Search | CSRC

Search Results

Showing 1280 matching records.

Series	Number	Title Publications	Status	Release Date
SP	800-66 Rev. 2	Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide SP 800-66 Rev. 2 (Draft) Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide 7/21/2022 Status: Draft Download: SP 800-66 Rev. 2 (Draft) (DOI); Local Download; NIST news article	Draft	7/21/2022
White Paper		[Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps White Paper (Draft) [Project Description] Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps 7/21/2022 Status: Draft Download: Draft Project Description; Project homepage	Draft	7/21/2022
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Draft) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 7/20/2022 Status: Draft Download: SP 800-221A (Draft) (DOI); Local Download; Browse and download SP 800-221A content	Draft	7/20/2022
SP	800-221	Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Draft) Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 7/20/2022 Status: Draft Download: SP 800-221 (Draft) (DOI); Local Download	Draft	7/20/2022
NISTIR	8235	Security Guidance for First Responder Mobile and Wearable Devices NISTIR 8235 Security Guidance for First Responder Mobile and Wearable Devices 7/20/2022 Status: Final Download: NISTIR 8235 (DOI); Local Download	Final	7/20/2022
SP	800-171 Rev. 3	Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Draft) Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 7/19/2022 Status: Draft Download: Protecting CUI project	Draft	7/19/2022
White Paper	NIST CSWP 27 ipd	Cybersecurity Profile for the Hybrid Satellite Networks (HSN) Cybersecurity: Draft Annotated Outline White Paper NIST CSWP 27 ipd (Draft) Cybersecurity Profile for the Hybrid Satellite Networks (HSN) Cybersecurity: Draft Annotated Outline 7/12/2022 Status: Draft Download: White Paper (DOI); NIST CSWP 27 ipd; Project homepage	Draft	7/12/2022
SP	1800-35	Implementing a Zero Trust Architecture (Preliminary Draft) SP 1800-35 (Draft) Implementing a Zero Trust Architecture (Preliminary Draft) 7/07/2022 Status: Draft Download: NIST SP 1800-35B iprd; NIST SP 1800-35A iprd; Project homepage	Draft	7/07/2022
NISTIR	8413	Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8413 Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process 7/05/2022 Status: Final Download: NISTIR 8413 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	7/05/2022
NISTIR	8323 Rev. 1	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services NISTIR 8323 Rev. 1 (Draft) Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 6/29/2022 Status: Draft Download: NISTIR 8323 Rev. 1 (Draft) (DOI); Local Download; Comment template; PNT homepage	Draft	6/29/2022
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 6/24/2022 Status: Final Download: SP 800-219 (DOI); Local Download; mSCP GitHub site; mSCP project documentation	Final	6/24/2022
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Draft) Validating the Integrity of Computing Devices 6/23/2022 Status: Draft Download: NIST SP 1800-34 ipd; Project homepage	Draft	6/23/2022
NISTIR	8425	Profile of the IoT Core Baseline for Consumer IoT Products NISTIR 8425 (Draft) Profile of the IoT Core Baseline for Consumer IoT Products 6/17/2022 Status: Draft Download: NISTIR 8425 (Draft) (DOI); Local Download; Ideas for the Future of IoT Cybersecurity at NIST: IoT Risk Identification Complexity	Draft	6/17/2022
White Paper	NIST CSWP 26	Ordered t-way Combinations for Testing State-based Systems White Paper NIST CSWP 26 Ordered t-way Combinations for Testing State-based Systems 6/13/2022 Status: Final Download: White Paper (DOI); NIST CSWP 26	Final	6/13/2022
NISTIR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response NISTIR 8286D (Draft) Using Business Impact Analysis to Inform Risk Prioritization and Response 6/09/2022 Status: Draft Download: NISTIR 8286D (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	6/09/2022
NISTIR	8409	Measuring the Common Vulnerability Scoring System Base Score Equation NISTIR 8409 (Draft) Measuring the Common Vulnerability Scoring System Base Score Equation 6/08/2022 Status: Draft Download: NISTIR 8409 (Draft) (DOI); Local Download	Draft	6/08/2022
SP	800-160 Vol. 1 Rev. 1	Engineering Trustworthy Secure Systems SP 800-160 Vol. 1 Rev. 1 (Draft) Engineering Trustworthy Secure Systems 6/07/2022 Status: Draft Download: SP 800-160 Vol. 1 Rev. 1 (Draft) (DOI); Local Download; Comment template; Systems Security Engineering (SSE) Project	Draft	6/07/2022
NISTIR	8403	Blockchain for Access Control Systems NISTIR 8403 Blockchain for Access Control Systems 5/26/2022 Status: Final Download: NISTIR 8403 (DOI); Local Download	Final	5/26/2022
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140C Rev. 1 (DOI); Local Download	Final	5/20/2022
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Final Download: SP 800-140D Rev. 1 (DOI); Local Download	Final	5/20/2022
White Paper	NIST CSWP 25	A Data Structure for Integrity Protection with Erasure Capability White Paper NIST CSWP 25 A Data Structure for Integrity Protection with Erasure Capability 5/20/2022 Status: Final Download: White Paper (DOI); NIST CSWP 25	Final	5/20/2022
SP	800-140B Rev. 1	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 5/12/2022 Status: Draft Download: SP 800-140B Rev. 1 (Draft) (DOI); Local Download	Draft	5/12/2022
White Paper	NIST CSWP 20	Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators White Paper NIST CSWP 20 Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators 5/06/2022 Status: Final Download: White Paper (DOI); NIST CSWP 20	Final	5/06/2022
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final Download: SP 800-161 Rev. 1 (DOI); Local Download; EO 14028: Software Security in Supply Chains; NIST’s Cyber Supply Chain Risk Management Program; NIST news article	Final	5/05/2022
NISTIR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases NISTIR 8320 Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 5/04/2022 Status: Final Download: NISTIR 8320 (DOI); Local Download; Trusted Cloud projects	Final	5/04/2022
SP	800-82 Rev. 3	Guide to Operational Technology (OT) Security SP 800-82 Rev. 3 (Draft) Guide to Operational Technology (OT) Security 4/26/2022 Status: Draft Download: SP 800-82 Rev. 3 (Draft) (DOI); Local Download; Comment template	Draft	4/26/2022
SP	1800-33	5G Cybersecurity (Preliminary Draft) SP 1800-33 (Draft) 5G Cybersecurity (Preliminary Draft) 4/25/2022 Status: Draft Download: SP 1800-33B (Prelim. Draft); Project homepage; SP 1800-33A (Prelim. Draft)	Draft	4/25/2022
NISTIR	8320C	Hardware-Enabled Security: Machine Identity Management and Protection NISTIR 8320C (Draft) Hardware-Enabled Security: Machine Identity Management and Protection 4/20/2022 Status: Draft Download: NISTIR 8320C (Draft) (DOI); Local Download	Draft	4/20/2022
NISTIR	8320B	Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms NISTIR 8320B Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms 4/20/2022 Status: Final Download: NISTIR 8320B (DOI); Local Download; Trusted Cloud projects	Final	4/20/2022
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/20/2022 Status: Final Download: SP 1800-19 (DOI); Local Download; Project homepage	Final	4/20/2022
NISTIR	8401	Satellite Ground Segment: Applying the Cybersecurity Framework to Assure Satellite Command and Control NISTIR 8401 (Draft) Satellite Ground Segment: Applying the Cybersecurity Framework to Assure Satellite Command and Control 4/18/2022 Status: Draft Download: NISTIR 8401 (Draft) (DOI); Local Download	Draft	4/18/2022
NISTIR	8419	Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives NISTIR 8419 Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives 4/07/2022 Status: Final Download: NISTIR 8419 (DOI); Local Download	Final	4/07/2022
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final Download: SP 1800-31 (DOI); Local Download; Project homepage	Final	4/06/2022
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 4/06/2022 Status: Final Download: SP 800-40 Rev. 4 (DOI); Local Download	Final	4/06/2022
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 3/16/2022 Status: Final Download: SP 1800-10 (DOI); Local Download; Project homepage	Final	3/16/2022
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A Assessing Enhanced Security Requirements for Controlled Unclassified Information 3/15/2022 Status: Final Download: SP 800-172A (DOI); Local Download; Assessment Procedures Spreadsheet; Assessment Procedures CSV; README for CSV	Final	3/15/2022
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C Implementation of DevSecOps for a Microservices-based Application with Service Mesh 3/08/2022 Status: Final Download: SP 800-204C (DOI); Local Download	Final	3/08/2022
White Paper		[Project Description] Responding to and Recovering from a Cyberattack: Cybersecurity for the Manufacturing Sector White Paper (Draft) [Project Description] Responding to and Recovering from a Cyberattack: Cybersecurity for the Manufacturing Sector 2/28/2022 Status: Draft Download: Draft Project Description; Project homepage	Draft	2/28/2022
NISTIR	8270	Introduction to Cybersecurity for Commercial Satellite Operations (2nd Draft) NISTIR 8270 (Draft) Introduction to Cybersecurity for Commercial Satellite Operations (2nd Draft) 2/25/2022 Status: Draft Download: NISTIR 8270 (Draft) (DOI); Local Download	Draft	2/25/2022
White Paper		Getting Started with Cybersecurity Risk Management: Ransomware White Paper Getting Started with Cybersecurity Risk Management: Ransomware 2/24/2022 Status: Final Download: Quick Start Guide; Portuguese translation; Spanish translation	Final	2/24/2022
NISTIR	8374	Ransomware Risk Management: A Cybersecurity Framework Profile NISTIR 8374 Ransomware Risk Management: A Cybersecurity Framework Profile 2/23/2022 Status: Final Download: NISTIR 8374 (DOI); Local Download; Translations of NIST IR 8374	Final	2/23/2022
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 Securing Telehealth Remote Patient Monitoring Ecosystem 2/22/2022 Status: Final Download: SP 1800-30 (DOI); Local Download; SP 1800-30 files; Project homepage	Final	2/22/2022
NISTIR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management NISTIR 8286B Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/10/2022 Status: Final Download: NISTIR 8286B (DOI); Local Download; See NISTIR 8286 Supplemental Material	Final	2/10/2022
White Paper	NIST CSWP 24	Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products White Paper NIST CSWP 24 Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products 2/04/2022 Status: Final Download: White Paper (DOI); Local Download; IoT Product Criteria page	Final	2/04/2022
White Paper		Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e White Paper Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e 2/04/2022 Status: Final Download: Paper; Software Supply Chain Security page	Final	2/04/2022
White Paper	NIST CSWP 23	Recommended Criteria for Cybersecurity Labeling of Consumer Software White Paper NIST CSWP 23 Recommended Criteria for Cybersecurity Labeling of Consumer Software 2/04/2022 Status: Final Download: White Paper (DOI); Local Download; Consumer Software Criteria page	Final	2/04/2022
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 2/03/2022 Status: Final Download: SP 800-218 (DOI); Local Download; Potential updates; SP 800-218 Table in Excel; Delta from April 2020 paper; Delta from September 2021 public draft; SSDF Project homepage; Executive Order 14028, Improving the Nation's Cybersecurity	Final	2/03/2022
SP	1800-32	Securing Distributed Energy Resources: An Example of Industrial Internet of Things Cybersecurity SP 1800-32 Securing Distributed Energy Resources: An Example of Industrial Internet of Things Cybersecurity 2/02/2022 Status: Final Download: SP 1800-32 (DOI); Local Download; SP 1800-32 files; Project homepage	Final	2/02/2022
NISTIR	8286C	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight NISTIR 8286C (Draft) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 1/26/2022 Status: Draft Download: NISTIR 8286C (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	1/26/2022
SP	800-53A Rev. 5	Assessing Security and Privacy Controls in Information Systems and Organizations SP 800-53A Rev. 5 Assessing Security and Privacy Controls in Information Systems and Organizations 1/25/2022 Status: Final Download: SP 800-53A Rev. 5 (DOI); Local Download; Potential updates [3-30-2022]; Download Spreadsheet; Download Plain Text; Download CSV; README for CSV; OSCAL GitHub	Final	1/25/2022
FIPS	201-3	Personal Identity Verification (PIV) of Federal Employees and Contractors FIPS 201-3 Personal Identity Verification (PIV) of Federal Employees and Contractors 1/24/2022 Status: Final Download: FIPS 201-3 (DOI); Local Download; Potential Updates [3-23-2022]; Web version; Federal Register Notice; NIST news article; 2020 Draft - Public Comments and Resolutions	Final	1/24/2022
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 Guide to Bluetooth Security 1/19/2022 Status: Final Download: SP 800-121 Rev. 2 (DOI); Local Download	Final	1/19/2022
NISTIR	8349	Methodology for Characterizing Network Behavior of Internet of Things Devices NISTIR 8349 (Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 1/11/2022 Status: Draft Download: NISTIR 8349 (Draft) (DOI); Local Download; Project homepage	Draft	1/11/2022
NISTIR	8389	Cybersecurity Considerations for Open Banking Technology and Emerging Standards NISTIR 8389 (Draft) Cybersecurity Considerations for Open Banking Technology and Emerging Standards 1/03/2022 Status: Draft Download: NISTIR 8389 (Draft) (DOI); Local Download	Draft	1/03/2022
Conference Proceedings		Identifying Tactics of Advanced Persistent Threats with Limited Attack Traces Conference Proceedings Identifying Tactics of Advanced Persistent Threats with Limited Attack Traces 12/16/2021 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	12/16/2021
NISTIR	8355	NICE Framework Competencies: Assessing Learners for Cybersecurity Work (2nd Draft) NISTIR 8355 (Draft) NICE Framework Competencies: Assessing Learners for Cybersecurity Work (2nd Draft) 12/15/2021 Status: Draft Download: NISTIR 8355 (Draft) (DOI); Local Download; List of Competencies (draft); NICE Framework site	Draft	12/15/2021
SP	800-160 Vol. 2 Rev. 1	Developing Cyber-Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Rev. 1 Developing Cyber-Resilient Systems: A Systems Security Engineering Approach 12/09/2021 Status: Final Download: SP 800-160 Vol. 2 Rev. 1 (DOI); Local Download; Systems Security Engineering (SSE) Project	Final	12/09/2021
White Paper		[Project Description] Secure IPv6-Only Implementation in the Enterprise White Paper (Draft) [Project Description] Secure IPv6-Only Implementation in the Enterprise 12/09/2021 Status: Draft Download: Draft Project Description; Project homepage	Draft	12/09/2021
White Paper	NIST CSWP 22 ipd	Combination Frequency Differencing White Paper NIST CSWP 22 ipd (Draft) Combination Frequency Differencing 12/06/2021 Status: Draft Download: White Paper (DOI); Draft White Paper	Draft	12/06/2021
SP	800-213A	IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog SP 800-213A IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog 11/29/2021 Status: Final Download: SP 800-213A (DOI); Local Download; Blog post	Final	11/29/2021
SP	800-213	IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements SP 800-213 IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements 11/29/2021 Status: Final Download: SP 800-213 (DOI); Local Download; Blog post	Final	11/29/2021
NISTIR	8286A	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management NISTIR 8286A Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 11/12/2021 Status: Final Download: NISTIR 8286A (DOI); Local Download; Risk Register Schema (JSON); Risk Detail Record Schema (JSON); Risk Detail Record Example (JSON)	Final	11/12/2021
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 (Draft) Recommendation for Key Derivation Using Pseudorandom Functions 10/18/2021 Status: Draft Download: SP 800-108 Rev. 1 (Draft) (DOI); Local Download	Draft	10/18/2021
White Paper	NIST CSWP 21	Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards White Paper NIST CSWP 21 Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards 9/29/2021 Status: Final Download: White Paper (DOI); Local Download; Public Data Resource	Final	9/29/2021
SP	800-214	2020 Cybersecurity and Privacy Annual Report SP 800-214 2020 Cybersecurity and Privacy Annual Report 9/28/2021 Status: Final Download: SP 800-214 (DOI); Local Download	Final	9/28/2021
SP	800-50 Rev. 1	PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program SP 800-50 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program 9/21/2021 Status: Draft Download: None available	Draft	9/21/2021
NISTIR	8360	Machine Learning for Access Control Policy Verification NISTIR 8360 Machine Learning for Access Control Policy Verification 9/16/2021 Status: Final Download: NISTIR 8360 (DOI); Local Download	Final	9/16/2021
White Paper	NIST Technical Note (TN) 2060	BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards White Paper NIST Technical Note (TN) 2060 BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards 9/15/2021 Status: Final Download: White Paper (DOI); Local Download; BGP-SRx Prototype; Public Data Resource	Final	9/15/2021
NISTIR	8379	Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance NISTIR 8379 Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance 9/09/2021 Status: Final Download: NISTIR 8379 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/09/2021
White Paper		[Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector White Paper (Draft) [Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector 8/31/2021 Status: Draft Download: Draft Project Description; Project homepage	Draft	8/31/2021
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders SP 1800-13 Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders 8/25/2021 Status: Final Download: SP 1800-13 (DOI); Local Download; SP 1800-13 files; Project homepage	Final	8/25/2021
NISTIR	8259B	IoT Non-Technical Supporting Capability Core Baseline NISTIR 8259B IoT Non-Technical Supporting Capability Core Baseline 8/25/2021 Status: Final Download: NISTIR 8259B (DOI); Local Download	Final	8/25/2021
SP	800-140F Rev. 1	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F Rev. 1 (Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140F Rev. 1 (Draft) (DOI); Local Download; Comment template	Draft	8/20/2021
NISTIR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework 8/17/2021 Status: Final Download: NISTIR 8170 (DOI); Local Download; Cybersecurity Framework homepage	Final	8/17/2021
Journal Article		Development of the Advanced Encryption Standard Journal Article Development of the Advanced Encryption Standard 8/16/2021 Status: Final Download: Journal Article (DOI); Local Download	Final	8/16/2021
White Paper		On the Multiplicative Complexity of Cubic Boolean Functions White Paper On the Multiplicative Complexity of Cubic Boolean Functions 8/11/2021 Status: Final Download: Paper	Final	8/11/2021
Conference Proceedings		It's the Company, the Government, You and I: User Perceptions of Responsibility for Smart Home Privacy and Security Conference Proceedings It's the Company, the Government, You and I: User Perceptions of Responsibility for Smart Home Privacy and Security 8/11/2021 Status: Final Download: Paper	Final	8/11/2021
SP	800-204B	Attribute-based Access Control for Microservices-based Applications using a Service Mesh SP 800-204B Attribute-based Access Control for Microservices-based Applications using a Service Mesh 8/06/2021 Status: Final Download: SP 800-204B (DOI); Local Download	Final	8/06/2021
SP	1271	Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide SP 1271 Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide 8/06/2021 Status: Final Download: SP 1271 (DOI); Local Download; Translations of NIST SP 1271	Final	8/06/2021
White Paper		[Project Description] Migration to Post-Quantum Cryptography White Paper [Project Description] Migration to Post-Quantum Cryptography 8/04/2021 Status: Final Download: Project Description; Project homepage	Final	8/04/2021
Journal Article		From Neuron Coverage to Steering Angle: Testing Autonomous Vehicles Effectively Journal Article From Neuron Coverage to Steering Angle: Testing Autonomous Vehicles Effectively 8/02/2021 Status: Final Download: Journal Article (DOI); Preprint	Final	8/02/2021
NISTIR	8319	Review of the Advanced Encryption Standard NISTIR 8319 Review of the Advanced Encryption Standard 7/23/2021 Status: Final Download: NISTIR 8319 (DOI); Local Download; Potential updates to NISTIR 8319	Final	7/23/2021
White Paper		[Project Description] Data Classification Practices: Facilitating Data-Centric Security Management White Paper [Project Description] Data Classification Practices: Facilitating Data-Centric Security Management 7/22/2021 Status: Final Download: Project Description; Project homepage	Final	7/22/2021
NISTIR	8369	Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process NISTIR 8369 Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process 7/21/2021 Status: Final Download: NISTIR 8369 (DOI); Local Download; Lightweight Cryptography Project	Final	7/21/2021
SP	800-47 Rev. 1	Managing the Security of Information Exchanges SP 800-47 Rev. 1 Managing the Security of Information Exchanges 7/20/2021 Status: Final Download: SP 800-47 Rev. 1 (DOI); Local Download	Final	7/20/2021
White Paper		[Project Description] Automation of the Cryptographic Module Validation Program (CMVP) White Paper [Project Description] Automation of the Cryptographic Module Validation Program (CMVP) 7/01/2021 Status: Final Download: Project Description; Project homepage	Final	7/01/2021
Journal Article		A decade of reoccurring software weaknesses Journal Article A decade of reoccurring software weaknesses 6/24/2021 Status: Final Download: Journal Article (DOI); Preprint	Final	6/24/2021
White Paper	NIST CSWP 19 ipd	Combinatorial Coverage Difference Measurement White Paper NIST CSWP 19 ipd (Draft) Combinatorial Coverage Difference Measurement 6/22/2021 Status: Draft Download: White Paper (DOI); Local Download	Draft	6/22/2021
NISTIR	8320A	Hardware-Enabled Security: Container Platform Security Prototype NISTIR 8320A Hardware-Enabled Security: Container Platform Security Prototype 6/17/2021 Status: Final Download: NISTIR 8320A (DOI); Local Download; Trusted Cloud projects	Final	6/17/2021
NISTIR	8335	Identity as a Service for Public Safety Organizations NISTIR 8335 (Draft) Identity as a Service for Public Safety Organizations 6/16/2021 Status: Draft Download: NISTIR 8335 (Draft) (DOI); Local Download; Project homepage	Draft	6/16/2021
NISTIR	8336	Background on Identity Federation Technologies for the Public Safety Community NISTIR 8336 (Draft) Background on Identity Federation Technologies for the Public Safety Community 6/09/2021 Status: Draft Download: NISTIR 8336 (Draft) (DOI); Local Download; Project homepage	Draft	6/09/2021
SP	800-216	Recommendations for Federal Vulnerability Disclosure Guidelines SP 800-216 (Draft) Recommendations for Federal Vulnerability Disclosure Guidelines 6/07/2021 Status: Draft Download: SP 800-216 (Draft) (DOI); Local Download; Comment template	Draft	6/07/2021
Conference Proceedings		Metamorphic Testing on the Continuum of Verification and Validation of Simulation Models Conference Proceedings Metamorphic Testing on the Continuum of Verification and Validation of Simulation Models 6/02/2021 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/02/2021
NISTIR	8334	Using Mobile Device Biometrics for Authenticating First Responders NISTIR 8334 (Draft) Using Mobile Device Biometrics for Authenticating First Responders 6/02/2021 Status: Draft Download: NISTIR 8334 (Draft) (DOI); Local Download; Project homepage	Draft	6/02/2021
SP	1800-15	Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 5/26/2021 Status: Final Download: SP 1800-15 (DOI); Local Download; SP 1800-15 files; Project homepage	Final	5/26/2021
White Paper		[Project Description] Addressing Visibility Challenges with TLS 1.3 White Paper [Project Description] Addressing Visibility Challenges with TLS 1.3 5/26/2021 Status: Final Download: Project Description; Project homepage	Final	5/26/2021
White Paper		[Project Description] Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security White Paper [Project Description] Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 5/20/2021 Status: Final Download: Project Description; Project homepage	Final	5/20/2021
White Paper		On the Effect of Projection on Rank Attacks in Multivariate Cryptography White Paper On the Effect of Projection on Rank Attacks in Multivariate Cryptography 5/19/2021 Status: Final Download: Paper; Related Project	Final	5/19/2021
Conference Proceedings		SoK: How (not) to Design and Implement Post-Quantum Cryptography Conference Proceedings SoK: How (not) to Design and Implement Post-Quantum Cryptography 5/17/2021 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	5/17/2021
White Paper	NIST CSWP 18 ipd	Establishing Confidence in IoT Device Security: How do we get there? White Paper NIST CSWP 18 ipd (Draft) Establishing Confidence in IoT Device Security: How do we get there? 5/14/2021 Status: Draft Download: White Paper (DOI); Local Download; NIST Cybersecurity for IoT Program	Draft	5/14/2021
White Paper	NIST CSWP 15	Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic Algorithms White Paper NIST CSWP 15 Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic Algorithms 4/28/2021 Status: Final Download: White Paper (DOI); Local Download; NCCoE--Crypto Agility: Considerations for Migrating to Post-Quantum Cryptographic Algorithms; Post-Quantum Cryptography project	Final	4/28/2021
Conference Paper		A Historical and Statistical Study of the Software Vulnerability Landscape Conference Paper A Historical and Statistical Study of the Software Vulnerability Landscape 4/18/2021 Status: Final Download: Paper; PrePrint	Final	4/18/2021
Conference Paper		Combinatorial Testing Metrics for Machine Learning Conference Paper Combinatorial Testing Metrics for Machine Learning 4/12/2021 Status: Final Download: Conference Paper (DOI); Preprint	Final	4/12/2021
White Paper		Recovering the Key from the Internal State of Grain-128AEAD White Paper Recovering the Key from the Internal State of Grain-128AEAD 4/03/2021 Status: Final Download: Paper; NIST Lightweight Cryptography project	Final	4/03/2021
NISTIR	8347	NIST Test Personal Identity Verification (PIV) Cards Version 2 NISTIR 8347 NIST Test Personal Identity Verification (PIV) Cards Version 2 4/02/2021 Status: Final Download: NISTIR 8347 (DOI); Local Download; NIST PIV Test Cards info; NIST Special Database 33	Final	4/02/2021
White Paper		New Practical Multivariate Signatures from a Nonlinear Modifier White Paper New Practical Multivariate Signatures from a Nonlinear Modifier 4/01/2021 Status: Final Download: Paper; NIST Post-Quantum Cryptography project	Final	4/01/2021
NISTIR	8212	ISCMA: An Information Security Continuous Monitoring Program Assessment NISTIR 8212 ISCMA: An Information Security Continuous Monitoring Program Assessment 3/31/2021 Status: Final Download: NISTIR 8212 (DOI); Local Download; ISCMAx: Recommended Judgments; ISCMAx: Alternate Judgments	Final	3/31/2021
SP	1800-27	Securing Property Management Systems SP 1800-27 Securing Property Management Systems 3/30/2021 Status: Final Download: SP 1800-27 (DOI); Local Download; SP 1800-27 files; Project homepage; NIST News article	Final	3/30/2021
NISTIR	8333	Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop NISTIR 8333 Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop 3/29/2021 Status: Final Download: NISTIR 8333 (DOI); Local Download	Final	3/29/2021
NISTIR	8310	Cybersecurity Framework Election Infrastructure Profile NISTIR 8310 (Draft) Cybersecurity Framework Election Infrastructure Profile 3/29/2021 Status: Draft Download: NISTIR 8310 (Draft) (DOI); Local Download; Comment template; NIST News article	Draft	3/29/2021
Journal Article		Encounter Metrics and Exposure Notification Journal Article Encounter Metrics and Exposure Notification 3/28/2021 Status: Final Download: Journal Article (DOI); NIST news article	Final	3/28/2021
Journal Article		Cybersecurity Standards and Guidelines to Assist Small and Medium-Sized Manufacturers Journal Article Cybersecurity Standards and Guidelines to Assist Small and Medium-Sized Manufacturers 3/18/2021 Status: Final Download: Article	Final	3/18/2021
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) SP 1800-22 (Draft) Mobile Device Security: Bring Your Own Device (BYOD) 3/18/2021 Status: Draft Download: Draft SP 1800-22; Project homepage	Draft	3/18/2021
Journal Article		A Trusted Federated System to Share Granular Data Among Disparate Database Resources Journal Article A Trusted Federated System to Share Granular Data Among Disparate Database Resources 3/15/2021 Status: Final Download: Journal Article (DOI); Preprint	Final	3/15/2021
Journal Article		Pandemic Parallels: What Can Cybersecurity Learn From COVID-19? Journal Article Pandemic Parallels: What Can Cybersecurity Learn From COVID-19? 3/15/2021 Status: Final Download: Journal Article (DOI)	Final	3/15/2021
White Paper		Can you tell? SSNet - a Sagittal Stratum-inspired Neural Network Framework for Sentiment Analysis White Paper Can you tell? SSNet - a Sagittal Stratum-inspired Neural Network Framework for Sentiment Analysis 3/04/2021 Status: Final Download: Paper	Final	3/04/2021
Journal Article		On the Family of Elliptic Curves X + 1/X + Y + 1/Y + t = 0 Journal Article On the Family of Elliptic Curves X + 1/X + Y + 1/Y + t = 0 2/23/2021 Status: Final Download: Article; Preprint	Final	2/23/2021
Journal Article		A New Approach to Data Sharing and Distributed Ledger Technology: A Clinical Trial Use Case Journal Article A New Approach to Data Sharing and Distributed Ledger Technology: A Clinical Trial Use Case 2/16/2021 Status: Final Download: Journal Article (DOI); Preprint	Final	2/16/2021
NISTIR	8323	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services NISTIR 8323 Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 2/11/2021 Status: Final Download: NISTIR 8323 (DOI); Local Download; PNT Profile Quick Guide; NIST news article; PNT homepage	Final	2/11/2021
NISTIR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry NISTIR 8276 Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/11/2021 Status: Final Download: NISTIR 8276 (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/11/2021
NISTIR	8301	Blockchain Networks: Token Design and Management Overview NISTIR 8301 Blockchain Networks: Token Design and Management Overview 2/09/2021 Status: Final Download: NISTIR 8301 (DOI); Local Download	Final	2/09/2021
NISTIR	8344	Ontology for Authentication NISTIR 8344 (Draft) Ontology for Authentication 2/08/2021 Status: Draft Download: NISTIR 8344 (Draft) (DOI); Local Download	Draft	2/08/2021
SP	800-172	Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 SP 800-172 Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 2/02/2021 Status: Final Download: SP 800-172 (DOI); Local Download; Enhanced Security Requirements Spreadsheet; Enhanced Security Requirements CSV; README for CSV; NIST news article	Final	2/02/2021
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 1/28/2021 Status: Final Download: SP 800-171 Rev. 2 (DOI); Local Download; Security Requirements Spreadsheet; Security Requirements CSV; README for CSV; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 2	Final	1/28/2021
White Paper		The membership problem for constant-sized quantum correlations is undecidable White Paper The membership problem for constant-sized quantum correlations is undecidable 1/26/2021 Status: Final Download: Paper	Final	1/26/2021
White Paper		Toward a PEC Use-Case Suite (Preliminary Draft) White Paper (Draft) Toward a PEC Use-Case Suite (Preliminary Draft) 1/21/2021 Status: Draft Download: Preliminary Draft; Comment template; Privacy-Enhancing Cryptography - suite	Draft	1/21/2021
NISTIR	8322	Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop NISTIR 8322 Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop 1/07/2021 Status: Final Download: NISTIR 8322 (DOI); Local Download; Virtual Workshop homepage; NIST Cybersecurity for IoT Program	Final	1/07/2021
SP	1800-24	Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector SP 1800-24 Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector 12/21/2020 Status: Final Download: SP 1800-24 (DOI); Local Download; SP 1800-24 files; Project homepage	Final	12/21/2020
Conference Proceedings		Apply Quantum Search to the Safety Check for Mono Operational Attribute Based Protection Systems Conference Proceedings Apply Quantum Search to the Safety Check for Mono Operational Attribute Based Protection Systems 12/18/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	12/18/2020
NISTIR	8259C	Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline NISTIR 8259C (Draft) Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline 12/15/2020 Status: Draft Download: NISTIR 8259C (Draft) (DOI); Local Download	Draft	12/15/2020
NISTIR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers NISTIR 8246 Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final Download: NISTIR 8246 (DOI); Local Download; National Vulnerability Database (NVD)	Final	12/15/2020
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53B (DOI); Local Download; Control Baselines spreadsheet; Security Control Overlay Repository (SCOR); OSCAL [an OSCAL version of 800-53B is in development]; NIST news article	Final	12/10/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53 Rev. 5 (DOI); Local Download; Control Catalog (spreadsheet); Analysis of updates between 800-53 Rev. 5 and Rev. 4, by MITRE Corp. for ODNI; Mapping: Appendix J Privacy Controls (Rev. 4) to Rev. 5; Mappings: Cybersecurity Framework and Privacy Framework to Rev. 5; Mapping: Rev. 5 to ISO/IEC 27001; OSCAL Version of Rev. 5 controls; Control Collaboration Index Template; Control Collaboration Index Template; Blog post	Final	12/10/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-25 (DOI); Local Download; SP 1800-25 files; Project homepage	Final	12/08/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-26 (DOI); Local Download; SP 1800-26 files; Project homepage	Final	12/08/2020
Conference Proceedings		Measurements of the Most Significant Software Security Weaknesses Conference Proceedings Measurements of the Most Significant Software Security Weaknesses 12/07/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	12/07/2020
Conference Proceedings		Improvements of Algebraic Attacks for Solving the Rank Decoding and MinRank Problems Conference Proceedings Improvements of Algebraic Attacks for Solving the Rank Decoding and MinRank Problems 12/07/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	12/07/2020
Journal Article		An Approach for Detection of Advanced Persistent Threat Attacks Journal Article An Approach for Detection of Advanced Persistent Threat Attacks 12/01/2020 Status: Final Download: Journal Article (DOI); Preprint	Final	12/01/2020
NISTIR	8278A	National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers NISTIR 8278A National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 11/20/2020 Status: Final Download: NISTIR 8278A (DOI); Local Download; OLIR homepage; Focal Document Templates; OLIR Validation Tool; OLIR catalog	Final	11/20/2020
NISTIR	8278	National Online Informative References (OLIR) Program: Program Overview and OLIR Uses NISTIR 8278 National Online Informative References (OLIR) Program: Program Overview and OLIR Uses 11/20/2020 Status: Final Download: NISTIR 8278 (DOI); Local Download; OLIR homepage; OLIR catalog	Final	11/20/2020
SP	800-181 Rev. 1	Workforce Framework for Cybersecurity (NICE Framework) SP 800-181 Rev. 1 Workforce Framework for Cybersecurity (NICE Framework) 11/16/2020 Status: Final Download: SP 800-181 Rev. 1 (DOI); Local Download; NICE Framework homepage; Blog post: "Back to the Basics: Announcing the New NICE Framework"; Translations	Final	11/16/2020
White Paper		Observations on COMET White Paper Observations on COMET 11/16/2020 Status: Final Download: Paper; NIST Lightweight Cryptography project	Final	11/16/2020
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 Recommendation for Stateful Hash-Based Signature Schemes 10/29/2020 Status: Final Download: SP 800-208 (DOI); Local Download; Comments received	Final	10/29/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 Security Guidelines for Storage Infrastructure 10/26/2020 Status: Final Download: SP 800-209 (DOI); Local Download	Final	10/26/2020
Conference Proceedings		Combinatorial Methods for Explainable AI Conference Proceedings Combinatorial Methods for Explainable AI 10/24/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/24/2020
White Paper	NIST Technical Note (TN) 2111	An Empirical Study on Flow-based Botnet Attacks Prediction White Paper NIST Technical Note (TN) 2111 An Empirical Study on Flow-based Botnet Attacks Prediction 10/22/2020 Status: Final Download: White Paper (DOI); Local Download	Final	10/22/2020
White Paper		[Project Description] Implementing a Zero Trust Architecture White Paper [Project Description] Implementing a Zero Trust Architecture 10/21/2020 Status: Final Download: Project Description; Project homepage	Final	10/21/2020
