/2018 Status: Final Download: NISTIR 8241 (DOI); Local Download	Final	12/17/2018
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Final Download: NISTIR 8011 Vol. 3 (DOI); Local Download	Final	12/06/2018
NISTIR	8200	Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) NISTIR 8200 Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) 11/29/2018 Status: Final Download: NISTIR 8200 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	11/29/2018
ITL Bulletin		One Block at a Time – Helping to Build Blockchain Knowledge ITL Bulletin One Block at a Time – Helping to Build Blockchain Knowledge 10/25/2018 Status: Final Download: October 2018 ITL Bulletin	Final	10/25/2018
NISTIR	8202	Blockchain Technology Overview NISTIR 8202 Blockchain Technology Overview 10/03/2018 Status: Final Download: NISTIR 8202 (DOI); Local Download	Final	10/03/2018
ITL Bulletin		Automated Cryptographic Validation (ACV) Testing ITL Bulletin Automated Cryptographic Validation (ACV) Testing 9/20/2018 Status: Final Download: September 2018 ITL Bulletin	Final	9/20/2018
White Paper	NIST CSWP 7	Transitioning to the Security Content Automation Protocol (SCAP) Version 2 White Paper NIST CSWP 7 Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Final Download: White Paper (DOI); Transitioning to SCAP v2	Final	9/10/2018
White Paper		The Economic Impacts of the Advanced Encryption Standard, 1996-2017 White Paper The Economic Impacts of the Advanced Encryption Standard, 1996-2017 9/07/2018 Status: Final Download: White Paper (DOI); Final Report; Press Release (09-07-2018)	Final	9/07/2018
SP	1800-5	IT Asset Management SP 1800-5 IT Asset Management 9/07/2018 Status: Final Download: SP 1800-5 (DOI); Local Download; SP 1800-5 files; Project homepage	Final	9/07/2018
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 8/17/2018 Status: Final Download: SP 1800-8 (DOI); Local Download; SP 1800-8 files; Project homepage	Final	8/17/2018
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 Securing Electronic Health Records on Mobile Devices 7/27/2018 Status: Final Download: SP 1800-1 (DOI); Local Download; SP 1800-1 files; Project homepage	Final	7/27/2018
ITL Bulletin		Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements ITL Bulletin Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements 7/26/2018 Status: Final Download: July 2018 ITL Bulletin	Final	7/26/2018
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 Identity and Access Management for Electric Utilities 7/13/2018 Status: Final Download: SP 1800-2 (DOI); Local Download; SP 1800-2 files; Project homepage	Final	7/13/2018
SP	800-203	2017 NIST/ITL Cybersecurity Program Annual Report SP 800-203 2017 NIST/ITL Cybersecurity Program Annual Report 7/02/2018 Status: Final Download: SP 800-203 (DOI); Local Download	Final	7/02/2018
SP	800-116 Rev. 1	Guidelines for the Use of PIV Credentials in Facility Access SP 800-116 Rev. 1 Guidelines for the Use of PIV Credentials in Facility Access 6/29/2018 Status: Final Download: SP 800-116 Rev. 1 (DOI); Local Download	Final	6/29/2018
ITL Bulletin		Putting First Things First – A Model Process for Criticality Analysis ITL Bulletin Putting First Things First – A Model Process for Criticality Analysis 6/26/2018 Status: Final Download: June 2018 ITL Bulletin	Final	6/26/2018
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Final Download: SP 800-171A (DOI); Local Download; Assessment Procedures Spreadsheet; Assessment Procedures CSV; README for CSV; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Final Download: SP 800-125A Rev. 1 (DOI); Local Download	Final	6/07/2018
White Paper		Extracting Linearization Equations from Noisy Sources White Paper Extracting Linearization Equations from Noisy Sources 5/31/2018 Status: Final Download: Paper	Final	5/31/2018
White Paper		A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future White Paper A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future 5/30/2018 Status: Final Download: Final Report on Supporting the Nation's Cybersecurity Workforce; NIST News Release; Workshop on Cybersecurity Workforce Development (Aug. 2017)	Final	5/30/2018
