Search Cybersecurity Insights

Displaying 51 - 75 of 337

What We’ve Heard: Aggregating and Implementing Stakeholder Feedback

March 30, 2018

… guidelines for improving the cybersecurity of connected devices and the environments in which they are deployed. We are working on an introduction to managing IoT security and privacy risk for federal systems — an undertaking that … for the most part, agreed that there can be no one-size-fits-all solution for IoT security and privacy: each sector and market has a …

Introducing the 3 newest members of the NSTIC pilots family!

September 21, 2015

… These projects will join the ranks of the 15 active NSTIC pilots and alumni that know all about catalyzing a marketplace of identity … are aimed specifically at reducing tax refund theft, improving the security of medical information, and providing secure online storage for … can’t wait to see entirely new groups of individuals benefit from the security, privacy, and convenience of NSTIC-aligned solutions. We at the …

Cybersecurity Awareness Month: Be Cyber Smart

September 14, 2021

David Temoshok

… highlighting Cybersecurity Awareness Month kicks off our series and is from NIST’s Dave Temoshok, Senior Advisor in the Information … program, the Federal e-Authentication program, and the implementation of Homeland Security Presidential Directive 12. What is your favorite thing about …

Threat Models for Differential Privacy

September 14, 2020

Joseph Near, David Darais

… This post is part of a series on differential privacy. Learn more and browse all the posts published to date on the differential privacy … for differential privacy thus needs to consider both privacy and security . As described in our last post, privacy refers to controlling what can be inferred from a data release. We can think of security as an orthogonal issue: security mechanisms control who is …

Verifiable Digital Credential Presentment

June 26, 2026

Bill Fisher, Ryan Galluzzo, Heather Flanagan

… (VDCs). Our other posts can be found via Post #1 , Post #2 , and Post #3 . In earlier posts, we discussed how verifiable digital … how mobile payments or contactless systems are already used: Airport security (TSA pre-check or checkpoint identity): A traveler presents … (OIDF) spec, 18013-7 references out to OIDF specifications for implementation. The major distinction between Annex B and Annex D is in …

A Retrospective Look: NSTIC pilots catalyzing the Identity Ecosystem

April 13, 2015

… secret that the NSTIC Pilots Program is important to the successful implementation of the NSTIC. Pilots are arguably the most visible … Program Office (along with the Identity Ecosystem Steering Group and Connect.gov ). We have made the pilots a priority because they are … their identities and implement their online parental rights. The solution gives parents more granular view and control over which …

Protecting Model Updates in Privacy-Preserving Federated Learning

March 21, 2024

Joseph Near, David Darais

… In our second post we described attacks on models and the concepts of input privacy and output privacy . ln our last post … approach to input privacy that instead relies on special security features of computer hardware. For example, Intel’s Software … expensive cryptography. Unlike cryptographic approaches, however, the security of an enclave depends on the trustworthiness and correctness of …

NIST Risk Management Framework Team Did Some Spring Cleaning!

March 15, 2021

Victoria Yan Pillitteri

… Check out our new and improved Risk Management Framework (RMF) website that better … updated the RMF logo, and Featured resources specific to the NIST Security and Privacy Controls in Special Publication (SP) 800-53, such … Security of Information Exchanges: An update and refresh to Security Guide for Interconnecting Information Technology Systems. NISTIR 8212 , …

Shout it Out Loud: Enhancing Privacy Can Increase Profits!

September 3, 2014

… started to answer that question, highlighting how better privacy, security and convenience are enabling new online business models, and driving … a $2.8M cooperative agreement from NIST to pilot its trusted identity solution, which enables members of the military community and their …

Building the Federal Profile for IoT Device Cybersecurity | Post-Workshop Update

August 21, 2020

Katerina Megas

… IoT Device Cybersecurity: Next Steps for Securing Federal Systems . And, of course, a special “thank you” to our panelists including … making sure that the federal government is demanding a level of security, and ensuring that the level of security is there … and I think that NIST is really helping us on …

2021: What’s Ahead from NIST in Cybersecurity and Privacy?

January 28, 2021

Kevin Stine

… In 2020, NIST prioritized helping individuals and organizations shift to a more online environment to keep people safe … federal agencies can expect are the final versions of Enhanced Security Requirements for Protecting Controlled Unclassified … Framework for Cybersecurity (NICE Framework). NICE also will share an Implementation Plan for the NICE Framework goals — and begin to document …

Creating More Options to Improve Privacy and Security Online

June 23, 2014

Jeremy Grant

… It’s well established that diversity of thought and backgrounds strengthens organizations of all kinds and that diversity is a key component of a strong economy. At the … is in the process of receiving higher level certification for its solution so that users can access government services and medical … Creating More Options to Improve Privacy and Security Online …

Cybersecurity Awareness Month 2022: Enabling Multi-factor Authentication Key behavior: Multi-factor Authentication

September 30, 2022

Bill Newhouse, Ryan Galluzzo

… Today’s interview-style blog features two NIST experts —Bill Newhouse and Ryan Galluzzo—discussing different reasons to enable multi-factor … and applied research, standards development, measurement, and implementation guidance to support responsible innovation in identity … by using devices and applications that are supported by automatic security updates. From this foundation, staying safe online also means …