NISTIR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) NISTIR 8286 Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final Download: NISTIR 8286 (DOI); Local Download; Risk Register Schema (JSON); Risk Detail Record Schema (JSON); Risk Detail Record Example (JSON); OLIR Mapping NISTIR 8286 to Cybersecurity Framework v1.1; Playbook: Enterprise Risk Management for the U.S. Federal Government; Association for Federal Enterprise Risk Management (AFERM); RMA - GCOR Conference; 2022 RMA GCOR Conference Session: Prioritizing Cybersecurity Risk for Enterprise Risk Management	Final	10/13/2020
NISTIR	8183 Rev. 1	Cybersecurity Framework Version 1.1 Manufacturing Profile NISTIR 8183 Rev. 1 Cybersecurity Framework Version 1.1 Manufacturing Profile 10/07/2020 Status: Final Download: NISTIR 8183 Rev. 1 (DOI); Local Download; NIST Cybersecurity Framework	Final	10/07/2020
White Paper	NIST CSWP 17 ipd	Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides White Paper NIST CSWP 17 ipd (Draft) Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides 10/01/2020 Status: Draft Download: White Paper (DOI); Local Download; Project homepage	Draft	10/01/2020
Journal Article		Security Awareness Training for the Workforce: Moving Beyond "Check-the-Box" Compliance Journal Article Security Awareness Training for the Workforce: Moving Beyond "Check-the-Box" Compliance 10/01/2020 Status: Final Download: Journal Article (DOI)	Final	10/01/2020
SP	800-55 Rev. 2	PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security 9/24/2020 Status: Draft Download: None available	Draft	9/24/2020
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events 9/22/2020 Status: Final Download: SP 1800-11 (DOI); Local Download; SP 1800-11 files; Project homepage	Final	9/22/2020
Conference Proceedings		Towards Usable Updates for Smart Home Devices Conference Proceedings Towards Usable Updates for Smart Home Devices 9/17/2020 Status: Final Download: Preprint	Final	9/17/2020
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final Download: SP 1800-21 (DOI); Local Download; SP 1800-21 files; Project homepage	Final	9/15/2020
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft Download: None available	Draft	9/10/2020
White Paper	NIST CSWP 16 ipd	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management White Paper NIST CSWP 16 ipd (Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management 9/08/2020 Status: Draft Download: White Paper (DOI); Local Download	Draft	9/08/2020
Journal Article		Parallel Device-Independent Quantum Key Distribution Journal Article Parallel Device-Independent Quantum Key Distribution 9/01/2020 Status: Final Download: Journal Article (DOI); Preprint	Final	9/01/2020
NISTIR	8006	NIST Cloud Computing Forensic Science Challenges NISTIR 8006 NIST Cloud Computing Forensic Science Challenges 8/25/2020 Status: Final Download: NISTIR 8006 (DOI); Local Download	Final	8/25/2020
SP	800-211	2019 NIST/ITL Cybersecurity Program Annual Report SP 800-211 2019 NIST/ITL Cybersecurity Program Annual Report 8/24/2020 Status: Final Download: SP 800-211 (DOI); Local Download	Final	8/24/2020
SP	1500-16	Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report SP 1500-16 Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report 8/20/2020 Status: Final Download: SP 1500-16 (DOI); Local Download	Final	8/20/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 8/18/2020 Status: Final Download: SP 800-56C Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 2	Final	8/18/2020
Conference Proceedings		Cryptanalysis of LEDAcrypt Conference Proceedings Cryptanalysis of LEDAcrypt 8/17/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	8/17/2020
SP	800-207	Zero Trust Architecture SP 800-207 Zero Trust Architecture 8/11/2020 Status: Final Download: SP 800-207 (DOI); Local Download; ZTA project at NCCoE; Japanese translation (unofficial--from PwC Consulting LLC for IPA, Japan)	Final	8/11/2020
ITL Bulletin		Security Considerations for Exchanging Files Over the Internet ITL Bulletin Security Considerations for Exchanging Files Over the Internet 8/03/2020 Status: Final Download: August 2020 ITL Bulletin; Infographic: Play the Secure File Exchange Game	Final	8/03/2020
Conference Proceedings		Aggregating Atomic Clocks for Time-Stamping Conference Proceedings Aggregating Atomic Clocks for Time-Stamping 8/03/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	8/03/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final Download: SP 800-210 (DOI); Local Download	Final	7/31/2020
White Paper	NIST Technical Note (TN) 2066	OpenFMB Proof of Concept Implementation Research White Paper NIST Technical Note (TN) 2066 OpenFMB Proof of Concept Implementation Research 7/29/2020 Status: Final Download: White Paper (DOI); NIST TN 2066	Final	7/29/2020
Conference Proceedings		Systems security assurance as (micro) publishing: Declarative markup for systems description and assessment Conference Proceedings Systems security assurance as (micro) publishing: Declarative markup for systems description and assessment 7/27/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/27/2020
NISTIR	8309	Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8309 Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process 7/22/2020 Status: Final Download: NISTIR 8309 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	7/22/2020
Conference Proceedings		Smart Home Security and Privacy Mitigations: Consumer Perceptions, Practices, and Challenges Conference Proceedings Smart Home Security and Privacy Mitigations: Consumer Perceptions, Practices, and Challenges 7/19/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/19/2020
Journal Article		Boolean Functions with Multiplicative Complexity 3 and 4 Journal Article Boolean Functions with Multiplicative Complexity 3 and 4 7/18/2020 Status: Final Download: Journal Article (DOI); Preprint	Final	7/18/2020
NISTIR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection NISTIR 8219 Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 7/16/2020 Status: Final Download: NISTIR 8219 (DOI); Local Download; Project Homepage	Final	7/16/2020
Conference Proceedings		A Suite of Metrics for Calculating the Most Significant Security Relevant Software Flaw Types Conference Proceedings A Suite of Metrics for Calculating the Most Significant Security Relevant Software Flaw Types 7/13/2020 Status: Final Download: Preprint	Final	7/13/2020
NISTIR	8214A	NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives NISTIR 8214A NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives 7/07/2020 Status: Final Download: NISTIR 8214A (DOI); Local Download; NIST news article; Diff file - shows changes from draft & public comment resolutions	Final	7/07/2020
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 Guide to IPsec VPNs 6/30/2020 Status: Final Download: SP 800-77 Rev. 1 (DOI); Local Download	Final	6/30/2020
Conference Proceedings		Evolving Advanced Persistent Threat Detection using Provenance Graph and Metric Learning Conference Proceedings Evolving Advanced Persistent Threat Detection using Provenance Graph and Metric Learning 6/29/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/29/2020
ITL Bulletin		NIST Privacy Framework: An Overview ITL Bulletin NIST Privacy Framework: An Overview 6/24/2020 Status: Final Download: June 2020 ITL Bulletin	Final	6/24/2020
Conference Proceedings		The impossibility of efficient quantum weak coin flipping Conference Proceedings The impossibility of efficient quantum weak coin flipping 6/22/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/22/2020
White Paper		Rainbow Band Separation is Better than we Thought White Paper Rainbow Band Separation is Better than we Thought 6/20/2020 Status: Final Download: Paper; NIST Post-Quantum Cryptography project	Final	6/20/2020
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 Securing Web Transactions: TLS Server Certificate Management 6/16/2020 Status: Final Download: SP 1800-16 (DOI); Local Download; SP 1800-16 files; Project homepage	Final	6/16/2020
SP	800-63-4	PRE-DRAFT Call for Comments: Digital Identity Guidelines SP 800-63-4 (Draft) PRE-DRAFT Call for Comments: Digital Identity Guidelines 6/08/2020 Status: Draft Download: None available	Draft	6/08/2020
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 Recommendation for Cryptographic Key Generation 6/04/2020 Status: Final Download: SP 800-133 Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-133 Rev. 2	Final	6/04/2020
White Paper		Notes on Interrogating Random Quantum Circuits White Paper Notes on Interrogating Random Quantum Circuits 5/29/2020 Status: Final Download: White Paper (DOI)	Final	5/29/2020
NISTIR	8259	Foundational Cybersecurity Activities for IoT Device Manufacturers NISTIR 8259 Foundational Cybersecurity Activities for IoT Device Manufacturers 5/29/2020 Status: Final Download: NISTIR 8259 (DOI); Local Download; Blog post; Video overview of NIST recommendations; Portuguese translation; Spanish translation	Final	5/29/2020
NISTIR	8259A	IoT Device Cybersecurity Capability Core Baseline NISTIR 8259A IoT Device Cybersecurity Capability Core Baseline 5/29/2020 Status: Final Download: NISTIR 8259A (DOI); Local Download; Federal Profile of NISTIR 8259A; NIST Cybersecurity for IoT Program; Blog post; Video overview of NIST recommendations; Portuguese translation; Spanish translation	Final	5/29/2020
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final Download: SP 800-204A (DOI); Local Download	Final	5/27/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 5/21/2020 Status: Final Download: SP 800-137A (DOI); Local Download; Element Catalog for SP 800-137A	Final	5/21/2020
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 5/20/2020 Status: Final Download: SP 1800-23 (DOI); Local Download; SP 1800-23 files; Project homepage	Final	5/20/2020
Conference Paper		Defining Actionable Rules for Verifying IoT Security [poster] Conference Paper Defining Actionable Rules for Verifying IoT Security [poster] 5/18/2020 Status: Final Download: Poster	Final	5/18/2020
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 Security Analysis of First Responder Mobile and Wearable Devices 5/11/2020 Status: Final Download: NISTIR 8196 (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Final	5/11/2020
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 Recommendation for Key Management: Part 1 – General 5/04/2020 Status: Final Download: SP 800-57 Part 1 Rev. 5 (DOI); Local Download	Final	5/04/2020
NISTIR	8294	Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) NISTIR 8294 Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) 4/29/2020 Status: Final Download: NISTIR 8294 (DOI); Local Download	Final	4/29/2020
NISTIR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management NISTIR 8011 Vol. 4 Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final Download: NISTIR 8011 Vol. 4 (DOI); Local Download	Final	4/28/2020
White Paper		Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files White Paper Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files 4/24/2020 Status: Final Download: Detailed Guide with Recommendations; Brief Guide; Project: Improving Cybersecurity of Managed Service Providers	Final	4/24/2020
White Paper		5G Cybersecurity: Preparing a Secure Evolution to 5G White Paper 5G Cybersecurity: Preparing a Secure Evolution to 5G 4/13/2020 Status: Final Download: Project Description; Project homepage	Final	4/13/2020
Conference Proceedings		Combinatorial Rank Attacks Against the Rectangular Simple Matrix Encryption Scheme Conference Proceedings Combinatorial Rank Attacks Against the Rectangular Simple Matrix Encryption Scheme 4/10/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/10/2020
Journal Article		Narrow Spectrum Software Testing Addressing Complexity and Trust Journal Article Narrow Spectrum Software Testing Addressing Complexity and Trust 4/09/2020 Status: Final Download: Journal Article (DOI); Preprint	Final	4/09/2020
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final Download: SP 800-175B Rev. 1 (DOI); Local Download	Final	3/31/2020
White Paper		[Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise White Paper [Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final Download: Project Description; Project homepage	Final	3/30/2020
White Paper		[Project Description] Validating the Integrity of Computing Devices: Supply Chain Assurance White Paper [Project Description] Validating the Integrity of Computing Devices: Supply Chain Assurance 3/26/2020 Status: Final Download: Project Description; Project homepage	Final	3/26/2020
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft Download: SP 800-124 Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140 (DOI); Local Download	Final	3/20/2020
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 SP 800-140E CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 3/20/2020 Status: Final Download: SP 800-140E (DOI); Local Download	Final	3/20/2020
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140F (DOI); Local Download	Final	3/20/2020
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140A (DOI); Local Download	Final	3/20/2020
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 3/20/2020 Status: Final Download: SP 800-140B (DOI); Local Download	Final	3/20/2020
ITL Bulletin		Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions ITL Bulletin Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions 3/18/2020 Status: Final Download: March 2020 ITL Bulletin	Final	3/18/2020
Conference Proceedings		Automatic Recognition of Advanced Persistent Threat Tactics for Enterprise Security Conference Proceedings Automatic Recognition of Advanced Persistent Threat Tactics for Enterprise Security 3/16/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/16/2020
SP	800-206	Annual Report 2018: NIST/ITL Cybersecurity Program SP 800-206 Annual Report 2018: NIST/ITL Cybersecurity Program 3/13/2020 Status: Final Download: SP 800-206 (DOI); Local Download	Final	3/13/2020
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management 3/02/2020 Status: Final Download: SP 800-63B (DOI); Local Download	Final	3/02/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 Digital Identity Guidelines 3/02/2020 Status: Final Download: SP 800-63-3 (DOI); Local Download; FAQ; SP 800-63 (GitHub)	Final	3/02/2020
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C Digital Identity Guidelines: Federation and Assertions 3/02/2020 Status: Final Download: SP 800-63C (DOI); Local Download	Final	3/02/2020
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A Digital Identity Guidelines: Enrollment and Identity Proofing 3/02/2020 Status: Final Download: SP 800-63A (DOI); Local Download	Final	3/02/2020
Conference Proceedings		TMPS: Ticket-Mediated Password Strengthening Conference Proceedings TMPS: Ticket-Mediated Password Strengthening 2/24/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	2/24/2020
Conference Paper		Method for Effective Measurement, Labeling, and Classification of Botnet C2s for Predicting Attacks [poster] Conference Paper Method for Effective Measurement, Labeling, and Classification of Botnet C2s for Predicting Attacks [poster] 2/23/2020 Status: Final Download: Poster	Final	2/23/2020
NISTIR	8287	A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce NISTIR 8287 A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce 2/20/2020 Status: Final Download: NISTIR 8287 (DOI); Local Download	Final	2/20/2020
White Paper		[Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector White Paper [Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 2/07/2020 Status: Final Download: Project Description; Project homepage	Final	2/07/2020
White Paper	NIST CSWP 11B	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company White Paper NIST CSWP 11B Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11D	Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic White Paper NIST CSWP 11D Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11F	Case Studies in Cyber Supply Chain Risk Management: Seagate Technology White Paper NIST CSWP 11F Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11A	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company White Paper NIST CSWP 11A Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11	Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations White Paper NIST CSWP 11 Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final Download: White Paper (DOI); Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11E	Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. White Paper NIST CSWP 11E Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper	NIST CSWP 11C	Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company White Paper NIST CSWP 11C Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
Journal Article		Moment Subset Sums Over Finite Fields Journal Article Moment Subset Sums Over Finite Fields 2/01/2020 Status: Final Download: Journal Article (DOI); Preprint	Final	2/01/2020
Journal Article		New Mission and Opportunity for Mathematics Researchers: Cryptography in Quantum Era Journal Article New Mission and Opportunity for Mathematics Researchers: Cryptography in Quantum Era 2/01/2020 Status: Final Download: Journal Article (DOI)	Final	2/01/2020
White Paper		On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms White Paper On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms 1/29/2020 Status: Final Download: Paper	Final	1/29/2020
White Paper	NIST CSWP 10	NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 White Paper NIST CSWP 10 NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 1/16/2020 Status: Final Download: White Paper (DOI); Local Download; Privacy Framework and Core; Translations of the PF 1.0	Final	1/16/2020
Journal Article		Input Space Coverage Matters Journal Article Input Space Coverage Matters 1/15/2020 Status: Final Download: Journal Article (DOI); Preprint	Final	1/15/2020
White Paper	NIST CSWP 9	A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper NIST CSWP 9 A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 1/14/2020 Status: Final Download: White Paper (DOI); Local Download	Final	1/14/2020
Conference Proceedings		Forensic Analysis of Advanced Persistent Threat Attacks in Cloud Environments Conference Proceedings Forensic Analysis of Advanced Persistent Threat Attacks in Cloud Environments 1/06/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	1/06/2020
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final Download: SP 800-189 (DOI); Local Download; NIST RPKI Deployment Monitor	Final	12/17/2019
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
Journal Article		Standardization of File Recovery Classification and Authentication Journal Article Standardization of File Recovery Classification and Authentication 12/01/2019 Status: Final Download: Journal Article (DOI); Preprint	Final	12/01/2019
Conference Proceedings		Implementing a Protocol Native Managed Cryptocurrency Conference Proceedings Implementing a Protocol Native Managed Cryptocurrency 11/24/2019 Status: Final Download: Paper	Final	11/24/2019
Conference Proceedings		Augmenting Fiat Currency with an Integrated Managed Cryptocurrency Conference Proceedings Augmenting Fiat Currency with an Integrated Managed Cryptocurrency 11/24/2019 Status: Final Download: Paper	Final	11/24/2019
White Paper		A Nonlinear Multivariate Cryptosystem Based on a Random Linear Code White Paper A Nonlinear Multivariate Cryptosystem Based on a Random Linear Code 11/24/2019 Status: Final Download: Paper	Final	11/24/2019
Journal Article		Rethinking Authentication Journal Article Rethinking Authentication 11/11/2019 Status: Final Download: Journal Article (DOI); Preprint	Final	11/11/2019
FIPS	186-5	Digital Signature Standard (DSS) FIPS 186-5 (Draft) Digital Signature Standard (DSS) 10/31/2019 Status: Draft Download: FIPS 186-5 (Draft) (DOI); Local Download; Comments received on Draft FIPS 186-5	Draft	10/31/2019
SP	800-186	Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Draft) Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters 10/31/2019 Status: Draft Download: SP 800-186 (Draft) (DOI); Local Download; Comments received on Draft SP 800-186	Draft	10/31/2019
NISTIR	8269	A Taxonomy and Terminology of Adversarial Machine Learning NISTIR 8269 (Draft) A Taxonomy and Terminology of Adversarial Machine Learning 10/30/2019 Status: Draft Download: NISTIR 8269 (Draft) (DOI); Local Download; Project Homepage	Draft	10/30/2019
SP	1500-4r2	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 SP 1500-4r2 NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 10/21/2019 Status: Final Download: SP 1500-4r2 (DOI); Local Download; NIST Big Data Interoperability Framework V3.0; NIST news article	Final	10/21/2019
Conference Proceedings		Towards an Automated Unified Framework to Run Applications for Combinatorial Interaction Testing Conference Proceedings Towards an Automated Unified Framework to Run Applications for Combinatorial Interaction Testing 10/14/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/14/2019
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final Download: SP 800-128 (DOI); Local Download	Final	10/10/2019
White Paper		[Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) White Paper (Draft) [Project Description] Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses) 10/08/2019 Status: Draft Download: Project Description	Draft	10/08/2019
NISTIR	8268	Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process NISTIR 8268 Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process 10/07/2019 Status: Final Download: NISTIR 8268 (DOI); Local Download; Lightweight Cryptography project	Final	10/07/2019
NISTIR	8267	Security Review of Consumer Home Internet of Things (IoT) Products NISTIR 8267 (Draft) Security Review of Consumer Home Internet of Things (IoT) Products 10/01/2019 Status: Draft Download: NISTIR 8267 (Draft) (DOI); Local Download	Draft	10/01/2019
NISTIR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance NISTIR 8183A Vol. 1 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 1 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case NISTIR 8183A Vol. 2 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 2 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case NISTIR 8183A Vol. 3 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 3 (DOI); Local Download	Final	9/30/2019
Journal Article		Can Deep Learning Save Us and Itself from the Avalanche of Threats in Cyberspace? Journal Article Can Deep Learning Save Us and Itself from the Avalanche of Threats in Cyberspace? 9/24/2019 Status: Final Download: Journal Article (DOI); Preprint	Final	9/24/2019
Conference Proceedings		BowTie – A Deep Learning Feedforward Neural Network for Sentiment Analysis Conference Proceedings BowTie – A Deep Learning Feedforward Neural Network for Sentiment Analysis 9/10/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	9/10/2019
Journal Article		Optimizing the Network Diversity to Improve the Resilience of Networks Against Unknown Attacks Journal Article Optimizing the Network Diversity to Improve the Resilience of Networks Against Unknown Attacks 9/01/2019 Status: Final Download: Journal Article (DOI); Preprint	Final	9/01/2019
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final Download: SP 800-52 Rev. 2 (DOI); Local Download	Final	8/29/2019
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 Derived Personal Identity Verification (PIV) Credentials 8/27/2019 Status: Final Download: SP 1800-12 (DOI); Local Download; SP 1800-12 files	Final	8/27/2019
Conference Proceedings		Knowledge Extraction for Cryptographic Algorithm Validation Test Vectors by Means of Combinatorial Coverage Measurement Conference Proceedings Knowledge Extraction for Cryptographic Algorithm Validation Test Vectors by Means of Combinatorial Coverage Measurement 8/26/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	8/26/2019
Journal Article		Upper Bounds on the Multiplicative Complexity of Symmetric Boolean Functions Journal Article Upper Bounds on the Multiplicative Complexity of Symmetric Boolean Functions 8/17/2019 Status: Final Download: Journal Article (DOI); Preprint	Final	8/17/2019
White Paper		[Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources White Paper [Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 8/15/2019 Status: Final Download: Project Description; Project homepage	Final	8/15/2019
Conference Paper		Perceptions of Smart Home Privacy and Security Responsibility, Concerns, and Mitigations Conference Paper Perceptions of Smart Home Privacy and Security Responsibility, Concerns, and Mitigations 8/11/2019 Status: Final Download: Poster description	Final	8/11/2019
Conference Paper		Security Awareness in Action: A Case Study [extended abstract] Conference Paper Security Awareness in Action: A Case Study [extended abstract] 8/11/2019 Status: Final Download: Paper	Final	8/11/2019
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 Situational Awareness for Electric Utilities 8/07/2019 Status: Final Download: SP 1800-7 (DOI); Local Download; SP 1800-7 files; Project homepage	Final	8/07/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final Download: SP 800-204 (DOI); Local Download	Final	8/07/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	8/02/2019
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final Download: SP 1800-17 (DOI); Local Download; SP 1800-17 files; Project homepage	Final	7/30/2019
Conference Proceedings		The Open Security Controls Assessment Language (OSCAL): Schema and Metaschema Conference Proceedings The Open Security Controls Assessment Language (OSCAL): Schema and Metaschema 7/30/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/30/2019
White Paper		Practical Cryptanalysis of k-ary C* White Paper Practical Cryptanalysis of k-ary C* 7/18/2019 Status: Final Download: Paper	Final	7/18/2019
Conference Proceedings		CASFinder: Detecting Common Attack Surface Conference Proceedings CASFinder: Detecting Common Attack Surface 7/15/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/15/2019
White Paper	NIST Technical Note (TN) 2051	Cybersecurity Framework Smart Grid Profile White Paper NIST Technical Note (TN) 2051 Cybersecurity Framework Smart Grid Profile 7/09/2019 Status: Final Download: White Paper (DOI); Local Download; Cybersecurity Framework	Final	7/09/2019
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 Glossary of Key Information Security Terms 7/03/2019 Status: Final Download: NISTIR 7298 Rev. 3 (DOI); Local Download; Online Glossary	Final	7/03/2019
Journal Article		On Addition-subtraction Chains of Numbers with Low Hamming Weight Journal Article On Addition-subtraction Chains of Numbers with Low Hamming Weight 7/01/2019 Status: Final Download: Journal Article (DOI)	Final	7/01/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final Download: SP 1800-14 (DOI); Local Download; SP 1800-14 files	Final	6/28/2019
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final Download: NISTIR 8228 (DOI); Local Download; NIST news article; Portuguese translation; Spanish translation	Final	6/25/2019
Conference Proceedings		Searching for Best Karatsuba Recurrences Conference Proceedings Searching for Best Karatsuba Recurrences 6/24/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/24/2019
Conference Proceedings		Motivating Cybersecurity Advocates: Implications for Recruitment and Retention Conference Proceedings Motivating Cybersecurity Advocates: Implications for Recruitment and Retention 6/20/2019 Status: Final Download: Conference Proceedings (DOI); Paper	Final	6/20/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 Attribute Considerations for Access Control Systems 6/18/2019 Status: Final Download: SP 800-205 (DOI); Local Download	Final	6/18/2019
White Paper		[Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses White Paper (Draft) [Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft Download: Project Description	Draft	6/17/2019
NISTIR	8221	A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data NISTIR 8221 A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data 6/05/2019 Status: Final Download: NISTIR 8221 (DOI); Local Download	Final	6/05/2019
Journal Article		Electronics Supply Chain Integrity Enabled by Blockchain Journal Article Electronics Supply Chain Integrity Enabled by Blockchain 6/01/2019 Status: Final Download: Journal Article (DOI); Preprint	Final	6/01/2019
Journal Article		Graphical Methods in Device-Independent Quantum Cryptography Journal Article Graphical Methods in Device-Independent Quantum Cryptography 5/27/2019 Status: Final Download: Journal Article (DOI)	Final	5/27/2019
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations 5/23/2019 Status: Final Download: SP 800-57 Part 2 Rev. 1 (DOI); Local Download	Final	5/23/2019
White Paper		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning White Paper (Draft) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft Download: Draft White Paper	Draft	5/22/2019
NISTIR	8227	Manufacturing Profile Implementation Methodology for a Robotic Workcell NISTIR 8227 Manufacturing Profile Implementation Methodology for a Robotic Workcell 5/22/2019 Status: Final Download: NISTIR 8227 (DOI); Local Download	Final	5/22/2019
NISTIR	8177	Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis NISTIR 8177 Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis 5/21/2019 Status: Final Download: NISTIR 8177 (DOI); Local Download	Final	5/21/2019
ITL Bulletin		FIPS 140-3 Adopts ISO/IEC Standards ITL Bulletin FIPS 140-3 Adopts ISO/IEC Standards 5/20/2019 Status: Final Download: May 2019 ITL Bulletin	Final	5/20/2019
NISTIR	8183	Cybersecurity Framework Manufacturing Profile NISTIR 8183 Cybersecurity Framework Manufacturing Profile 5/20/2019 Status: Final Download: NISTIR 8183 (DOI); Local Download; NIST Cybersecurity Framework	Final	5/20/2019
Conference Proceedings		Post-quantum Cryptography and 5G Security: Tutorial Conference Proceedings Post-quantum Cryptography and 5G Security: Tutorial 5/15/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	5/15/2019
White Paper		[Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector White Paper [Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector 5/13/2019 Status: Final Download: Project Description; Project homepage	Final	5/13/2019
Conference Proceedings		Constant-Round Group Key Exchange from the Ring-LWE Assumption Conference Proceedings Constant-Round Group Key Exchange from the Ring-LWE Assumption 5/08/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	5/08/2019
NISTIR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 NISTIR 8213 (Draft) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft Download: NISTIR 8213 (Draft) (DOI); Local Download; NIST Randomness Beacon project	Draft	5/06/2019
Conference Proceedings		RTL-PSC: Automated Power Side-Channel Leakage Assessment at Register-Transfer Level Conference Proceedings RTL-PSC: Automated Power Side-Channel Leakage Assessment at Register-Transfer Level 4/23/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/23/2019
White Paper	NIST CSWP 8	BowTie – A deep learning feedforward neural network for sentiment analysis White Paper NIST CSWP 8 BowTie – A deep learning feedforward neural network for sentiment analysis 4/22/2019 Status: Final Download: White Paper (DOI); Local Download; Artificial Intelligence at NIST	Final	4/22/2019
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 Vetting the Security of Mobile Applications 4/19/2019 Status: Final Download: SP 800-163 Rev. 1 (DOI); Local Download	Final	4/19/2019
ITL Bulletin		Time to Standardize Threshold Schemes for Cryptographic Primitives ITL Bulletin Time to Standardize Threshold Schemes for Cryptographic Primitives 4/09/2019 Status: Final Download: April 2019 ITL Bulletin	Final	4/09/2019
Conference Proceedings		Browser Fingerprinting using Combinatorial Sequence Testing Conference Proceedings Browser Fingerprinting using Combinatorial Sequence Testing 4/01/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/01/2019
Journal Article		Better Circuits for Binary Polynomial Multiplication Journal Article Better Circuits for Binary Polynomial Multiplication 4/01/2019 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	4/01/2019
Conference Proceedings		Smart Contract Federated Identity Management without Third Party Authentication Services Conference Proceedings Smart Contract Federated Identity Management without Third Party Authentication Services 3/28/2019 Status: Final Download: Paper	Final	3/28/2019
FIPS	140-3	Security Requirements for Cryptographic Modules FIPS 140-3 Security Requirements for Cryptographic Modules 3/22/2019 Status: Final Download: FIPS 140-3 (DOI); Local Download; Cryptographic Module Validation Program (CMVP); NIST News Article	Final	3/22/2019
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Final Download: SP 800-131A Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-131A Rev. 2	Final	3/21/2019
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Final Download: SP 800-56B Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56B Rev. 2 (July 2018)	Final	3/21/2019
NISTIR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography NISTIR 8214 Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 3/01/2019 Status: Final Download: NISTIR 8214 (DOI); Local Download; Diff file - shows changes from draft & public comment resolutions	Final	3/01/2019
ITL Bulletin		The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk ITL Bulletin The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk 2/28/2019 Status: Final Download: February 2019 ITL Bulletin	Final	2/28/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (Draft) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft Download: SP 800-38G Rev. 1 (Draft) (DOI); Local Download; Comments received; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Block Cipher Techniques project	Draft	2/28/2019
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 Trustworthy Email 2/26/2019 Status: Final Download: SP 800-177 Rev. 1 (DOI); Local Download; High Assurance Domains project	Final	2/26/2019
Conference Paper		A Phish Scale: Rating Human Phishing Message Detection Difficulty Conference Paper A Phish Scale: Rating Human Phishing Message Detection Difficulty 2/24/2019 Status: Final Download: Conference Paper (DOI)	Final	2/24/2019
Conference Paper		Case Study – Exploring Children’s Password Knowledge and Practices Conference Paper Case Study – Exploring Children’s Password Knowledge and Practices 2/24/2019 Status: Final Download: Conference Paper (DOI)	Final	2/24/2019
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 Mobile Device Security: Cloud and Hybrid Builds 2/21/2019 Status: Final Download: SP 1800-4 (DOI); Local Download; SP 1800-4 files; Project homepage	Final	2/21/2019
White Paper		[Project Description] Security for IoT Sensor Networks: Building Management Case Study White Paper (Draft) [Project Description] Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Draft Download: Project Description	Draft	2/01/2019
Journal Article		Elliptic Curves Arising from Triangular Numbers Journal Article Elliptic Curves Arising from Triangular Numbers 2/01/2019 Status: Final Download: Volume 19 (w/ link to paper); Preprint	Final	2/01/2019
Journal Article		Rethinking Distributed Ledger Technology Journal Article Rethinking Distributed Ledger Technology 2/01/2019 Status: Final Download: Journal Article (DOI); Preprint	Final	2/01/2019
NISTIR	8240	Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8240 Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process 1/31/2019 Status: Final Download: NISTIR 8240 (DOI); Local Download; NIST PQC Standardization homepage; Round 2 Submissions	Final	1/31/2019
Conference Proceedings		Determining Forensic Data Requirements for Detecting Hypervisor Attacks Conference Proceedings Determining Forensic Data Requirements for Detecting Hypervisor Attacks 1/28/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	1/28/2019
Journal Article		Network Attack Surface: Lifting the Attack Surface Concept to Network Level for Evaluating the Resilience against Zero-Day Attacks Journal Article Network Attack Surface: Lifting the Attack Surface Concept to Network Level for Evaluating the Resilience against Zero-Day Attacks 12/21/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	12/21/2018
Journal Article		Threat Modeling for Cloud Infrastructures Journal Article Threat Modeling for Cloud Infrastructures 12/21/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	12/21/2018
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Final Download: SP 800-37 Rev. 2 (DOI); Local Download	Final	12/20/2018
ITL Bulletin		Securing Wireless Infusion Pumps ITL Bulletin Securing Wireless Infusion Pumps 12/19/2018 Status: Final Download: December 2018 ITL Bulletin	Final	12/19/2018
NISTIR	8241	Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs NISTIR 8241 Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs 12/17/2018 Status: Final Download: NISTIR 8241 (DOI); Local Download	Final	12/17/2018
Book Section		Comprehensive Security Assurance Measures for Virtualized Server Environments Book Section Comprehensive Security Assurance Measures for Virtualized Server Environments 12/12/2018 Status: Final Download: Book Section (DOI); Preprint	Final	12/12/2018
Conference Proceedings		A Method-Level Test Generation Framework for Debugging Big Data Applications Conference Proceedings A Method-Level Test Generation Framework for Debugging Big Data Applications 12/10/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	12/10/2018
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Final Download: NISTIR 8011 Vol. 3 (DOI); Local Download	Final	12/06/2018