White Paper		A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats White Paper A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats 5/30/2018 Status: Final Download: Final Report on Enhancing Resilience Against Botnets; Road Map Towards Resilience Against Botnets; About the report--Commerce.gov; NIST News Release	Final	5/30/2018
ITL Bulletin		Protecting Software Integrity Through Code Signing ITL Bulletin Protecting Software Integrity Through Code Signing 5/23/2018 Status: Final Download: May 2018 ITL Bulletin	Final	5/23/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Final Download: SP 800-202 (DOI); Local Download; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Final	5/10/2018
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 Platform Firmware Resiliency Guidelines 5/04/2018 Status: Final Download: SP 800-193 (DOI); Local Download	Final	5/04/2018
ITL Bulletin		Improving the Trustworthiness of Email, and Beyond! ITL Bulletin Improving the Trustworthiness of Email, and Beyond! 4/25/2018 Status: Final Download: April 2018 ITL Bulletin	Final	4/25/2018
NISTIR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements NISTIR 7511 Rev. 5 Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Final Download: NISTIR 7511 Rev. 5 (DOI); Local Download; SCAP Validation Program	Final	4/20/2018
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Final Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
White Paper	NIST CSWP 6	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 White Paper NIST CSWP 6 Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 4/16/2018 Status: Final Download: White Paper (DOI); Cybersecurity Framework v1.1; Press Release (04-16-2018); Cybersecurity Framework homepage; Translations of the CSF 1.1	Final	4/16/2018
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Final Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
NISTIR	8179	Criticality Analysis Process Model: Prioritizing Systems and Components NISTIR 8179 Criticality Analysis Process Model: Prioritizing Systems and Components 4/09/2018 Status: Final Download: NISTIR 8179 (DOI); Local Download; Process Model (XML); Process Model Diagram; Process Model Diagram (SVG)	Final	4/09/2018
ITL Bulletin		Safeguards for Securing Virtualized Servers ITL Bulletin Safeguards for Securing Virtualized Servers 3/27/2018 Status: Final Download: March 2018 ITL Bulletin	Final	3/27/2018
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Final Download: SP 800-160 Vol. 1 (DOI); Local Download; Appendix D Supplement; Systems Security Engineering (SSE) Project; "Rethinking Cybersecurity from the Inside Out" (blog post)	Final	3/21/2018
SP	500-325	Fog Computing Conceptual Model SP 500-325 Fog Computing Conceptual Model 3/14/2018 Status: Final Download: SP 500-325 (DOI); Local Download	Final	3/14/2018
White Paper		[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry White Paper [Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 3/01/2018 Status: Final Download: Project Description; Project homepage	Final	3/01/2018
ITL Bulletin		Securing Tomorrow's Information Through Post-Quantum Cryptography ITL Bulletin Securing Tomorrow's Information Through Post-Quantum Cryptography 2/27/2018 Status: Final Download: February 2018 ITL Bulletin	Final	2/27/2018
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Final Download: SP 800-70 Rev. 4 (DOI); Local Download; National Checklist Program	Final	2/15/2018
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Final Download: SP 800-126A (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Final Download: SP 800-126 Rev. 3 (DOI); Local Download; SCAP project	Final	2/14/2018
White Paper		[Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 2/07/2018 Status: Final Download: Project Description; Project homepage	Final	2/07/2018
White Paper		[Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 2/07/2018 Status: Final Download: Project Description; Project homepage	Final	2/07/2018
ITL Bulletin		Guidance for Improving LTE-Based Mobile Communications Security ITL Bulletin Guidance for Improving LTE-Based Mobile Communications Security 1/29/2018 Status: Final Download: January 2018 ITL Bulletin	Final	1/29/2018
White Paper	NIST CSWP 5	Security Considerations for Code Signing White Paper NIST CSWP 5 Security Considerations for Code Signing 1/26/2018 Status: Final Download: White Paper (DOI); Local Download	Final	1/26/2018
