Search Cybersecurity Insights

Displaying 51 - 75 of 347

Internet of things, devices and connectivity concepts on a network, cloud at center

More than just a milestone in the Botnet Roadmap towards more securable IoT devices

May 29, 2020

… offer tremendous capabilities to users. Looking around I see more and more ways, especially in a post COVID-19 world, that these devices … than ever. And while cybersecurity is a shared responsibility and the solution will likely require an ecosystem approach, how can IoT devices enable customers’ security goals? Working with industry and other stakeholders, we’ve made …

Help us build a secure future for connected devices: share your feedback on draft NISTIR on core baseline of cybersecurity features

August 8, 2019

Katerina Megas

… (IoT) program as we’ve continued our efforts to engage stakeholders and enlist feedback on several key initiatives. In June, the NIST Cybersecurity for IoT and Privacy Engineering programs published NIST Internal Report ( … to effectively manage their cybersecurity risk and strengthen the security of their devices. We want your feedback! Your feedback, as …

BREAKING NEWS: New Privacy Pilot Federal Funding Opportunity

March 27, 2015

… applicants to pilot privacy-enhancing technologies that embrace and advance the NSTIC vision and contribute to the maturity of the … their online interactions. Despite many recent improvements to the security and usability of online identities, the marketplace continues … design choices could be more effective. Barriers also exist to the implementation of privacy-enhancing technologies (PETs), including …

What We’ve Heard: Aggregating and Implementing Stakeholder Feedback

March 30, 2018

Katerina Megas

… guidelines for improving the cybersecurity of connected devices and the environments in which they are deployed. We are working on an introduction to managing IoT security and privacy risk for federal systems — an undertaking that … for the most part, agreed that there can be no one-size-fits-all solution for IoT security and privacy: each sector and market has a …

Introducing the 3 newest members of the NSTIC pilots family!

September 21, 2015

… These projects will join the ranks of the 15 active NSTIC pilots and alumni that know all about catalyzing a marketplace of identity … are aimed specifically at reducing tax refund theft, improving the security of medical information, and providing secure online storage for … can’t wait to see entirely new groups of individuals benefit from the security, privacy, and convenience of NSTIC-aligned solutions. We at the …

Cybersecurity Awareness Month: Be Cyber Smart

September 14, 2021

David Temoshok

… highlighting Cybersecurity Awareness Month kicks off our series and is from NIST’s Dave Temoshok, Senior Advisor in the Information … program, the Federal e-Authentication program, and the implementation of Homeland Security Presidential Directive 12. What is your favorite thing about …

Threat Models for Differential Privacy

September 14, 2020

Joseph Near, David Darais

… This post is part of a series on differential privacy. Learn more and browse all the posts published to date on the differential privacy … for differential privacy thus needs to consider both privacy and security . As described in our last post, privacy refers to controlling what can be inferred from a data release. We can think of security as an orthogonal issue: security mechanisms control who is …

Verifiable Digital Credential Presentment

June 26, 2026

Bill Fisher, Ryan Galluzzo, Heather Flanagan

… (VDCs). Our other posts can be found via Post #1 , Post #2 , and Post #3 . In earlier posts, we discussed how verifiable digital … how mobile payments or contactless systems are already used: Airport security (TSA pre-check or checkpoint identity): A traveler presents … (OIDF) spec, 18013-7 references out to OIDF specifications for implementation. The major distinction between Annex B and Annex D is in …

A Retrospective Look: NSTIC pilots catalyzing the Identity Ecosystem

April 13, 2015

… secret that the NSTIC Pilots Program is important to the successful implementation of the NSTIC. Pilots are arguably the most visible … Program Office (along with the Identity Ecosystem Steering Group and Connect.gov ). We have made the pilots a priority because they are … their identities and implement their online parental rights. The solution gives parents more granular view and control over which …

Protecting Model Updates in Privacy-Preserving Federated Learning

March 21, 2024

Joseph Near, David Darais

… In our second post we described attacks on models and the concepts of input privacy and output privacy . ln our last post … approach to input privacy that instead relies on special security features of computer hardware. For example, Intel’s Software … expensive cryptography. Unlike cryptographic approaches, however, the security of an enclave depends on the trustworthiness and correctness of …

NIST Risk Management Framework Team Did Some Spring Cleaning!

March 15, 2021

Victoria Yan Pillitteri

… Check out our new and improved Risk Management Framework (RMF) website that better … updated the RMF logo, and Featured resources specific to the NIST Security and Privacy Controls in Special Publication (SP) 800-53, such … Security of Information Exchanges: An update and refresh to Security Guide for Interconnecting Information Technology Systems. NISTIR 8212 , …

Shout it Out Loud: Enhancing Privacy Can Increase Profits!

September 3, 2014

… started to answer that question, highlighting how better privacy, security and convenience are enabling new online business models, and driving … a $2.8M cooperative agreement from NIST to pilot its trusted identity solution, which enables members of the military community and their …

Building the Federal Profile for IoT Device Cybersecurity | Post-Workshop Update

August 21, 2020

Katerina Megas

… IoT Device Cybersecurity: Next Steps for Securing Federal Systems . And, of course, a special “thank you” to our panelists including … making sure that the federal government is demanding a level of security, and ensuring that the level of security is there … and I think that NIST is really helping us on …

2021: What’s Ahead from NIST in Cybersecurity and Privacy?