Journal Article		The Trouble with Terms Journal Article The Trouble with Terms 12/01/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	12/01/2018
Journal Article		Toward Cyberresiliency in the Context of Cloud Computing Journal Article Toward Cyberresiliency in the Context of Cloud Computing 12/01/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	12/01/2018
NISTIR	8200	Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) NISTIR 8200 Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) 11/29/2018 Status: Final Download: NISTIR 8200 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	11/29/2018
Conference Proceedings		The New Randomness Beacon Format Standard: An Exercise in Limiting the Power of a Trusted Third Party Conference Proceedings The New Randomness Beacon Format Standard: An Exercise in Limiting the Power of a Trusted Third Party 11/26/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	11/26/2018
Journal Article		Access Control for Emerging Distributed Systems Journal Article Access Control for Emerging Distributed Systems 11/01/2018 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	11/01/2018
Journal Article		On the complexity and verification of quantum random circuit sampling Journal Article On the complexity and verification of quantum random circuit sampling 10/29/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	10/29/2018
ITL Bulletin		One Block at a Time – Helping to Build Blockchain Knowledge ITL Bulletin One Block at a Time – Helping to Build Blockchain Knowledge 10/25/2018 Status: Final Download: October 2018 ITL Bulletin	Final	10/25/2018
White Paper		Internet of Things (IoT) Trust Concerns White Paper (Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
NISTIR	8202	Blockchain Technology Overview NISTIR 8202 Blockchain Technology Overview 10/03/2018 Status: Final Download: NISTIR 8202 (DOI); Local Download	Final	10/03/2018
ITL Bulletin		Automated Cryptographic Validation (ACV) Testing ITL Bulletin Automated Cryptographic Validation (ACV) Testing 9/20/2018 Status: Final Download: September 2018 ITL Bulletin	Final	9/20/2018
White Paper	NIST CSWP 7	Transitioning to the Security Content Automation Protocol (SCAP) Version 2 White Paper NIST CSWP 7 Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Final Download: White Paper (DOI); Transitioning to SCAP v2	Final	9/10/2018
White Paper		The Economic Impacts of the Advanced Encryption Standard, 1996-2017 White Paper The Economic Impacts of the Advanced Encryption Standard, 1996-2017 9/07/2018 Status: Final Download: White Paper (DOI); Final Report; Press Release (09-07-2018)	Final	9/07/2018
SP	1800-5	IT Asset Management SP 1800-5 IT Asset Management 9/07/2018 Status: Final Download: SP 1800-5 (DOI); Local Download; SP 1800-5 files; Project homepage	Final	9/07/2018
Journal Article		Finding Bugs in Cryptographic Hash Function Implementations Journal Article Finding Bugs in Cryptographic Hash Function Implementations 9/01/2018 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	9/01/2018
Journal Article		Improved upper bounds for the expected circuit complexity of dense systems of linear equations over GF(2) Journal Article Improved upper bounds for the expected circuit complexity of dense systems of linear equations over GF(2) 9/01/2018 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	9/01/2018
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 8/17/2018 Status: Final Download: SP 1800-8 (DOI); Local Download; SP 1800-8 files; Project homepage	Final	8/17/2018
Conference Proceedings		"We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products Conference Proceedings "We make it a big deal in the company": Security Mindsets in Organizations that Develop Cryptographic Products 8/12/2018 Status: Final Download: Article; Presentation	Final	8/12/2018
Conference Proceedings		Quantifying Information Exposure in Internet Routing Conference Proceedings Quantifying Information Exposure in Internet Routing 8/01/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	8/01/2018
Conference Proceedings		Managed Blockchain Based Cryptocurrencies with Consensus Enforced Rules and Transparency Conference Proceedings Managed Blockchain Based Cryptocurrencies with Consensus Enforced Rules and Transparency 8/01/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	8/01/2018
Journal Article		Cybertrust in the IoT Age Journal Article Cybertrust in the IoT Age 7/31/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	7/31/2018
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 Securing Electronic Health Records on Mobile Devices 7/27/2018 Status: Final Download: SP 1800-1 (DOI); Local Download; SP 1800-1 files; Project homepage	Final	7/27/2018
ITL Bulletin		Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements ITL Bulletin Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements 7/26/2018 Status: Final Download: July 2018 ITL Bulletin	Final	7/26/2018
Journal Article		A Survey of Physics-Based Attack Detection in Cyber-Physical Systems Journal Article A Survey of Physics-Based Attack Detection in Cyber-Physical Systems 7/25/2018 Status: Final Download: Journal Article (DOI)	Final	7/25/2018
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 Identity and Access Management for Electric Utilities 7/13/2018 Status: Final Download: SP 1800-2 (DOI); Local Download; SP 1800-2 files; Project homepage	Final	7/13/2018
Journal Article		In IoT We Trust? Journal Article In IoT We Trust? 7/13/2018 Status: Final Download: Article	Final	7/13/2018
Conference Proceedings		Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs Conference Proceedings Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs 7/10/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/10/2018
Conference Proceedings		Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds Conference Proceedings Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds 7/10/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/10/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (Draft) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft Download: Draft SP 800-71	Draft	7/02/2018
SP	800-203	2017 NIST/ITL Cybersecurity Program Annual Report SP 800-203 2017 NIST/ITL Cybersecurity Program Annual Report 7/02/2018 Status: Final Download: SP 800-203 (DOI); Local Download	Final	7/02/2018
Conference Proceedings		Pseudo-exhaustive Verification of Rule Based Systems Conference Proceedings Pseudo-exhaustive Verification of Rule Based Systems 7/01/2018 Status: Final Download: Conference Proceedings (DOI)	Final	7/01/2018
SP	800-116 Rev. 1	Guidelines for the Use of PIV Credentials in Facility Access SP 800-116 Rev. 1 Guidelines for the Use of PIV Credentials in Facility Access 6/29/2018 Status: Final Download: SP 800-116 Rev. 1 (DOI); Local Download	Final	6/29/2018
Book Section		The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form Book Section The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form 6/27/2018 Status: Final Download: Book Section (DOI); Preprint	Final	6/27/2018
ITL Bulletin		Putting First Things First – A Model Process for Criticality Analysis ITL Bulletin Putting First Things First – A Model Process for Criticality Analysis 6/26/2018 Status: Final Download: June 2018 ITL Bulletin	Final	6/26/2018
Journal Article		Baseline Tailor Journal Article Baseline Tailor 6/26/2018 Status: Final Download: Journal Article (DOI); Local Download; Baseline Tailor software tool	Final	6/26/2018
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Final Download: SP 800-171A (DOI); Local Download; Assessment Procedures Spreadsheet; Assessment Procedures CSV; README for CSV; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018
Conference Proceedings		Parallel Self-Testing of the GHZ State with a Proof by Diagrams Conference Proceedings Parallel Self-Testing of the GHZ State with a Proof by Diagrams 6/12/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/12/2018
Journal Article		Internet of Things (IoT) Metrology Journal Article Internet of Things (IoT) Metrology 6/11/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	6/11/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Final Download: SP 800-125A Rev. 1 (DOI); Local Download	Final	6/07/2018
Journal Article		Stakeholder Identification and Use Case Representation for Internet of Things Applications in Healthcare Journal Article Stakeholder Identification and Use Case Representation for Internet of Things Applications in Healthcare 6/01/2018 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	6/01/2018
White Paper		Extracting Linearization Equations from Noisy Sources White Paper Extracting Linearization Equations from Noisy Sources 5/31/2018 Status: Final Download: Paper	Final	5/31/2018
White Paper		A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future White Paper A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future 5/30/2018 Status: Final Download: Final Report on Supporting the Nation's Cybersecurity Workforce; NIST News Release; Workshop on Cybersecurity Workforce Development (Aug. 2017)	Final	5/30/2018
White Paper		A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats White Paper A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats 5/30/2018 Status: Final Download: Final Report on Enhancing Resilience Against Botnets; Road Map Towards Resilience Against Botnets; About the report--Commerce.gov; NIST News Release	Final	5/30/2018
ITL Bulletin		Protecting Software Integrity Through Code Signing ITL Bulletin Protecting Software Integrity Through Code Signing 5/23/2018 Status: Final Download: May 2018 ITL Bulletin	Final	5/23/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Final Download: SP 800-202 (DOI); Local Download; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Final	5/10/2018
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 Platform Firmware Resiliency Guidelines 5/04/2018 Status: Final Download: SP 800-193 (DOI); Local Download	Final	5/04/2018
ITL Bulletin		Improving the Trustworthiness of Email, and Beyond! ITL Bulletin Improving the Trustworthiness of Email, and Beyond! 4/25/2018 Status: Final Download: April 2018 ITL Bulletin	Final	4/25/2018
NISTIR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements NISTIR 7511 Rev. 5 Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Final Download: NISTIR 7511 Rev. 5 (DOI); Local Download; SCAP Validation Program	Final	4/20/2018
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Final Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
Journal Article		Bad Security Metrics Part 2: Solutions Journal Article Bad Security Metrics Part 2: Solutions 4/16/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	4/16/2018
White Paper	NIST CSWP 6	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 White Paper NIST CSWP 6 Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 4/16/2018 Status: Final Download: White Paper (DOI); Cybersecurity Framework v1.1; Press Release (04-16-2018); Cybersecurity Framework homepage; Translations of the CSF 1.1	Final	4/16/2018
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Final Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
Journal Article		A Software Assurance Reference Dataset: Thousands of Programs With Known Bugs Journal Article A Software Assurance Reference Dataset: Thousands of Programs With Known Bugs 4/16/2018 Status: Final Download: Journal Article (DOI); Article; Software Assurance Reference Dataset (SARD)	Final	4/16/2018
Conference Proceedings		Combinatorial Security Testing Course Conference Proceedings Combinatorial Security Testing Course 4/10/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/10/2018
Conference Proceedings		What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors? [poster] Conference Proceedings What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors? [poster] 4/10/2018 Status: Final Download: Conference Proceedings (DOI); Poster	Final	4/10/2018
NISTIR	8179	Criticality Analysis Process Model: Prioritizing Systems and Components NISTIR 8179 Criticality Analysis Process Model: Prioritizing Systems and Components 4/09/2018 Status: Final Download: NISTIR 8179 (DOI); Local Download; Process Model (XML); Process Model Diagram; Process Model Diagram (SVG)	Final	4/09/2018
Conference Proceedings		HFERP - A New Multivariate Encryption Scheme Conference Proceedings HFERP - A New Multivariate Encryption Scheme 4/09/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/09/2018
Conference Proceedings		Improved Cryptanalysis of HFEv- via Projection Conference Proceedings Improved Cryptanalysis of HFEv- via Projection 4/08/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/08/2018
Journal Article		The Multiplicative Complexity of 6-variable Boolean Functions Journal Article The Multiplicative Complexity of 6-variable Boolean Functions 4/03/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	4/03/2018
ITL Bulletin		Safeguards for Securing Virtualized Servers ITL Bulletin Safeguards for Securing Virtualized Servers 3/27/2018 Status: Final Download: March 2018 ITL Bulletin	Final	3/27/2018
Conference Proceedings		Testing IoT Systems Conference Proceedings Testing IoT Systems 3/26/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/26/2018
Journal Article		Small Low-Depth Circuits for Cryptographic Applications Journal Article Small Low-Depth Circuits for Cryptographic Applications 3/24/2018 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	3/24/2018
Journal Article		Surviving Unpatchable Vulnerabilities through Multi-Option Network Hardening Journal Article Surviving Unpatchable Vulnerabilities through Multi-Option Network Hardening 3/23/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	3/23/2018
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Final Download: SP 800-160 Vol. 1 (DOI); Local Download; Appendix D Supplement; Systems Security Engineering (SSE) Project; "Rethinking Cybersecurity from the Inside Out" (blog post)	Final	3/21/2018
Conference Proceedings		A System for Centralized ABAC Policy Administration and Local ABAC Policy Decision and Enforcement in Host Systems using Access Control Lists Conference Proceedings A System for Centralized ABAC Policy Administration and Local ABAC Policy Decision and Enforcement in Host Systems using Access Control Lists 3/21/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/21/2018
Journal Article		Local Randomness: Examples and Application Journal Article Local Randomness: Examples and Application 3/19/2018 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	3/19/2018
SP	500-325	Fog Computing Conceptual Model SP 500-325 Fog Computing Conceptual Model 3/14/2018 Status: Final Download: SP 500-325 (DOI); Local Download	Final	3/14/2018
White Paper		[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry White Paper [Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 3/01/2018 Status: Final Download: Project Description; Project homepage	Final	3/01/2018
ITL Bulletin		Securing Tomorrow's Information Through Post-Quantum Cryptography ITL Bulletin Securing Tomorrow's Information Through Post-Quantum Cryptography 2/27/2018 Status: Final Download: February 2018 ITL Bulletin	Final	2/27/2018
Journal Article		Could the Internet of Things Be Used to Enhance Student Nurses’ Experiences in a Disaster Simulation? Journal Article Could the Internet of Things Be Used to Enhance Student Nurses’ Experiences in a Disaster Simulation? 2/27/2018 Status: Final Download: Article; Article (PubReader)	Final	2/27/2018
Conference Paper		User Context: An Explanatory Variable in Phishing Susceptibility Conference Paper User Context: An Explanatory Variable in Phishing Susceptibility 2/18/2018 Status: Final Download: Paper	Final	2/18/2018
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Final Download: SP 800-70 Rev. 4 (DOI); Local Download; National Checklist Program	Final	2/15/2018
Journal Article		Computer Science in Education 2018 Journal Article Computer Science in Education 2018 2/14/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	2/14/2018
Journal Article		Bad Security Metrics Part 1: Problems Journal Article Bad Security Metrics Part 1: Problems 2/14/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	2/14/2018
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Final Download: SP 800-126A (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Final Download: SP 800-126 Rev. 3 (DOI); Local Download; SCAP project	Final	2/14/2018
White Paper		[Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 2/07/2018 Status: Final Download: Project Description; Project homepage	Final	2/07/2018
White Paper		[Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 2/07/2018 Status: Final Download: Project Description; Project homepage	Final	2/07/2018
Journal Article		Keyring models: An approach to steerability Journal Article Keyring models: An approach to steerability 2/06/2018 Status: Final Download: Journal Article (DOI); Preprint; Article; Article (PubReader)	Final	2/06/2018
Journal Article		Educating Next-Gen Computer Scientists Journal Article Educating Next-Gen Computer Scientists 1/31/2018 Status: Final Download: Preprint	Final	1/31/2018
ITL Bulletin		Guidance for Improving LTE-Based Mobile Communications Security ITL Bulletin Guidance for Improving LTE-Based Mobile Communications Security 1/29/2018 Status: Final Download: January 2018 ITL Bulletin	Final	1/29/2018
White Paper	NIST CSWP 5	Security Considerations for Code Signing White Paper NIST CSWP 5 Security Considerations for Code Signing 1/26/2018 Status: Final Download: White Paper (DOI); Local Download	Final	1/26/2018
Journal Article		Psst, Can You Keep a Secret? Journal Article Psst, Can You Keep a Secret? 1/24/2018 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	1/24/2018
White Paper		[Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector White Paper [Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector 1/23/2018 Status: Final Download: Project Description; Project Homepage	Final	1/23/2018
SP	1800-6	Domain Name System-Based Electronic Mail Security SP 1800-6 Domain Name System-Based Electronic Mail Security 1/19/2018 Status: Final Download: SP 1800-6 (DOI); Local Download; SP 1800-6 files	Final	1/19/2018
Conference Paper		Thermodynamic Analysis of Classical and Quantum Search Algorithms Conference Paper Thermodynamic Analysis of Classical and Quantum Search Algorithms 1/19/2018 Status: Final Download: Paper	Final	1/19/2018
NISTIR	8112	Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes NISTIR 8112 Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes 1/12/2018 Status: Final Download: NISTIR 8112 (DOI); Local Download	Final	1/12/2018
NISTIR	8149	Developing Trust Frameworks to Support Identity Federations NISTIR 8149 Developing Trust Frameworks to Support Identity Federations 1/12/2018 Status: Final Download: NISTIR 8149 (DOI); Local Download	Final	1/12/2018
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation 1/10/2018 Status: Final Download: SP 800-90B (DOI); Local Download; 2nd Draft SP 800-90B; Comments received on 2nd Draft; Summary of Changes (from 2nd Draft to Final); Markup of Changes (from 2nd Draft to Final)	Final	1/10/2018
Conference Proceedings		A Layered Graphical Model for Cloud Forensic and Mission Impact Analysis Conference Proceedings A Layered Graphical Model for Cloud Forensic and Mission Impact Analysis 1/05/2018 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	1/05/2018
NISTIR	8201	Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings NISTIR 8201 Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings 12/22/2017 Status: Final Download: NISTIR 8201 (DOI); Local Download; IoT Cybersecurity Colloquium Event Page	Final	12/22/2017
SP	800-187	Guide to LTE Security SP 800-187 Guide to LTE Security 12/21/2017 Status: Final Download: SP 800-187 (DOI); Local Download	Final	12/21/2017
White Paper		[Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) White Paper [Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) 12/14/2017 Status: Final Download: Project Description; Project Homepage	Final	12/14/2017
Conference Proceedings		The Iterated Random Function Problem Conference Proceedings The Iterated Random Function Problem 12/07/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	12/07/2017
Journal Article		It Doesn't Have to Be Like This: Cybersecurity Vulnerability Trends Journal Article It Doesn't Have to Be Like This: Cybersecurity Vulnerability Trends 11/28/2017 Status: Final Download: Journal Article (DOI); Preprint	Final	11/28/2017
ITL Bulletin		Guidance on TDEA Block Ciphers ITL Bulletin Guidance on TDEA Block Ciphers 11/27/2017 Status: Final Download: November 2017 ITL Bulletin	Final	11/27/2017
SP	800-67 Rev. 2	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 2 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 11/17/2017 Status: Final Download: SP 800-67 Rev. 2 (DOI); Local Download; NIST Statement on Current Use and Deprecation of TDEA (7/11/17)	Final	11/17/2017
White Paper		[Project Description] TLS Server Certificate Management White Paper [Project Description] TLS Server Certificate Management 11/09/2017 Status: Final Download: Project Description; Project Homepage	Final	11/09/2017
NISTIR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles NISTIR 8193 (Draft) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Draft Download: Draft NISTIR 8193	Draft	11/08/2017
Journal Article		Rigidity of the Magic Pentagram Game Journal Article Rigidity of the Magic Pentagram Game 11/02/2017 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	11/02/2017
Journal Article		SARD: Thousands of Reference Programs for Software Assurance Journal Article SARD: Thousands of Reference Programs for Software Assurance 11/02/2017 Status: Final Download: Article; Software Assurance Reference Dataset (SARD)	Final	11/02/2017
Journal Article		Integral isosceles triangle-parallelogram and Heron triangle-rhombus pairs with a common area and common perimeter Journal Article Integral isosceles triangle-parallelogram and Heron triangle-rhombus pairs with a common area and common perimeter 11/01/2017 Status: Final Download: Journal Article (DOI)	Final	11/01/2017
ITL Bulletin		NIST Guidance on Application Container Security ITL Bulletin NIST Guidance on Application Container Security 10/24/2017 Status: Final Download: October 2017 ITL Bulletin	Final	10/24/2017
White Paper		NSRL Kaspersky dataset documentation White Paper NSRL Kaspersky dataset documentation 10/23/2017 Status: Final Download: Documentation; NSRL Curated Kaspersky Hash Set 2017; Related DHS Statement; NSRL	Final	10/23/2017
White Paper		[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector White Paper (Draft) [Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Draft Download: Draft Project Description; Project homepage	Draft	10/12/2017
NISTIR	8176	Security Assurance Requirements for Linux Application Container Deployments NISTIR 8176 Security Assurance Requirements for Linux Application Container Deployments 10/11/2017 Status: Final Download: NISTIR 8176 (DOI); Local Download	Final	10/11/2017
Conference Proceedings		A Layered Graphical Model for Mission Attack Impact Analysis Conference Proceedings A Layered Graphical Model for Mission Attack Impact Analysis 10/11/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/11/2017
NISTIR	8194	Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario NISTIR 8194 Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario 10/10/2017 Status: Final Download: NISTIR 8194 (DOI); Local Download	Final	10/10/2017
Conference Paper		Organizational Practices in Cryptographic Development and Testing Conference Paper Organizational Practices in Cryptographic Development and Testing 10/09/2017 Status: Final Download: Conference Paper (DOI)	Final	10/09/2017
Conference Proceedings		Cryptocurrency Smart Contracts for Distributed Consensus of Public Randomness Conference Proceedings Cryptocurrency Smart Contracts for Distributed Consensus of Public Randomness 10/07/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/07/2017
Book		Attribute Based Access Control Book Attribute Based Access Control 10/01/2017 Status: Final Download: Attribute Based Access Control	Final	10/01/2017
SP	800-195	2016 NIST/ITL Cybersecurity Program Annual Report SP 800-195 2016 NIST/ITL Cybersecurity Program Annual Report 9/28/2017 Status: Final Download: SP 800-195 (DOI); Local Download	Final	9/28/2017
ITL Bulletin		Updating the Keys for DNS Security ITL Bulletin Updating the Keys for DNS Security 9/27/2017 Status: Final Download: September 2017 ITL Bulletin	Final	9/27/2017
SP	800-190	Application Container Security Guide SP 800-190 Application Container Security Guide 9/25/2017 Status: Final Download: SP 800-190 (DOI); Local Download; Japanese translation (unofficial--from IPA, Japan)	Final	9/25/2017
Journal Article		Alexa, Can I Trust You? Journal Article Alexa, Can I Trust You? 9/22/2017 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	9/22/2017
Conference Proceedings		Evaluating the Effects of Cyber-Attacks on Cyber Physical Systems using a Hardware-in-the-Loop Simulation Testbed Conference Proceedings Evaluating the Effects of Cyber-Attacks on Cyber Physical Systems using a Hardware-in-the-Loop Simulation Testbed 9/18/2017 Status: Final Download: Conference Proceedings (DOI)	Final	9/18/2017
Conference Proceedings		Cloud Security Automation Framework Conference Proceedings Cloud Security Automation Framework 9/18/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	9/18/2017
NISTIR	8192	Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings NISTIR 8192 Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings 9/18/2017 Status: Final Download: NISTIR 8192 (DOI); Local Download; NTIA Report on Promoting Stakeholder Action Against Botnets and Other Automated Threats	Final	9/18/2017
White Paper		[Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector White Paper [Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector 9/13/2017 Status: Final Download: Project Description; Project Homepage	Final	9/13/2017
Journal Article		Advancing coordinated cyber-investigations and tool interoperability using a community developed specification language Journal Article Advancing coordinated cyber-investigations and tool interoperability using a community developed specification language 9/01/2017 Status: Final Download: Journal Article (DOI); Preprint	Final	9/01/2017
Conference Proceedings		Identifying Evidence for Cloud Forensic Analysis Conference Proceedings Identifying Evidence for Cloud Forensic Analysis 8/31/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	8/31/2017
ITL Bulletin		Understanding the Major Update to NIST SP 800-63: Digital Identity Guidelines ITL Bulletin Understanding the Major Update to NIST SP 800-63: Digital Identity Guidelines 8/29/2017 Status: Final Download: August 2017 ITL Bulletin	Final	8/29/2017
Conference Proceedings		Total Break of the SRP Encryption Scheme Conference Proceedings Total Break of the SRP Encryption Scheme 8/18/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	8/18/2017
Journal Article		Cryptography Standards in Quantum Time: New Wine in an Old Wineskin? Journal Article Cryptography Standards in Quantum Time: New Wine in an Old Wineskin? 8/17/2017 Status: Final Download: Journal Article (DOI); Preprint	Final	8/17/2017
Journal Article		Heron Quadrilaterals via Elliptic Curves Journal Article Heron Quadrilaterals via Elliptic Curves 8/08/2017 Status: Final Download: Journal Article (DOI); Preprint	Final	8/08/2017
NISTIR	8188	Key Performance Indicators for Process Control System Cybersecurity Performance Analysis NISTIR 8188 Key Performance Indicators for Process Control System Cybersecurity Performance Analysis 8/03/2017 Status: Final Download: NISTIR 8188 (DOI); Local Download	Final	8/03/2017
Journal Article		Post-Quantum Cryptography—A New Opportunity and Challenge for the Mathematics Community Journal Article Post-Quantum Cryptography—A New Opportunity and Challenge for the Mathematics Community 8/01/2017 Status: Final Download: Journal Article (DOI); Preprint	Final	8/01/2017
Conference Proceedings		Combinatorial and MC/DC Coverage Levels of Random Testing Conference Proceedings Combinatorial and MC/DC Coverage Levels of Random Testing 7/25/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/25/2017
Conference Proceedings		Combinatorial Testing of Full Text Search in Web Applications Conference Proceedings Combinatorial Testing of Full Text Search in Web Applications 7/25/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/25/2017
Conference Proceedings		An Analysis of Vulnerability Trends, 2008-2016 Conference Proceedings An Analysis of Vulnerability Trends, 2008-2016 7/25/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/25/2017
ITL Bulletin		Updated NIST Guidance for Bluetooth Security ITL Bulletin Updated NIST Guidance for Bluetooth Security 7/25/2017 Status: Final Download: July 2017 ITL Bulletin	Final	7/25/2017
White Paper		An Elementary Proof of Private Random Number Generation from Bell Inequalities White Paper An Elementary Proof of Private Random Number Generation from Bell Inequalities 7/20/2017 Status: Final Download: Paper	Final	7/20/2017
White Paper		[Project Description] Secure Inter-Domain Routing--Part 1: Route Hijacks White Paper [Project Description] Secure Inter-Domain Routing--Part 1: Route Hijacks 7/06/2017 Status: Final Download: Project Description; Project Homepage	Final	7/06/2017
White Paper		SPHINCS-Simpira: Fast Stateless Hash-based Signatures with Post-quantum Security White Paper SPHINCS-Simpira: Fast Stateless Hash-based Signatures with Post-quantum Security 6/29/2017 Status: Final Download: Paper	Final	6/29/2017
Conference Proceedings		HMFEv - An Efficient Multivariate Signature Scheme Conference Proceedings HMFEv - An Efficient Multivariate Signature Scheme 6/28/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/28/2017
Conference Proceedings		Improved Attacks for Characteristic-2 Parameters of the Cubic ABC Simple Matrix Encryption Scheme Conference Proceedings Improved Attacks for Characteristic-2 Parameters of the Cubic ABC Simple Matrix Encryption Scheme 6/28/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/28/2017
SP	800-192	Verification and Test Methods for Access Control Policies/Models SP 800-192 Verification and Test Methods for Access Control Policies/Models 6/27/2017 Status: Final Download: SP 800-192 (DOI); Local Download	Final	6/27/2017
White Paper		Tightly Secure Short Signatures from Weak PRFs White Paper Tightly Secure Short Signatures from Weak PRFs 6/27/2017 Status: Final Download: Paper	Final	6/27/2017
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 An Introduction to Information Security 6/22/2017 Status: Final Download: SP 800-12 Rev. 1 (DOI); Local Download	Final	6/22/2017
Conference Proceedings		Towards Actionable Mission Impact Assessment in the Context of Cloud Computing Conference Proceedings Towards Actionable Mission Impact Assessment in the Context of Cloud Computing 6/22/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/22/2017
Conference Proceedings		Securing Networks Against Unpatchable and Unknown Vulnerabilities Using Heterogeneous Hardening Options Conference Proceedings Securing Networks Against Unpatchable and Unknown Vulnerabilities Using Heterogeneous Hardening Options 6/22/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/22/2017
Journal Article		Near-Optimal Algorithm to Count Occurrences of Subsequences of a Given Length Journal Article Near-Optimal Algorithm to Count Occurrences of Subsequences of a Given Length 6/21/2017 Status: Final Download: Journal Article (DOI); Preprint	Final	6/21/2017
ITL Bulletin		Toward Standardizing Lightweight Cryptography ITL Bulletin Toward Standardizing Lightweight Cryptography 6/20/2017 Status: Final Download: June 2017 ITL Bulletin	Final	6/20/2017
Journal Article		Randomness in Nonlocal Games Between Mistrustful Players Journal Article Randomness in Nonlocal Games Between Mistrustful Players 6/15/2017 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	6/15/2017
Journal Article		Geometric Progressions on Elliptic Curves Journal Article Geometric Progressions on Elliptic Curves 6/13/2017 Status: Final Download: Article; Preprint	Final	6/13/2017
NISTIR	8011 Vol. 2	Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management NISTIR 8011 Vol. 2 Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management 6/06/2017 Status: Final Download: NISTIR 8011 Vol. 2 (DOI); Local Download	Final	6/06/2017
NISTIR	8011 Vol. 1	Automation Support for Security Control Assessments: Volume 1: Overview NISTIR 8011 Vol. 1 Automation Support for Security Control Assessments: Volume 1: Overview 6/06/2017 Status: Final Download: NISTIR 8011 Vol. 1 (DOI); Local Download	Final	6/06/2017
Conference Proceedings		Inferring Previously Uninstalled Applications from Digital Traces Conference Proceedings Inferring Previously Uninstalled Applications from Digital Traces 5/26/2017 Status: Final Download: Paper	Final	5/26/2017
White Paper		Graphical Methods in Device-Independent Quantum Cryptography White Paper Graphical Methods in Device-Independent Quantum Cryptography 5/25/2017 Status: Final Download: Paper	Final	5/25/2017
Journal Article		What Happened to Software Metrics? Journal Article What Happened to Software Metrics? 5/10/2017 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	5/10/2017
ITL Bulletin		Cyber-Threat Intelligence and Information Sharing ITL Bulletin Cyber-Threat Intelligence and Information Sharing 5/08/2017 Status: Final Download: May 2017 ITL Bulletin	Final	5/08/2017
ITL Bulletin		Building the Bridge Between Privacy and Cybersecurity for Federal Systems ITL Bulletin Building the Bridge Between Privacy and Cybersecurity for Federal Systems 4/18/2017 Status: Final Download: April 2017 ITL Bulletin	Final	4/18/2017
Journal Article		Linear Time Algorithms to Restrict Insider Access using Multi-Policy Access Control Systems Journal Article Linear Time Algorithms to Restrict Insider Access using Multi-Policy Access Control Systems 4/13/2017 Status: Final Download: Journal Article (DOI); Article	Final	4/13/2017
White Paper		Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance White Paper Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance 4/02/2017 Status: Final Download: Baldrige Cybersecurity Excellence Builder v1.0; BCEB Categories 1–7 Questions and Notes Only; BCEB Self-Analysis Worksheet; Baldrige Cybersecurity Initiative Homepage (and FAQs)	Final	4/02/2017
NISTIR	8114	Report on Lightweight Cryptography NISTIR 8114 Report on Lightweight Cryptography 3/28/2017 Status: Final Download: NISTIR 8114 (DOI); Local Download; Comments received on Draft (Aug. 2016)	Final	3/28/2017
Conference Proceedings		Imposing Fine-grain Next Generation Access Control over Database Queries Conference Proceedings Imposing Fine-grain Next Generation Access Control over Database Queries 3/24/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/24/2017
Conference Proceedings		Verification of Resilience Policies that Assist Attribute Based Access Control Conference Proceedings Verification of Resilience Policies that Assist Attribute Based Access Control 3/24/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/24/2017
ITL Bulletin		Fundamentals of Small Business Information Security ITL Bulletin Fundamentals of Small Business Information Security 3/13/2017 Status: Final Download: March 2017 ITL Bulletin	Final	3/13/2017
White Paper		[Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems White Paper [Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems 3/09/2017 Status: Final Download: Project Description; Project Homepage	Final	3/09/2017
Conference Paper		Be Prepared: How US Government Experts Think About Cybersecurity Conference Paper Be Prepared: How US Government Experts Think About Cybersecurity 2/26/2017 Status: Final Download: Conference Paper (DOI); Paper; Presentation	Final	2/26/2017
Conference Proceedings		Towards probabilistic identification of zero-day attack paths Conference Proceedings Towards probabilistic identification of zero-day attack paths 2/23/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	2/23/2017
Journal Article		Building Caring Healthcare Systems in the Internet of Things Journal Article Building Caring Healthcare Systems in the Internet of Things 2/22/2017 Status: Final Download: Journal Article (DOI); Preprint	Final	2/22/2017
ITL Bulletin		Guide for Cybersecurity Incident Recovery ITL Bulletin Guide for Cybersecurity Incident Recovery 2/17/2017 Status: Final Download: February 2017 ITL Bulletin	Final	2/17/2017
NISTIR	8165	Impact of Code Complexity on Software Analysis NISTIR 8165 Impact of Code Complexity on Software Analysis 2/09/2017 Status: Final Download: NISTIR 8165 (DOI); Local Download	Final	2/09/2017
NISTIR	8139	Identifying Uniformity with Entropy and Divergence NISTIR 8139 (Draft) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Draft Download: Draft NISTIR 8139	Draft	2/02/2017
NISTIR	8136	An Overview of Mobile Application Vetting Services for Public Safety NISTIR 8136 An Overview of Mobile Application Vetting Services for Public Safety 1/27/2017 Status: Final Download: NISTIR 8136 (DOI); Local Download	Final	1/27/2017
Conference Proceedings		Measuring and Improving the Effectiveness of Defense-in-Depth Postures Conference Proceedings Measuring and Improving the Effectiveness of Defense-in-Depth Postures 1/26/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	1/26/2017
ITL Bulletin		Dramatically Reducing Software Vulnerabilities ITL Bulletin Dramatically Reducing Software Vulnerabilities 1/17/2017 Status: Final Download: January 2017 ITL Bulletin	Final	1/17/2017