White Paper		[Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector White Paper [Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector 1/23/2018 Status: Final Download: Project Description; Project Homepage	Final	1/23/2018
SP	1800-6	Domain Name System-Based Electronic Mail Security SP 1800-6 Domain Name System-Based Electronic Mail Security 1/19/2018 Status: Final Download: SP 1800-6 (DOI); Local Download; SP 1800-6 files	Final	1/19/2018
NISTIR	8112	Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes NISTIR 8112 Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes 1/12/2018 Status: Final Download: NISTIR 8112 (DOI); Local Download	Final	1/12/2018
NISTIR	8149	Developing Trust Frameworks to Support Identity Federations NISTIR 8149 Developing Trust Frameworks to Support Identity Federations 1/12/2018 Status: Final Download: NISTIR 8149 (DOI); Local Download	Final	1/12/2018
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation 1/10/2018 Status: Final Download: SP 800-90B (DOI); Local Download; 2nd Draft SP 800-90B; Comments received on 2nd Draft; Summary of Changes (from 2nd Draft to Final); Markup of Changes (from 2nd Draft to Final)	Final	1/10/2018
NISTIR	8201	Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings NISTIR 8201 Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings 12/22/2017 Status: Final Download: NISTIR 8201 (DOI); Local Download; IoT Cybersecurity Colloquium Event Page	Final	12/22/2017
SP	800-187	Guide to LTE Security SP 800-187 Guide to LTE Security 12/21/2017 Status: Final Download: SP 800-187 (DOI); Local Download	Final	12/21/2017
White Paper		[Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) White Paper [Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) 12/14/2017 Status: Final Download: Project Description; Project Homepage	Final	12/14/2017
ITL Bulletin		Guidance on TDEA Block Ciphers ITL Bulletin Guidance on TDEA Block Ciphers 11/27/2017 Status: Final Download: November 2017 ITL Bulletin	Final	11/27/2017
SP	800-67 Rev. 2	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 2 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 11/17/2017 Status: Final Download: SP 800-67 Rev. 2 (DOI); Local Download; NIST Statement on Current Use and Deprecation of TDEA (7/11/17)	Final	11/17/2017
White Paper		[Project Description] TLS Server Certificate Management White Paper [Project Description] TLS Server Certificate Management 11/09/2017 Status: Final Download: Project Description; Project Homepage	Final	11/09/2017
ITL Bulletin		NIST Guidance on Application Container Security ITL Bulletin NIST Guidance on Application Container Security 10/24/2017 Status: Final Download: October 2017 ITL Bulletin	Final	10/24/2017
White Paper		NSRL Kaspersky dataset documentation White Paper NSRL Kaspersky dataset documentation 10/23/2017 Status: Final Download: Documentation; NSRL Curated Kaspersky Hash Set 2017; Related DHS Statement; NSRL	Final	10/23/2017
NISTIR	8176	Security Assurance Requirements for Linux Application Container Deployments NISTIR 8176 Security Assurance Requirements for Linux Application Container Deployments 10/11/2017 Status: Final Download: NISTIR 8176 (DOI); Local Download	Final	10/11/2017
NISTIR	8194	Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario NISTIR 8194 Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario 10/10/2017 Status: Final Download: NISTIR 8194 (DOI); Local Download	Final	10/10/2017
SP	800-195	2016 NIST/ITL Cybersecurity Program Annual Report SP 800-195 2016 NIST/ITL Cybersecurity Program Annual Report 9/28/2017 Status: Final Download: SP 800-195 (DOI); Local Download	Final	9/28/2017
ITL Bulletin		Updating the Keys for DNS Security ITL Bulletin Updating the Keys for DNS Security 9/27/2017 Status: Final Download: September 2017 ITL Bulletin	Final	9/27/2017
SP	800-190	Application Container Security Guide SP 800-190 Application Container Security Guide 9/25/2017 Status: Final Download: SP 800-190 (DOI); Local Download; Japanese translation (unofficial--from IPA, Japan)	Final	9/25/2017