Celebrating 50 years of Cybersecurity at NIST

A Peek at Privacy: Where We Started, Where We are Now, and What’s Next

March 31, 2022

Meghan Anderson

… popular Venn diagram showing the relationship between cybersecurity and privacy risks, let’s use it to show how NIST has expanded and … (PII). NIST’s foray into privacy began in May 1975 with the Computer Security Guidelines for Implementing the Privacy Act of 1974 … and source authentication. In 2010, NIST released SP 800-122, Guide to Protecting the Confidentiality of Personally Identifiable …

From DMV to Wallet: Understanding Verifiable Digital Credential Issuance

April 27, 2026

Bill Fisher, Ryan Galluzzo, Heather Flanagan

… formats that shape the digital identity ecosystem: ISO/IEC 18013-5 and -7 mobile documents (mdocs) and W3C Verifiable Credentials (VCs). … Real ID Connection and the Role of AAMVA The Department of Homeland Security (DHS) oversees compliance with the REAL ID Act , which sets the … such as airport checkpoints. In November of 2024, the Transportation Security Administration (TSA) issued a Final Rule covering security …

It’s Not Just About Security; Identity is the Great Enabler

October 23, 2014

Jeremy Grant

… to “require the use of multiple factors of authentication and an effective identity proofing process.” The President set a … Order, the press has focused quite a bit on how it will improve the security of government sites, and help better protect the security and privacy of citizens’ data. It’s an important point – …

RSA Conference 2021 to Showcase Resilience, Featuring NIST Experts

May 7, 2021

Kristina Rigopoulos

… RSA Conference 2021 kicks off virtually May 17, and NIST’s cybersecurity experts will be on hand out of the gate to … Ecosystem Wednesday, May 19, 2021, 11:35 - 12:15 p.m. PST NIST IT Security Specialist Nakia Grayson will join a panel examining practical … Cybersecurity Engineer at MITRE and NIST Associate, Axel Wirth, Chief Security Strategist at MedCrypt, and Steven Waite, Executive Director of …

Implementation Challenges in Privacy-Preserving Federated Learning

August 14, 2024

Joseph Near, David Darais, Mark Durkee

… In this post, we talk with Dr. Xiaowei Huang and Dr. Yi Dong (University of Liverpool), Dr. Mat Weldon ( United K … data infrastructure—a requirement that can also lead to important security and privacy problems. Several participants in the UK-US PETs … moving part needs to be independently threat tested for each new solution. It’s easier to design a new federated learning architecture …

Don’t Miss: New 2013 NSTIC Pilots Update Webcast from the IDESG Atlanta Plenary January 16

January 15, 2014

… National Program Office will moderate, including leading a question and answer period after the presentations. The NSTIC pilots presenting … are: Exponent . The Exponent pilot will issue secure, easy-to-use and privacy-enhancing credentials to users to help secure applications … unique challenge when it comes to online identity. PRIVO will pilot a solution that provides families with COPPA-compliant, secure, …

Celebrating Data Privacy Week with NIST’s Privacy Engineering Program

January 23, 2026

Ellen Nadeau, Meghan Anderson, Nakia Grayson, Diane Wertime

… Cybersecurity Alliance to spread awareness about online privacy and empower individuals and businesses to respect privacy, safeguard … is a desire for new supplemental materials that support effective implementation of the Privacy Framework. In response, we’re excited to … implementation guidance can offer tailored examples. New Quick Start Guide for Small and Medium-Sized Business : Small- and medium-sized …

BREAKING NEWS: NSTIC NPO Announces 2015 Pilot Project Funding

February 12, 2015

Jeremy Grant

… announced a 4 th round of pilot program funding in 2015 for fresh and innovative identity solutions! The Strategy calls for the private … the marketplace with “NSTIC-aligned” solutions to enhance privacy, security, and convenience in online transactions. We are excited to … Balancing transparency to individual users and ease-of-use Building security, privacy, and usability into commonly used architectures (e.g., …

Happy NSTIC-iversary!

April 17, 2013

… a variety of credentials that would enable more secure, convenient and privacy-enhancing transactions everyplace they go online. Monday … Administration to create a Federal Cloud Credential Exchange (FCCX) solution that simplifies the technical integration process for accepting … to help achieve shared goals of enhancing online choice, efficiency, security, and privacy. Without question, the most important forum for …

Preventing Eavesdropping and Protecting Privacy on Virtual Meetings

March 12, 2020

Jeff Greene

… Conference calls and web meetings—virtual meetings—are a constant of modern work. And while many of us have become security-conscious in our online interactions, virtual meeting security is often an afterthought, at most. Who hasn’t been finishing … Preventing Eavesdropping and Protecting Privacy on Virtual Meetings …

The Attribute Metadata NISTIR “implementers’ draft” is now ready for public comment!

August 1, 2016

… whitepaper we released in the winter, feedback from the workshop , and additional input from a few helpful folks in the community and developed NIST Internal Report 8112. This public draft is hot off … better understand the strengths and shortcomings based on a deployed solution, we can convert this to an SP, keep it as a NISTIR, or submit …

Mic Drop — Announcing the New Special Publication 800-63 Suite!

June 22, 2017

Paul Grassi

… Goodbye LOA…Hello IAL, AAL, and FAL (collectively called “xALs”) More than a year in the making, … input that agencies should consider when taking their system through security assessment and authorization. It provides an overview of … the details of identity federation and identity assertions to keep implementation of federation on the level. This section expands …