Search Cybersecurity Insights

Displaying 101 - 125 of 337

Improving the IoT Cybersecurity Baseline with Stakeholder Input: Draft (v2) NISTIR 8259 Available for Public Comment

February 4, 2020

… all those who commented, thank you! Your comments helped strengthen and improve this foundational document for Internet of Things (IoT) device manufacturers, and we’re pleased to announce that the second draft of NISTIR 8259, … phase (formerly Feature Identification, Core Baseline, and Feature Implementation). The new section 3 discusses the following pre-market …

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 17, 2024

Jeff Marron

… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity … work for his company, with the clearance I was able to get a job as a security trainer in the U.S. Department of Defense. From that initial … year I published updated cybersecurity guidance related to the HIPAA Security Rule. I’m currently assisting in planning for a HIPAA Security …

Join Senior Administration Officials at Upcoming IDESG Plenary, June 17-19, Washington, D.C

May 29, 2014

… Implementation of the National Strategy for Trusted Identities in … (IDESG), launching the Federal Cloud Credential Exchange (FCCX), and catalyzing the marketplace through NSTIC pilots– are hitting major … 17-19 to learn more, network with those engaged in NSTIC initiatives, and join in the important ongoing work of the IDESG. Virtual …

Data Pipeline Challenges of Privacy-Preserving Federated Learning

December 4, 2024

Dr. Xiaowei Huang, Dr. Yi Dong, Sikha Pentyala

… federated learning. The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), previously known as the Centre for Data Ethics and Innovation. Learn more and read all the posts published to date at NIST’s Privacy Engineering …

TIG in action at next week's Federal Identity Forum, IDESG Plenary

September 8, 2017

Mike Garcia

… hard part: supporting agencies as they implement the new SP 800-63 and driving towards global alignment of digital identity standards. Next week at the IDESG Plenary and the Federal Identity Forum, both at the convention center in … of SP 800-63. 11:00 AM: Jamie Danker from the Department of Homeland Security and Naomi will hold their session, “Practical Application of …

Breaking news: the IDEFv1 is now available to the public!

October 20, 2015

… “overarching set of interoperability standards, risk models, privacy and liability policies, requirements, and accountability mechanisms that structure the Identity Ecosystem.” … document. This framework raises the bar for online transactions and substantially advances the Identity Ecosystem. The IDEF provides a …

NIST’s International Cybersecurity and Privacy Engagement Update – New Translations

December 18, 2024

Amy Mahn

… on opportunities for future enhanced international collaboration and resource sharing. Here are some updates from the past few months: … Technology Laboratory (ITL) at NIST and Switzerland’s National Cyber Security Centre (NCSC) in October on opportunities for continued … 2.0 Polish - CSF 2.0 French - CSF 2.0 & Small Business Quick Start Guide French - CSF 2.0 Resource & Overview Guide Portuguese - CSF 2.0 …

NSTIC Implementation Hits an Important Milestone: The Identity Ecosystem Steering Group Exists!

August 23, 2012

… Last week, implementation of the National Strategy for Trusted Identities in … allow individuals to prove online that they are who they claim to be, and enhance privacy. The launch of the Steering Group represented the … surpassed even our greatest expectations. In total, 364 organizations and companies registered to participate in the new Steering Group, along …

Differential Privacy Bugs and Why They’re Hard to Find

May 11, 2021

Joseph Near, David Darais

… posts we have explored what differential privacy is, how it works, and how to answer questions about data in ways that protect privacy. All … these bugs typically look like, why it is so hard to detect them, and approaches to software assurance that can ensure your implementation is free from bugs. What Does a Privacy Bug Look Like? …

Celebrating Data Privacy Day and everything it stands for!

January 28, 2016

… NSTIC Guiding Principles is that solutions will be privacy-enhancing and voluntary, and today we would like to take the opportunity to talk … federation solutions. The goal of this effort is to develop a solution, using commercially available products, that protects … federation. Once complete, we will release a cybersecurity practice guide that details the integration steps we completed so that other …

Introducing Cybersecurity Insights: Director’s Corner

September 30, 2019

Matthew Scholl

… into the cybersecurity work we are so proud of accomplishing day in and day out. Each blog will cover a specific division at NIST in the … will highlight how NIST’s cybersecurity, privacy, and information security-related projects are making a difference in the field and … in this series, we interviewed Matthew Scholl, chief of the Computer Security Division (CSD). As head of CSD, he is responsible for leading …

NSTIC.GOV Gets a Makeover

February 7, 2014

… fronts implementing the NSTIC, we are pleased to announce a new look and feel for our website, [link no longer active]. With three rounds of … from the NSTIC NPO – that leverages trusted identities to improve security and enhance the privacy of citizen interaction with the federal … the marketplace with “NSTIC-aligned” solutions to enhance privacy, security and convenience in online transactions. STREAMLINED NAVIGATION: …

Small Business is a Big Priority: NIST Expands Outreach to the Small Business Community

April 20, 2023

Kristina Rigopoulos, Daniel Eliot

… for our country—but they’re often faced with limited resources and budgets. Many of them need cybersecurity solutions, guidance, and … share business insights, expertise, challenges, and perspectives to guide our work. By forming a COI dedicated specifically to small … to manage privacy risks associated with data analytics. June 28: Security Segmentation for Small Manufacturers Meet the authors of the …