NISTIR	8192	Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings NISTIR 8192 Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings 9/18/2017 Status: Final Download: NISTIR 8192 (DOI); Local Download; NTIA Report on Promoting Stakeholder Action Against Botnets and Other Automated Threats	Final	9/18/2017
White Paper		[Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector White Paper [Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector 9/13/2017 Status: Final Download: Project Description; Project Homepage	Final	9/13/2017
ITL Bulletin		Understanding the Major Update to NIST SP 800-63: Digital Identity Guidelines ITL Bulletin Understanding the Major Update to NIST SP 800-63: Digital Identity Guidelines 8/29/2017 Status: Final Download: August 2017 ITL Bulletin	Final	8/29/2017
NISTIR	8188	Key Performance Indicators for Process Control System Cybersecurity Performance Analysis NISTIR 8188 Key Performance Indicators for Process Control System Cybersecurity Performance Analysis 8/03/2017 Status: Final Download: NISTIR 8188 (DOI); Local Download	Final	8/03/2017
ITL Bulletin		Updated NIST Guidance for Bluetooth Security ITL Bulletin Updated NIST Guidance for Bluetooth Security 7/25/2017 Status: Final Download: July 2017 ITL Bulletin	Final	7/25/2017
White Paper		An Elementary Proof of Private Random Number Generation from Bell Inequalities White Paper An Elementary Proof of Private Random Number Generation from Bell Inequalities 7/20/2017 Status: Final Download: Paper	Final	7/20/2017
White Paper		[Project Description] Secure Inter-Domain Routing--Part 1: Route Hijacks White Paper [Project Description] Secure Inter-Domain Routing--Part 1: Route Hijacks 7/06/2017 Status: Final Download: Project Description; Project Homepage	Final	7/06/2017
White Paper		SPHINCS-Simpira: Fast Stateless Hash-based Signatures with Post-quantum Security White Paper SPHINCS-Simpira: Fast Stateless Hash-based Signatures with Post-quantum Security 6/29/2017 Status: Final Download: Paper	Final	6/29/2017
SP	800-192	Verification and Test Methods for Access Control Policies/Models SP 800-192 Verification and Test Methods for Access Control Policies/Models 6/27/2017 Status: Final Download: SP 800-192 (DOI); Local Download	Final	6/27/2017
White Paper		Tightly Secure Short Signatures from Weak PRFs White Paper Tightly Secure Short Signatures from Weak PRFs 6/27/2017 Status: Final Download: Paper	Final	6/27/2017
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 An Introduction to Information Security 6/22/2017 Status: Final Download: SP 800-12 Rev. 1 (DOI); Local Download	Final	6/22/2017
ITL Bulletin		Toward Standardizing Lightweight Cryptography ITL Bulletin Toward Standardizing Lightweight Cryptography 6/20/2017 Status: Final Download: June 2017 ITL Bulletin	Final	6/20/2017
NISTIR	8011 Vol. 2	Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management NISTIR 8011 Vol. 2 Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management 6/06/2017 Status: Final Download: NISTIR 8011 Vol. 2 (DOI); Local Download	Final	6/06/2017
NISTIR	8011 Vol. 1	Automation Support for Security Control Assessments: Volume 1: Overview NISTIR 8011 Vol. 1 Automation Support for Security Control Assessments: Volume 1: Overview 6/06/2017 Status: Final Download: NISTIR 8011 Vol. 1 (DOI); Local Download	Final	6/06/2017
White Paper		Graphical Methods in Device-Independent Quantum Cryptography White Paper Graphical Methods in Device-Independent Quantum Cryptography 5/25/2017 Status: Final Download: Paper	Final	5/25/2017
ITL Bulletin		Cyber-Threat Intelligence and Information Sharing ITL Bulletin Cyber-Threat Intelligence and Information Sharing 5/08/2017 Status: Final Download: May 2017 ITL Bulletin	Final	5/08/2017
ITL Bulletin		Building the Bridge Between Privacy and Cybersecurity for Federal Systems ITL Bulletin Building the Bridge Between Privacy and Cybersecurity for Federal Systems 4/18/2017 Status: Final Download: April 2017 ITL Bulletin	Final	4/18/2017
White Paper		Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance White Paper Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance 4/02/2017 Status: Final Download: Baldrige Cybersecurity Excellence Builder v1.0; BCEB Categories 1–7 Questions and Notes Only; BCEB Self-Analysis Worksheet; Baldrige Cybersecurity Initiative Homepage (and FAQs)	Final	4/02/2017