Conference Proceedings		Full Disk Encryption: Bridging Theory and Practice Conference Proceedings Full Disk Encryption: Bridging Theory and Practice 1/10/2017 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	1/10/2017
NISTIR	8062	An Introduction to Privacy Engineering and Risk Management in Federal Systems NISTIR 8062 An Introduction to Privacy Engineering and Risk Management in Federal Systems 1/04/2017 Status: Final Download: NISTIR 8062 (DOI); Local Download; "Making Privacy Concrete (three words not usually found together)" (blog post)	Final	1/04/2017
Journal Article		Arithmetic Progressions on Conics Journal Article Arithmetic Progressions on Conics 12/27/2016 Status: Final Download: Article	Final	12/27/2016
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 Guide for Cybersecurity Event Recovery 12/22/2016 Status: Final Download: SP 800-184 (DOI); Local Download; Press Release (12-22-2016)	Final	12/22/2016
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 12/22/2016 Status: Final Download: SP 800-185 (DOI); Local Download; Comments Received on Draft SP 800-185	Final	12/22/2016
ITL Bulletin		Rethinking Security Through Systems Security Engineering ITL Bulletin Rethinking Security Through Systems Security Engineering 12/21/2016 Status: Final Download: December 2016 ITL Bulletin	Final	12/21/2016
Conference Proceedings		Memory and Motor Processes of Password Entry Error Conference Proceedings Memory and Motor Processes of Password Entry Error 12/20/2016 Status: Final Download: Conference Proceedings (DOI)	Final	12/20/2016
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (Draft) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Draft Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
Journal Article		Measuring and Specifying Combinatorial Coverage of Test Input Configurations Journal Article Measuring and Specifying Combinatorial Coverage of Test Input Configurations 12/01/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	12/01/2016
Journal Article		Defeating Buffer Overflow: A Trivial but Dangerous Bug Journal Article Defeating Buffer Overflow: A Trivial but Dangerous Bug 12/01/2016 Status: Final Download: Journal Article (DOI)	Final	12/01/2016
NISTIR	8151	Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy NISTIR 8151 Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy 11/30/2016 Status: Final Download: NISTIR 8151 (DOI); Local Download	Final	11/30/2016
White Paper		[Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders White Paper [Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders 11/28/2016 Status: Final Download: Project Description (Final); Project Homepage	Final	11/28/2016
White Paper	NIST GCR 16-010	Survey and New Directions for Physics-Based Attack Detection in Control Systems White Paper NIST GCR 16-010 Survey and New Directions for Physics-Based Attack Detection in Control Systems 11/21/2016 Status: Final Download: White Paper (DOI); Local Download	Final	11/21/2016
ITL Bulletin		Exploring the Next Generation of Access Control Methodologies ITL Bulletin Exploring the Next Generation of Access Control Methodologies 11/21/2016 Status: Final Download: November 2016 ITL Bulletin	Final	11/21/2016
SP	500-320	Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) SP 500-320 Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) 11/10/2016 Status: Final Download: SP 500-320 (DOI); Local Download	Final	11/10/2016
NISTIR	7621 Rev. 1	Small Business Information Security: The Fundamentals NISTIR 7621 Rev. 1 Small Business Information Security: The Fundamentals 11/03/2016 Status: Final Download: NISTIR 7621 Rev. 1 (DOI); Local Download; Press Release; "Ignoring Cybersecurity is Risky Business" (blog post)	Final	11/03/2016
Conference Proceedings		Secure Multicast Group Management and Key Distribution in IEEE 802.21 Conference Proceedings Secure Multicast Group Management and Key Distribution in IEEE 802.21 11/02/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	11/02/2016
Journal Article		The Power of Qualitative Methods: Aha Moments in Exploring Cybersecurity and Trust Journal Article The Power of Qualitative Methods: Aha Moments in Exploring Cybersecurity and Trust 11/01/2016 Status: Final Download: Article	Final	11/01/2016
Journal Article		Caring: An Undiscovered Super “Ility” of Smart Healthcare Journal Article Caring: An Undiscovered Super “Ility” of Smart Healthcare 10/28/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	10/28/2016
Conference Proceedings		Restricting Insider Access through Efficient Implementation of Multi-Policy Access Control Systems Conference Proceedings Restricting Insider Access through Efficient Implementation of Multi-Policy Access Control Systems 10/28/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/28/2016
Conference Proceedings		Threat Modeling for Cloud Data Center Infrastructures Conference Proceedings Threat Modeling for Cloud Data Center Infrastructures 10/26/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/26/2016
Journal Article		Secure and Usable Enterprise Authentication: Lessons from the Field Journal Article Secure and Usable Enterprise Authentication: Lessons from the Field 10/25/2016 Status: Final Download: Journal Article (DOI)	Final	10/25/2016
Conference Proceedings		Micro-Signatures: The Effectiveness of Known Bad N-Grams for Network Anomaly Detection Conference Proceedings Micro-Signatures: The Effectiveness of Known Bad N-Grams for Network Anomaly Detection 10/25/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/25/2016
Conference Proceedings		Limiting The Impact of Stealthy Attacks on Industrial Control Systems Conference Proceedings Limiting The Impact of Stealthy Attacks on Industrial Control Systems 10/24/2016 Status: Final Download: Conference Proceedings (DOI)	Final	10/24/2016
ITL Bulletin		Making Email Trustworthy ITL Bulletin Making Email Trustworthy 10/24/2016 Status: Final Download: October 2016 ITL Bulletin	Final	10/24/2016
Journal Article		Combinatorial Methods in Security Testing Journal Article Combinatorial Methods in Security Testing 10/20/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	10/20/2016
Conference Proceedings		A Better-Than-3n Lower Bound for the Circuit Complexity of an Explicit Function Conference Proceedings A Better-Than-3n Lower Bound for the Circuit Complexity of an Explicit Function 10/11/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/11/2016
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 10/06/2016 Status: Final Download: SP 800-38B (DOI); Local Download	Final	10/06/2016
Journal Article		High Rank Elliptic Curves with Torsion Z/4Z Induced by Kihara's Elliptic Curves Journal Article High Rank Elliptic Curves with Torsion Z/4Z Induced by Kihara's Elliptic Curves 10/05/2016 Status: Final Download: Volume 16 (w/ link to paper); Preprint	Final	10/05/2016
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 Guide to Cyber Threat Information Sharing 10/04/2016 Status: Final Download: SP 800-150 (DOI); Local Download	Final	10/04/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 10/03/2016 Status: Final Download: SP 800-178 (DOI); Local Download	Final	10/03/2016
Journal Article		Security Fatigue Journal Article Security Fatigue 9/28/2016 Status: Final Download: Journal Article (DOI); Press Release	Final	9/28/2016
ITL Bulletin		Demystifying the Internet of Things ITL Bulletin Demystifying the Internet of Things 9/23/2016 Status: Final Download: September 2016 ITL Bulletin	Final	9/23/2016
White Paper		[Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector White Paper [Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector 9/20/2016 Status: Final Download: Project Description (Final); Project Homepage	Final	9/20/2016
Conference Proceedings		A Probabilistic Network Forensics Model for Evidence Analysis Conference Proceedings A Probabilistic Network Forensics Model for Evidence Analysis 9/20/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	9/20/2016
NISTIR	8103	Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps NISTIR 8103 Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps 9/19/2016 Status: Final Download: NISTIR 8103 (DOI); Local Download	Final	9/19/2016
White Paper		[Project Description] Authentication for Law Enforcement Vehicle Systems White Paper (Draft) [Project Description] Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Draft Download: Draft Project Description	Draft	9/13/2016
NISTIR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue NISTIR 8144 (Draft) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft Download: Draft NISTIR 8144; Mobile Threat Catalogue (GitHub); Press Release	Draft	9/12/2016
Book Section		Cloud Computing Security Essentials and Architecture Book Section Cloud Computing Security Essentials and Architecture 9/09/2016 Status: Final Download: Book Section (DOI); Preprint	Final	9/09/2016
Book Section		Managing Risk in the Cloud Book Section Managing Risk in the Cloud 9/09/2016 Status: Final Download: Book Section (DOI); Preprint	Final	9/09/2016
Conference Proceedings		Estimating t-Way Fault Profile Evolution During Testing Conference Proceedings Estimating t-Way Fault Profile Evolution During Testing 9/07/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	9/07/2016
Journal Article		Entropy as a Service: Unlocking Cryptography's Full Potential Journal Article Entropy as a Service: Unlocking Cryptography's Full Potential 9/07/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	9/07/2016
Conference Proceedings		What’s a Special Character Anyway? Effects of Ambiguous Terminology in Password Rules Conference Proceedings What’s a Special Character Anyway? Effects of Ambiguous Terminology in Password Rules 9/01/2016 Status: Final Download: Conference Proceedings (DOI)	Final	9/01/2016
Journal Article		Separating OR, SUM, and XOR Circuits Journal Article Separating OR, SUM, and XOR Circuits 8/23/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	8/23/2016
Journal Article		Whatever Happened to Formal Methods for Security? Journal Article Whatever Happened to Formal Methods for Security? 8/23/2016 Status: Final Download: Article; Article (PubReader)	Final	8/23/2016
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 8/22/2016 Status: Final Download: SP 800-175A (DOI); Local Download; Comments Received from Final Draft	Final	8/22/2016
SP	800-182	Computer Security Division 2015 Annual Report SP 800-182 Computer Security Division 2015 Annual Report 8/10/2016 Status: Final Download: SP 800-182 (DOI); Local Download	Final	8/10/2016
ITL Bulletin		NIST Updates Personal Identity Verification (PIV) Guidelines ITL Bulletin NIST Updates Personal Identity Verification (PIV) Guidelines 8/09/2016 Status: Final Download: August 2016 ITL Bulletin	Final	8/09/2016
Conference Proceedings		General Methods for Access Control Policy Verification Conference Proceedings General Methods for Access Control Policy Verification 7/30/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/30/2016
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-46 Rev. 2 (DOI); Local Download	Final	7/29/2016
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 User's Guide to Telework and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-114 Rev. 1 (DOI); Local Download	Final	7/29/2016
SP	800-183	Networks of 'Things' SP 800-183 Networks of 'Things' 7/28/2016 Status: Final Download: SP 800-183 (DOI); Local Download; Press Release	Final	7/28/2016
NISTIR	8080	Usability and Security Considerations for Public Safety Mobile Authentication NISTIR 8080 Usability and Security Considerations for Public Safety Mobile Authentication 7/27/2016 Status: Final Download: NISTIR 8080 (DOI); Local Download	Final	7/27/2016
Conference Proceedings		Diversifying Network Services under Cost Constraints for Better Resilience against Unknown Attacks Conference Proceedings Diversifying Network Services under Cost Constraints for Better Resilience against Unknown Attacks 7/20/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/20/2016
ITL Bulletin		Improving Security and Software Management Through the Use of SWID Tags ITL Bulletin Improving Security and Software Management Through the Use of SWID Tags 7/13/2016 Status: Final Download: July 2016 ITL Bulletin	Final	7/13/2016
Journal Article		Metamorphic Testing for Cybersecurity Journal Article Metamorphic Testing for Cybersecurity 6/27/2016 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	6/27/2016
Journal Article		Demystifying the Internet of Things Journal Article Demystifying the Internet of Things 6/27/2016 Status: Final Download: Journal Article (DOI)	Final	6/27/2016
SP	800-166	Derived PIV Application and Data Model Test Guidelines SP 800-166 Derived PIV Application and Data Model Test Guidelines 6/06/2016 Status: Final Download: SP 800-166 (DOI); Local Download	Final	6/06/2016
ITL Bulletin		Extending Network Security into Virtualized Infrastructure ITL Bulletin Extending Network Security into Virtualized Infrastructure 6/03/2016 Status: Final Download: June 2016 ITL Bulletin	Final	6/03/2016
NISTIR	8135	Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report NISTIR 8135 Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report 6/01/2016 Status: Final Download: NISTIR 8135 (DOI); Local Download	Final	6/01/2016
Journal Article		Insights on Formal Methods of Cybersecurity Journal Article Insights on Formal Methods of Cybersecurity 5/27/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	5/27/2016
SP	800-156	Representation of PIV Chain-of-Trust for Import and Export SP 800-156 Representation of PIV Chain-of-Trust for Import and Export 5/20/2016 Status: Final Download: SP 800-156 (DOI); Local Download; XSD Schema File for SP 800-156 Chain of Trust	Final	5/20/2016
Journal Article		On Various Nonlinearity Measures for Boolean Functions Journal Article On Various Nonlinearity Measures for Boolean Functions 5/19/2016 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	5/19/2016
ITL Bulletin		Combinatorial Testing for Cybersecurity and Reliability ITL Bulletin Combinatorial Testing for Cybersecurity and Reliability 5/12/2016 Status: Final Download: May 2016 ITL Bulletin	Final	5/12/2016
White Paper		User's Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite White Paper User's Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite 5/12/2016 Status: Final Download: Paper; GitHub site	Final	5/12/2016
Conference Proceedings		inf-TESLA: Multicast Delayed Authentication for Streaming Sensor Data in Electric Power Systems Conference Proceedings inf-TESLA: Multicast Delayed Authentication for Streaming Sensor Data in Electric Power Systems 5/11/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	5/11/2016
Conference Paper		Combinatorial Coverage Analysis of Subsets of the TLS Cipher Suite Registry Conference Paper Combinatorial Coverage Analysis of Subsets of the TLS Cipher Suite Registry 5/10/2016 Status: Final Download: Paper (see NIST SP 1232, p. SP-907)	Final	5/10/2016
White Paper		[Project Description] Data Integrity: Recovering from a destructive malware attack White Paper [Project Description] Data Integrity: Recovering from a destructive malware attack 5/09/2016 Status: Final Download: Project Description; Data Integrity homepage	Final	5/09/2016
White Paper		[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector White Paper (Draft) [Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Draft Download: Draft Project Description	Draft	5/09/2016
NISTIR	8105	Report on Post-Quantum Cryptography NISTIR 8105 Report on Post-Quantum Cryptography 4/28/2016 Status: Final Download: NISTIR 8105 (DOI); Local Download; Press Release; Comments received on Draft NISTIR 8105	Final	4/28/2016
NISTIR	8040	Measuring the Usability and Security of Permuted Passwords on Mobile Platforms NISTIR 8040 Measuring the Usability and Security of Permuted Passwords on Mobile Platforms 4/25/2016 Status: Final Download: NISTIR 8040 (DOI); Local Download	Final	4/25/2016
NISTIR	8060	Guidelines for the Creation of Interoperable Software Identification (SWID) Tags NISTIR 8060 Guidelines for the Creation of Interoperable Software Identification (SWID) Tags 4/22/2016 Status: Final Download: NISTIR 8060 (DOI); Local Download; Guideline Summary for NISTIR 8060; Schema Definition for NISTIR 8060	Final	4/22/2016
White Paper	NIST CSWP 4	Best Practices for Privileged User PIV Authentication White Paper NIST CSWP 4 Best Practices for Privileged User PIV Authentication 4/21/2016 Status: Final Download: White Paper (DOI); Local Download	Final	4/21/2016
Journal Article		Indifferentiability Security of the Fast Widepipe Hash: Breaking the Birthday Barrier Journal Article Indifferentiability Security of the Fast Widepipe Hash: Breaking the Birthday Barrier 4/21/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	4/21/2016
ITL Bulletin		New NIST Security Standard Can Protect Credit Cards, Health Information ITL Bulletin New NIST Security Standard Can Protect Credit Cards, Health Information 4/14/2016 Status: Final Download: April 2016 ITL Bulletin	Final	4/14/2016
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (Draft) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Draft Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-85A-4	PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) SP 800-85A-4 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) 4/13/2016 Status: Final Download: SP 800-85A-4 (DOI); Local Download	Final	4/13/2016
Conference Proceedings		Pseudo-Exhaustive Testing of Attribute Based Access Control Rules Conference Proceedings Pseudo-Exhaustive Testing of Attribute Based Access Control Rules 4/11/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/11/2016
Conference Proceedings		Performance Evaluation of Secure Industrial Control System Design: A Railway Control System Case Study Conference Proceedings Performance Evaluation of Secure Industrial Control System Design: A Railway Control System Case Study 4/05/2016 Status: Final Download: Paper	Final	4/05/2016
Journal Article		Using a Capability Oriented Methodology to Build Your Cloud Ecosystem Journal Article Using a Capability Oriented Methodology to Build Your Cloud Ecosystem 3/31/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	3/31/2016
NISTIR	7977	NIST Cryptographic Standards and Guidelines Development Process NISTIR 7977 NIST Cryptographic Standards and Guidelines Development Process 3/31/2016 Status: Final Download: NISTIR 7977 (DOI); Local Download; Press Release; Summary of Second Draft Comments (released Jan. 2016); Comments received on Second Draft (Jan. 2015); Second Draft NISTIR 7977 (Jan. 2015); Summary of First Draft Comments; Comments received on First Draft (Feb. 2014); First Draft NISTIR 7977 (Feb. 2014)	Final	3/31/2016
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 3/29/2016 Status: Final Download: SP 800-38G (DOI); Local Download; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Press Release	Final	3/29/2016
Conference Proceedings		Analysis of Virtual Networking Options for Securing Virtual Machines Conference Proceedings Analysis of Virtual Networking Options for Securing Virtual Machines 3/20/2016 Status: Final Download: Paper	Final	3/20/2016
NISTIR	8054	NSTIC Pilots: Catalyzing the Identity Ecosystem NISTIR 8054 NSTIC Pilots: Catalyzing the Identity Ecosystem 3/15/2016 Status: Final Download: NISTIR 8054 (DOI); Local Download	Final	3/15/2016
ITL Bulletin		Updates to the NIST SCAP Validation Program and Associated Test Requirements ITL Bulletin Updates to the NIST SCAP Validation Program and Associated Test Requirements 3/15/2016 Status: Final Download: March 2016 ITL Bulletin	Final	3/15/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
Conference Proceedings		Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) Conference Proceedings Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 3/11/2016 Status: Final Download: Conference Proceedings (DOI); Paper	Final	3/11/2016
Journal Article		Linear Time Vertex Partitioning on Massive Graphs Journal Article Linear Time Vertex Partitioning on Massive Graphs 3/07/2016 Status: Final Download: Article	Final	3/07/2016
SP	800-125B	Secure Virtual Network Configuration for Virtual Machine (VM) Protection SP 800-125B Secure Virtual Network Configuration for Virtual Machine (VM) Protection 3/07/2016 Status: Final Download: SP 800-125B (DOI); Local Download	Final	3/07/2016
Building Block		[Project Description] Domain Name System-Based Security for Electronic Mail Building Block [Project Description] Domain Name System-Based Security for Electronic Mail 3/04/2016 Status: Final Download: Project Description; Project homepage	Final	3/04/2016
Conference Proceedings		Vulnerabilities of "McEliece in the World of Escher" Conference Proceedings Vulnerabilities of "McEliece in the World of Escher" 3/03/2016 Status: Final Download: Conference Proceedings (DOI); Paper (see NIST SP 1232, p. SP-672)	Final	3/03/2016
Conference Proceedings		On the Differential Security of the HFEv- Signature Primitive Conference Proceedings On the Differential Security of the HFEv- Signature Primitive 2/24/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	2/24/2016
Conference Proceedings		Security Analysis and Key Modification for ZHFE Conference Proceedings Security Analysis and Key Modification for ZHFE 2/24/2016 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	2/24/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (Draft) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
ITL Bulletin		Implementing Trusted Geolocation Services in the Cloud ITL Bulletin Implementing Trusted Geolocation Services in the Cloud 2/17/2016 Status: Final Download: February 2016 ITL Bulletin	Final	2/17/2016
SP	800-73-4	Interfaces for Personal Identity Verification SP 800-73-4 Interfaces for Personal Identity Verification 2/12/2016 Status: Final Download: SP 800-73-4 (DOI); Local Download; Press Release (06-16-2015)	Final	2/12/2016
Journal Article		Learning Internet of Things Security "Hands-On" Journal Article Learning Internet of Things Security "Hands-On" 2/03/2016 Status: Final Download: Journal Article (DOI); Preprint	Final	2/03/2016
NISTIR	7511 Rev. 4	Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements NISTIR 7511 Rev. 4 Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 1/28/2016 Status: Final Download: NISTIR 7511 Rev. 4 (DOI); Local Download; SCAP Validation Program	Final	1/28/2016
NISTIR	8055	Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research NISTIR 8055 Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research 1/20/2016 Status: Final Download: NISTIR 8055 (DOI); Local Download	Final	1/20/2016
Journal Article		Network Diversity: A Security Metric for Evaluating the Resilience of Networks Against Zero-Day Attacks Journal Article Network Diversity: A Security Metric for Evaluating the Resilience of Networks Against Zero-Day Attacks 1/12/2016 Status: Final Download: Journal Article (DOI)	Final	1/12/2016
ITL Bulletin		Securing Interactive and Automated Access Management Using Secure Shell (SSH) ITL Bulletin Securing Interactive and Automated Access Management Using Secure Shell (SSH) 1/11/2016 Status: Final Download: January 2016 ITL Bulletin	Final	1/11/2016
NISTIR	8074 Vol. 1	Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity NISTIR 8074 Vol. 1 Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final Download: NISTIR 8074 Vol. 1 (DOI); Local Download	Final	12/23/2015
NISTIR	8074 Vol. 2	Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity NISTIR 8074 Vol. 2 Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final Download: NISTIR 8074 Vol. 2 (DOI); Local Download	Final	12/23/2015
Journal Article		Third-Party Software's Trust Quagmire Journal Article Third-Party Software's Trust Quagmire 12/18/2015 Status: Final Download: Journal Article (DOI); Article; Article (PubReader)	Final	12/18/2015
Journal Article		Managing Risk in a Cloud Ecosystem Journal Article Managing Risk in a Cloud Ecosystem 12/18/2015 Status: Final Download: Journal Article (DOI)	Final	12/18/2015
NISTIR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags NISTIR 8085 (Draft) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Draft Download: Draft NISTIR 8085	Draft	12/17/2015
ITL Bulletin		Stopping Malware and Unauthorized Software through Application Whitelisting ITL Bulletin Stopping Malware and Unauthorized Software through Application Whitelisting 12/15/2015 Status: Final Download: December 2015 ITL Bulletin	Final	12/15/2015
NISTIR	8089	An Industrial Control System Cybersecurity Performance Testbed NISTIR 8089 An Industrial Control System Cybersecurity Performance Testbed 12/10/2015 Status: Final Download: NISTIR 8089 (DOI); Local Download	Final	12/10/2015
NISTIR	7904	Trusted Geolocation in the Cloud: Proof of Concept Implementation NISTIR 7904 Trusted Geolocation in the Cloud: Proof of Concept Implementation 12/10/2015 Status: Final Download: NISTIR 7904 (DOI); Local Download	Final	12/10/2015
Use Case		[Project Description] Wireless Medical Infusion Pumps: Medical Device Security Use Case [Project Description] Wireless Medical Infusion Pumps: Medical Device Security 12/01/2015 Status: Final Download: Project description; Project homepage	Final	12/01/2015
ITL Bulletin		Tailoring Security Controls for Industrial Control Systems ITL Bulletin Tailoring Security Controls for Industrial Control Systems 11/16/2015 Status: Final Download: November 2015 ITL Bulletin	Final	11/16/2015
Conference Proceedings		Minimizing Attack Graph Data Structures Conference Proceedings Minimizing Attack Graph Data Structures 11/15/2015 Status: Final Download: Paper	Final	11/15/2015
Journal Article		Expanding Continuous Authentication with Mobile Devices Journal Article Expanding Continuous Authentication with Mobile Devices 11/13/2015 Status: Final Download: Journal Article (DOI)	Final	11/13/2015
Journal Article		A Measure of Dependence for Cryptographic Primitives Relative to Ideal Functions Journal Article A Measure of Dependence for Cryptographic Primitives Relative to Ideal Functions 11/02/2015 Status: Final Download: Journal Article (DOI); Preprint	Final	11/02/2015
SP	800-152	A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) SP 800-152 A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) 10/28/2015 Status: Final Download: SP 800-152 (DOI); Local Download; Comments received on final (3rd) Draft (Dec. 2014); Draft 3 (Dec. 2014); Draft 2 (Jan. 2014); Draft (Aug. 2012)	Final	10/28/2015
SP	800-167	Guide to Application Whitelisting SP 800-167 Guide to Application Whitelisting 10/28/2015 Status: Final Download: SP 800-167 (DOI); Local Download; Press Release	Final	10/28/2015
White Paper		The Number of Boolean Functions with Multiplicative Complexity 2 White Paper The Number of Boolean Functions with Multiplicative Complexity 2 10/27/2015 Status: Final Download: Paper	Final	10/27/2015
NISTIR	7987 Rev. 1	Policy Machine: Features, Architecture, and Specification NISTIR 7987 Rev. 1 Policy Machine: Features, Architecture, and Specification 10/27/2015 Status: Final Download: NISTIR 7987 Rev. 1 (DOI); Local Download	Final	10/27/2015
NISTIR	8053	De-Identification of Personal Information NISTIR 8053 De-Identification of Personal Information 10/22/2015 Status: Final Download: NISTIR 8053 (DOI); Local Download	Final	10/22/2015
ITL Bulletin		Protection of Controlled Unclassified Information ITL Bulletin Protection of Controlled Unclassified Information 10/19/2015 Status: Final Download: October 2015 ITL Bulletin	Final	10/19/2015
NISTIR	7966	Security of Interactive and Automated Access Management Using Secure Shell (SSH) NISTIR 7966 Security of Interactive and Automated Access Management Using Secure Shell (SSH) 10/15/2015 Status: Final Download: NISTIR 7966 (DOI); Local Download	Final	10/15/2015
Conference Proceedings		A Logic Based Network Forensics Model for Evidence Analysis [poster] Conference Proceedings A Logic Based Network Forensics Model for Evidence Analysis [poster] 10/15/2015 Status: Final Download: Conference Proceedings (DOI); Paper	Final	10/15/2015
Conference Proceedings		Who Touched My Mission: Towards Probabilistic Mission Impact Assessment Conference Proceedings Who Touched My Mission: Towards Probabilistic Mission Impact Assessment 10/12/2015 Status: Final Download: Conference Proceedings (DOI); Paper	Final	10/12/2015
Journal Article		Spreading Alerts Quietly and the Subgroup Escape Problem Journal Article Spreading Alerts Quietly and the Subgroup Escape Problem 10/01/2015 Status: Final Download: Journal Article (DOI); Preprint	Final	10/01/2015
ITL Bulletin		Additional Secure Hash Algorithm Standards Offer New Opportunities for Data Protection ITL Bulletin Additional Secure Hash Algorithm Standards Offer New Opportunities for Data Protection 9/24/2015 Status: Final Download: September 2015 ITL Bulletin	Final	9/24/2015
White Paper		Multiplicative Complexity of Vector Value Boolean Functions White Paper Multiplicative Complexity of Vector Value Boolean Functions 9/21/2015 Status: Final Download: Paper	Final	9/21/2015
Building Block		[Project Description] Software Asset Management: Continuous Monitoring Building Block [Project Description] Software Asset Management: Continuous Monitoring 9/16/2015 Status: Final Download: Project Description; Project homepage	Final	9/16/2015
Conference Proceedings		Predictive Models for Min-Entropy Estimation Conference Proceedings Predictive Models for Min-Entropy Estimation 9/13/2015 Status: Final Download: Conference Proceedings (DOI)	Final	9/13/2015
Journal Article		Analogues of Velu's Formulas for Isogenies on Alternate Models of Elliptic Curves Journal Article Analogues of Velu's Formulas for Isogenies on Alternate Models of Elliptic Curves 9/09/2015 Status: Final Download: Journal Article (DOI)	Final	9/09/2015
SP	800-176	Computer Security Division 2014 Annual Report SP 800-176 Computer Security Division 2014 Annual Report 8/20/2015 Status: Final Download: SP 800-176 (DOI); Local Download	Final	8/20/2015
ITL Bulletin		Recommendation for Random Number Generation Using Deterministic Random Bit Generators ITL Bulletin Recommendation for Random Number Generation Using Deterministic Random Bit Generators 8/13/2015 Status: Final Download: August 2015 ITL Bulletin	Final	8/13/2015
Conference Proceedings		Implementing and Managing Policy Rules in Attribute Based Access Control Conference Proceedings Implementing and Managing Policy Rules in Attribute Based Access Control 8/13/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/13/2015
Conference Proceedings		Constructive Relationships Between Algebraic Thickness and Normality Conference Proceedings Constructive Relationships Between Algebraic Thickness and Normality 8/04/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/04/2015
FIPS	180-4	Secure Hash Standard (SHS) FIPS 180-4 Secure Hash Standard (SHS) 8/04/2015 Status: Final Download: FIPS 180-4 (DOI); Local Download; Federal Register Notice; Comments received on Draft FIPS 180-4 (Aug. 2014)	Final	8/04/2015
FIPS	202	SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions FIPS 202 SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions 8/04/2015 Status: Final Download: FIPS 202 (DOI); Local Download; Federal Register Notice; Press Release; Comments received on Draft FIPS 202; Draft FIPS 202 (May 2014)	Final	8/04/2015
Conference Proceedings		What 4,500+ People Can Tell You: Employees' Attitudes Toward Organizational Password Policy Do Matter Conference Proceedings What 4,500+ People Can Tell You: Employees' Attitudes Toward Organizational Password Policy Do Matter 8/02/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/02/2015
Conference Proceedings		Privacy and Security in the Brave New World: The Use of Multiple Mental Models Conference Proceedings Privacy and Security in the Brave New World: The Use of Multiple Mental Models 8/02/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/02/2015
Conference Proceedings		Password Policy Languages: Usable Translation from the Informal to the Formal Conference Proceedings Password Policy Languages: Usable Translation from the Informal to the Formal 8/02/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/02/2015
Conference Proceedings		Human Generated Passwords -- The Impacts of Password Requirements and Presentation Styles Conference Proceedings Human Generated Passwords -- The Impacts of Password Requirements and Presentation Styles 8/02/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/02/2015
Conference Proceedings		Effects of Password Permutation on Subjective Usability Across Platforms Conference Proceedings Effects of Password Permutation on Subjective Usability Across Platforms 8/02/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/02/2015
Conference Proceedings		The Authentication Equation: A Tool to Visualize the Convergence of Security and Usability of Text-Based Passwords Conference Proceedings The Authentication Equation: A Tool to Visualize the Convergence of Security and Usability of Text-Based Passwords 8/02/2015 Status: Final Download: Conference Proceedings (DOI)	Final	8/02/2015
Conference Proceedings		Analysis of Network Segmentation Techniques in Cloud Data Centers Conference Proceedings Analysis of Network Segmentation Techniques in Cloud Data Centers 7/30/2015 Status: Final Download: None available	Final	7/30/2015
SP	800-79-2	Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) SP 800-79-2 Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) 7/30/2015 Status: Final Download: SP 800-79-2 (DOI); Local Download	Final	7/30/2015
Book Section		Combinatorial Testing: Theory and Practice Book Section Combinatorial Testing: Theory and Practice 7/29/2015 Status: Final Download: Book Section (DOI); Preprint	Final	7/29/2015
Conference Paper		Measuring Systematic and Random Error in Digital Forensics [abstract] Conference Paper Measuring Systematic and Random Error in Digital Forensics [abstract] 7/24/2015 Status: Final Download: None available	Final	7/24/2015
ITL Bulletin		Improved Security and Mobility Through Updated Interfaces for PIV Cards ITL Bulletin Improved Security and Mobility Through Updated Interfaces for PIV Cards 7/21/2015 Status: Final Download: July 2015 ITL Bulletin	Final	7/21/2015
Conference Paper		PFLASH - Secure Asymmetric Signatures on Smart Cards Conference Paper PFLASH - Secure Asymmetric Signatures on Smart Cards 7/20/2015 Status: Final Download: Preprint; Conference Website	Final	7/20/2015
Journal Article		Leveraging the Potential of Cloud Security Service-Level Agreements through Standards Journal Article Leveraging the Potential of Cloud Security Service-Level Agreements through Standards 7/15/2015 Status: Final Download: Journal Article (DOI)	Final	7/15/2015
Encyclopedia Entry		Conformance Testing Methodologies for Biometric Data Interchange Formats, Standardization of Encyclopedia Entry Conformance Testing Methodologies for Biometric Data Interchange Formats, Standardization of 7/03/2015 Status: Final Download: Encyclopedia Entry (DOI); Preprint	Final	7/03/2015
Encyclopedia Entry		Common Biometric Exchange Formats Framework Standardization Encyclopedia Entry Common Biometric Exchange Formats Framework Standardization 7/03/2015 Status: Final Download: Encyclopedia Entry (DOI); Preprint	Final	7/03/2015
Journal Article		Measuring Limits on the Ability of Colluding Countries to Partition the Internet Journal Article Measuring Limits on the Ability of Colluding Countries to Partition the Internet 6/30/2015 Status: Final Download: None available	Final	6/30/2015
SP	800-90A Rev. 1	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90A Rev. 1 Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/24/2015 Status: Final Download: SP 800-90A Rev. 1 (DOI); Local Download; Press Release	Final	6/24/2015
SP	500-304	Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information SP 500-304 Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information 6/24/2015 Status: Final Download: SP 500-304 (DOI); Local Download; BioCTS homepage	Final	6/24/2015
Journal Article		New Second-Preimage Attacks on Hash Functions Journal Article New Second-Preimage Attacks on Hash Functions 6/23/2015 Status: Final Download: Journal Article (DOI)	Final	6/23/2015
NISTIR	7863	Cardholder Authentication for the PIV Digital Signature Key NISTIR 7863 Cardholder Authentication for the PIV Digital Signature Key 6/18/2015 Status: Final Download: NISTIR 7863 (DOI); Local Download	Final	6/18/2015
ITL Bulletin		Increasing Visibility and Control of Your ICT Supply Chains ITL Bulletin Increasing Visibility and Control of Your ICT Supply Chains 6/15/2015 Status: Final Download: June 2015 ITL Bulletin	Final	6/15/2015
White Paper		Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool White Paper Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool 6/10/2015 Status: Final Download: Report	Final	6/10/2015
SP	800-82 Rev. 2	Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 2 Guide to Industrial Control Systems (ICS) Security 6/03/2015 Status: Final Download: SP 800-82 Rev. 2 (DOI); Local Download; Press Release	Final	6/03/2015
SP	800-78-4	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-4 Cryptographic Algorithms and Key Sizes for Personal Identity Verification 5/29/2015 Status: Final Download: SP 800-78-4 (DOI); Local Download	Final	5/29/2015
ITL Bulletin		Authentication Considerations for Public Safety Mobile Networks ITL Bulletin Authentication Considerations for Public Safety Mobile Networks 5/14/2015 Status: Final Download: May 2015 ITL Bulletin	Final	5/14/2015
Journal Article		Evasion-Resistant Network Scan Detection Journal Article Evasion-Resistant Network Scan Detection 5/09/2015 Status: Final Download: Journal Article (DOI)	Final	5/09/2015