Cybersecurity Awareness Month Blog Image

NIST Celebrates October as Cybersecurity Awareness Month

September 29, 2020

Kristina Rigopoulos

… to remember the importance of cybersecurity across the nation and ensure that all Americans have the resources they need to be more … to cybersecurity, we have teamed up with the National Cyber Security Alliance (NCSA) to be a 2020 Champion Organization , which … In the era of all sorts of phishing scams (coronavirus, Social Security, banking, general email), it is everyone’s job to protect …

Banner with a cityscape and pictures of cybersecurity-related imagery

Cybersecurity Awareness Month 2023 Blog Series | Using Strong Passwords and a Password Manager

October 10, 2023

Meghan Anderson, Yee-Yin Choong

… is the second one in our 2023 Cybersecurity Awareness Month series and examines different factors associated with using strong passwords … practices, perceptions, and knowledge regarding passwords, online security, online privacy, and online risks—as well as studies to examine … involved in their children’s passwords and understandings of online security and privacy. From our survey study with over 1,500 kids …

Cybersecurity Awareness Month 2022: Updating Software

October 12, 2022

Michael Ogata

… Cybersecurity Awareness Month is flying by, and today’s blog identifies different security vulnerabilities that can be exposed if you are unable to keep … multiple owners. Due to the complexity of all this software, some security vulnerabilities will inevitably be discovered after release to …

Differentially Private Synthetic Data

May 3, 2021

Joseph Near, David Darais

… the way we answer queries - usually by adding noise to the answer - and modifying the tools we would normally use for analyzing data. What … objectives. Differentially private synthetic data can be an excellent solution in these scenarios. Generating Synthetic Data Conceptually, all … privacy to answer interesting questions about data. However, implementation of differential privacy alone is not enough to protect …

NSTIC on the Global Identity Stage

April 9, 2013

… should we take the “N” in NSTIC? Stakeholders both in the U.S. and abroad have asked whether the fact that NSTIC is a “National” … NPO is also engaging foreign governments to provide updates on NSTIC implementation, especially on U.S. government identity initiatives such … moving government services to the cloud and improving the safety and security of transactions online. In the course of this outreach, the …

Three Hundred Million Reasons to Federate Identity: an IRS Case Study

July 9, 2013

… an improved identity management system. By adopting an NSTIC-aligned solution, the IRS could save up to $111 million up-front and $19 million annually relative to deploying a proprietary system. The … by enjoying greater convenience, enhanced privacy, and improved security. For the full IRS study, please click here . …

Competing on Privacy in the Tower of Babel

September 5, 2014

… great. Consumers can make choices based on their privacy preferences, and the marketplace will respond. In practice, there are some … The NSTIC calls for the Identity Ecosystem to be privacy-enhancing and voluntary and provides some high-level considerations around these … But how do they move from high-level considerations to actual implementation? Moreover, how do they achieve an implementation that …

Join Us to Kick Off an Exciting New Year for NSTIC at Upcoming IDESG Atlanta Plenary January 14-16

January 6, 2014

… 2014 promises to be an exciting year for implementation of the National Strategy for Trusted Identities in … (IDESG), launching the Federal Cloud Credential Exchange (FCCX), and funding the NSTIC pilot program – are hitting major milestones in … Update . Andy Ozment, Senior Director for Cybersecurity, National Security Staff, will provide an update from the White House on the NSTIC …

Just released: three foundational whitepapers for advancing digital identity

December 16, 2015

… in the NSTIC NPO is that the digital identity market is now maturing and innovating at a rate that demands a stronger measurement-based … Science in the Identity Ecosystem workshop is less than a month away, and we think it’s high time to start digging into the issues. Today, … strength of identity proofing, strength of biometric authentication, and attribute metadata and confidence scoring. In the whitepapers, we …

Building the Future of Identity Privacy

January 28, 2014

… guiding principles, finding new solutions that are privacy-enhancing and voluntary has been a key driver of pilot project selection and the NPO’s work to drive innovative approaches to online identity. … Trusted identities can provide a variety of benefits: enhanced security, improved privacy, new types of transactions, reduced costs, …

Director's Corner Series with Jeff Greene

April 27, 2020

Jeff Greene

… into the cybersecurity work we are very proud to have completed and plan to accomplish in the near future. The first blog of this series was published by Matt Scholl, chief of the Computer Security Division at NIST, and Matt shared best practices to ensure … Symantec. He also served as an appointed member of NIST’s Information Security and Privacy Advisory Board and as a special government employee …

Creating Trustmark Compounds from Trust Elements

January 13, 2014

… Authored by: Kat Megas, Senior Pilot Programs Manager, NSTIC; and Ken Klingenstein, Internet2 Recently, there has been considerable … discussion within the Identity Ecosystem Steering Group (IDESG) and elsewhere regarding trust frameworks, trustmarks, accreditation … in recognition of specific ecosystem aspects such as accessibility, security, privacy, or compliance with regulations such as HIPPA (Health …