NISTIR	8114	Report on Lightweight Cryptography NISTIR 8114 Report on Lightweight Cryptography 3/28/2017 Status: Final Download: NISTIR 8114 (DOI); Local Download; Comments received on Draft (Aug. 2016)	Final	3/28/2017
ITL Bulletin		Fundamentals of Small Business Information Security ITL Bulletin Fundamentals of Small Business Information Security 3/13/2017 Status: Final Download: March 2017 ITL Bulletin	Final	3/13/2017
White Paper		[Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems White Paper [Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems 3/09/2017 Status: Final Download: Project Description; Project Homepage	Final	3/09/2017
ITL Bulletin		Guide for Cybersecurity Incident Recovery ITL Bulletin Guide for Cybersecurity Incident Recovery 2/17/2017 Status: Final Download: February 2017 ITL Bulletin	Final	2/17/2017
NISTIR	8165	Impact of Code Complexity on Software Analysis NISTIR 8165 Impact of Code Complexity on Software Analysis 2/09/2017 Status: Final Download: NISTIR 8165 (DOI); Local Download	Final	2/09/2017
NISTIR	8136	An Overview of Mobile Application Vetting Services for Public Safety NISTIR 8136 An Overview of Mobile Application Vetting Services for Public Safety 1/27/2017 Status: Final Download: NISTIR 8136 (DOI); Local Download	Final	1/27/2017
ITL Bulletin		Dramatically Reducing Software Vulnerabilities ITL Bulletin Dramatically Reducing Software Vulnerabilities 1/17/2017 Status: Final Download: January 2017 ITL Bulletin	Final	1/17/2017
NISTIR	8062	An Introduction to Privacy Engineering and Risk Management in Federal Systems NISTIR 8062 An Introduction to Privacy Engineering and Risk Management in Federal Systems 1/04/2017 Status: Final Download: NISTIR 8062 (DOI); Local Download; "Making Privacy Concrete (three words not usually found together)" (blog post)	Final	1/04/2017
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 Guide for Cybersecurity Event Recovery 12/22/2016 Status: Final Download: SP 800-184 (DOI); Local Download; Press Release (12-22-2016)	Final	12/22/2016
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 12/22/2016 Status: Final Download: SP 800-185 (DOI); Local Download; Comments Received on Draft SP 800-185	Final	12/22/2016
ITL Bulletin		Rethinking Security Through Systems Security Engineering ITL Bulletin Rethinking Security Through Systems Security Engineering 12/21/2016 Status: Final Download: December 2016 ITL Bulletin	Final	12/21/2016
NISTIR	8151	Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy NISTIR 8151 Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy 11/30/2016 Status: Final Download: NISTIR 8151 (DOI); Local Download	Final	11/30/2016
White Paper		[Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders White Paper [Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders 11/28/2016 Status: Final Download: Project Description (Final); Project Homepage	Final	11/28/2016
White Paper	NIST GCR 16-010	Survey and New Directions for Physics-Based Attack Detection in Control Systems White Paper NIST GCR 16-010 Survey and New Directions for Physics-Based Attack Detection in Control Systems 11/21/2016 Status: Final Download: White Paper (DOI); Local Download	Final	11/21/2016
ITL Bulletin		Exploring the Next Generation of Access Control Methodologies ITL Bulletin Exploring the Next Generation of Access Control Methodologies 11/21/2016 Status: Final Download: November 2016 ITL Bulletin	Final	11/21/2016
SP	500-320	Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) SP 500-320 Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) 11/10/2016 Status: Final Download: SP 500-320 (DOI); Local Download	Final	11/10/2016
NISTIR	7621 Rev. 1	Small Business Information Security: The Fundamentals NISTIR 7621 Rev. 1 Small Business Information Security: The Fundamentals 11/03/2016 Status: Final Download: NISTIR 7621 Rev. 1 (DOI); Local Download; Press Release; "Ignoring Cybersecurity is Risky Business" (blog post)	Final	11/03/2016
ITL Bulletin		Making Email Trustworthy ITL Bulletin Making Email Trustworthy 10/24/2016 Status: Final Download: October 2016 ITL Bulletin	Final	10/24/2016
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 10/06/2016 Status: Final Download: SP 800-38B (DOI); Local Download	Final	10/06/2016