NISTIR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content NISTIR 8058 (Draft) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Draft Download: Draft NISTIR 8058	Draft	5/01/2015
Journal Article		Introducing Combinatorial Testing in a Large Organization Journal Article Introducing Combinatorial Testing in a Large Organization 4/23/2015 Status: Final Download: Journal Article (DOI)	Final	4/23/2015
Conference Proceedings		Equivalence Class Verification and Oracle-Free Testing Using Two-layer Covering Arrays Conference Proceedings Equivalence Class Verification and Oracle-Free Testing Using Two-layer Covering Arrays 4/17/2015 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/17/2015
ITL Bulletin		Is Your Replication Device Making An Extra Copy For Someone Else? ITL Bulletin Is Your Replication Device Making An Extra Copy For Someone Else? 4/16/2015 Status: Final Download: April 2015 ITL Bulletin	Final	4/16/2015
NISTIR	8041	Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium NISTIR 8041 Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium 4/10/2015 Status: Final Download: NISTIR 8041 (DOI); Local Download	Final	4/10/2015
Conference Proceedings		Password Entry Errors: Memory or Motor? Conference Proceedings Password Entry Errors: Memory or Motor? 4/09/2015 Status: Final Download: Paper	Final	4/09/2015
White Paper		Analysis of VAES3 (FF2) White Paper Analysis of VAES3 (FF2) 4/02/2015 Status: Final Download: Paper	Final	4/02/2015
NISTIR	8050	Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps NISTIR 8050 (Draft) Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps 4/02/2015 Status: Draft Download: Draft NISTIR 8050	Draft	4/02/2015
Conference Proceedings		ACT-R Modeling of Password Entry Errors [poster] Conference Proceedings ACT-R Modeling of Password Entry Errors [poster] 4/02/2015 Status: Final Download: None available	Final	4/02/2015
Building Block	V.2	[Project Description] Attribute Based Access Control Building Block V.2 [Project Description] Attribute Based Access Control 4/01/2015 Status: Final Download: Project Description; Project homepage	Final	4/01/2015
Journal Article		Combinatorial Coverage as an Aspect of Test Quality Journal Article Combinatorial Coverage as an Aspect of Test Quality 3/31/2015 Status: Final Download: Article	Final	3/31/2015
NISTIR	8014	Considerations for Identity Management in Public Safety Mobile Networks NISTIR 8014 Considerations for Identity Management in Public Safety Mobile Networks 3/30/2015 Status: Final Download: NISTIR 8014 (DOI); Local Download; Press Release	Final	3/30/2015
ITL Bulletin		Guidance for Secure Authorization of Mobile Applications in the Corporate Environment ITL Bulletin Guidance for Secure Authorization of Mobile Applications in the Corporate Environment 3/19/2015 Status: Final Download: March 2015 ITL Bulletin	Final	3/19/2015
Conference Proceedings		The Multiplicative Complexity of Boolean Functions on Four and Five Variables Conference Proceedings The Multiplicative Complexity of Boolean Functions on Four and Five Variables 3/17/2015 Status: Final Download: Conference Proceedings (DOI)	Final	3/17/2015
White Paper		User's Guide to Running the Draft NIST SP 800-90B Section 9 Entropy Estimation Tests White Paper User's Guide to Running the Draft NIST SP 800-90B Section 9 Entropy Estimation Tests 3/10/2015 Status: Final Download: None available	Final	3/10/2015
Conference Paper		The Resilience of the Internet to Colluding Country Induced Connectivity Disruptions Conference Paper The Resilience of the Internet to Colluding Country Induced Connectivity Disruptions 3/03/2015 Status: Final Download: Conference Paper (DOI)	Final	3/03/2015
NISTIR	7823	Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework NISTIR 7823 Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework 3/02/2015 Status: Final Download: NISTIR 7823 (DOI); Local Download	Final	3/02/2015
NISTIR	8023	Risk Management for Replication Devices NISTIR 8023 Risk Management for Replication Devices 2/23/2015 Status: Final Download: NISTIR 8023 (DOI); Local Download	Final	2/23/2015
Journal Article		Improved Indifferentiability Security Bound for the JH Mode Journal Article Improved Indifferentiability Security Bound for the JH Mode 2/15/2015 Status: Final Download: Journal Article (DOI)	Final	2/15/2015
ITL Bulletin		NIST Special Publication 800-88 Revision 1, Guidelines for Media Sanitization ITL Bulletin NIST Special Publication 800-88 Revision 1, Guidelines for Media Sanitization 2/05/2015 Status: Final Download: February 2015 ITL Bulletin	Final	2/05/2015
Journal Article		IT Security Journal Article IT Security 2/04/2015 Status: Final Download: Journal Article (DOI)	Final	2/04/2015
Journal Article		Report on Pairing-based Cryptography Journal Article Report on Pairing-based Cryptography 2/03/2015 Status: Final Download: Journal Article (DOI); Article; Article; Article (PubReader)	Final	2/03/2015
ITL Bulletin		Release of NIST Special Publication 800-53A, Revision 4, Assessing Security and Privacy Controls in Federal Information Systems and Organizations ITL Bulletin Release of NIST Special Publication 800-53A, Revision 4, Assessing Security and Privacy Controls in Federal Information Systems and Organizations 1/29/2015 Status: Final Download: January 2015 ITL Bulletin	Final	1/29/2015
Conference Proceedings		A Logic Based Network Forensics Model for Evidence Analysis Conference Proceedings A Logic Based Network Forensics Model for Evidence Analysis 1/28/2015 Status: Final Download: Conference Proceedings (DOI)	Final	1/28/2015
SP	800-57 Part 3 Rev. 1	Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance SP 800-57 Part 3 Rev. 1 Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance 1/22/2015 Status: Final Download: SP 800-57 Part 3 Rev. 1 (DOI); Local Download	Final	1/22/2015
NISTIR	8018	Public Safety Mobile Application Security Requirements Workshop Summary NISTIR 8018 Public Safety Mobile Application Security Requirements Workshop Summary 1/22/2015 Status: Final Download: NISTIR 8018 (DOI); Local Download	Final	1/22/2015
Conference Paper		How Random is Your RNG? Conference Paper How Random is Your RNG? 1/18/2015 Status: Final Download: None available	Final	1/18/2015
Journal Article		Measuring Impact of Cybersecurity on the Performance of Industrial Control Systems Journal Article Measuring Impact of Cybersecurity on the Performance of Industrial Control Systems 12/31/2014 Status: Final Download: Article	Final	12/31/2014
ITL Bulletin		Release Of NIST Special Publication 800-157, Guidelines For Derived Personal Identity Verification (PIV) Credentials ITL Bulletin Release Of NIST Special Publication 800-157, Guidelines For Derived Personal Identity Verification (PIV) Credentials 12/30/2014 Status: Final Download: December 2014 ITL Bulletin	Final	12/30/2014
Conference Paper		Deployment-driven Security Configuration for Virtual Networks Conference Paper Deployment-driven Security Configuration for Virtual Networks 12/28/2014 Status: Final Download: Conference Paper (DOI)	Final	12/28/2014
SP	800-157	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Guidelines for Derived Personal Identity Verification (PIV) Credentials 12/19/2014 Status: Final Download: SP 800-157 (DOI); Local Download; Comments and resolutions on Draft SP 800-157 (Mar. 2014)	Final	12/19/2014
SP	800-53A Rev. 4	Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans SP 800-53A Rev. 4 Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans 12/18/2014 Status: Final Download: SP 800-53A Rev. 4 (DOI); Local Download; Word version of SP 800-53A Rev. 4 (12-18-2014); Downloads (XML, CSV); Press Release	Final	12/18/2014
SP	800-88 Rev. 1	Guidelines for Media Sanitization SP 800-88 Rev. 1 Guidelines for Media Sanitization 12/17/2014 Status: Final Download: SP 800-88 Rev. 1 (DOI); Local Download; Sample "Certificate of Sanitization" from Appendix G	Final	12/17/2014
ITL Bulletin		Cryptographic Module Validation Program (CMVP) ITL Bulletin Cryptographic Module Validation Program (CMVP) 12/01/2014 Status: Final Download: November 2014 ITL Bulletin	Final	12/01/2014
Conference Proceedings		Electrodermal Activity and Eye Movements Inform the Usability of Passwords [poster] Conference Proceedings Electrodermal Activity and Eye Movements Inform the Usability of Passwords [poster] 11/18/2014 Status: Final Download: None available	Final	11/18/2014
Conference Paper		An Access Control Scheme for Big Data Processing Conference Paper An Access Control Scheme for Big Data Processing 11/11/2014 Status: Final Download: Conference Paper (DOI); Preprint	Final	11/11/2014
ITL Bulletin		Release of NIST Special Publication 800-147B, BIOS Protection Guidelines for Servers ITL Bulletin Release of NIST Special Publication 800-147B, BIOS Protection Guidelines for Servers 10/29/2014 Status: Final Download: October 2014 ITL Bulletin	Final	10/29/2014
Journal Article		Avoiding Cyberspace Catastrophes through Smarter Testing Journal Article Avoiding Cyberspace Catastrophes through Smarter Testing 10/16/2014 Status: Final Download: Journal Article (DOI)	Final	10/16/2014
Conference Proceedings		Lightweight Packing of Log Files for Improved Compression in Mobile Tactical Networks Conference Proceedings Lightweight Packing of Log Files for Improved Compression in Mobile Tactical Networks 10/08/2014 Status: Final Download: Conference Proceedings (DOI)	Final	10/08/2014
Conference Proceedings		A Cybersecurity Testbed for Industrial Control Systems Conference Proceedings A Cybersecurity Testbed for Industrial Control Systems 10/06/2014 Status: Final Download: Preprint	Final	10/06/2014
Conference Proceedings		An Asymptotically Optimal Structural Attack on the ABC Multivariate Encryption Scheme Conference Proceedings An Asymptotically Optimal Structural Attack on the ABC Multivariate Encryption Scheme 10/03/2014 Status: Final Download: Conference Proceedings (DOI)	Final	10/03/2014
Conference Proceedings		Optimizing Information Set Decoding Algorithms to Attack Cyclosymmetric MDPC Codes Conference Proceedings Optimizing Information Set Decoding Algorithms to Attack Cyclosymmetric MDPC Codes 10/03/2014 Status: Final Download: Conference Proceedings (DOI)	Final	10/03/2014
Book Section		Metrics of Security Book Section Metrics of Security 10/03/2014 Status: Final Download: Book Section (DOI); Preprint	Final	10/03/2014
Conference Proceedings		Differential Properties of the HFE Cryptosystem Conference Proceedings Differential Properties of the HFE Cryptosystem 10/01/2014 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/01/2014
Journal Article		Reducing the Cognitive Load on Analysts through Hamming Distance Based Alert Aggregation Journal Article Reducing the Cognitive Load on Analysts through Hamming Distance Based Alert Aggregation 9/30/2014 Status: Final Download: None available	Final	9/30/2014
ITL Bulletin		Release of NIST Interagency Report 7628 Revision 1, Guidelines for Smart Grid Cybersecurity ITL Bulletin Release of NIST Interagency Report 7628 Revision 1, Guidelines for Smart Grid Cybersecurity 9/29/2014 Status: Final Download: September 2014 ITL Bulletin	Final	9/29/2014
NISTIR	7628 Rev. 1	Guidelines for Smart Grid Cybersecurity NISTIR 7628 Rev. 1 Guidelines for Smart Grid Cybersecurity 9/25/2014 Status: Final Download: NISTIR 7628 Rev. 1 (DOI); Local Download; NIST Project: Cybersecurity for Smart Grid Systems	Final	9/25/2014
Conference Proceedings		Inferring the Stealthy Bridges between Enterprise Network Islands in Cloud Using Cross-Layer Bayesian Networks Conference Proceedings Inferring the Stealthy Bridges between Enterprise Network Islands in Cloud Using Cross-Layer Bayesian Networks 9/24/2014 Status: Final Download: Conference Proceedings (DOI); Paper (see NIST SP 1232, p. SP-927	Final	9/24/2014
Building Block	V.2	[Project Description] Mobile Device Security for Enterprises Building Block V.2 [Project Description] Mobile Device Security for Enterprises 9/12/2014 Status: Final Download: Project Description; Project homepage	Final	9/12/2014
Conference Proceedings		Modeling Network Diversity for Evaluating the Robustness of Networks against Zero-Day Attacks Conference Proceedings Modeling Network Diversity for Evaluating the Robustness of Networks against Zero-Day Attacks 9/11/2014 Status: Final Download: Conference Proceedings (DOI)	Final	9/11/2014
SP	800-170	Computer Security Division 2013 Annual Report SP 800-170 Computer Security Division 2013 Annual Report 9/04/2014 Status: Final Download: SP 800-170 (DOI); Local Download	Final	9/04/2014
SP	800-147B	BIOS Protection Guidelines for Servers SP 800-147B BIOS Protection Guidelines for Servers 8/28/2014 Status: Final Download: SP 800-147B (DOI); Local Download	Final	8/28/2014
ITL Bulletin		Policy Machine: Towards a General-Purpose Enterprise-Wide Operating Environment ITL Bulletin Policy Machine: Towards a General-Purpose Enterprise-Wide Operating Environment 8/28/2014 Status: Final Download: August 2014 ITL Bulletin	Final	8/28/2014
Journal Article		The Future of Cybersecurity Education Journal Article The Future of Cybersecurity Education 8/19/2014 Status: Final Download: Journal Article (DOI)	Final	8/19/2014
Conference Proceedings		On the Unification of Access Control and Data Services Conference Proceedings On the Unification of Access Control and Data Services 8/15/2014 Status: Final Download: Conference Proceedings (DOI)	Final	8/15/2014
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (Draft) PIV Data Model Test Guidelines 8/06/2014 Status: Draft Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
Journal Article		IT Pro Conference on Information Systems Governance Journal Article IT Pro Conference on Information Systems Governance 8/06/2014 Status: Final Download: Journal Article (DOI)	Final	8/06/2014
Journal Article		Elliptic Curves Arising from Brahmagupta Quadrilaterals Journal Article Elliptic Curves Arising from Brahmagupta Quadrilaterals 8/01/2014 Status: Final Download: Journal Article (DOI)	Final	8/01/2014
ITL Bulletin		Release of NIST Interagency Report 7946, CVSS Implementation Guidance ITL Bulletin Release of NIST Interagency Report 7946, CVSS Implementation Guidance 7/10/2014 Status: Final Download: July 2014 ITL Bulletin	Final	7/10/2014
SP	800-168	Approximate Matching: Definition and Terminology SP 800-168 Approximate Matching: Definition and Terminology 7/02/2014 Status: Final Download: SP 800-168 (DOI); Local Download	Final	7/02/2014
Conference Proceedings		Using Network Tainting to Bound the Scope of Network Ingress Attacks Conference Proceedings Using Network Tainting to Bound the Scope of Network Ingress Attacks 7/01/2014 Status: Final Download: Conference Proceedings (DOI)	Final	7/01/2014
Conference Proceedings		A Cognitive-Behavioral Framework of User Password Management Lifecycle Conference Proceedings A Cognitive-Behavioral Framework of User Password Management Lifecycle 6/22/2014 Status: Final Download: Conference Proceedings (DOI)	Final	6/22/2014
Conference Proceedings		Character Strings, Memory and Passwords: What a Recall Study Can Tell Us Conference Proceedings Character Strings, Memory and Passwords: What a Recall Study Can Tell Us 6/22/2014 Status: Final Download: Conference Proceedings (DOI)	Final	6/22/2014
Conference Proceedings		Preserving Privacy – More Than Reading a Message Conference Proceedings Preserving Privacy – More Than Reading a Message 6/22/2014 Status: Final Download: Conference Proceedings (DOI)	Final	6/22/2014
Conference Proceedings		Development of a Scale to Assess the Linguistic and Phonological Difficulty of Passwords Conference Proceedings Development of a Scale to Assess the Linguistic and Phonological Difficulty of Passwords 6/22/2014 Status: Final Download: Conference Proceedings (DOI)	Final	6/22/2014
Conference Proceedings		I Can't Type That! P@$$w0rd Entry on Mobile Devices Conference Proceedings I Can't Type That! P@$$w0rd Entry on Mobile Devices 6/22/2014 Status: Final Download: Conference Proceedings (DOI); Paper	Final	6/22/2014
ITL Bulletin		ITL Forensic Science Program ITL Bulletin ITL Forensic Science Program 6/05/2014 Status: Final Download: June 2014 ITL Bulletin	Final	6/05/2014
Journal Article		NIST Cybersecurity Framework Addresses Risks to Critical Infrastructure Journal Article NIST Cybersecurity Framework Addresses Risks to Critical Infrastructure 6/02/2014 Status: Final Download: Article	Final	6/02/2014
Conference Proceedings		Analysis of Protection Options for Virtualized Infrastructures in Infrastructure as a Service Cloud Conference Proceedings Analysis of Protection Options for Virtualized Infrastructures in Infrastructure as a Service Cloud 5/29/2014 Status: Final Download: None available	Final	5/29/2014
NISTIR	7924	Reference Certificate Policy (2nd Draft) NISTIR 7924 (Draft) Reference Certificate Policy (2nd Draft) 5/29/2014 Status: Draft Download: Second Draft NISTIR 7924; Comment Template	Draft	5/29/2014
SP	800-101 Rev. 1	Guidelines on Mobile Device Forensics SP 800-101 Rev. 1 Guidelines on Mobile Device Forensics 5/15/2014 Status: Final Download: SP 800-101 Rev. 1 (DOI); Local Download	Final	5/15/2014
ITL Bulletin		Small and Medium-Size Business Information Security Outreach Program ITL Bulletin Small and Medium-Size Business Information Security Outreach Program 5/13/2014 Status: Final Download: May 2014 ITL Bulletin	Final	5/13/2014
NISTIR	7946	CVSS Implementation Guidance NISTIR 7946 CVSS Implementation Guidance 4/28/2014 Status: Final Download: NISTIR 7946 (DOI); Local Download	Final	4/28/2014
Conference Paper		A Model Towards Using Evidence from Security Events for Network Attack Analysis Conference Paper A Model Towards Using Evidence from Security Events for Network Attack Analysis 4/27/2014 Status: Final Download: Conference Paper (DOI); Preprint	Final	4/27/2014
NISTIR	7991	United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study NISTIR 7991 United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study 4/08/2014 Status: Final Download: NISTIR 7991 (DOI); Local Download	Final	4/08/2014
Journal Article		NIST and Computer Security Journal Article NIST and Computer Security 4/04/2014 Status: Final Download: Journal Article (DOI)	Final	4/04/2014
Conference Proceedings		Estimating Fault Detection Effectiveness [poster] Conference Proceedings Estimating Fault Detection Effectiveness [poster] 4/01/2014 Status: Final Download: Conference Proceedings (DOI)	Final	4/01/2014
Conference Proceedings		Introducing Combinatorial Testing in a Large Organization: Pilot Project Experience Report [poster] Conference Proceedings Introducing Combinatorial Testing in a Large Organization: Pilot Project Experience Report [poster] 4/01/2014 Status: Final Download: Conference Proceedings (DOI); Poster	Final	4/01/2014
Conference Proceedings		An Empirical Comparison of Combinatorial and Random Testing Conference Proceedings An Empirical Comparison of Combinatorial and Random Testing 4/01/2014 Status: Final Download: Conference Proceedings (DOI)	Final	4/01/2014
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) SP 800-16 Rev. 1 (Draft) A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) 3/14/2014 Status: Draft Download: Draft SP 800-16 Rev. 1 (3rd draft)	Draft	3/14/2014
ITL Bulletin		Attribute Based Access Control (ABAC) Definition and Considerations ITL Bulletin Attribute Based Access Control (ABAC) Definition and Considerations 3/07/2014 Status: Final Download: March 2014 ITL Bulletin	Final	3/07/2014
NISTIR	7849	A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification NISTIR 7849 A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification 3/05/2014 Status: Final Download: NISTIR 7849 (DOI); Local Download	Final	3/05/2014
White Paper		NISTIR 7628 User's Guide White Paper NISTIR 7628 User's Guide 2/26/2014 Status: Final Download: None available	Final	2/26/2014
ITL Bulletin		Framework for Improving Critical Infrastructure Cybersecurity ITL Bulletin Framework for Improving Critical Infrastructure Cybersecurity 2/19/2014 Status: Final Download: February 2014 ITL Bulletin	Final	2/19/2014
White Paper	NIST CSWP 2	Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations White Paper NIST CSWP 2 Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations 2/19/2014 Status: Final Download: White Paper (DOI); Local Download	Final	2/19/2014
White Paper	NIST CSWP 1	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 White Paper NIST CSWP 1 Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 2/12/2014 Status: Final Download: White Paper (DOI); Local Download; Translations of the CSF 1.0	Final	2/12/2014
NISTIR	7983	Report: Authentication Diary Study NISTIR 7983 Report: Authentication Diary Study 2/04/2014 Status: Final Download: NISTIR 7983 (DOI); Local Download	Final	2/04/2014
Journal Article		IT Risks Journal Article IT Risks 2/03/2014 Status: Final Download: Journal Article (DOI); Preprint	Final	2/03/2014
Journal Article		Software Testing Journal Article Software Testing 2/03/2014 Status: Final Download: Journal Article (DOI)	Final	2/03/2014
Journal Article		The Importance of Entropy to Information Security Journal Article The Importance of Entropy to Information Security 2/03/2014 Status: Final Download: Journal Article (DOI)	Final	2/03/2014
Conference Proceedings		Real-Time Access Control Rule Fault Detection Using a Simulated Logic Circuit Conference Proceedings Real-Time Access Control Rule Fault Detection Using a Simulated Logic Circuit 2/03/2014 Status: Final Download: Conference Proceedings (DOI)	Final	2/03/2014
Journal Article		k-Zero Day Safety: A Network Security Metric for Measuring the Risk of Unknown Vulnerabilities Journal Article k-Zero Day Safety: A Network Security Metric for Measuring the Risk of Unknown Vulnerabilities 1/31/2014 Status: Final Download: Journal Article (DOI)	Final	1/31/2014
ITL Bulletin		A Profile of the Key Management Framework for the Federal Government ITL Bulletin A Profile of the Key Management Framework for the Federal Government 1/09/2014 Status: Final Download: January 2014 ITL Bulletin	Final	1/09/2014
Journal Article		A New Standard for Securing Media-Independent Handover: IEEE 802.21a Journal Article A New Standard for Securing Media-Independent Handover: IEEE 802.21a 12/31/2013 Status: Final Download: Journal Article (DOI)	Final	12/31/2013
ITL Bulletin		The National Vulnerability Database (NVD): Overview ITL Bulletin The National Vulnerability Database (NVD): Overview 12/18/2013 Status: Final Download: December 2013 ITL Bulletin	Final	12/18/2013
NISTIR	7970	Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language NISTIR 7970 Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language 12/09/2013 Status: Final Download: NISTIR 7970 (DOI); Local Download	Final	12/09/2013
Use Case		Identity and Access Management: Securing Networked Infrastructure for the Energy Sector Use Case Identity and Access Management: Securing Networked Infrastructure for the Energy Sector 11/05/2013 Status: Final Download: Use Case; Project Homepage	Final	11/05/2013
ITL Bulletin		ITL Releases Preliminary Cybersecurity Framework ITL Bulletin ITL Releases Preliminary Cybersecurity Framework 11/04/2013 Status: Final Download: November 2013 ITL Bulletin	Final	11/04/2013
Journal Article		Delay Behavior of On-Off Scheduling: Extending Idle Periods Journal Article Delay Behavior of On-Off Scheduling: Extending Idle Periods 11/01/2013 Status: Final Download: Journal Article (DOI)	Final	11/01/2013
Conference Proceedings		PDR: A Prevention, Detection and Response Mechanism for Anomalies in Energy Control Systems Conference Proceedings PDR: A Prevention, Detection and Response Mechanism for Anomalies in Energy Control Systems 10/30/2013 Status: Final Download: Conference Proceedings (DOI)	Final	10/30/2013
ITL Bulletin		ITL Updates Federal Information Processing Standard (FIPS) for Personal Identity Verification (PIV) of Federal Employees and Contractors ITL Bulletin ITL Updates Federal Information Processing Standard (FIPS) for Personal Identity Verification (PIV) of Federal Employees and Contractors 10/22/2013 Status: Final Download: October 2013 ITL Bulletin	Final	10/22/2013
Journal Article		Avoiding Accidental Data Loss Journal Article Avoiding Accidental Data Loss 10/18/2013 Status: Final Download: Journal Article (DOI)	Final	10/18/2013
Conference Proceedings		Creating Integrated Evidence Graphs for Network Forensics Conference Proceedings Creating Integrated Evidence Graphs for Network Forensics 10/18/2013 Status: Final Download: Conference Proceedings (DOI)	Final	10/18/2013
Conference Proceedings		Limitations to Threshold Random Walk Scan Detection and Mitigating Enhancements Conference Proceedings Limitations to Threshold Random Walk Scan Detection and Mitigating Enhancements 10/16/2013 Status: Final Download: Conference Proceedings (DOI)	Final	10/16/2013
Conference Proceedings		CCM: A Tool for Measuring Combinatorial Coverage of System State Space Conference Proceedings CCM: A Tool for Measuring Combinatorial Coverage of System State Space 10/10/2013 Status: Final Download: Conference Proceedings (DOI)	Final	10/10/2013
Journal Article		Aggregating Vulnerability Metrics in Enterprise Networks using Attack Graphs Journal Article Aggregating Vulnerability Metrics in Enterprise Networks using Attack Graphs 9/20/2013 Status: Final Download: Journal Article (DOI); Preprint	Final	9/20/2013
NISTIR	7957	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions NISTIR 7957 Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions 9/18/2013 Status: Final Download: NISTIR 7957 (DOI); Local Download	Final	9/18/2013
Journal Article		On Integer Solutions of x^4+y^4-2z^4-2w^4=0 Journal Article On Integer Solutions of x^4+y^4-2z^4-2w^4=0 9/18/2013 Status: Final Download: None available	Final	9/18/2013
SP	800-81-2	Secure Domain Name System (DNS) Deployment Guide SP 800-81-2 Secure Domain Name System (DNS) Deployment Guide 9/18/2013 Status: Final Download: SP 800-81-2 (DOI); Local Download	Final	9/18/2013
Conference Proceedings		Related-Key Slide Attacks on Block Ciphers with Secret Components Conference Proceedings Related-Key Slide Attacks on Block Ciphers with Secret Components 9/18/2013 Status: Final Download: Conference Proceedings (DOI)	Final	9/18/2013
NISTIR	7956	Cryptographic Key Management Issues & Challenges in Cloud Services NISTIR 7956 Cryptographic Key Management Issues & Challenges in Cloud Services 9/18/2013 Status: Final Download: NISTIR 7956 (DOI); Local Download	Final	9/18/2013
ITL Bulletin		NIST Opens Draft Special Publication 800-90A, Recommendation for Random Number Generation Using Deterministic Random Bit Generators, For Review and Comment (Supplemental ITL Bulletin for September 2013) ITL Bulletin NIST Opens Draft Special Publication 800-90A, Recommendation for Random Number Generation Using Deterministic Random Bit Generators, For Review and Comment (Supplemental ITL Bulletin for September 2013) 9/09/2013 Status: Final Download: Sep 2013 ITL Bulletin	Final	9/09/2013
ITL Bulletin		ITL Publishes Guidance on Preventing and Handling Malware Incidents ITL Bulletin ITL Publishes Guidance on Preventing and Handling Malware Incidents 8/22/2013 Status: Final Download: September 2013 ITL Bulletin	Final	8/22/2013
Conference Proceedings		Investigating the Application of Moving Target Defenses to Enterprise Network Security Conference Proceedings Investigating the Application of Moving Target Defenses to Enterprise Network Security 8/15/2013 Status: Final Download: Conference Proceedings (DOI)	Final	8/15/2013
SP	800-130	A Framework for Designing Cryptographic Key Management Systems SP 800-130 A Framework for Designing Cryptographic Key Management Systems 8/15/2013 Status: Final Download: SP 800-130 (DOI); Local Download	Final	8/15/2013
ITL Bulletin		ITL Publishes Guidance on Enterprise Patch Management Technologies ITL Bulletin ITL Publishes Guidance on Enterprise Patch Management Technologies 8/08/2013 Status: Final Download: August 2013 ITL Bulletin	Final	8/08/2013
Conference Proceedings		An Efficient Approach to Assessing the Risk of Zero Day Vulnerabilities Conference Proceedings An Efficient Approach to Assessing the Risk of Zero Day Vulnerabilities 7/31/2013 Status: Final Download: Conference Proceedings (DOI)	Final	7/31/2013
Conference Proceedings		A Chosen IV Related Key Attack on Grain-128a Conference Proceedings A Chosen IV Related Key Attack on Grain-128a 7/24/2013 Status: Final Download: Conference Proceedings (DOI)	Final	7/24/2013
SP	800-83 Rev. 1	Guide to Malware Incident Prevention and Handling for Desktops and Laptops SP 800-83 Rev. 1 Guide to Malware Incident Prevention and Handling for Desktops and Laptops 7/22/2013 Status: Final Download: SP 800-83 Rev. 1 (DOI); Local Download	Final	7/22/2013
SP	800-165	Computer Security Division 2012 Annual Report SP 800-165 Computer Security Division 2012 Annual Report 7/22/2013 Status: Final Download: SP 800-165 (DOI); Local Download	Final	7/22/2013
FIPS	186-4	Digital Signature Standard (DSS) FIPS 186-4 Digital Signature Standard (DSS) 7/19/2013 Status: Final Download: FIPS 186-4 (DOI); Local Download; Comments received on FIPS 186-4 (Dec. 2015); Request for Comments on FIPS 186-4 (Oct. 2015); Press Release (07-23-2013); Proposed Change Notice for FIPS 186-3 (Apr. 2012); Request for Comments on Proposed Change Notice (Apr. 2012)	Final	7/19/2013
ITL Bulletin		ITL Issues Guidelines for Managing the Security of Mobile Devices ITL Bulletin ITL Issues Guidelines for Managing the Security of Mobile Devices 7/15/2013 Status: Final Download: July 2013 ITL Bulletin	Final	7/15/2013
SP	800-76-2	Biometric Specifications for Personal Identity Verification SP 800-76-2 Biometric Specifications for Personal Identity Verification 7/11/2013 Status: Final Download: SP 800-76-2 (DOI); Local Download	Final	7/11/2013
White Paper		Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management, National Institute of Standards and Technology, October 15-16, 2012 White Paper Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management, National Institute of Standards and Technology, October 15-16, 2012 7/10/2013 Status: Final Download: None available	Final	7/10/2013
Conference Proceedings		Four Measures of Nonlinearity Conference Proceedings Four Measures of Nonlinearity 6/23/2013 Status: Final Download: Conference Proceedings (DOI)	Final	6/23/2013
Journal Article		Enabling an Enterprise-wide, Data-centric Operating Environment Journal Article Enabling an Enterprise-wide, Data-centric Operating Environment 6/21/2013 Status: Final Download: Journal Article (DOI)	Final	6/21/2013
Conference Proceedings		Exposing Software Security and Availability Risks For Commercial Mobile Devices Conference Proceedings Exposing Software Security and Availability Risks For Commercial Mobile Devices 6/21/2013 Status: Final Download: Conference Proceedings (DOI)	Final	6/21/2013
SP	800-124 Rev. 1	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 1 Guidelines for Managing the Security of Mobile Devices in the Enterprise 6/21/2013 Status: Final Download: SP 800-124 Rev. 1 (DOI); Local Download; SP 800-124 Rev. 1 (EPUB); Press Release	Final	6/21/2013
Conference Proceedings		A Classification of Differential Invariants for Multivariate Post-quantum Cryptosystems Conference Proceedings A Classification of Differential Invariants for Multivariate Post-quantum Cryptosystems 6/21/2013 Status: Final Download: Conference Proceedings (DOI)	Final	6/21/2013
NISTIR	7933	Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record NISTIR 7933 Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record 6/21/2013 Status: Final Download: NISTIR 7933 (DOI); Local Download	Final	6/21/2013
Conference Proceedings		VULCAN: Vulnerability Assessment Framework for Cloud Computing Conference Proceedings VULCAN: Vulnerability Assessment Framework for Cloud Computing 6/20/2013 Status: Final Download: Conference Proceedings (DOI)	Final	6/20/2013
Book		Introduction to Combinatorial Testing Book Introduction to Combinatorial Testing 6/20/2013 Status: Final Download: Book (CRC Press); Preface; Appendix A: Mathematics Review; and Appendix B: Empirical Data on Software Failures (Preprint); Chapter 1: Combinatorial Methods in Testing (Preprint); Chapter 2: Combinatorial Testing Applied (Preprint); Chapter 7: Measuring Combinatorial Coverage (Preprint); Chapter 14: Evolution from Design of Experiments (Preprint)	Final	6/20/2013
Journal Article		Secure Sealed-Bid Online Auctions Using Discreet Cryptographic Proofs Journal Article Secure Sealed-Bid Online Auctions Using Discreet Cryptographic Proofs 5/10/2013 Status: Final Download: Journal Article (DOI)	Final	5/10/2013
ITL Bulletin		ITL Publishes Security And Privacy Controls For Federal Agencies ITL Bulletin ITL Publishes Security And Privacy Controls For Federal Agencies 5/01/2013 Status: Final Download: May 2013 ITL Bulletin	Final	5/01/2013
ITL Bulletin		Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements ITL Bulletin Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 4/10/2013 Status: Final Download: April 2013 ITL Bulletin	Final	4/10/2013
Journal Article		Logic Minimization Techniques with Applications to Cryptology Journal Article Logic Minimization Techniques with Applications to Cryptology 4/01/2013 Status: Final Download: Journal Article (DOI)	Final	4/01/2013
Conference Proceedings		Applying Combinatorial Testing to the Siemens Suite Conference Proceedings Applying Combinatorial Testing to the Siemens Suite 3/22/2013 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/22/2013
Conference Proceedings		Combinatorial Coverage Measurement Concepts and Applications Conference Proceedings Combinatorial Coverage Measurement Concepts and Applications 3/22/2013 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/22/2013
Conference Proceedings		An Input Space Modeling Methodology for Combinatorial Testing Conference Proceedings An Input Space Modeling Methodology for Combinatorial Testing 3/22/2013 Status: Final Download: Conference Proceedings (DOI)	Final	3/22/2013
ITL Bulletin		NIST to Develop a Cybersecurity Framework to Protect Critical Infrastructure ITL Bulletin NIST to Develop a Cybersecurity Framework to Protect Critical Infrastructure 3/21/2013 Status: Final Download: March 2013 ITL Bulletin	Final	3/21/2013
Journal Article		Combinatorial Testing for Software: an Adaptation of Design of Experiments Journal Article Combinatorial Testing for Software: an Adaptation of Design of Experiments 3/14/2013 Status: Final Download: Journal Article (DOI)	Final	3/14/2013
Conference Proceedings		Security Assurance Requirements for Hypervisor Deployment Features Conference Proceedings Security Assurance Requirements for Hypervisor Deployment Features 2/24/2013 Status: Final Download: None available	Final	2/24/2013
NISTIR	7916	Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 NISTIR 7916 Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 2/15/2013 Status: Final Download: NISTIR 7916 (DOI); Local Download	Final	2/15/2013
ITL Bulletin		Managing Identity Requirements for Remote Users of Information Systems to Protect System Security and Information Privacy ITL Bulletin Managing Identity Requirements for Remote Users of Information Systems to Protect System Security and Information Privacy 1/29/2013 Status: Final Download: January 2013 ITL Bulletin	Final	1/29/2013
Conference Proceedings		Mapping Evidence Graphs to Attack Graphs Conference Proceedings Mapping Evidence Graphs to Attack Graphs 1/17/2013 Status: Final Download: Conference Proceedings (DOI)	Final	1/17/2013
Conference Proceedings		Using Attack Graphs in Forensic Examinations Conference Proceedings Using Attack Graphs in Forensic Examinations 1/16/2013 Status: Final Download: Conference Proceedings (DOI)	Final	1/16/2013
Journal Article		Changes in Federal Information Processing Standard (FIPS) 180-4, Secure Hash Standard Journal Article Changes in Federal Information Processing Standard (FIPS) 180-4, Secure Hash Standard 1/11/2013 Status: Final Download: Journal Article (DOI)	Final	1/11/2013
White Paper		Summary of the Workshop on Cryptographic Key Management Systems (CKMS), National Institute of Standards and Technology, September 10-11, 2012 White Paper Summary of the Workshop on Cryptographic Key Management Systems (CKMS), National Institute of Standards and Technology, September 10-11, 2012 1/10/2013 Status: Final Download: Workshop Summary	Final	1/10/2013
Journal Article		Advances in Biometric Standardisation – Addressing Global Requirements for Interoperable Biometrics Journal Article Advances in Biometric Standardisation – Addressing Global Requirements for Interoperable Biometrics 1/01/2013 Status: Final Download: Journal Article (DOI)	Final	1/01/2013
ITL Bulletin		Generating Secure Cryptographic Keys: A Critical Component of Cryptographic Key Management and the Protection of Sensitive Information ITL Bulletin Generating Secure Cryptographic Keys: A Critical Component of Cryptographic Key Management and the Protection of Sensitive Information 12/19/2012 Status: Final Download: December 2012 ITL Bulletin	Final	12/19/2012
Journal Article		Securing America’s Digital Infrastructure Through Education Journal Article Securing America’s Digital Infrastructure Through Education 12/14/2012 Status: Final Download: None available	Final	12/14/2012
Journal Article		Introducing the Federal Cybersecurity R&D Strategic Plan Journal Article Introducing the Federal Cybersecurity R&D Strategic Plan 12/14/2012 Status: Final Download: None available	Final	12/14/2012