January 28, 2021

Kevin Stine

… In 2020, NIST prioritized helping individuals and organizations shift to a more online environment to keep people safe … federal agencies can expect are the final versions of Enhanced Security Requirements for Protecting Controlled Unclassified … Framework for Cybersecurity (NICE Framework). NICE also will share an Implementation Plan for the NICE Framework goals — and begin to document …

Creating More Options to Improve Privacy and Security Online

June 23, 2014

Jeremy Grant

… It’s well established that diversity of thought and backgrounds strengthens organizations of all kinds and that diversity is a key component of a strong economy. At the … is in the process of receiving higher level certification for its solution so that users can access government services and medical … Creating More Options to Improve Privacy and Security Online …

Jon Boyens

August 12, 2026

… Jon Boyens is the Chief of the Computer Security Division within the Information Technology Laboratory at NIST. … In this role, he oversees NIST’s critical cybersecurity research and development initiatives, as well as the creation of essential … Acquisition Security Council, helping guide the government-wide implementation of the Federal Acquisition Supply Chain Security Act. …

Cybersecurity Awareness Month 2022: Enabling Multi-factor Authentication Key behavior: Multi-factor Authentication

September 30, 2022

Bill Newhouse, Ryan Galluzzo

… Today’s interview-style blog features two NIST experts —Bill Newhouse and Ryan Galluzzo—discussing different reasons to enable multi-factor … and applied research, standards development, measurement, and implementation guidance to support responsible innovation in identity … by using devices and applications that are supported by automatic security updates. From this foundation, staying safe online also means …

Celebrating 50 years of Cybersecurity at NIST

A Peek at Privacy: Where We Started, Where We are Now, and What’s Next

March 31, 2022

Meghan Anderson

… popular Venn diagram showing the relationship between cybersecurity and privacy risks, let’s use it to show how NIST has expanded and … (PII). NIST’s foray into privacy began in May 1975 with the Computer Security Guidelines for Implementing the Privacy Act of 1974 … and source authentication. In 2010, NIST released SP 800-122, Guide to Protecting the Confidentiality of Personally Identifiable …

From DMV to Wallet: Understanding Verifiable Digital Credential Issuance

April 27, 2026

Bill Fisher, Ryan Galluzzo, Heather Flanagan

… formats that shape the digital identity ecosystem: ISO/IEC 18013-5 and -7 mobile documents (mdocs) and W3C Verifiable Credentials (VCs). … Real ID Connection and the Role of AAMVA The Department of Homeland Security (DHS) oversees compliance with the REAL ID Act , which sets the … such as airport checkpoints. In November of 2024, the Transportation Security Administration (TSA) issued a Final Rule covering security …

It’s Not Just About Security; Identity is the Great Enabler

October 23, 2014

Jeremy Grant

… to “require the use of multiple factors of authentication and an effective identity proofing process.” The President set a … Order, the press has focused quite a bit on how it will improve the security of government sites, and help better protect the security and privacy of citizens’ data. It’s an important point – …

RSA Conference 2021 to Showcase Resilience, Featuring NIST Experts

May 7, 2021

Kristina Rigopoulos

… RSA Conference 2021 kicks off virtually May 17, and NIST’s cybersecurity experts will be on hand out of the gate to … Ecosystem Wednesday, May 19, 2021, 11:35 - 12:15 p.m. PST NIST IT Security Specialist Nakia Grayson will join a panel examining practical … Cybersecurity Engineer at MITRE and NIST Associate, Axel Wirth, Chief Security Strategist at MedCrypt, and Steven Waite, Executive Director of …

Implementation Challenges in Privacy-Preserving Federated Learning

August 14, 2024

Joseph Near, David Darais, Mark Durkee

… In this post, we talk with Dr. Xiaowei Huang and Dr. Yi Dong (University of Liverpool), Dr. Mat Weldon ( United K … data infrastructure—a requirement that can also lead to important security and privacy problems. Several participants in the UK-US PETs … moving part needs to be independently threat tested for each new solution. It’s easier to design a new federated learning architecture …

Don’t Miss: New 2013 NSTIC Pilots Update Webcast from the IDESG Atlanta Plenary January 16

January 15, 2014

… National Program Office will moderate, including leading a question and answer period after the presentations. The NSTIC pilots presenting … are: Exponent . The Exponent pilot will issue secure, easy-to-use and privacy-enhancing credentials to users to help secure applications … unique challenge when it comes to online identity. PRIVO will pilot a solution that provides families with COPPA-compliant, secure, …

Celebrating Data Privacy Week with NIST’s Privacy Engineering Program

January 23, 2026

Ellen Nadeau, Meghan Anderson, Nakia Grayson, Diane Wertime

… Cybersecurity Alliance to spread awareness about online privacy and empower individuals and businesses to respect privacy, safeguard … is a desire for new supplemental materials that support effective implementation of the Privacy Framework. In response, we’re excited to … implementation guidance can offer tailored examples. New Quick Start Guide for Small and Medium-Sized Business : Small- and medium-sized …

BREAKING NEWS: NSTIC NPO Announces 2015 Pilot Project Funding

February 12, 2015

Jeremy Grant

… announced a 4 th round of pilot program funding in 2015 for fresh and innovative identity solutions! The Strategy calls for the private … the marketplace with “NSTIC-aligned” solutions to enhance privacy, security, and convenience in online transactions. We are excited to … Balancing transparency to individual users and ease-of-use Building security, privacy, and usability into commonly used architectures (e.g., …