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 Guide to Cyber Threat Information Sharing 10/04/2016 Status: Final Download: SP 800-150 (DOI); Local Download	Final	10/04/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 10/03/2016 Status: Final Download: SP 800-178 (DOI); Local Download	Final	10/03/2016
ITL Bulletin		Demystifying the Internet of Things ITL Bulletin Demystifying the Internet of Things 9/23/2016 Status: Final Download: September 2016 ITL Bulletin	Final	9/23/2016
White Paper		[Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector White Paper [Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector 9/20/2016 Status: Final Download: Project Description (Final); Project Homepage	Final	9/20/2016
NISTIR	8103	Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps NISTIR 8103 Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps 9/19/2016 Status: Final Download: NISTIR 8103 (DOI); Local Download	Final	9/19/2016
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 8/22/2016 Status: Final Download: SP 800-175A (DOI); Local Download; Comments Received from Final Draft	Final	8/22/2016
SP	800-182	Computer Security Division 2015 Annual Report SP 800-182 Computer Security Division 2015 Annual Report 8/10/2016 Status: Final Download: SP 800-182 (DOI); Local Download	Final	8/10/2016
ITL Bulletin		NIST Updates Personal Identity Verification (PIV) Guidelines ITL Bulletin NIST Updates Personal Identity Verification (PIV) Guidelines 8/09/2016 Status: Final Download: August 2016 ITL Bulletin	Final	8/09/2016
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-46 Rev. 2 (DOI); Local Download	Final	7/29/2016
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 User's Guide to Telework and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-114 Rev. 1 (DOI); Local Download	Final	7/29/2016
SP	800-183	Networks of 'Things' SP 800-183 Networks of 'Things' 7/28/2016 Status: Final Download: SP 800-183 (DOI); Local Download; Press Release	Final	7/28/2016
NISTIR	8080	Usability and Security Considerations for Public Safety Mobile Authentication NISTIR 8080 Usability and Security Considerations for Public Safety Mobile Authentication 7/27/2016 Status: Final Download: NISTIR 8080 (DOI); Local Download	Final	7/27/2016
ITL Bulletin		Improving Security and Software Management Through the Use of SWID Tags ITL Bulletin Improving Security and Software Management Through the Use of SWID Tags 7/13/2016 Status: Final Download: July 2016 ITL Bulletin	Final	7/13/2016
SP	800-166	Derived PIV Application and Data Model Test Guidelines SP 800-166 Derived PIV Application and Data Model Test Guidelines 6/06/2016 Status: Final Download: SP 800-166 (DOI); Local Download	Final	6/06/2016
ITL Bulletin		Extending Network Security into Virtualized Infrastructure ITL Bulletin Extending Network Security into Virtualized Infrastructure 6/03/2016 Status: Final Download: June 2016 ITL Bulletin	Final	6/03/2016
NISTIR	8135	Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report NISTIR 8135 Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report 6/01/2016 Status: Final Download: NISTIR 8135 (DOI); Local Download	Final	6/01/2016
SP	800-156	Representation of PIV Chain-of-Trust for Import and Export SP 800-156 Representation of PIV Chain-of-Trust for Import and Export 5/20/2016 Status: Final Download: SP 800-156 (DOI); Local Download; XSD Schema File for SP 800-156 Chain of Trust	Final	5/20/2016
ITL Bulletin		Combinatorial Testing for Cybersecurity and Reliability ITL Bulletin Combinatorial Testing for Cybersecurity and Reliability 5/12/2016 Status: Final Download: May 2016 ITL Bulletin	Final	5/12/2016
White Paper		User's Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite White Paper User's Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite 5/12/2016 Status: Final Download: Paper; GitHub site	Final	5/12/2016
White Paper		[Project Description] Data Integrity: Recovering from a destructive malware attack White Paper [Project Description] Data Integrity: Recovering from a destructive malware attack 5/09/2016 Status: Final Download: Project Description; Data Integrity homepage	Final	5/09/2016
NISTIR	8105	Report on Post-Quantum Cryptography NISTIR 8105 Report on Post-Quantum Cryptography 4/28/2016 Status: Final Download: NISTIR 8105 (DOI); Local Download; Press Release; Comments received on Draft NISTIR 8105	Final	4/28/2016
NISTIR	8040	Measuring the Usability and Security of Permuted Passwords on Mobile Platforms NISTIR 8040 Measuring the Usability and Security of Permuted Passwords on Mobile Platforms 4/25/2016 Status: Final Download: NISTIR 8040 (DOI); Local Download	Final	4/25/2016
NISTIR	8060	Guidelines for the Creation of Interoperable Software Identification (SWID) Tags NISTIR 8060 Guidelines for the Creation of Interoperable Software Identification (SWID) Tags 4/22/2016 Status: Final Download: NISTIR 8060 (DOI); Local Download; Guideline Summary for NISTIR 8060; Schema Definition for NISTIR 8060	Final	4/22/2016
White Paper	NIST CSWP 4	Best Practices for Privileged User PIV Authentication White Paper NIST CSWP 4 Best Practices for Privileged User PIV Authentication 4/21/2016 Status: Final Download: White Paper (DOI); Local Download	Final	4/21/2016
ITL Bulletin		New NIST Security Standard Can Protect Credit Cards, Health Information ITL Bulletin New NIST Security Standard Can Protect Credit Cards, Health Information 4/14/2016 Status: Final Download: April 2016 ITL Bulletin	Final	4/14/2016
SP	800-85A-4	PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) SP 800-85A-4 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) 4/13/2016 Status: Final Download: SP 800-85A-4 (DOI); Local Download	Final	4/13/2016
NISTIR	7977	NIST Cryptographic Standards and Guidelines Development Process NISTIR 7977 NIST Cryptographic Standards and Guidelines Development Process 3/31/2016 Status: Final Download: NISTIR 7977 (DOI); Local Download; Press Release; Summary of Second Draft Comments (released Jan. 2016); Comments received on Second Draft (Jan. 2015); Second Draft NISTIR 7977 (Jan. 2015); Summary of First Draft Comments; Comments received on First Draft (Feb. 2014); First Draft NISTIR 7977 (Feb. 2014)	Final	3/31/2016
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 3/29/2016 Status: Final Download: SP 800-38G (DOI); Local Download; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Press Release	Final	3/29/2016
NISTIR	8054	NSTIC Pilots: Catalyzing the Identity Ecosystem NISTIR 8054 NSTIC Pilots: Catalyzing the Identity Ecosystem 3/15/2016 Status: Final Download: NISTIR 8054 (DOI); Local Download	Final	3/15/2016
ITL Bulletin		Updates to the NIST SCAP Validation Program and Associated Test Requirements ITL Bulletin Updates to the NIST SCAP Validation Program and Associated Test Requirements 3/15/2016 Status: Final Download: March 2016 ITL Bulletin	Final	3/15/2016
SP	800-125B	Secure Virtual Network Configuration for Virtual Machine (VM) Protection SP 800-125B Secure Virtual Network Configuration for Virtual Machine (VM) Protection 3/07/2016 Status: Final Download: SP 800-125B (DOI); Local Download	Final	3/07/2016
Building Block		[Project Description] Domain Name System-Based Security for Electronic Mail Building Block [Project Description] Domain Name System-Based Security for Electronic Mail 3/04/2016 Status: Final Download: Project Description; Project homepage	Final	3/04/2016
ITL Bulletin		Implementing Trusted Geolocation Services in the Cloud ITL Bulletin Implementing Trusted Geolocation Services in the Cloud 2/17/2016 Status: Final Download: February 2016 ITL Bulletin	Final	2/17/2016
SP	800-73-4	Interfaces for Personal Identity Verification SP 800-73-4 Interfaces for Personal Identity Verification 2/12/2016 Status: Final Download: SP 800-73-4 (DOI); Local Download; Press Release (06-16-2015)	Final	2/12/2016
NISTIR	7511 Rev. 4	Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements NISTIR 7511 Rev. 4 Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 1/28/2016 Status: Final Download: NISTIR 7511 Rev. 4 (DOI); Local Download; SCAP Validation Program	Final	1/28/2016
NISTIR	8055	Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research NISTIR 8055 Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research 1/20/2016 Status: Final Download: NISTIR 8055 (DOI); Local Download	Final	1/20/2016
ITL Bulletin		Securing Interactive and Automated Access Management Using Secure Shell (SSH) ITL Bulletin Securing Interactive and Automated Access Management Using Secure Shell (SSH) 1/11/2016 Status: Final Download: January 2016 ITL Bulletin	Final	1/11/2016
NISTIR	8074 Vol. 1	Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity NISTIR 8074 Vol. 1 Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final Download: NISTIR 8074 Vol. 1 (DOI); Local Download	Final	12/23/2015
NISTIR	8074 Vol. 2	Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity NISTIR 8074 Vol. 2 Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final Download: NISTIR 8074 Vol. 2 (DOI); Local Download	Final	12/23/2015
ITL Bulletin		Stopping Malware and Unauthorized Software through Application Whitelisting ITL Bulletin Stopping Malware and Unauthorized Software through Application Whitelisting 12/15/2015 Status: Final Download: December 2015 ITL Bulletin	Final	12/15/2015
NISTIR	8089	An Industrial Control System Cybersecurity Performance Testbed NISTIR 8089 An Industrial Control System Cybersecurity Performance Testbed 12/10/2015 Status: Final Download: NISTIR 8089 (DOI); Local Download	Final	12/10/2015
NISTIR	7904	Trusted Geolocation in the Cloud: Proof of Concept Implementation NISTIR 7904 Trusted Geolocation in the Cloud: Proof of Concept Implementation 12/10/2015 Status: Final Download: NISTIR 7904 (DOI); Local Download	Final	12/10/2015
Use Case		[Project Description] Wireless Medical Infusion Pumps: Medical Device Security Use Case [Project Description] Wireless Medical Infusion Pumps: Medical Device Security 12/01/2015 Status: Final Download: Project description; Project homepage	Final	12/01/2015
ITL Bulletin		Tailoring Security Controls for Industrial Control Systems ITL Bulletin Tailoring Security Controls for Industrial Control Systems 11/16/2015 Status: Final Download: November 2015 ITL Bulletin	Final	11/16/2015
SP	800-152	A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) SP 800-152 A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) 10/28/2015 Status: Final Download: SP 800-152 (DOI); Local Download; Comments received on final (3rd) Draft (Dec. 2014); Draft 3 (Dec. 2014); Draft 2 (Jan. 2014); Draft (Aug. 2012)	Final	10/28/2015
SP	800-167	Guide to Application Whitelisting SP 800-167 Guide to Application Whitelisting 10/28/2015 Status: Final Download: SP 800-167 (DOI); Local Download; Press Release	Final	10/28/2015
White Paper		The Number of Boolean Functions with Multiplicative Complexity 2 White Paper The Number of Boolean Functions with Multiplicative Complexity 2 10/27/2015 Status: Final Download: Paper	Final	10/27/2015
NISTIR	7987 Rev. 1	Policy Machine: Features, Architecture, and Specification NISTIR 7987 Rev. 1 Policy Machine: Features, Architecture, and Specification 10/27/2015 Status: Final Download: NISTIR 7987 Rev. 1 (DOI); Local Download	Final	10/27/2015
NISTIR	8053	De-Identification of Personal Information NISTIR 8053 De-Identification of Personal Information 10/22/2015 Status: Final Download: NISTIR 8053 (DOI); Local Download	Final	10/22/2015
ITL Bulletin		Protection of Controlled Unclassified Information ITL Bulletin Protection of Controlled Unclassified Information 10/19/2015 Status: Final Download: October 2015 ITL Bulletin	Final	10/19/2015
NISTIR	7966	Security of Interactive and Automated Access Management Using Secure Shell (SSH) NISTIR 7966 Security of Interactive and Automated Access Management Using Secure Shell (SSH) 10/15/2015 Status: Final Download: NISTIR 7966 (DOI); Local Download	Final	10/15/2015
ITL Bulletin		Additional Secure Hash Algorithm Standards Offer New Opportunities for Data Protection ITL Bulletin Additional Secure Hash Algorithm Standards Offer New Opportunities for Data Protection 9/24/2015 Status: Final Download: September 2015 ITL Bulletin	Final	9/24/2015
White Paper		Multiplicative Complexity of Vector Value Boolean Functions White Paper Multiplicative Complexity of Vector Value Boolean Functions 9/21/2015 Status: Final Download: Paper	Final	9/21/2015
Building Block		[Project Description] Software Asset Management: Continuous Monitoring Building Block [Project Description] Software Asset Management: Continuous Monitoring 9/16/2015 Status: Final Download: Project Description; Project homepage	Final	9/16/2015
SP	800-176	Computer Security Division 2014 Annua

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Search Results