SP	800-38F	Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping SP 800-38F Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping 12/13/2012 Status: Final Download: SP 800-38F (DOI); Local Download	Final	12/13/2012
Conference Paper		Security Ontologies for Enterprise Level Risk Assessment Conference Paper Security Ontologies for Enterprise Level Risk Assessment 12/07/2012 Status: Final Download: None available	Final	12/07/2012
Journal Article		Protecting Wireless Local Area Networks Journal Article Protecting Wireless Local Area Networks 12/03/2012 Status: Final Download: Journal Article (DOI)	Final	12/03/2012
White Paper		Proof of Concept for an ICT SCRM Enterprise Assessment Package White Paper Proof of Concept for an ICT SCRM Enterprise Assessment Package 12/01/2012 Status: Final Download: Report	Final	12/01/2012
NISTIR	7817	A Credential Reliability and Revocation Model for Federated Identities NISTIR 7817 A Credential Reliability and Revocation Model for Federated Identities 11/29/2012 Status: Final Download: NISTIR 7817 (DOI); Local Download	Final	11/29/2012
ITL Bulletin		Practices for Managing Supply Chain Risks to Protect Federal Information Systems ITL Bulletin Practices for Managing Supply Chain Risks to Protect Federal Information Systems 11/27/2012 Status: Final Download: November 2012 ITL Bulletin	Final	11/27/2012
White Paper		Challenging Security Requirements for US Government Cloud Computing Adoption White Paper Challenging Security Requirements for US Government Cloud Computing Adoption 11/19/2012 Status: Final Download: Paper	Final	11/19/2012
NISTIR	7896	Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition NISTIR 7896 Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition 11/15/2012 Status: Final Download: NISTIR 7896 (DOI); Local Download	Final	11/15/2012
Journal Article		Class Numbers via 3-Isogenies and Elliptic Surfaces Journal Article Class Numbers via 3-Isogenies and Elliptic Surfaces 11/06/2012 Status: Final Download: Journal Article (DOI)	Final	11/06/2012
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (Draft) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Draft Download: Draft SP 800-164	Draft	10/31/2012
NISTIR	7878	Combinatorial Coverage Measurement NISTIR 7878 Combinatorial Coverage Measurement 10/26/2012 Status: Final Download: NISTIR 7878 (DOI); Local Download	Final	10/26/2012
ITL Bulletin		Conducting Information Security-Related Risk Assessments: Updated Guidelines for Comprehensive Risk Management Programs ITL Bulletin Conducting Information Security-Related Risk Assessments: Updated Guidelines for Comprehensive Risk Management Programs 10/25/2012 Status: Final Download: October 2012 ITL Bulletin	Final	10/25/2012
Conference Proceedings		Efficient Algorithms for T-way Test Sequence Generation Conference Proceedings Efficient Algorithms for T-way Test Sequence Generation 10/16/2012 Status: Final Download: None available	Final	10/16/2012
NISTIR	7622	Notional Supply Chain Risk Management Practices for Federal Information Systems NISTIR 7622 Notional Supply Chain Risk Management Practices for Federal Information Systems 10/16/2012 Status: Final Download: NISTIR 7622 (DOI); Local Download; Press Release	Final	10/16/2012
Conference Proceedings		Aggregating CVSS Base Scores for Semantics-Rich Network Security Metrics Conference Proceedings Aggregating CVSS Base Scores for Semantics-Rich Network Security Metrics 10/11/2012 Status: Final Download: Conference Proceedings (DOI)	Final	10/11/2012
ITL Bulletin		Revised Guide Helps Organizations Handle Security Related Incidents ITL Bulletin Revised Guide Helps Organizations Handle Security Related Incidents 9/27/2012 Status: Final Download: September 2012 ITL Bulletin	Final	9/27/2012
SP	800-30 Rev. 1	Guide for Conducting Risk Assessments SP 800-30 Rev. 1 Guide for Conducting Risk Assessments 9/17/2012 Status: Final Download: SP 800-30 Rev. 1 (DOI); Local Download; SP 800-30 Rev. 1 (EPUB); Press Release	Final	9/17/2012
NISTIR	7877	BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records NISTIR 7877 BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records 9/14/2012 Status: Final Download: NISTIR 7877 (DOI); Local Download	Final	9/14/2012
NISTIR	7874	Guidelines for Access Control System Evaluation Metrics NISTIR 7874 Guidelines for Access Control System Evaluation Metrics 9/14/2012 Status: Final Download: NISTIR 7874 (DOI); Local Download	Final	9/14/2012
Conference Paper		Measuring Combinatorial Coverage of System State-space for IV&V Conference Paper Measuring Combinatorial Coverage of System State-space for IV&V 9/13/2012 Status: Final Download: None available	Final	9/13/2012
Conference Proceedings		The TriTon Transformation Conference Proceedings The TriTon Transformation 8/27/2012 Status: Final Download: None available	Final	8/27/2012
SP	800-107 Rev. 1	Recommendation for Applications Using Approved Hash Algorithms SP 800-107 Rev. 1 Recommendation for Applications Using Approved Hash Algorithms 8/24/2012 Status: Final Download: SP 800-107 Rev. 1 (DOI); Local Download	Final	8/24/2012
White Paper		The Role of the National Institute of Standards and Technology in Mobile Security White Paper The Role of the National Institute of Standards and Technology in Mobile Security 8/23/2012 Status: Final Download: The Role of NIST in Mobile Security	Final	8/23/2012
Journal Article		On the Nonlinearity of Maximum-length NFSR Feedbacks Journal Article On the Nonlinearity of Maximum-length NFSR Feedbacks 8/14/2012 Status: Final Download: Journal Article (DOI)	Final	8/14/2012
ITL Bulletin		Security of Bluetooth Systems and Devices: Updated Guide Issued by the National Institute of Standards and Technology (NIST) ITL Bulletin Security of Bluetooth Systems and Devices: Updated Guide Issued by the National Institute of Standards and Technology (NIST) 8/13/2012 Status: Final Download: August 2012 ITL Bulletin	Final	8/13/2012
SP	800-61 Rev. 2	Computer Security Incident Handling Guide SP 800-61 Rev. 2 Computer Security Incident Handling Guide 8/06/2012 Status: Final Download: SP 800-61 Rev. 2 (DOI); Local Download; Press Release	Final	8/06/2012
NISTIR	7867 Rev. 2012	Usability of PIV Smartcards for Logical Access NISTIR 7867 Rev. 2012 Usability of PIV Smartcards for Logical Access 8/01/2012 Status: Final Download: NISTIR 7867 Rev. 2012 (DOI); Local Download	Final	8/01/2012
Journal Article		Efficient Methods for Interoperability Testing Using Event Sequences Journal Article Efficient Methods for Interoperability Testing Using Event Sequences 7/31/2012 Status: Final Download: None available	Final	7/31/2012
Conference Proceedings		Mobile Application and Device Power Usage Measurements Conference Proceedings Mobile Application and Device Power Usage Measurements 7/31/2012 Status: Final Download: Conference Proceedings (DOI)	Final	7/31/2012
Journal Article		What Continuous Monitoring Really Means Journal Article What Continuous Monitoring Really Means 7/24/2012 Status: Final Download: None available	Final	7/24/2012
Book		Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP (1st ed.) Book Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP (1st ed.) 7/24/2012 Status: Final Download: None available	Final	7/24/2012
Journal Article		Arithmetic Progressions on Huff Curves Journal Article Arithmetic Progressions on Huff Curves 7/23/2012 Status: Final Download: None available	Final	7/23/2012
Conference Proceedings		Evolutionary Construction of de Bruijn Sequences Conference Proceedings Evolutionary Construction of de Bruijn Sequences 7/20/2012 Status: Final Download: Conference Proceedings (DOI)	Final	7/20/2012
Journal Article		What's Special About Cloud Security? Journal Article What's Special About Cloud Security? 7/16/2012 Status: Final Download: Journal Article (DOI)	Final	7/16/2012
NISTIR	7870	NIST Test Personal Identity Verification (PIV) Cards NISTIR 7870 NIST Test Personal Identity Verification (PIV) Cards 7/12/2012 Status: Final Download: NISTIR 7870 (DOI); Local Download	Final	7/12/2012
ITL Bulletin		Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance ITL Bulletin Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance 7/10/2012 Status: Final Download: July 2012 ITL Bulletin	Final	7/10/2012
NISTIR	7864	The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities NISTIR 7864 The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities 7/10/2012 Status: Final Download: NISTIR 7864 (DOI); Local Download; Press Release	Final	7/10/2012
ITL Bulletin		Cloud Computing: A Review of Features, Benefits, and Risks, and Recommendations for Secure, Efficient Implementations ITL Bulletin Cloud Computing: A Review of Features, Benefits, and Risks, and Recommendations for Secure, Efficient Implementations 6/27/2012 Status: Final Download: June 2012 ITL Bulletin	Final	6/27/2012
Encyclopedia Entry		Combinatorial Testing Encyclopedia Entry Combinatorial Testing 6/25/2012 Status: Final Download: Encyclopedia Entry; Preprint	Final	6/25/2012
Journal Article		The Internet of Things: A Reality Check Journal Article The Internet of Things: A Reality Check 6/11/2012 Status: Final Download: Journal Article (DOI)	Final	6/11/2012
Conference Paper		Simulation-based Approaches to Studying Effectiveness of Moving-Target Network Defense Conference Paper Simulation-based Approaches to Studying Effectiveness of Moving-Target Network Defense 6/11/2012 Status: Final Download: None available	Final	6/11/2012
Journal Article		NICE: Creating a Cybersecurity Workforce and Aware Public Journal Article NICE: Creating a Cybersecurity Workforce and Aware Public 6/04/2012 Status: Final Download: Journal Article (DOI)	Final	6/04/2012
Journal Article		Evaluation of Fault Detection Effectiveness for Combinatorial and Exhaustive Selection of Discretized Test Inputs Journal Article Evaluation of Fault Detection Effectiveness for Combinatorial and Exhaustive Selection of Discretized Test Inputs 6/04/2012 Status: Final Download: Article; Preprint	Final	6/04/2012
SP	800-146	Cloud Computing Synopsis and Recommendations SP 800-146 Cloud Computing Synopsis and Recommendations 5/29/2012 Status: Final Download: SP 800-146 (DOI); Local Download; SP 800-146 (EPUB); Press Release	Final	5/29/2012
Journal Article		Isomorphism classes of Edwards and twisted Edwards curves over finite fields Journal Article Isomorphism classes of Edwards and twisted Edwards curves over finite fields 5/18/2012 Status: Final Download: Journal Article (DOI)	Final	5/18/2012
ITL Bulletin		Secure Hash Standard: Updated Specifications Approved and Issued as Federal Information Processing Standard (FIPS) 180-4 ITL Bulletin Secure Hash Standard: Updated Specifications Approved and Issued as Federal Information Processing Standard (FIPS) 180-4 5/09/2012 Status: Final Download: May 2012 ITL Bulletin	Final	5/09/2012
NISTIR	7816	Computer Security Division 2011 Annual Report NISTIR 7816 Computer Security Division 2011 Annual Report 5/08/2012 Status: Final Download: NISTIR 7816 (DOI); Local Download	Final	5/08/2012
NISTIR	7848	Specification for the Asset Summary Reporting Format 1.0 NISTIR 7848 (Draft) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Draft Download: Draft NISTIR 7848	Draft	5/07/2012
Conference Proceedings		Isolating Failure-Inducing Combinations in Combinatorial Testing using Test Augmentation and Classification Conference Proceedings Isolating Failure-Inducing Combinations in Combinatorial Testing using Test Augmentation and Classification 4/21/2012 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	4/21/2012
Conference Proceedings		Combinatorial Testing of ACTS: a Case Study Conference Proceedings Combinatorial Testing of ACTS: a Case Study 4/21/2012 Status: Final Download: Conference Proceedings (DOI)	Final	4/21/2012
Conference Proceedings		Combinatorial Methods for Event Sequence Testing Conference Proceedings Combinatorial Methods for Event Sequence Testing 4/21/2012 Status: Final Download: Conference Proceedings (DOI)	Final	4/21/2012
White Paper		Adaptive Preimage Resistance Analysis Revisited: Requirements, Subtleties and Implications White Paper Adaptive Preimage Resistance Analysis Revisited: Requirements, Subtleties and Implications 4/16/2012 Status: Final Download: None available	Final	4/16/2012
Conference Proceedings		Criteria Towards Metrics for Benchmarking Template Protection Algorithms Conference Proceedings Criteria Towards Metrics for Benchmarking Template Protection Algorithms 3/30/2012 Status: Final Download: Conference Proceedings (DOI)	Final	3/30/2012
ITL Bulletin		Guidelines for Improving Security and Privacy in Public Cloud Computing ITL Bulletin Guidelines for Improving Security and Privacy in Public Cloud Computing 3/28/2012 Status: Final Download: March 2012 ITL Bulletin	Final	3/28/2012
Journal Article		A Matter of Policy Journal Article A Matter of Policy 3/26/2012 Status: Final Download: Journal Article (DOI)	Final	3/26/2012
Conference Paper		A Keyed Sponge Construction with Pseudorandomness in a Standard Model Conference Paper A Keyed Sponge Construction with Pseudorandomness in a Standard Model 3/22/2012 Status: Final Download: None available	Final	3/22/2012
Conference Paper		Improved Indifferentiability Security Bound for the JH Mode Conference Paper Improved Indifferentiability Security Bound for the JH Mode 3/22/2012 Status: Final Download: None available	Final	3/22/2012
SP	800-126 Rev. 2	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 SP 800-126 Rev. 2 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 3/19/2012 Status: Final Download: SP 800-126 Rev. 2 (DOI); Local Download; SCAP Project	Final	3/19/2012
Journal Article		Basing Cybersecurity Training on User Perceptions Journal Article Basing Cybersecurity Training on User Perceptions 3/01/2012 Status: Final Download: Journal Article (DOI)	Final	3/01/2012
NISTIR	7275 Rev. 4	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 NISTIR 7275 Rev. 4 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 3/01/2012 Status: Final Download: NISTIR 7275 Rev. 4; NISTIR 7275 Rev. 4 (markup)	Final	3/01/2012
ITL Bulletin		Guidelines for Securing Wireless Local Area Networks (WLANs) ITL Bulletin Guidelines for Securing Wireless Local Area Networks (WLANs) 2/27/2012 Status: Final Download: February 2012 ITL Bulletin	Final	2/27/2012
SP	800-153	Guidelines for Securing Wireless Local Area Networks (WLANs) SP 800-153 Guidelines for Securing Wireless Local Area Networks (WLANs) 2/21/2012 Status: Final Download: SP 800-153 (DOI); Local Download; Press Release (Mar. 6, 2012)	Final	2/21/2012
Journal Article		Building Security into "Off-the-Shelf" Smartphones Journal Article Building Security into "Off-the-Shelf" Smartphones 2/01/2012 Status: Final Download: Journal Article (DOI)	Final	2/01/2012
Journal Article		Families of Elliptic Curves with Rational 3-torsion Journal Article Families of Elliptic Curves with Rational 3-torsion 1/30/2012 Status: Final Download: Journal Article (DOI)	Final	1/30/2012
Conference Proceedings		Determining Authentication Strength for Smart Card-based Authentication Use Cases Conference Proceedings Determining Authentication Strength for Smart Card-based Authentication Use Cases 1/30/2012 Status: Final Download: None available	Final	1/30/2012
ITL Bulletin		Advancing Security Automation and Standardization: Revised Technical Specifications Issued for the Security Content Automation Protocol (SCAP) ITL Bulletin Advancing Security Automation and Standardization: Revised Technical Specifications Issued for the Security Content Automation Protocol (SCAP) 1/24/2012 Status: Final Download: January 2012 ITL Bulletin	Final	1/24/2012
NISTIR	7800	Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains NISTIR 7800 (Draft) Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains 1/20/2012 Status: Draft Download: Draft NISTIR 7800	Draft	1/20/2012
NISTIR	7756	CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture NISTIR 7756 (Draft) CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture 1/06/2012 Status: Draft Download: Draft NISTIR 7756 (2nd public draft)	Draft	1/06/2012
NISTIR	7799	Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications NISTIR 7799 (Draft) Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications 1/06/2012 Status: Draft Download: Draft NISTIR 7799	Draft	1/06/2012
Conference Proceedings		Vulnerability Hierarchies in Access Control Configurations Conference Proceedings Vulnerability Hierarchies in Access Control Configurations 12/27/2011 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	12/27/2011
SP	800-135 Rev. 1	Recommendation for Existing Application-Specific Key Derivation Functions SP 800-135 Rev. 1 Recommendation for Existing Application-Specific Key Derivation Functions 12/23/2011 Status: Final Download: SP 800-135 Rev. 1 (DOI); Local Download; Informative Note (09-19-2016)	Final	12/23/2011
ITL Bulletin		Revised Guideline for Electronic Authentication of Users Helps Organizations Protect the Security of Their Information Systems ITL Bulletin Revised Guideline for Electronic Authentication of Users Helps Organizations Protect the Security of Their Information Systems 12/22/2011 Status: Final Download: December 2011 ITL Bulletin	Final	12/22/2011
SP	800-144	Guidelines on Security and Privacy in Public Cloud Computing SP 800-144 Guidelines on Security and Privacy in Public Cloud Computing 12/09/2011 Status: Final Download: SP 800-144 (DOI); Local Download; SP 800-144 (EPUB); Press Release	Final	12/09/2011
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (Draft) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft Download: Draft SP 800-155	Draft	12/08/2011
Journal Article		Role Engineering: Methods and Standards Journal Article Role Engineering: Methods and Standards 12/08/2011 Status: Final Download: Journal Article (DOI)	Final	12/08/2011
Journal Article		Mobile-App Addiction: Threat to Security? Journal Article Mobile-App Addiction: Threat to Security? 12/08/2011 Status: Final Download: Journal Article (DOI)	Final	12/08/2011
White Paper		The ICT SCRM Community Framework Development Project: Final Report White Paper The ICT SCRM Community Framework Development Project: Final Report 12/01/2011 Status: Final Download: Report	Final	12/01/2011
Conference Proceedings		On the Differential Security of Multivariate Public Key Cryptosystems Conference Proceedings On the Differential Security of Multivariate Public Key Cryptosystems 11/29/2011 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	11/29/2011
Conference Proceedings		Service Model Driven Variations in Security Measures for Cloud Environments Conference Proceedings Service Model Driven Variations in Security Measures for Cloud Environments 11/06/2011 Status: Final Download: None available	Final	11/06/2011
Journal Article		Mean Value Formulas for Twisted Edwards Curves Journal Article Mean Value Formulas for Twisted Edwards Curves 11/03/2011 Status: Final Download: None available	Final	11/03/2011
ITL Bulletin		Continuous Monitoring of Information Security: An Essential Component of Risk Management ITL Bulletin Continuous Monitoring of Information Security: An Essential Component of Risk Management 10/25/2011 Status: Final Download: October 2011 ITL Bulletin	Final	10/25/2011
Journal Article		Security Automation Journal Article Security Automation 10/21/2011 Status: Final Download: None available	Final	10/21/2011
SP	800-137	Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations 9/30/2011 Status: Final Download: SP 800-137 (DOI); Local Download; Press Release	Final	9/30/2011
SP	800-145	The NIST Definition of Cloud Computing SP 800-145 The NIST Definition of Cloud Computing 9/28/2011 Status: Final Download: SP 800-145 (DOI); Local Download; SP 800-145 (EPUB); Press Release	Final	9/28/2011
ITL Bulletin		Managing the Configuration of Information Systems with a Focus on Security ITL Bulletin Managing the Configuration of Information Systems with a Focus on Security 9/26/2011 Status: Final Download: September 2011 ITL Bulletin	Final	9/26/2011
NISTIR	7802	Trust Model for Security Automation Data 1.0 (TMSAD) NISTIR 7802 Trust Model for Security Automation Data 1.0 (TMSAD) 9/20/2011 Status: Final Download: NISTIR 7802 (DOI); Local Download	Final	9/20/2011
NISTIR	7806	ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions NISTIR 7806 ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions 9/16/2011 Status: Final Download: NISTIR 7806 (DOI); Local Download	Final	9/16/2011
NISTIR	7711	Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters NISTIR 7711 Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters 9/15/2011 Status: Final Download: NISTIR 7711 (DOI); Local Download	Final	9/15/2011
NISTIR	7682	Information System Security Best Practices for UOCAVA-Supporting Systems NISTIR 7682 Information System Security Best Practices for UOCAVA-Supporting Systems 9/15/2011 Status: Final Download: NISTIR 7682 (DOI); Local Download	Final	9/15/2011
Conference Proceedings		A Field Study of User Behavior and Perception in Smartcard Authentication Conference Proceedings A Field Study of User Behavior and Perception in Smartcard Authentication 9/05/2011 Status: Final Download: Conference Proceedings (DOI)	Final	9/05/2011
ITL Bulletin		Protecting Industrial Control Systems – Key Components of Our Nation's Critical Infrastructures ITL Bulletin Protecting Industrial Control Systems – Key Components of Our Nation's Critical Infrastructures 8/24/2011 Status: Final Download: August 2011 ITL Bulletin	Final	8/24/2011
NISTIR	7696	Common Platform Enumeration: Name Matching Specification Version 2.3 NISTIR 7696 Common Platform Enumeration: Name Matching Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7696 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
NISTIR	7697	Common Platform Enumeration: Dictionary Specification Version 2.3 NISTIR 7697 Common Platform Enumeration: Dictionary Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7697 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
NISTIR	7698	Common Platform Enumeration: Applicability Language Specification Version 2.3 NISTIR 7698 Common Platform Enumeration: Applicability Language Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7698 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
NISTIR	7695	Common Platform Enumeration: Naming Specification Version 2.3 NISTIR 7695 Common Platform Enumeration: Naming Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7695 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
Conference Proceedings		An Empirical Study of a Vulnerability Metric Aggregation Method Conference Proceedings An Empirical Study of a Vulnerability Metric Aggregation Method 8/18/2011 Status: Final Download: None available	Final	8/18/2011
NISTIR	7788	Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs NISTIR 7788 Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs 8/01/2011 Status: Final Download: NISTIR 7788 (DOI); Local Download	Final	8/01/2011
Journal Article		Vetting Mobile Apps Journal Article Vetting Mobile Apps 7/21/2011 Status: Final Download: Journal Article (DOI)	Final	7/21/2011
Conference Proceedings		A public randomness service Conference Proceedings A public randomness service 7/21/2011 Status: Final Download: Conference Proceedings (DOI)	Final	7/21/2011
Conference Proceedings		Cloud Service Feature Driven Security Policies for Virtualized Infrastructures Conference Proceedings Cloud Service Feature Driven Security Policies for Virtualized Infrastructures 7/19/2011 Status: Final Download: None available	Final	7/19/2011
Conference Proceedings		On the Security of Hash Functions Employing Blockcipher Postprocessing Conference Proceedings On the Security of Hash Functions Employing Blockcipher Postprocessing 7/14/2011 Status: Final Download: Conference Proceedings (DOI)	Final	7/14/2011
NISTIR	7815	Access Control for SAR Systems NISTIR 7815 Access Control for SAR Systems 7/01/2011 Status: Final Download: NISTIR 7815 (DOI); Local Download	Final	7/01/2011
ITL Bulletin		Guidelines for Protecting Basic Input/Output System (BIOS) Firmware ITL Bulletin Guidelines for Protecting Basic Input/Output System (BIOS) Firmware 6/28/2011 Status: Final Download: June 2011 ITL Bulletin	Final	6/28/2011
NISTIR	7791	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 NISTIR 7791 Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 6/22/2011 Status: Final Download: NISTIR 7791 (DOI); Local Download	Final	6/22/2011
NISTIR	7694	Specification for Asset Reporting Format 1.1 NISTIR 7694 Specification for Asset Reporting Format 1.1 6/21/2011 Status: Final Download: NISTIR 7694 (DOI); Local Download	Final	6/21/2011
White Paper		A depth-16 circuit for the AES S-box White Paper A depth-16 circuit for the AES S-box 6/17/2011 Status: Final Download: Paper	Final	6/17/2011
NISTIR	7693	Specification for Asset Identification 1.1 NISTIR 7693 Specification for Asset Identification 1.1 6/17/2011 Status: Final Download: NISTIR 7693 (DOI); Local Download	Final	6/17/2011
Conference Proceedings		Division Polynomials for Jacobi Quartic Curves Conference Proceedings Division Polynomials for Jacobi Quartic Curves 6/13/2011 Status: Final Download: Conference Proceedings (DOI)	Final	6/13/2011
NISTIR	7751	Computer Security Division 2010 Annual Report NISTIR 7751 Computer Security Division 2010 Annual Report 5/31/2011 Status: Final Download: NISTIR 7751 (DOI); Local Download	Final	5/31/2011
ITL Bulletin		Using Security Configuration Checklists and the National Checklist Program ITL Bulletin Using Security Configuration Checklists and the National Checklist Program 5/25/2011 Status: Final Download: May 2011 ITL Bulletin	Final	5/25/2011
Journal Article		Encryption Basics Journal Article Encryption Basics 5/02/2011 Status: Final Download: None available	Final	5/02/2011
SP	800-147	BIOS Protection Guidelines SP 800-147 BIOS Protection Guidelines 4/29/2011 Status: Final Download: SP 800-147 (DOI); Local Download; Press Release	Final	4/29/2011
ITL Bulletin		Full Virtualization Technologies: Guidelines for Secure Implementation and Management ITL Bulletin Full Virtualization Technologies: Guidelines for Secure Implementation and Management 4/25/2011 Status: Final Download: April 2011 ITL Bulletin	Final	4/25/2011
Journal Article		A Survey of Binary Covering Arrays Journal Article A Survey of Binary Covering Arrays 4/07/2011 Status: Final Download: None available	Final	4/07/2011
NISTIR	7692	Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 NISTIR 7692 Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 4/07/2011 Status: Final Download: NISTIR 7692 (DOI); Local Download	Final	4/07/2011
Journal Article		Research Directions in Security Metrics Journal Article Research Directions in Security Metrics 4/04/2011 Status: Final Download: None available	Final	4/04/2011
Journal Article		The Policy Machine: a Novel Architecture and Framework for Access Control Policy Specification and Enforcement Journal Article The Policy Machine: a Novel Architecture and Framework for Access Control Policy Specification and Enforcement 4/01/2011 Status: Final Download: Journal Article (DOI)	Final	4/01/2011
White Paper		Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice White Paper Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice 4/01/2011 Status: Final Download: Report	Final	4/01/2011
ITL Bulletin		Managing Information Security Risk: Organization, Mission and Information System View ITL Bulletin Managing Information Security Risk: Organization, Mission and Information System View 3/22/2011 Status: Final Download: March 2011 ITL Bulletin	Final	3/22/2011
Journal Article		Thoughts on Higher Education and Scientific Research Journal Article Thoughts on Higher Education and Scientific Research 3/22/2011 Status: Final Download: Journal Article (DOI)	Final	3/22/2011
SP	800-39	Managing Information Security Risk: Organization, Mission, and Information System View SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View 3/01/2011 Status: Final Download: SP 800-39 (DOI); Local Download; Press Release	Final	3/01/2011
NISTIR	7771	Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 NISTIR 7771 Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 2/28/2011 Status: Final Download: NISTIR 7771 (DOI); Local Download	Final	2/28/2011
Journal Article		Model Checking for Verification of Mandatory Access Control Models and Properties Journal Article Model Checking for Verification of Mandatory Access Control Models and Properties 2/28/2011 Status: Final Download: Journal Article (DOI)	Final	2/28/2011
SP	800-51 Rev. 1	Guide to Using Vulnerability Naming Schemes SP 800-51 Rev. 1 Guide to Using Vulnerability Naming Schemes 2/25/2011 Status: Final Download: SP 800-51 Rev. 1 (DOI); Local Download; Press Release	Final	2/25/2011
SP	800-126 Rev. 1	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 SP 800-126 Rev. 1 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 2/25/2011 Status: Final Download: SP 800-126 Rev. 1 (DOI); Local Download	Final	2/25/2011
NISTIR	7764	Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition NISTIR 7764 Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition 2/23/2011 Status: Final Download: NISTIR 7764 (DOI); Local Download	Final	2/23/2011
NISTIR	7770	Security Considerations for Remote Electronic UOCAVA Voting NISTIR 7770 Security Considerations for Remote Electronic UOCAVA Voting 2/21/2011 Status: Final Download: NISTIR 7770 (DOI); Local Download	Final	2/21/2011
Journal Article		Who is Who? Biometrics provides answers for public and private sectors Journal Article Who is Who? Biometrics provides answers for public and private sectors 2/10/2011 Status: Final Download: None available	Final	2/10/2011
Journal Article		Arithmetic Progressions on Edwards Curves Journal Article Arithmetic Progressions on Edwards Curves 2/08/2011 Status: Final Download: Article	Final	2/08/2011
Journal Article		Managing Security Using the Security Content Automation Protocol Journal Article Managing Security Using the Security Content Automation Protocol 2/04/2011 Status: Final Download: Journal Article (DOI)	Final	2/04/2011
ITL Bulletin		Internet Protocol Version 6 (IPv6): NIST Guidelines Help Organizations Manage the Secure Deployment of the New Network Protocol ITL Bulletin Internet Protocol Version 6 (IPv6): NIST Guidelines Help Organizations Manage the Secure Deployment of the New Network Protocol 1/31/2011 Status: Final Download: January 2011 ITL Bulletin	Final	1/31/2011
SP	800-125	Guide to Security for Full Virtualization Technologies SP 800-125 Guide to Security for Full Virtualization Technologies 1/28/2011 Status: Final Download: SP 800-125 (DOI); Local Download; Press Release	Final	1/28/2011
Conference Proceedings		Cloud Hooks: Security and Privacy Issues in Cloud Computing Conference Proceedings Cloud Hooks: Security and Privacy Issues in Cloud Computing 1/04/2011 Status: Final Download: Conference Proceedings (DOI)	Final	1/04/2011
Encyclopedia Entry		Biometric Technologies and Security - International Biometric Standards Development Activities Encyclopedia Entry Biometric Technologies and Security - International Biometric Standards Development Activities 1/01/2011 Status: Final Download: Encyclopedia Entry (DOI)	Final	1/01/2011
Journal Article		Advanced Combinatorial Test Methods for System Reliability Journal Article Advanced Combinatorial Test Methods for System Reliability 12/31/2010 Status: Final Download: Article	Final	12/31/2010
SP	800-119	Guidelines for the Secure Deployment of IPv6 SP 800-119 Guidelines for the Secure Deployment of IPv6 12/29/2010 Status: Final Download: SP 800-119 (DOI); Local Download	Final	12/29/2010
ITL Bulletin		Securing WiMAX Wireless Communications ITL Bulletin Securing WiMAX Wireless Communications 12/27/2010 Status: Final Download: December 2010 ITL Bulletin	Final	12/27/2010
NISTIR	7502	The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities NISTIR 7502 The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities 12/27/2010 Status: Final Download: NISTIR 7502 (DOI); Local Download	Final	12/27/2010
SP	800-132	Recommendation for Password-Based Key Derivation: Part 1: Storage Applications SP 800-132 Recommendation for Password-Based Key Derivation: Part 1: Storage Applications 12/22/2010 Status: Final Download: SP 800-132 (DOI); Local Download	Final	12/22/2010
White Paper		Economic Analysis of Role-Based Access Control: Final Report White Paper Economic Analysis of Role-Based Access Control: Final Report 12/19/2010 Status: Final Download: Final Report	Final	12/19/2010
Journal Article		Mobile Applications: the Fifth Cycle Journal Article Mobile Applications: the Fifth Cycle 12/13/2010 Status: Final Download: Journal Article (DOI)	Final	12/13/2010
Journal Article		Free and Open Source Software Journal Article Free and Open Source Software 12/13/2010 Status: Final Download: Journal Article (DOI)	Final	12/13/2010
Conference Proceedings		Speeding Up the Wide-Pipe: Secure and Fast Hashing Conference Proceedings Speeding Up the Wide-Pipe: Secure and Fast Hashing 12/12/2010 Status: Final Download: Conference Proceedings (DOI)	Final	12/12/2010
Conference Proceedings		k-Zero Day Safety: Measuring the Security Risk of Networks Against Unknown Attacks Conference Proceedings k-Zero Day Safety: Measuring the Security Risk of Networks Against Unknown Attacks 12/10/2010 Status: Final Download: Conference Proceedings (DOI)	Final	12/10/2010
Conference Proceedings		Cryptanalysis of the ESSENCE Family of Hash Functions Conference Proceedings Cryptanalysis of the ESSENCE Family of Hash Functions 11/30/2010 Status: Final Download: Conference Proceedings (DOI)	Final	11/30/2010
ITL Bulletin		The Exchange of Health Information: Designing a Security Architecture to Provide Information Security and Privacy ITL Bulletin The Exchange of Health Information: Designing a Security Architecture to Provide Information Security and Privacy 11/23/2010 Status: Final Download: November 2010 ITL Bulletin	Final	11/23/2010
SP	800-34 Rev. 1	Contingency Planning Guide for Federal Information Systems SP 800-34 Rev. 1 Contingency Planning Guide for Federal Information Systems 11/11/2010 Status: Final Download: SP 800-34 Rev. 1 (DOI); Local Download; Business Impact Analysis (BIA) Template; Contingency Planning: Low Impact System Template; Contingency Planning: Moderate Impact System Template; Contingency Planning: High Impact System Template	Final	11/11/2010
NISTIR	7773	An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events NISTIR 7773 An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events 11/01/2010 Status: Final Download: NISTIR 7773 (DOI); Local Download	Final	11/01/2010
Book Section		Intrusion Detection and Prevention Systems Book Section Intrusion Detection and Prevention Systems 10/22/2010 Status: Final Download: Book Section (DOI); Chapter 9 (preprint)	Final	10/22/2010
SP	800-38A Addendum	Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode SP 800-38A Addendum Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode 10/21/2010 Status: Final Download: SP 800-38A Addendum (DOI); Local Download	Final	10/21/2010
Journal Article		A New Analysis of the False Positive Rate of a Bloom Filter Journal Article A New Analysis of the False Positive Rate of a Bloom Filter 10/15/2010 Status: Final Download: Journal Article (DOI)	Final	10/15/2010
Journal Article		In Trust We Trust Journal Article In Trust We Trust 10/14/2010 Status: Final Download: Journal Article (DOI)	Final	10/14/2010
Journal Article		Reliability of Embedded and Cyber-Physical Systems Journal Article Reliability of Embedded and Cyber-Physical Systems 10/14/2010 Status: Final Download: Journal Article (DOI)	Final	10/14/2010
Conference Proceedings		An Inconvenient Truth About Tunneled Authentications Conference Proceedings An Inconvenient Truth About Tunneled Authentications 10/10/2010 Status: Final Download: Conference Proceedings (DOI)	Final	10/10/2010
SP	800-142	Practical Combinatorial Testing SP 800-142 Practical Combinatorial Testing 10/07/2010 Status: Final Download: SP 800-142 (DOI); Local Download	Final	10/07/2010
NISTIR	7497	Security Architecture Design Process for Health Information Exchanges (HIEs) NISTIR 7497 Security Architecture Design Process for Health Information Exchanges (HIEs) 9/30/2010 Status: Final Download: NISTIR 7497 (DOI); Local Download	Final	9/30/2010
Journal Article		Ethics and the Cloud Journal Article Ethics and the Cloud 9/30/2010 Status: Final Download: Journal Article (DOI)	Final	9/30/2010
ITL Bulletin		Security Content Automation Protocol (SCAP): Helping Organizations Maintain and Verify the Security of Their Information Systems ITL Bulletin Security Content Automation Protocol (SCAP): Helping Organizations Maintain and Verify the Security of Their Information Systems 9/27/2010 Status: Final Download: September 2010 ITL Bulletin	Final	9/27/2010
Journal Article		Introduction: Cybersecurity Journal Article Introduction: Cybersecurity 8/31/2010 Status: Final Download: Journal Article (DOI)	Final	8/31/2010
NISTIR	7601	Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure NISTIR 7601 Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure 8/31/2010 Status: Final Download: NISTIR 7601 (DOI); Local Download	Final	8/31/2010
Conference Paper		Practical Near-Collisions for Reduced Round Blake, Fugue, Hamsi and JH Conference Paper Practical Near-Collisions for Reduced Round Blake, Fugue, Hamsi and JH 8/23/2010 Status: Final Download: None available	Final	8/23/2010
Conference Proceedings		Specification of Attribute Relations for Access Control Policies and Constraints Using Policy Machine Conference Proceedings Specification of Attribute Relations for Access Control Policies and Constraints Using Policy Machine 8/23/2010 Status: Final Download: Conference Proceedings (DOI)	Final	8/23/2010
Conference Proceedings		Performance Requirements for End-to-End Verifiable Elections Conference Proceedings Performance Requirements for End-to-End Verifiable Elections 8/09/2010 Status: Final Download: None available	Final	8/09/2010
Conference Proceedings		Message Recovery and Pseudo-Preimage Attacks on the Compression Function of Hamsi-256 Conference Proceedings Message Recovery and Pseudo-Preimage Attacks on the Compression Function of Hamsi-256 8/08/2010 Status: Final Download: Conference Proceedings (DOI)	Final	8/08/2010
Journal Article		On Feedback Functions of Maximum Length Nonlinear Feedback Shift Registers Journal Article On Feedback Functions of Maximum Length Nonlinear Feedback Shift Registers 8/02/2010 Status: Final Download: None available	Final	8/02/2010
Conference Proceedings		Sigma Ballots Conference Proceedings Sigma Ballots 7/21/2010 Status: Final Download: None available	Final	7/21/2010
ITL Bulletin		Contingency Planning for Information Systems: Updated Guide for Federal Organizations ITL Bulletin Contingency Planning for Information Systems: Updated Guide for Federal Organizations 7/20/2010 Status: Final Download: July 2010 ITL Bulletin	Final	7/20/2010
Journal Article		Vulnerability Trends: Measuring Progress Journal Article Vulnerability Trends: Measuring Progress 7/19/2010 Status: Final Download: Journal Article (DOI)	Final	7/19/2010
Journal Article		Measuring Security Risk of Networks Using Attack Graphs Journal Article Measuring Security Risk of Networks Using Attack Graphs 7/14/2010 Status: Final Download: None available	Final	7/14/2010
NISTIR	7559	Forensics Web Services (FWS) NISTIR 7559 Forensics Web Services (FWS) 6/30/2010 Status: Final Download: NISTIR 7559 (DOI); Local Download	Final	6/30/2010
ITL Bulletin		How to Identify Personnel with Significant Responsibilities for Information Security ITL Bulletin How to Identify Personnel with Significant Responsibilities for Information Security 6/22/2010 Status: Final Download: June 2010 ITL Bulletin	Final	6/22/2010
Conference Proceedings		Authentication Assurance Level Taxonomies for Smart Identity Token Deployments – A New Approach Conference Proceedings Authentication Assurance Level Taxonomies for Smart Identity Token Deployments – A New Approach 6/21/2010 Status: Final Download: Conference Proceedings (DOI)	Final	6/21/2010
NISTIR	7676	Maintaining and Using Key History on Personal Identity Verification (PIV) Cards NISTIR 7676 Maintaining and Using Key History on Personal Identity Verification (PIV) Cards 6/18/2010 Status: Final Download: NISTIR 7676 (DOI); Local Download	Final	6/18/2010
Journal Article		State of Security Readiness Journal Article State of Security Readiness 6/10/2010 Status: Final Download: Journal Article (DOI)	Final	6/10/2010
Journal Article		Adding Attributes to Role-Based Access Control Journal Article Adding Attributes to Role-Based Access Control 6/01/2010 Status: Final Download: Journal Article (DOI); Preprint	Final	6/01/2010
Conference Proceedings		A New Combinational Logic Minimization Technique with Applications to Cryptology Conference Proceedings A New Combinational Logic Minimization Technique with Applications to Cryptology 5/20/2010 Status: Final Download: Conference Proceedings (DOI)	Final	5/20/2010
SP	800-22 Rev. 1a	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1a A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 4/30/2010 Status: Final Download: SP 800-22 Rev. 1a (DOI); Local Download	Final	4/30/2010
ITL Bulletin		Guide to Protecting Personally Identifiable Information ITL Bulletin Guide to Protecting Personally Identifiable Information 4/28/2010 Status: Final Download: April 2010 ITL Bulletin	Final	4/28/2010
Conference Proceedings		Privacy-Preserving DRM Conference Proceedings Privacy-Preserving DRM 4/13/2010 Status: Final Download: Conference Proceedings (DOI)	Final	4/13/2010
SP	800-122	Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) SP 800-122 Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) 4/06/2010 Status: Final Download: SP 800-122 (DOI); Local Download; SP 800-122 (EPUB)	Final	4/06/2010
Journal Article		E-mail Security: an Overview of Threats and Safeguards Journal Article E-mail Security: an Overview of Threats and Safeguards 4/01/2010 Status: Final Download: None available	Final	4/01/2010
Journal Article		On hash functions using checksums Journal Article On hash functions using checksums 4/01/2010 Status: Final Download: Journal Article (DOI)	Final	4/01/2010
NISTIR	7657	A Report on the Privilege (Access) Management Workshop NISTIR 7657 A Report on the Privilege (Access) Management Workshop 3/30/2010 Status: Final Download: NISTIR 7657 (DOI); Local Download	Final	3/30/2010
Journal Article		Data Loss Prevention Journal Article Data Loss Prevention 3/29/2010 Status: Final Download: Journal Article (DOI)	Final	3/29/2010
ITL Bulletin		Revised Guide Helps Federal Organizations Improve Their Risk Management Practices and Information System Security ITL Bulletin Revised Guide Helps Federal Organizations Improve Their Risk Management Practices and Information System Security 3/29/2010 Status: Final Download: March 2010 ITL Bulletin	Final	3/29/2010
NISTIR	7653	Computer Security Division 2009 Annual Report NISTIR 7653 Computer Security Division 2009 Annual Report 3/23/2010 Status: Final Download: NISTIR 7653 (DOI); Local Download	Final	3/23/2010
ITL Bulletin		Secure Management of Keys in Cryptographic Applications: Guidance for Organizations ITL Bulletin Secure Management of Keys in Cryptographic Applications: Guidance for Organizations 2/24/2010 Status: Final Download: February 2010 ITL Bulletin	Final	2/24/2010
NISTIR	7658	Guide to SIMfill Use and Development NISTIR 7658 Guide to SIMfill Use and Development 2/24/2010 Status: Final Download: NISTIR 7658 (DOI); Local Download	Final	2/24/2010
Book Section		Attacking Paper-Based E2E Voting Systems Book Section Attacking Paper-Based E2E Voting Systems 2/01/2010 Status: Final Download: Book Section (DOI); Chapter (preprint)	Final	2/01/2010
ITL Bulletin		Security Metrics: Measurements to Support the Continued Development of Information Security Technology ITL Bulletin Security Metrics: Measurements to Support the Continued Development of Information Security Technology 1/27/2010 Status: Final Download: January 2010 ITL Bulletin	Final	1/27/2010
SP	800-38E	Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices SP 800-38E Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices 1/18/2010 Status: Final Download: SP 800-38E (DOI); Local Download	Final	1/18/2010
NISTIR	7609	Cryptographic Key Management Workshop Summary -- June 8-9, 2009 NISTIR 7609 Cryptographic Key Management Workshop Summary -- June 8-9, 2009 1/08/2010 Status: Final Download: NISTIR 7609 (DOI); Local Download	Final	1/08/2010
NISTIR	7665	Proceedings of the Privilege Management Workshop, September 1-3, 2009 NISTIR 7665 Proceedings of the Privilege Management Workshop, September 1-3, 2009 1/01/2010 Status: Final Download: NISTIR 7665 (DOI); Local Download	Final	1/01/2010
Conference Proceedings		Indifferentiability Characterization of Hash Functions and Optimal Bounds of Popular Domain Extensions Conference Proceedings Indifferentiability Characterization of Hash Functions and Optimal Bounds of Popular Domain Extensions 12/04/2009 Status: Final Download: Conference Proceedings (DOI)	Final	12/04/2009
Journal Article		Practical Interdomain Routing Security Journal Article Practical Interdomain Routing Security 11/20/2009 Status: Final Download: Journal Article (DOI)	Final	11/20/2009
ITL Bulletin		Cybersecurity Fundamentals for Small Business Owners ITL Bulletin Cybersecurity Fundamentals for Small Business Owners 11/19/2009 Status: Final Download: November 2009 ITL Bulletin	Final	11/19/2009
Conference Proceedings		Herding, Second Preimage, and Trojan Message Attacks Beyond Merkle-Damgard Conference Proceedings Herding, Second Preimage, and Trojan Message Attacks Beyond Merkle-Damgard 11/03/2009 Status: Final Download: Conference Proceedings (DOI)	Final	11/03/2009
ITL Bulletin		Protecting Information Systems with Firewalls: Revised Guidelines on Firewall Technologies and Policies ITL Bulletin Protecting Information Systems with Firewalls: Revised Guidelines on Firewall Technologies and Policies 10/29/2009 Status: Final Download: October 2009 ITL Bulletin	Final	10/29/2009
Conference Proceedings		Random vs. Combinatorial Methods for Discrete Event Simulation of a Grid Computer Network Conference Proceedings Random vs. Combinatorial Methods for Discrete Event Simulation of a Grid Computer Network 10/16/2009 Status: Final Download: Preprint	Final	10/16/2009
Conference Proceedings		An Analysis of CVSS Version 2 Vulnerability Scoring Conference Proceedings An Analysis of CVSS Version 2 Vulnerability Scoring 10/14/2009 Status: Final Download: Conference Proceedings (DOI)	Final	10/14/2009
NISTIR	7617	Mobile Forensic Reference Materials: a Methodology and Reification NISTIR 7617 Mobile Forensic Reference Materials: a Methodology and Reification 10/14/2009 Status: Final Download: NISTIR 7617 (DOI); Local Download	Final	10/14/2009
Journal Article		Open Issues in Secure DNS Deployment Journal Article Open Issues in Secure DNS Deployment 10/06/2009 Status: Final Download: Journal Article (DOI)	Final	10/06/2009
SP	800-108	Recommendation for Key Derivation Using Pseudorandom Functions (Revised) SP 800-108 Recommendation for Key Derivation Using Pseudorandom Functions (Revised) 10/01/2009 Status: Final Download: SP 800-108 (DOI); Local Download	Final	10/01/2009
NISTIR	7581	System and Network Security Acronyms and Abbreviations NISTIR 7581 System and Network Security Acronyms and Abbreviations 9/30/2009 Status: Final Download: NISTIR 7581 (DOI); Local Download	Final	9/30/2009
SP	800-41 Rev. 1	Guidelines on Firewalls and Firewall Policy SP 800-41 Rev. 1 Guidelines on Firewalls and Firewall Policy 9/28/2009 Status: Final Download: SP 800-41 Rev. 1 (DOI); Local Download	Final	9/28/2009
Conference Paper		Desirable Properties of Voting Systems Conference Paper Desirable Properties of Voting Systems 9/25/2009 Status: Final Download: None available	Final	9/25/2009
NISTIR	7620	Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition NISTIR 7620 Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition 9/23/2009 Status: Final Download: NISTIR 7620 (DOI); Local Download	Final	9/23/2009
SP	800-102	Recommendation for Digital Signature Timeliness SP 800-102 Recommendation for Digital Signature Timeliness 9/23/2009 Status: Final Download: SP 800-102 (DOI); Local Download	Final	9/23/2009
NISTIR	7611	Use of ISO/IEC 24727 NISTIR 7611 Use of ISO/IEC 24727 8/14/2009 Status: Final Download: NISTIR 7611 (DOI); Local Download	Final	8/14/2009
Book Section		Security and Privacy Issues in Agent-Based Location-Aware Mobile Commerce Book Section Security and Privacy Issues in Agent-Based Location-Aware Mobile Commerce 8/12/2009 Status: Final Download: Book Section (DOI)	Final	8/12/2009
Journal Article		Combinatorial Software Testing Journal Article Combinatorial Software Testing 8/07/2009 Status: Final Download: Journal Article (DOI)	Final	8/07/2009
ITL Bulletin		Risk Management Framework: Helping Organizations Implement Effective Information Security Programs ITL Bulletin Risk Management Framework: Helping Organizations Implement Effective Information Security Programs 7/23/2009 Status: Final Download: July 2009 ITL Bulletin	Final	7/23/2009
Conference Proceedings		Fast and Secure CBC-Type MAC Algorithms Conference Proceedings Fast and Secure CBC-Type MAC Algorithms 7/21/2009 Status: Final Download: Conference Proceedings (DOI)	Final	7/21/2009
Conference Proceedings		Access Specification and Validation Framework for Secure Smart ID Cards Deployment Conference Proceedings Access Specification and Validation Framework for Secure Smart ID Cards Deployment 7/10/2009 Status: Final Download: None available	Final	7/10/2009
Conference Proceedings		Characterizing Padding Rules of MD Hash Functions Preserving Collision Security Conference Proceedings Characterizing Padding Rules of MD Hash Functions Preserving Collision Security 6/29/2009 Status: Final Download: Conference Proceedings (DOI)	Final	6/29/2009
Book Section		Cyber Security Standards Book Section Cyber Security Standards 6/15/2009 Status: Final Download: Handbook (Wiley); Cyber Security Standards (Preprint)	Final	6/15/2009
Journal Article		Understanding Insecure IT: Practical Risk Assessment Journal Article Understanding Insecure IT: Practical Risk Assessment 5/27/2009 Status: Final Download: Journal Article (DOI)	Final	5/27/2009
NISTIR	7564	Directions in Security Metrics Research NISTIR 7564 Directions in Security Metrics Research 4/30/2009 Status: Final Download: NISTIR 7564 (DOI); Local Download	Final	4/30/2009
Conference Proceedings		Quantum Resistant Public Key Cryptography: A Survey Conference Proceedings Quantum Resistant Public Key Cryptography: A Survey 4/14/2009 Status: Final Download: Conference Proceedings (DOI)	Final	4/14/2009
Conference Proceedings		A Location-Based Mechanism for Mobile Device Security Conference Proceedings A Location-Based Mechanism for Mobile Device Security 3/31/2009 Status: Final Download: Conference Proceedings (DOI)	Final	3/31/2009
Conference Proceedings		Making the Case for EAP Channel Bindings Conference Proceedings Making the Case for EAP Channel Bindings 3/30/2009 Status: Final Download: Conference Proceedings (DOI)	Final	3/30/2009
ITL Bulletin		The Cryptographic Hash Algorithm Family: Revision of the Secure Hash Standard and Ongoing Competition for New Hash Algorithms ITL Bulletin The Cryptographic Hash Algorithm Family: Revision of the Secure Hash Standard and Ongoing Competition for New Hash Algorithms 3/25/2009 Status: Final Download: March 2009 ITL Bulletin	Final	3/25/2009
Journal Article		Surviving Insecure IT: Effective Patch Management Journal Article Surviving Insecure IT: Effective Patch Management 3/21/2009 Status: Final Download: Journal Article (DOI)	Final	3/21/2009
NISTIR	7536	Computer Security Division 2008 Annual Report NISTIR 7536 Computer Security Division 2008 Annual Report 3/16/2009 Status: Final Download: NISTIR 7536 (DOI); Local Download	Final	3/16/2009
ITL Bulletin		Using Personal Identity Verification (Piv) Credentials in Physical Access Control Systems (PACS) ITL Bulletin Using Personal Identity Verification (Piv) Credentials in Physical Access Control Systems (PACS) 2/26/2009 Status: Final Download: February 2009 ITL Bulletin	Final	2/26/2009
SP	800-106	Randomized Hashing for Digital Signatures SP 800-106 Randomized Hashing for Digital Signatures 2/25/2009 Status: Final Download: SP 800-106 (DOI); Local Download	Final	2/25/2009
Encyclopedia Entry		Common Biometric Exchange Formats Framework Standardization Encyclopedia Entry Common Biometric Exchange Formats Framework Standardization 2/13/2009 Status: Final Download: Encyclopedia Entry (DOI)	Final	2/13/2009
Journal Article		Introducing "Insecure IT" Journal Article Introducing "Insecure IT" 1/20/2009 Status: Final Download: Journal Article (DOI)	Final	1/20/2009
NISTIR	7539	Symmetric Key Injection onto Smart Cards NISTIR 7539 Symmetric Key Injection onto Smart Cards 12/22/2008 Status: Final Download: NISTIR 7539 (DOI); Local Download	Final	12/22/2008
Conference Proceedings		Property Verification for Generic Access Control Models Conference Proceedings Property Verification for Generic Access Control Models 12/20/2008 Status: Final Download: Conference Proceedings (DOI)	Final	12/20/2008
Book Section		Assurance for Identity Enabled Authorization Policies Book Section Assurance for Identity Enabled Authorization Policies 12/19/2008 Status: Final Download: Chapter 13 (Preprint)	Final	12/19/2008
NISTIR	7551	A Threat Analysis on UOCAVA Voting Systems NISTIR 7551 A Threat Analysis on UOCAVA Voting Systems 12/19/2008 Status: Final Download: NISTIR 7551 (DOI); Local Download	Final	12/19/2008
Book Section		Identity Enabled Privacy Policies Book Section Identity Enabled Privacy Policies 12/19/2008 Status: Final Download: Chapter 8 (Preprint)	Final	12/19/2008
ITL Bulletin		Guide to Information Security Testing and Assessment ITL Bulletin Guide to Information Security Testing and Assessment 12/18/2008 Status: Final Download: December 2008 ITL Bulletin	Final	12/18/2008
Conference Proceedings		Two New Efficient CCA-Secure Online Ciphers : MHCBC and MCBC Conference Proceedings Two New Efficient CCA-Secure Online Ciphers : MHCBC and MCBC 12/17/2008 Status: Final Download: Conference Proceedings (DOI)	Final	12/17/2008
Conference Proceedings		Security Challenges in Seamless Mobility: How to ``Handover'' the Keys? Conference Proceedings Security Challenges in Seamless Mobility: How to ``Handover'' the Keys? 11/30/2008 Status: Final Download: Conference Proceedings (DOI)	Final	11/30/2008
Conference Proceedings		Access Control Policy Composition for Resource Federation Networks Using Semantic Web and Resource Description Framework (RDF) Conference Proceedings Access Control Policy Composition for Resource Federation Networks Using Semantic Web and Resource Description Framework (RDF) 11/13/2008 Status: Final Download: None available	Final	11/13/2008
Conference Proceedings		Vulnerability Scoring for Security Configuration Settings Conference Proceedings Vulnerability Scoring for Security Configuration Settings 10/29/2008 Status: Final Download: Conference Proceedings (DOI)	Final	10/29/2008
SP	800-66 Rev. 1	An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule SP 800-66 Rev. 1 An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 10/23/2008 Status: Final Download: SP 800-66 Rev. 1 (DOI); Local Download	Final	10/23/2008
ITL Bulletin		Keeping Information Technology (IT) System Servers Secure: A General Guide to Good Practices ITL Bulletin Keeping Information Technology (IT) System Servers Secure: A General Guide to Good Practices 10/15/2008 Status: Final Download: October 2008 ITL Bulletin	Final	10/15/2008
Encyclopedia Entry		Electronic Voting Encyclopedia Entry Electronic Voting 10/07/2008 Status: Final Download: Encyclopedia Entry	Final	10/07/2008
SP	800-115	Technical Guide to Information Security Testing and Assessment SP 800-115 Technical Guide to Information Security Testing and Assessment 9/30/2008 Status: Final Download: SP 800-115 (DOI); Local Download; SP 800-115 (EPUB)	Final	9/30/2008
ITL Bulletin		Using Performance Measurements to Evaluate and Strengthen Information System Security ITL Bulletin Using Performance Measurements to Evaluate and Strengthen Information System Security 9/18/2008 Status: Final Download: September 2008 ITL Bulletin	Final	9/18/2008
Journal Article		Refining the In-Parameter-Order Strategy for Constructing Covering Arrays Journal Article Refining the In-Parameter-Order Strategy for Constructing Covering Arrays 9/01/2008 Status: Final Download: Journal Article (DOI)	Final	9/01/2008
Conference Proceedings		On the Shortest Linear Straight-Line Program for Computing Linear Forms Conference Proceedings On the Shortest Linear Straight-Line Program for Computing Linear Forms 8/29/2008 Status: Final Download: Conference Proceedings (DOI)	Final	8/29/2008
NISTIR	7516	Forensic Filtering of Cell Phone Protocols NISTIR 7516 Forensic Filtering of Cell Phone Protocols 8/27/2008 Status: Final Download: NISTIR 7516 (DOI); Local Download	Final	8/27/2008
Conference Paper		Evidence-Based, Good Enough, and Open Conference Paper Evidence-Based, Good Enough, and Open 8/04/2008 Status: Final Download: None available	Final	8/04/2008
SP	800-60 Vol. 2 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices SP 800-60 Vol. 2 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices 8/01/2008 Status: Final Download: SP 800-60 Vol. 2 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-60 Vol. 1 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 1 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories 8/01/2008 Status: Final Download: SP 800-60 Vol. 1 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-123	Guide to General Server Security SP 800-123 Guide to General Server Security 7/25/2008 Status: Final Download: SP 800-123 (DOI); Local Download; SP 800-123 (EPUB)	Final	7/25/2008
Conference Proceedings		Forensic Protocol Filtering of Phone Managers Conference Proceedings Forensic Protocol Filtering of Phone Managers 7/24/2008 Status: Final Download: None available	Final	7/24/2008
ITL Bulletin		Guidelines on Implementing A Secure Sockets Layer (SSL) Virtual Private Network (VPN) ITL Bulletin Guidelines on Implementing A Secure Sockets Layer (SSL) Virtual Private Network (VPN) 7/23/2008 Status: Final Download: July 2008 ITL Bulletin	Final	7/23/2008
Conference Proceedings		Web Services Security: Techniques and Challenges (Extended Abstract) Conference Proceedings Web Services Security: Techniques and Challenges (Extended Abstract) 7/21/2008 Status: Final Download: Conference Proceedings (DOI)	Final	7/21/2008
Conference Proceedings		An Attack Graph-Based Probabilistic Security Metric Conference Proceedings An Attack Graph-Based Probabilistic Security Metric 7/16/2008 Status: Final Download: Conference Proceedings (DOI)	Final	7/16/2008
SP	800-55 Rev. 1	Performance Measurement Guide for Information Security SP 800-55 Rev. 1 Performance Measurement Guide for Information Security 7/16/2008 Status: Final Download: SP 800-55 Rev. 1 (DOI); Local Download	Final	7/16/2008
FIPS	198-1	The Keyed-Hash Message Authentication Code (HMAC) FIPS 198-1 The Keyed-Hash Message Authentication Code (HMAC) 7/16/2008 Status: Final Download: FIPS 198-1 (DOI); Local Download	Final	7/16/2008
SP	800-113	Guide to SSL VPNs SP 800-113 Guide to SSL VPNs 7/01/2008 Status: Final Download: SP 800-113 (DOI); Local Download	Final	7/01/2008
Conference Proceedings		A Framework for Measuring the Vulnerability of Hosts Conference Proceedings A Framework for Measuring the Vulnerability of Hosts 6/30/2008 Status: Final Download: Conference Proceedings (DOI)	Final	6/30/2008
Conference Proceedings		A Meta Model for Access Control: Why is it needed and Is it even possible to achieve? Conference Proceedings A Meta Model for Access Control: Why is it needed and Is it even possible to achieve? 6/11/2008 Status: Final Download: Conference Proceedings (DOI); Extended Abstract	Final	6/11/2008
Conference Proceedings		Policy Specification and Enforcement for Smart ID Cards Deployment Conference Proceedings Policy Specification and Enforcement for Smart ID Cards Deployment 6/03/2008 Status: Final Download: Conference Proceedings (DOI)	Final	6/03/2008
Journal Article		Automated Combinatorial Test Methods Beyond Pairwise Testing Journal Article Automated Combinatorial Test Methods Beyond Pairwise Testing 6/02/2008 Status: Final Download: Article	Final	6/02/2008
Journal Article		Practical Combinatorial Testing: Beyond Pairwise Journal Article Practical Combinatorial Testing: Beyond Pairwise 6/01/2008 Status: Final Download: Journal Article (DOI)	Final	6/01/2008
Journal Article		Internet Protocol Version 6 (IPv6) Journal Article Internet Protocol Version 6 (IPv6) 5/30/2008 Status: Final Download: Journal Article (DOI)	Final	5/30/2008
ITL Bulletin		New Cryptographic Hash Algorithm Family: NIST Holds a Public Competition to Find New Algorithms ITL Bulletin New Cryptographic Hash Algorithm Family: NIST Holds a Public Competition to Find New Algorithms 5/28/2008 Status: Final Download: May 2008 ITL Bulletin	Final	5/28/2008
Journal Article		A New Hash Competition Journal Article A New Hash Competition 5/20/2008 Status: Final Download: Journal Article (DOI)	Final	5/20/2008
Journal Article		Tight Bounds for the Multiplicative Complexity of Symmetric Functions Journal Article Tight Bounds for the Multiplicative Complexity of Symmetric Functions 4/28/2008 Status: Final Download: Journal Article (DOI)	Final	4/28/2008
ITL Bulletin		Using Active Content and Mobile Code and Safeguarding the Security of Information Technology Systems ITL Bulletin Using Active Content and Mobile Code and Safeguarding the Security of Information Technology Systems 4/24/2008 Status: Final Download: April 2008 ITL Bulletin	Final	4/24/2008
Conference Proceedings		Infrastructure System Design Methodology for Smart ID Cards Deployment Conference Proceedings Infrastructure System Design Methodology for Smart ID Cards Deployment 4/19/2008 Status: Final Download: None available	Final	4/19/2008
Conference Proceedings		Second Preimage Attacks on Dithered Hash Functions Conference Proceedings Second Preimage Attacks on Dithered Hash Functions 4/17/2008 Status: Final Download: Conference Proceedings (DOI)	Final	4/17/2008
Conference Proceedings		Linear-XOR and Additive Checksums Don't Protect Damgard-Merkle Hashes from Generic Attacks Conference Proceedings Linear-XOR and Additive Checksums Don't Protect Damgard-Merkle Hashes from Generic Attacks 4/17/2008 Status: Final Download: Conference Proceedings (DOI)	Final	4/17/2008
Journal Article		Implementing Interactive Analysis of Attack Graphs Using Relational Databases Journal Article Implementing Interactive Analysis of Attack Graphs Using Relational Databases 4/02/2008 Status: Final Download: Journal Article (DOI)	Final	4/02/2008
NISTIR	7442	Computer Security Division 2007 Annual Report NISTIR 7442 Computer Security Division 2007 Annual Report 4/01/2008 Status: Final Download: NISTIR 7442 (DOI); Local Download	Final	4/01/2008
Journal Article		Two-Tier Bloom Filter to Achieve Faster Membership Testing Journal Article Two-Tier Bloom Filter to Achieve Faster Membership Testing 3/27/2008 Status: Final Download: Journal Article (DOI)	Final	3/27/2008
SP	800-28 Version 2	Guidelines on Active Content and Mobile Code SP 800-28 Version 2 Guidelines on Active Content and Mobile Code 3/07/2008 Status: Final Download: SP 800-28 Version 2 (DOI); Local Download	Final	3/07/2008
ITL Bulletin		Federal Desktop Core Configuration (FDCC): Improving Security for Windows Desktop Operating Systems ITL Bulletin Federal Desktop Core Configuration (FDCC): Improving Security for Windows Desktop Operating Systems 2/27/2008 Status: Final Download: February 2008 ITL Bulletin	Final	2/27/2008
ITL Bulletin		Secure Web Servers Protecting Web Sites that are Accessed by the Public ITL Bulletin Secure Web Servers Protecting Web Sites that are Accessed by the Public 1/31/2008 Status: Final Download: January 2008 ITL Bulletin	Final	1/31/2008
Conference Proceedings		Overcoming Impediments to Cell Phone Forensics Conference Proceedings Overcoming Impediments to Cell Phone Forensics 1/16/2008 Status: Final Download: Conference Proceedings (DOI)	Final	1/16/2008
NISTIR	7275 Rev. 3	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 NISTIR 7275 Rev. 3 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 1/01/2008 Status: Final Download: NISTIR 7275 Rev. 3 (DOI); Local Download	Final	1/01/2008
Journal Article		RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role Based Access Control" Journal Article RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role Based Access Control" 12/12/2007 Status: Final Download: Journal Article (DOI)	Final	12/12/2007
NISTIR	7452	Secure Biometric Match-on-Card Feasibility Report NISTIR 7452 Secure Biometric Match-on-Card Feasibility Report 11/30/2007 Status: Final Download: NISTIR 7452 (DOI); Local Download	Final	11/30/2007
Journal Article		IPOG/IPOD: Efficient Test Generation for Multi-Way Combinatorial Testing Journal Article IPOG/IPOD: Efficient Test Generation for Multi-Way Combinatorial Testing 11/29/2007 Status: Final Download: Journal Article (DOI)	Final	11/29/2007
SP	800-38D	Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC SP 800-38D Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC 11/28/2007 Status: Final Download: SP 800-38D (DOI); Local Download	Final	11/28/2007
ITL Bulletin		Using Storage Encryption Technologies to Protect End User Devices ITL Bulletin Using Storage Encryption Technologies to Protect End User Devices 11/26/2007 Status: Final Download: November 2007 ITL Bulletin	Final	11/26/2007
SP	800-111	Guide to Storage Encryption Technologies for End User Devices SP 800-111 Guide to Storage Encryption Technologies for End User Devices 11/15/2007 Status: Final Download: SP 800-111 (DOI); Local Download	Final	11/15/2007
ITL Bulletin		The Common Vulnerability Scoring System (CVSS) ITL Bulletin The Common Vulnerability Scoring System (CVSS) 10/25/2007 Status: Final Download: October 2007 ITL Bulletin	Final	10/25/2007
SP	800-44 Version 2	Guidelines on Securing Public Web Servers SP 800-44 Version 2 Guidelines on Securing Public Web Servers 10/09/2007 Status: Final Download: SP 800-44 Version 2 (DOI); Local Download	Final	10/09/2007
NISTIR	7427	6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings NISTIR 7427 6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings 9/13/2007 Status: Final Download: NISTIR 7427 (DOI); Local Download	Final	9/13/2007
NISTIR	7435	The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems NISTIR 7435 The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems 8/30/2007 Status: Final Download: NISTIR 7435 (DOI); Local Download	Final	8/30/2007
SP	800-95	Guide to Secure Web Services SP 800-95 Guide to Secure Web Services 8/29/2007 Status: Final Download: SP 800-95 (DOI); Local Download	Final	8/29/2007
ITL Bulletin		Secure Web Services ITL Bulletin Secure Web Services 8/23/2007 Status: Final Download: None available	Final	8/23/2007
SP	800-38C	Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality SP 800-38C Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality 7/20/2007 Status: Final Download: SP 800-38C (DOI); Local Download	Final	7/20/2007
ITL Bulletin		Forensic Techniques for Cell Phones ITL Bulletin Forensic Techniques for Cell Phones 6/27/2007 Status: Final Download: June 2007 ITL Bulletin	Final	6/27/2007
ITL Bulletin		Securing Radio Frequency Identification (RFID) Systems ITL Bulletin Securing Radio Frequency Identification (RFID) Systems 5/17/2007 Status: Final Download: May 2007 ITL Bulletin	Final	5/17/2007
NISTIR	7275 Rev. 2	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 NISTIR 7275 Rev. 2 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 4/30/2007 Status: Final Download: None available	Final	4/30/2007
SP	800-98	Guidelines for Securing Radio Frequency Identification (RFID) Systems SP 800-98 Guidelines for Securing Radio Frequency Identification (RFID) Systems 4/06/2007 Status: Final Download: SP 800-98 (DOI); Local Download	Final	4/06/2007
Conference Proceedings		IPOG: a General Strategy for T-way Software Testing Conference Proceedings IPOG: a General Strategy for T-way Software Testing 3/29/2007 Status: Final Download: Conference Proceedings (DOI)	Final	3/29/2007
ITL Bulletin		Improving The Security of Electronic Mail: Updated Guidelines Issued by NIST ITL Bulletin Improving The Security of Electronic Mail: Updated Guidelines Issued by NIST 3/28/2007 Status: Final Download: March 2007 ITL Bulletin	Final	3/28/2007
NISTIR	7399	Computer Security Division 2006 Annual Report NISTIR 7399 Computer Security Division 2006 Annual Report 3/21/2007 Status: Final Download: NISTIR 7399 (DOI); Local Download	Final	3/21/2007
NISTIR	7387	Cell Phone Forensic Tools: an Overview and Analysis Update NISTIR 7387 Cell Phone Forensic Tools: an Overview and Analysis Update 3/21/2007 Status: Final Download: NISTIR 7387 (DOI); Local Download	Final	3/21/2007
SP	800-100	Information Security Handbook: A Guide for Managers SP 800-100 Information Security Handbook: A Guide for Managers 3/07/2007 Status: Final Download: SP 800-100 (DOI); Local Download	Final	3/07/2007
ITL Bulletin		Intrusion Detection and Prevention Systems ITL Bulletin Intrusion Detection and Prevention Systems 2/26/2007 Status: Final Download: February 2007 ITL Bulletin	Final	2/26/2007
SP	800-45 Version 2	Guidelines on Electronic Mail Security SP 800-45 Version 2 Guidelines on Electronic Mail Security 2/20/2007 Status: Final Download: SP 800-45 Version 2 (DOI); Local Download	Final	2/20/2007
SP	800-94	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Guide to Intrusion Detection and Prevention Systems (IDPS) 2/20/2007 Status: Final Download: SP 800-94 (DOI); Local Download	Final	2/20/2007
SP	800-97	Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i SP 800-97 Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i 2/07/2007 Status: Final Download: SP 800-97 (DOI); Local Download	Final	2/07/2007
Book		Role-Based Access Control (2nd ed.) Book Role-Based Access Control (2nd ed.) 1/31/2007 Status: Final Download: Role-Based Access Control, 2nd ed.	Final	1/31/2007
NISTIR	7359	Information Security Guide for Government Executives NISTIR 7359 Information Security Guide for Government Executives 1/01/2007 Status: Final Download: NISTIR 7359 (DOI); Local Download; Booklet	Final	1/01/2007
NISTIR	7358	Program Review for Information Security Management Assistance (PRISMA) NISTIR 7358 Program Review for Information Security Management Assistance (PRISMA) 1/01/2007 Status: Final Download: NISTIR 7358 (DOI); Local Download	Final	1/01/2007
SP	800-96	PIV Card to Reader Interoperability Guidelines SP 800-96 PIV Card to Reader Interoperability Guidelines 12/29/2006 Status: Final Download: SP 800-96 (DOI); Local Download	Final	12/29/2006
ITL Bulletin		Maintaining Effective Information Technology (IT) Security Through Test, Training, and Exercise Programs ITL Bulletin Maintaining Effective Information Technology (IT) Security Through Test, Training, and Exercise Programs 12/19/2006 Status: Final Download: December 2006 ITL Bulletin	Final	12/19/2006
SP	800-89	Recommendation for Obtaining Assurances for Digital Signature Applications SP 800-89 Recommendation for Obtaining Assurances for Digital Signature Applications 11/30/2006 Status: Final Download: SP 800-89 (DOI); Local Download	Final	11/30/2006
ITL Bulletin		Guide to Securing Computers Using Windows XP Home Edition ITL Bulletin Guide to Securing Computers Using Windows XP Home Edition 11/22/2006 Status: Final Download: November 2006 ITL Bulletin	Final	11/22/2006
NISTIR	7275	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 NISTIR 7275 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 11/01/2006 Status: Final Download: NISTIR 7275 (DOI); Local Download	Final	11/01/2006
ITL Bulletin		Log Management: Using Computer and Network Records to Improve Information Security ITL Bulletin Log Management: Using Computer and Network Records to Improve Information Security 10/25/2006 Status: Final Download: October 2006 ITL Bulletin	Final	10/25/2006
NISTIR	7316	Assessment of Access Control Systems NISTIR 7316 Assessment of Access Control Systems 9/29/2006 Status: Final Download: NISTIR 7316 (DOI); Local Download	Final	9/29/2006
ITL Bulletin		Forensic Techniques: Helping Organizations Improve Their Responses to Information Security Incidents ITL Bulletin Forensic Techniques: Helping Organizations Improve Their Responses to Information Security Incidents 9/27/2006 Status: Final Download: September 2006 ITL Bulletin	Final	9/27/2006
SP	800-84	Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities SP 800-84 Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities 9/21/2006 Status: Final Download: SP 800-84 (DOI); Local Download; SP 800-84 (EPUB)	Final	9/21/2006
SP	800-92	Guide to Computer Security Log Management SP 800-92 Guide to Computer Security Log Management 9/13/2006 Status: Final Download: SP 800-92 (DOI); Local Download; SP 800-92 (EPUB)	Final	9/13/2006
SP	800-86	Guide to Integrating Forensic Techniques into Incident Response SP 800-86 Guide to Integrating Forensic Techniques into Incident Response 9/01/2006 Status: Final Download: SP 800-86 (DOI); Local Download	Final	9/01/2006
NISTIR	7337	Personal Identity Verification Demonstration Summary NISTIR 7337 Personal Identity Verification Demonstration Summary 8/31/2006 Status: Final Download: NISTIR 7337 (DOI); Local Download	Final	8/31/2006
ITL Bulletin		Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems ITL Bulletin Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems 8/30/2006 Status: Final Download: August 2006 ITL Bulletin	Final	8/30/2006
SP	800-85B	PIV Data Model Test Guidelines SP 800-85B PIV Data Model Test Guidelines 7/31/2006 Status: Final Download: SP 800-85B (DOI); Local Download	Final	7/31/2006
NISTIR	7313	5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings NISTIR 7313 5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings 7/18/2006 Status: Final Download: NISTIR 7313 (DOI); Local Download	Final	7/18/2006
Conference Proceedings		Pseudo-exhaustive Testing for Software Conference Proceedings Pseudo-exhaustive Testing for Software 4/28/2006 Status: Final Download: Conference Proceedings (DOI)	Final	4/28/2006
ITL Bulletin		Protecting Sensitive Information Transmitted in Public Networks ITL Bulletin Protecting Sensitive Information Transmitted in Public Networks 4/21/2006 Status: Final Download: April 2006 ITL Bulletin	Final	4/21/2006
ITL Bulletin		Minimum Security Requirements for Federal Information and Information Systems: Federal Information Processing Standard (FIPS) 200 Approved by the Secretary of Commerce ITL Bulletin Minimum Security Requirements for Federal Information and Information Systems: Federal Information Processing Standard (FIPS) 200 Approved by the Secretary of Commerce 3/24/2006 Status: Final Download: March 2006 ITL Bulletin	Final	3/24/2006
NISTIR	7308	An Algorithm for Generating Very Large Covering Arrays NISTIR 7308 An Algorithm for Generating Very Large Covering Arrays 3/20/2006 Status: Final Download: NISTIR 7308 (DOI); Local Download	Final	3/20/2006
FIPS	200	Minimum Security Requirements for Federal Information and Information Systems FIPS 200 Minimum Security Requirements for Federal Information and Information Systems 3/01/2006 Status: Final Download: FIPS 200 (DOI); Local Download	Final	3/01/2006
NISTIR	7290	Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation NISTIR 7290 Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation 3/01/2006 Status: Final Download: NISTIR 7290 (DOI); Local Download	Final	3/01/2006
SP	800-18 Rev. 1	Guide for Developing Security Plans for Federal Information Systems SP 800-18 Rev. 1 Guide for Developing Security Plans for Federal Information Systems 2/24/2006 Status: Final Download: SP 800-18 Rev. 1 (DOI); Local Download	Final	2/24/2006
ITL Bulletin		Creating a Program to Manage Security Patches and Vulnerabilities: NIST Recommendations for Improving System Security ITL Bulletin Creating a Program to Manage Security Patches and Vulnerabilities: NIST Recommendations for Improving System Security 2/15/2006 Status: Final Download: February 2006 ITL Bulletin	Final	2/15/2006
NISTIR	7285	Computer Security Division 2005 Annual Report NISTIR 7285 Computer Security Division 2005 Annual Report 2/01/2006 Status: Final Download: NISTIR 7285 (DOI); Local Download	Final	2/01/2006
ITL Bulletin		Testing and Validation of Personal Identity Verification (PIV) Components and Subsystems for Conformance to Federal Information Processing Standard 201 ITL Bulletin Testing and Validation of Personal Identity Verification (PIV) Components and Subsystems for Conformance to Federal Information Processing Standard 201 1/25/2006 Status: Final Download: January 2006 ITL Bulletin	Final	1/25/2006
NISTIR	7284	Personal Identity Verification Card Management Report NISTIR 7284 Personal Identity Verification Card Management Report 1/06/2006 Status: Final Download: NISTIR 7284 (DOI); Local Download	Final	1/06/2006
NISTIR	7250	Cell Phone Forensic Tools: an Overview and Analysis NISTIR 7250 Cell Phone Forensic Tools: an Overview and Analysis 10/19/2005 Status: Final Download: NISTIR 7250 (DOI); Local Download	Final	10/19/2005
NISTIR	7219	Computer Security Division 2004 Annual Report NISTIR 7219 Computer Security Division 2004 Annual Report 8/01/2005 Status: Final Download: NISTIR 7219 (DOI); Local Download	Final	8/01/2005
NISTIR	7224	4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings NISTIR 7224 4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings 8/01/2005 Status: Final Download: NISTIR 7224 (DOI); Local Download	Final	8/01/2005
ITL Bulletin		Implementation of FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors ITL Bulletin Implementation of FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors 8/01/2005 Status: Final Download: Aug 2005 ITL Bulletin	Final	8/01/2005
NISTIR	7206	Smart Cards and Mobile Device Authentication: an Overview and Implementation NISTIR 7206 Smart Cards and Mobile Device Authentication: an Overview and Implementation 7/01/2005 Status: Final Download: NISTIR 7206 (DOI); Local Download	Final	7/01/2005
Conference Proceedings		Composing and Combining Policies Under the Policy Machine Conference Proceedings Composing and Combining Policies Under the Policy Machine 6/01/2005 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	6/01/2005
NISTIR	7200	Proximity Beacons and Mobile Device Authentication: an Overview and Implementation NISTIR 7200 Proximity Beacons and Mobile Device Authentication: an Overview and Implementation 6/01/2005 Status: Final Download: NISTIR 7200 (DOI); Local Download	Final	6/01/2005
ITL Bulletin		Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule ITL Bulletin Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 4/01/2005 Status: Final Download: None available	Final	4/01/2005
ITL Bulletin		Integrating IT Security into the Capital Planning and Investment Control Process ITL Bulletin Integrating IT Security into the Capital Planning and Investment Control Process 1/27/2005 Status: Final Download: January 2005 ITL Bulletin	Final	1/27/2005
NISTIR	7188	Specification for the Extensible Configuration Checklist Description Format (XCCDF) NISTIR 7188 Specification for the Extensible Configuration Checklist Description Format (XCCDF) 1/01/2005 Status: Final Download: NISTIR 7188 (DOI); Local Download	Final	1/01/2005
SP	800-58	Security Considerations for Voice Over IP Systems SP 800-58 Security Considerations for Voice Over IP Systems 1/01/2005 Status: Final Download: SP 800-58 (DOI); Local Download	Final	1/01/2005
SP	800-72	Guidelines on PDA Forensics SP 800-72 Guidelines on PDA Forensics 11/01/2004 Status: Final Download: SP 800-72 (DOI); Local Download	Final	11/01/2004
ITL Bulletin		Securing Voice Over Internet Protocol (IP) Networks ITL Bulletin Securing Voice Over Internet Protocol (IP) Networks 10/01/2004 Status: Final Download: October 2004 ITL Bulletin	Final	10/01/2004
NISTIR	7122	3rd Annual PKI Research Workshop Proceedings NISTIR 7122 3rd Annual PKI Research Workshop Proceedings 9/08/2004 Status: Final Download: None available	Final	9/08/2004
ITL Bulletin		Information Security Within the System Development Life Cycle (SDLC) ITL Bulletin Information Security Within the System Development Life Cycle (SDLC) 9/01/2004 Status: Final Download: September 2004 ITL Bulletin	Final	9/01/2004
NISTIR	7100	PDA Forensic Tools: an Overview and Analysis NISTIR 7100 PDA Forensic Tools: an Overview and Analysis 8/01/2004 Status: Final Download: NISTIR 7100 (DOI); Local Download	Final	8/01/2004
Journal Article		Software Fault Interactions and Implications for Software Testing Journal Article Software Fault Interactions and Implications for Software Testing 6/16/2004 Status: Final Download: Journal Article (DOI)	Final	6/16/2004
ITL Bulletin		Information Technology Security Services: How to Select, Implement, and Manage ITL Bulletin Information Technology Security Services: How to Select, Implement, and Manage 6/01/2004 Status: Final Download: June 2004 ITL Bulletin	Final	6/01/2004
NISTIR	7111	Computer Security Division 2003 Annual Report NISTIR 7111 Computer Security Division 2003 Annual Report 4/30/2004 Status: Final Download: NISTIR 7111 (DOI); Local Download	Final	4/30/2004
ITL Bulletin		Selecting Information Technology Security Products ITL Bulletin Selecting Information Technology Security Products 4/28/2004 Status: Final Download: April 2004 ITL Bulletin	Final	4/28/2004
NISTIR	6529-A	Common Biometric Exchange Formats Framework (CBEFF) NISTIR 6529-A Common Biometric Exchange Formats Framework (CBEFF) 4/05/2004 Status: Final Download: NISTIR 6529-A (DOI); Local Download	Final	4/05/2004
NISTIR	7085	2nd Annual PKI Research Workshop Proceedings NISTIR 7085 2nd Annual PKI Research Workshop Proceedings 4/01/2004 Status: Final Download: NISTIR 7085 (DOI); Local Download	Final	4/01/2004
NISTIR	7056	Card Technology Developments and Gap Analysis Interagency Report NISTIR 7056 Card Technology Developments and Gap Analysis Interagency Report 3/01/2004 Status: Final Download: NISTIR 7056 (DOI); Local Download	Final	3/01/2004
ITL Bulletin		Federal Information Processing Standard (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems ITL Bulletin Federal Information Processing Standard (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems 3/01/2004 Status: Final Download: March 2004 ITL Bulletin	Final	3/01/2004
FIPS	199	Standards for Security Categorization of Federal Information and Information Systems FIPS 199 Standards for Security Categorization of Federal Information and Information Systems 2/01/2004 Status: Final Download: FIPS 199 (DOI); Local Download	Final	2/01/2004
NISTIR	7059	1st Annual PKI Research Workshop Proceedings NISTIR 7059 1st Annual PKI Research Workshop Proceedings 11/12/2003 Status: Final Download: NISTIR 7059	Final	11/12/2003
ITL Bulletin		Information Technology Security Awareness, Training, Education, and Certification ITL Bulletin Information Technology Security Awareness, Training, Education, and Certification 10/15/2003 Status: Final Download: October 2003 ITL Bulletin	Final	10/15/2003
SP	800-35	Guide to Information Technology Security Services SP 800-35 Guide to Information Technology Security Services 10/09/2003 Status: Final Download: SP 800-35 (DOI); Local Download	Final	10/09/2003
SP	800-50	Building an Information Technology Security Awareness and Training Program SP 800-50 Building an Information Technology Security Awareness and Training Program 10/01/2003 Status: Final Download: SP 800-50 (DOI); Local Download	Final	10/01/2003
SP	800-59	Guideline for Identifying an Information System as a National Security System SP 800-59 Guideline for Identifying an Information System as a National Security System 8/20/2003 Status: Final Download: SP 800-59 (DOI); Local Download	Final	8/20/2003
NISTIR	7046	A Framework for Multi-mode Authentication: Overview and Implementation Guide NISTIR 7046 A Framework for Multi-mode Authentication: Overview and Implementation Guide 8/01/2003 Status: Final Download: NISTIR 7046 (DOI); Local Download	Final	8/01/2003
Conference Proceedings		Specification and Validation of Enterprise Access Control Data for Conformance to Model and Policy Constraints Conference Proceedings Specification and Validation of Enterprise Access Control Data for Conformance to Model and Policy Constraints 7/30/2003 Status: Final Download: None available	Final	7/30/2003
NISTIR	6887 2003 Edition	Government Smart Card Interoperability Specification, Version 2.1 NISTIR 6887 2003 Edition Government Smart Card Interoperability Specification, Version 2.1 7/16/2003 Status: Final Download: NISTIR 6887 2003 Edition (DOI); Local Download	Final	7/16/2003
NISTIR	7007	An Overview of Issues in Testing Intrusion Detection Systems NISTIR 7007 An Overview of Issues in Testing Intrusion Detection Systems 7/11/2003 Status: Final Download: NISTIR 7007 (DOI); Local Download	Final	7/11/2003
ITL Bulletin		Testing Intrusion Detection Systems ITL Bulletin Testing Intrusion Detection Systems 7/01/2003 Status: Final Download: Jul 2003 ITL Bulletin	Final	7/01/2003
NISTIR	7030	Picture Password: A Visual Login Technique for Mobile Devices NISTIR 7030 Picture Password: A Visual Login Technique for Mobile Devices 7/01/2003 Status: Final Download: NISTIR 7030 (DOI); Local Download	Final	7/01/2003
Conference Proceedings		The Role Control Center: Features and Case Studies Conference Proceedings The Role Control Center: Features and Case Studies 6/04/2003 Status: Final Download: Conference Proceedings (DOI)	Final	6/04/2003
NISTIR	6977	Vulnerabilities in Quantum Key Distribution Protocols NISTIR 6977 Vulnerabilities in Quantum Key Distribution Protocols 5/01/2003 Status: Final Download: NISTIR 6977	Final	5/01/2003
NISTIR	6985	COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 NISTIR 6985 COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 4/01/2003 Status: Final Download: NISTIR 6985 (DOI); Local Download	Final	4/01/2003
NISTIR	6981	Policy Expression and Enforcement for Handheld Devices NISTIR 6981 Policy Expression and Enforcement for Handheld Devices 4/01/2003 Status: Final Download: NISTIR 6981 (DOI); Local Download	Final	4/01/2003
ITL Bulletin		Secure Interconnections for Information Technology Systems ITL Bulletin Secure Interconnections for Information Technology Systems 2/26/2003 Status: Final Download: February 2003 ITL Bulletin	Final	2/26/2003
Book		Role-Based Access Control (1st ed.) Book Role-Based Access Control (1st ed.) 1/01/2003 Status: Final Download: Book Review from "Linux Journal" (Oct. 24, 2003); Book Review from "Cipher" (June 5, 2003)	Final	1/01/2003
Conference Proceedings		An Investigation of the Applicability of Design of Experiments to Software Testing Conference Proceedings An Investigation of the Applicability of Design of Experiments to Software Testing 12/06/2002 Status: Final Download: Conference Proceedings (DOI)	Final	12/06/2002
FIPS	140-2	Security Requirements for Cryptographic Modules FIPS 140-2 Security Requirements for Cryptographic Modules 12/03/2002 Status: Final Download: FIPS 140-2 (DOI); Local Download; Annex A: Approved Security Functions; Annex B: Approved Protection Profiles; Annex C: Approved Random Number Generators; Annex D: Approved Key Establishment Techniques; FIPS 140-2 (EPUB); Comments on FIPS 140-1 (Oct. 1998)	Final	12/03/2002
SP	800-49	Federal S/MIME V3 Client Profile SP 800-49 Federal S/MIME V3 Client Profile 11/05/2002 Status: Final Download: SP 800-49 (DOI); Local Download	Final	11/05/2002
ITL Bulletin		Techniques for System and Data Recovery ITL Bulletin Techniques for System and Data Recovery 4/01/2002 Status: Final Download: April 2002 ITL Bulletin	Final	4/01/2002
White Paper		The Economic Impact of Role-Based Access Control White Paper The Economic Impact of Role-Based Access Control 3/01/2002 Status: Final Download: Report	Final	3/01/2002
Journal Article		Failure Modes in Medical Device Software: an Analysis of 15 Years of Recall Data Journal Article Failure Modes in Medical Device Software: an Analysis of 15 Years of Recall Data 12/05/2001 Status: Final Download: Journal Article (DOI)	Final	12/05/2001
SP	800-38A	Recommendation for Block Cipher Modes of Operation: Methods and Techniques SP 800-38A Recommendation for Block Cipher Modes of Operation: Methods and Techniques 12/01/2001 Status: Final Download: SP 800-38A (DOI); Local Download	Final	12/01/2001
FIPS	197	Advanced Encryption Standard (AES) FIPS 197 Advanced Encryption Standard (AES) 11/26/2001 Status: Final Download: FIPS 197 (DOI); Local Download; Comments received on Draft FIPS 197 (2001)	Final	11/26/2001
White Paper		The Economic Impacts of NIST's Data Encryption Standard (DES) Program White Paper The Economic Impacts of NIST's Data Encryption Standard (DES) Program 10/01/2001 Status: Final Download: Report	Final	10/01/2001
White Paper		Report on the Second Modes of Operation Workshop White Paper Report on the Second Modes of Operation Workshop 10/01/2001 Status: Final Download: Report	Final	10/01/2001
Journal Article		Proposed NIST Standard for Role-Based Access Control Journal Article Proposed NIST Standard for Role-Based Access Control 8/01/2001 Status: Final Download: Journal Article (DOI)	Final	8/01/2001
Journal Article		Report on the Development of the Advanced Encryption Standard (AES) Journal Article Report on the Development of the Advanced Encryption Standard (AES) 6/01/2001 Status: Final Download: Journal Article (DOI); Article; Article; Article (PubReader)	Final	6/01/2001
Book Section		Data Encryption Standard Book Section Data Encryption Standard 1/01/2001 Status: Final Download: DES Chapter from NIST SP 958	Final	1/01/2001
White Paper		Report on the Symmetric Key Block Cipher Modes of Operation Workshop White Paper Report on the Symmetric Key Block Cipher Modes of Operation Workshop 12/01/2000 Status: Final Download: Report	Final	12/01/2000
White Paper		Federal Information Technology Security Assessment Framework White Paper Federal Information Technology Security Assessment Framework 11/28/2000 Status: Final Download: Report	Final	11/28/2000
Conference Proceedings		Business Process Driven Framework for Defining an Access Control Service Based on Roles and Rules Conference Proceedings Business Process Driven Framework for Defining an Access Control Service Based on Roles and Rules 10/19/2000 Status: Final Download: Paper	Final	10/19/2000
Conference Proceedings		Proceedings of the 23rd National Information Systems Security Conference Conference Proceedings Proceedings of the 23rd National Information Systems Security Conference 10/19/2000 Status: Final Download: Proceedings--Table of Contents (with links to papers)	Final	10/19/2000
Conference Proceedings		Application of XML Tools for Enterprise-Wide RBAC Implementation Tasks Conference Proceedings Application of XML Tools for Enterprise-Wide RBAC Implementation Tasks 7/27/2000 Status: Final Download: Conference Proceedings (DOI)	Final	7/27/2000
Conference Proceedings		The NIST Model for Role-Based Access Control: Towards a Unified Standard Conference Proceedings The NIST Model for Role-Based Access Control: Towards a Unified Standard 7/26/2000 Status: Final Download: Conference Proceedings (DOI); Paper (Preprint)	Final	7/26/2000
NISTIR	6483	Randomness Testing of the Advanced Encryption Standard Finalist Candidates NISTIR 6483 Randomness Testing of the Advanced Encryption Standard Finalist Candidates 4/01/2000 Status: Final Download: NISTIR 6483	Final	4/01/2000
White Paper		Report of the Workshop on Key Management Using Public Key Cryptography White Paper Report of the Workshop on Key Management Using Public Key Cryptography 2/28/2000 Status: Final Download: Report	Final	2/28/2000
Conference Proceedings		A Resource Access Decision Service for CORBA-based Distributed Systems Conference Proceedings A Resource Access Decision Service for CORBA-based Distributed Systems 12/10/1999 Status: Final Download: Conference Proceedings (DOI); Paper (preprint)	Final	12/10/1999
NISTIR	6462	CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 NISTIR 6462 CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 12/01/1999 Status: Final Download: NISTIR 6462	Final	12/01/1999
Conference Proceedings		Supporting Relationships in Access Control Using Role Based Access Control Conference Proceedings Supporting Relationships in Access Control Using Role Based Access Control 10/29/1999 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	10/29/1999
Conference Proceedings		Proceedings of the 22nd National Information Systems Security Conference Conference Proceedings Proceedings of the 22nd National Information Systems Security Conference 10/21/1999 Status: Final Download: Proceedings--Table of Contents (with links to papers)	Final	10/21/1999
Journal Article		Status Report on the First Round of the Development of the Advanced Encryption Standard (AES) Journal Article Status Report on the First Round of the Development of the Advanced Encryption Standard (AES) 10/01/1999 Status: Final Download: Journal Article (DOI); Article; Article; Article (PubReader)	Final	10/01/1999
NISTIR	6416	Applying Mobile Agents to Intrusion Detection and Response NISTIR 6416 Applying Mobile Agents to Intrusion Detection and Response 10/01/1999 Status: Final Download: NISTIR 6416	Final	10/01/1999
Journal Article		Object Retrieval and Access Management in Electronic Commerce Journal Article Object Retrieval and Access Management in Electronic Commerce 9/01/1999 Status: Final Download: Journal Article (DOI)	Final	9/01/1999
NISTIR	6390	Randomness Testing of the Advanced Encryption Standard Candidate Algorithms NISTIR 6390 Randomness Testing of the Advanced Encryption Standard Candidate Algorithms 9/01/1999 Status: Final Download: NISTIR 6390	Final	9/01/1999
Journal Article		A Role-Based Access Control Model and Reference Implementation Within a Corporate Intranet Journal Article A Role-Based Access Control Model and Reference Implementation Within a Corporate Intranet 2/01/1999 Status: Final Download: Journal Article (DOI)	Final	2/01/1999
Conference Proceedings		Role-Based Access Control for the Web Conference Proceedings Role-Based Access Control for the Web 10/29/1998 Status: Final Download: None available	Final	10/29/1998
Conference Proceedings		Role Based Access Control on MLS Systems Without Kernel Changes Conference Proceedings Role Based Access Control on MLS Systems Without Kernel Changes 10/23/1998 Status: Final Download: Conference Proceedings (DOI); Paper	Final	10/23/1998
Conference Proceedings		Managing Role/Permission Relationships Using Object Access Types Conference Proceedings Managing Role/Permission Relationships Using Object Access Types 10/23/1998 Status: Final Download: Conference Proceedings (DOI)	Final	10/23/1998
Conference Proceedings		Role-Based Access Control Features in Commercial Database Management Systems Conference Proceedings Role-Based Access Control Features in Commercial Database Management Systems 10/09/1998 Status: Final Download: Paper	Final	10/09/1998
Conference Proceedings		Proceedings of the 21st National Information Systems Security Conference Conference Proceedings Proceedings of the 21st National Information Systems Security Conference 10/08/1998 Status: Final Download: Proceedings--Table of Contents (with links to papers); Early Computer Security Papers [1970-1985] (with links to papers)	Final	10/08/1998
Conference Proceedings		Inheritance Properties of Role Hierarchies Conference Proceedings Inheritance Properties of Role Hierarchies 10/06/1998 Status: Final Download: Paper	Final	10/06/1998
Conference Proceedings		Formal Specification for Role Based Access Control User/Role and Role/Role Relationship Management Conference Proceedings Formal Specification for Role Based Access Control User/Role and Role/Role Relationship Management 10/01/1998 Status: Final Download: Conference Proceedings (DOI)	Final	10/01/1998
NISTIR	6192	A Revised Model for Role Based Access Control NISTIR 6192 A Revised Model for Role Based Access Control 7/09/1998 Status: Final Download: NISTIR 6192 (DOI); Local Download; Citation Page for NISTIR 6192	Final	7/09/1998
SP	800-16	Information Technology Security Training Requirements: a Role- and Performance-Based Model SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model 4/01/1998 Status: Final Download: SP 800-16 (DOI); Local Download	Final	4/01/1998
Conference Proceedings		Comparing Simple Role Based Access Control Models and Access Control Lists Conference Proceedings Comparing Simple Role Based Access Control Models and Access Control Lists 11/07/1997 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	11/07/1997
Conference Proceedings		Mutual Exclusion of Roles as a Means of Implementing Separation of Duty in Role-Based Access Control Systems Conference Proceedings Mutual Exclusion of Roles as a Means of Implementing Separation of Duty in Role-Based Access Control Systems 11/07/1997 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	11/07/1997
Conference Proceedings		Specifying and Managing Role-Based Access Control Within a Corporate Intranet Conference Proceedings Specifying and Managing Role-Based Access Control Within a Corporate Intranet 11/07/1997 Status: Final Download: Conference Proceedings (DOI)	Final	11/07/1997
Conference Proceedings		Proceedings of the 20th National Information Systems Security Conference Conference Proceedings Proceedings of the 20th National Information Systems Security Conference 10/10/1997 Status: Final Download: Proceedings (table of contents, papers and slides)	Final	10/10/1997
Conference Proceedings		Role Based Access Control for the World Wide Web Conference Proceedings Role Based Access Control for the World Wide Web 10/10/1997 Status: Final Download: Paper	Final	10/10/1997
NISTIR	6068	Report on the TMACH Experiment NISTIR 6068 Report on the TMACH Experiment 7/01/1997 Status: Final Download: None available	Final	7/01/1997
Conference Paper		U.S. Government Activities to Protect the Information Infrastructure Conference Paper U.S. Government Activities to Protect the Information Infrastructure 4/01/1997 Status: Final Download: Paper	Final	4/01/1997
Conference Proceedings		Proceedings of the 19th National Information Systems Security Conference Conference Proceedings Proceedings of the 19th National Information Systems Security Conference 10/22/1996 Status: Final Download: Proceedings--Table of Contents (with links to papers)	Final	10/22/1996
NISTIR	5820	Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications NISTIR 5820 Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications 4/01/1996 Status: Final Download: NISTIR 5820	Final	4/01/1996
Conference Proceedings		Developing Federal Standards and Accreditations for Data Protection Products Conference Proceedings Developing Federal Standards and Accreditations for Data Protection Products 3/21/1996 Status: Final Download: Conference Proceedings (DOI)	Final	3/21/1996
Conference Proceedings		Role-Based Access Control (RBAC): Features and Motivations Conference Proceedings Role-Based Access Control (RBAC): Features and Motivations 12/15/1995 Status: Final Download: Paper (preprint)	Final	12/15/1995
Conference Proceedings		Implementing Role-Based Access Control Using Object Technology Conference Proceedings Implementing Role-Based Access Control Using Object Technology 12/01/1995 Status: Final Download: Conference Proceedings (DOI); Paper (preprint)	Final	12/01/1995
NISTIR	5788	Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia NISTIR 5788 Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia 11/01/1995 Status: Final Download: None available	Final	11/01/1995
Conference Proceedings		Functional Security Criteria for Distributed Systems Conference Proceedings Functional Security Criteria for Distributed Systems 10/10/1995 Status: Final Download: None available	Final	10/10/1995
Conference Proceedings		Proceedings of the 18th National Information Systems Security Conference Conference Proceedings Proceedings of the 18th National Information Systems Security Conference 10/10/1995 Status: Final Download: Proceedings, Volume 1 (28 MB); Proceedings, Volume 2 (not available)	Final	10/10/1995
Journal Article		17th National Computer Security Conference Baltimore, MD October 11–14, 1994 Journal Article 17th National Computer Security Conference Baltimore, MD October 11–14, 1994 5/01/1995 Status: Final Download: Journal Article (DOI); Article (PubReader)	Final	5/01/1995
NISTIR	5540	Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example NISTIR 5540 Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example 12/01/1994 Status: Final Download: None available	Final	12/01/1994
NISTIR	5570	An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use NISTIR 5570 An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use 11/01/1994 Status: Final Download: None available	Final	11/01/1994
Conference Proceedings		Proceedings of the 17th National Computer Security Conference Conference Proceedings Proceedings of the 17th National Computer Security Conference 10/11/1994 Status: Final Download: Proceedings, Volume 1 (25 MB); Proceedings, Volume 2 (20 MB)	Final	10/11/1994
NISTIR	5472	A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 NISTIR 5472 A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 8/01/1994 Status: Final Download: NISTIR 5472 (DOI); Local Download	Final	8/01/1994
NISTIR	5468	Report of the NIST Workshop on Key Escrow Encryption NISTIR 5468 Report of the NIST Workshop on Key Escrow Encryption 6/01/1994 Status: Final Download: None available	Final	6/01/1994
NISTIR	5590	Proceedings Report of the International Invitation Workshop on Developmental Assurance NISTIR 5590 Proceedings Report of the International Invitation Workshop on Developmental Assurance 6/01/1994 Status: Final Download: None available	Final	6/01/1994
Journal Article		Privacy and Security of Personal Information in a New Health Care System Journal Article Privacy and Security of Personal Information in a New Health Care System 11/24/1993 Status: Final Download: Journal Article (DOI)	Final	11/24/1993
Conference Proceedings		An Examination of Federal and Commercial Access Control Policy Needs Conference Proceedings An Examination of Federal and Commercial Access Control Policy Needs 9/20/1993 Status: Final Download: None available	Final	9/20/1993
Conference Proceedings		Proceedings of the 16th National Computer Security Conference Conference Proceedings Proceedings of the 16th National Computer Security Conference 9/20/1993 Status: Final Download: Proceedings (33 MB)	Final	9/20/1993
Conference Proceedings		An Overview of the Advanced Smartcard Access Control System (ASACS) Conference Proceedings An Overview of the Advanced Smartcard Access Control System (ASACS) 2/11/1993 Status: Final Download: Paper	Final	2/11/1993
Conference Proceedings		Response to Comments on the NIST Proposed Digital Signature Standard Conference Proceedings Response to Comments on the NIST Proposed Digital Signature Standard 1/01/1993 Status: Final Download: None available	Final	1/01/1993
Journal Article		A Technique for Analyzing the Effects of Changes in Formal Specifications Journal Article A Technique for Analyzing the Effects of Changes in Formal Specifications 12/01/1992 Status: Final Download: Journal Article (DOI)	Final	12/01/1992
Conference Proceedings		Precise Identification of Computer Viruses Conference Proceedings Precise Identification of Computer Viruses 10/13/1992 Status: Final Download: None available	Final	10/13/1992
Conference Proceedings		Proceedings of the 15th National Computer Security Conference Conference Proceedings Proceedings of the 15th National Computer Security Conference 10/13/1992 Status: Final Download: Proceedings, Volume 1 (27 MB); Proceedings, Volume 2 (26 MB)	Final	10/13/1992
Conference Proceedings		Role-Based Access Controls Conference Proceedings Role-Based Access Controls 10/13/1992 Status: Final Download: Paper	Final	10/13/1992
Conference Proceedings		An Analysis of Selected Software Safety Standards Conference Proceedings An Analysis of Selected Software Safety Standards 6/15/1992 Status: Final Download: Conference Proceedings (DOI)	Final	6/15/1992
Conference Proceedings		High Integrity Software Standards Activities at NIST Conference Proceedings High Integrity Software Standards Activities at NIST 10/07/1991 Status: Final Download: Proceedings	Final	10/07/1991
Conference Proceedings		Proceedings of the 14th National Computer Security Conference Conference Proceedings Proceedings of the 14th National Computer Security Conference 10/01/1991 Status: Final Download: Proceedings, Volume 1 (25 MB); Proceedings, Volume 2 (40 MB)	Final	10/01/1991
Book Section		A Framework for Computer Security Risk Management Book Section A Framework for Computer Security Risk Management 1/01/1991 Status: Final Download: Book Section (DOI)	Final	1/01/1991
Conference Proceedings		Proceedings of the 13th National Computer Security Conference Conference Proceedings Proceedings of the 13th National Computer Security Conference 10/01/1990 Status: Final Download: Proceedings, Volume 1 (24 MB); Proceedings, Volume 2 (29 MB)	Final	10/01/1990
Journal Article		Conference Reports: Twelfth National Computer Security Conference, Baltimore, MD October 10-13, 1989 Journal Article Conference Reports: Twelfth National Computer Security Conference, Baltimore, MD October 10-13, 1989 3/01/1990 Status: Final Download: Journal Article (DOI); Article (PubReader)	Final	3/01/1990
Conference Proceedings		Proceedings of the 12th National Computer Security Conference Conference Proceedings Proceedings of the 12th National Computer Security Conference 10/10/1989 Status: Final Download: Proceedings (38 MB)	Final	10/10/1989
Conference Proceedings		A Token Based Access Control System for Computer Networks Conference Proceedings A Token Based Access Control System for Computer Networks 10/10/1989 Status: Final Download: Paper	Final	10/10/1989
Journal Article		Generating Extended State Transitions from Structured Specifications for Process Control Systems Journal Article Generating Extended State Transitions from Structured Specifications for Process Control Systems 9/01/1989 Status: Final Download: Journal Article (DOI)	Final	9/01/1989
Journal Article		Conference Reports: Eleventh National Computer Security Conference, Baltimore, MD October 17-20, 1988 Journal Article Conference Reports: Eleventh National Computer Security Conference, Baltimore, MD October 17-20, 1988 7/03/1989 Status: Final Download: Journal Article (DOI); Article (PubReader)	Final	7/03/1989
Conference Proceedings		Proceedings of the 11th National Computer Security Conference Conference Proceedings Proceedings of the 11th National Computer Security Conference 10/17/1988 Status: Final Download: Proceedings (29 MB); Proceedings--Addendum (9 MB)	Final	10/17/1988
Conference Proceedings		Static Analysis Tools for Software Security Certification Conference Proceedings Static Analysis Tools for Software Security Certification 10/17/1988 Status: Final Download: None available	Final	10/17/1988
Journal Article		Accuracy, Integrity and Security in Computerized Vote-Tallying Journal Article Accuracy, Integrity and Security in Computerized Vote-Tallying 10/01/1988 Status: Final Download: Journal Article (DOI)	Final	10/01/1988
White Paper		Auditing Password Usage White Paper Auditing Password Usage 9/01/1988 Status: Final Download: GAO 75-01-75	Final	9/01/1988
Journal Article		The Data Encryption Standard: Past and Future Journal Article The Data Encryption Standard: Past and Future 5/01/1988 Status: Final Download: Journal Article (DOI)	Final	5/01/1988
Conference Proceedings		Proceedings of the 10th National Computer Security Conference Conference Proceedings Proceedings of the 10th National Computer Security Conference 9/21/1987 Status: Final Download: Proceedings (30 MB)	Final	9/21/1987
Conference Proceedings		Proceedings of the 9th National Computer Security Conference Conference Proceedings Proceedings of the 9th National Computer Security Conference 9/15/1986 Status: Final Download: Proceedings (20 MB); Proceedings--Addendum (2 MB)	Final	9/15/1986
White Paper		DoD Rainbow Series White Paper DoD Rainbow Series 12/26/1985 Status: Final Download: None available	Final	12/26/1985
Conference Proceedings		Proceedings of the 8th National Computer Security Conference Conference Proceedings Proceedings of the 8th National Computer Security Conference 9/30/1985 Status: Final Download: Proceedings (13 MB)	Final	9/30/1985
Conference Proceedings		7th DoD/NBS Computer Security Conference Conference Proceedings 7th DoD/NBS Computer Security Conference 9/24/1984 Status: Final Download: Proceedings (22 MB)	Final	9/24/1984
Conference Proceedings		Proceedings of the Sixth Seminar on the DoD Computer Security Initiative Conference Proceedings Proceedings of the Sixth Seminar on the DoD Computer Security Initiative 11/15/1983 Status: Final Download: Proceedings (11 MB)	Final	11/15/1983
Journal Article		Reflections on Ten Years of Computer Security Journal Article Reflections on Ten Years of Computer Security 11/01/1982 Status: Final Download: Journal Article (DOI)	Final	11/01/1982
Conference Proceedings		Proceedings of the Fifth Seminar on the DoD Computer Security Initiative Conference Proceedings Proceedings of the Fifth Seminar on the DoD Computer Security Initiative 5/24/1982 Status: Final Download: Proceedings	Final	5/24/1982
Conference Proceedings		Proceedings of the Fourth Seminar on the DoD Computer Security Initiative Conference Proceedings Proceedings of the Fourth Seminar on the DoD Computer Security Initiative 8/10/1981 Status: Final Download: Proceedings	Final	8/10/1981
Conference Proceedings		Proceedings of the Third Seminar on the DoD Computer Security Initiative Program Conference Proceedings Proceedings of the Third Seminar on the DoD Computer Security Initiative Program 11/18/1980 Status: Final Download: Proceedings	Final	11/18/1980
Conference Proceedings		Proceedings of the Second Seminar on the DoD Computer Security Initiative Program Conference Proceedings Proceedings of the Second Seminar on the DoD Computer Security Initiative Program 1/15/1980 Status: Final Download: Proceedings	Final	1/15/1980
Conference Proceedings		Proceedings of the Seminar on the DoD Computer Security Initiative Program Conference Proceedings Proceedings of the Seminar on the DoD Computer Security Initiative Program 7/17/1979 Status: Final Download: Proceedings	Final	7/17/1979
White Paper	NBS Technical Note (TN) 906	A Methodology for Evaluating Alternative Technical and Information Management Approaches to Privacy Requirements White Paper NBS Technical Note (TN) 906 A Methodology for Evaluating Alternative Technical and Information Management Approaches to Privacy Requirements 6/01/1976 Status: Final Download: White Paper (DOI); Local Download	Final	6/01/1976
Conference Proceedings		Encryption Protection in Computer Data Communications Conference Proceedings Encryption Protection in Computer Data Communications 10/07/1975 Status: Final Download: None available	Final	10/07/1975
White Paper	NBS Technical Note (TN) 876	Exploring Privacy and Data Security Costs: A Summary of a Workshop White Paper NBS Technical Note (TN) 876 Exploring Privacy and Data Security Costs: A Summary of a Workshop 8/01/1975 Status: Final Download: White Paper (DOI); Local Download	Final	8/01/1975
White Paper	NBS Technical Note (TN) 827	Controlled Accessibility Workshop Report White Paper NBS Technical Note (TN) 827 Controlled Accessibility Workshop Report 5/01/1974 Status: Final Download: White Paper (DOI); Local Download	Final	5/01/1974
White Paper	NBS Technical Note (TN) 809	Government Looks at Privacy and Security in Computer Systems: Summary of a Conference held at the National Bureau of Standards, Gaithersburg, Maryland, November 19-20, 1973 White Paper NBS Technical Note (TN) 809 Government Looks at Privacy and Security in Computer Systems: Summary of a Conference held at the National Bureau of Standards, Gaithersburg, Maryland, November 19-20, 1973 2/01/1974 Status: Final Download: White Paper (DOI); Local Download	Final	2/01/1974
Book		Executive Guide to Computer Security Book Executive Guide to Computer Security 1/01/1974 Status: Final Download: Brochure	Final	1/01/1974
White Paper	NBS Technical Note (TN) 780	Controlled Accessibility Bibliography White Paper NBS Technical Note (TN) 780 Controlled Accessibility Bibliography 6/01/1973 Status: Final Download: White Paper (DOI); Local Download	Final	6/01/1973

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs