Search Cybersecurity Insights

Displaying 101 - 125 of 347

Mapping out our Destination: Responsible Innovation via the NIST Identity Roadmap

May 22, 2023

… RSA Conference week is always a whirlwind. NIST was there front and center last month, and we learned a lot, shared a lot, and made a … guidance, research, or reference implementations: Enhance privacy and security by integrating confidentiality, integrity, and availability … that NIST intends to explore in the coming years: Accelerate implementation and adoption of mobile driver’s license and …

Celebrating 50 years of Cybersecurity at NIST

The Cornerstone of Cybersecurity – Cryptographic Standards and a 50-Year Evolution

May 13, 2022

Lily Chen, Matthew Scholl

… world, cryptographic algorithms are implemented in every device and applied to every link to protect information in transmission and in … constant transition to cryptographic algorithms with higher levels of security strength. As historian David Kahn noted in The Codebreakers: … the story of mankind.” By the mid-1990s, it was anticipated that the security strength of DES soon would be overtaken by cryptanalysis …

Utility Metrics for Differential Privacy: No One-Size-Fits-All

November 12, 2021

Claire McKay Bowen

… privacy, each of which offers some trade-off between privacy and utility. But what does “utility” mean, and how do we know we are preserving it? To discuss this topic, we are … series, Claire McKay Bowen, Lead Data Scientist for Privacy and Data Security at the Urban Institute. Claire’s research focuses on assessing …

Back to Basics: What’s multi-factor authentication - and why should I care?

June 16, 2016

… not so secure way to log in to your bank account: enter your username and that familiar password you probably use for most of your online … MFA, sometimes referred to as two-factor authentication or 2FA, is a security enhancement that allows you to present two pieces of evidence – … Your credentials must come from two different categories to enhance security - so entering two different passwords would not be considered …

BREAKING NEWS: 2016 state and local government pilot opportunity just announced

December 18, 2015

… satisfaction with state government services are: fast, simple, and efficient processes; the availability of online options for completing interactions; and the transparency of information. Secure and convenient digital … it fails to protect them from fraudulent access. To combat the many security incidents affecting individuals, President Obama released …

Improving the IoT Cybersecurity Baseline with Stakeholder Input: Draft (v2) NISTIR 8259 Available for Public Comment

February 4, 2020

Katerina Megas

… all those who commented, thank you! Your comments helped strengthen and improve this foundational document for Internet of Things (IoT) device manufacturers, and we’re pleased to announce that the second draft of NISTIR 8259, … phase (formerly Feature Identification, Core Baseline, and Feature Implementation). The new section 3 discusses the following pre-market …

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 17, 2024

Jeff Marron

… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity … work for his company, with the clearance I was able to get a job as a security trainer in the U.S. Department of Defense. From that initial … year I published updated cybersecurity guidance related to the HIPAA Security Rule. I’m currently assisting in planning for a HIPAA Security …

Join Senior Administration Officials at Upcoming IDESG Plenary, June 17-19, Washington, D.C

May 29, 2014

… Implementation of the National Strategy for Trusted Identities in … (IDESG), launching the Federal Cloud Credential Exchange (FCCX), and catalyzing the marketplace through NSTIC pilots– are hitting major … 17-19 to learn more, network with those engaged in NSTIC initiatives, and join in the important ongoing work of the IDESG. Virtual …

Data Pipeline Challenges of Privacy-Preserving Federated Learning

December 4, 2024

Dr. Xiaowei Huang, Dr. Yi Dong, Sikha Pentyala

… federated learning. The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), previously known as the Centre for Data Ethics and Innovation. Learn more and read all the posts published to date at NIST’s Privacy Engineering …

TIG in action at next week's Federal Identity Forum, IDESG Plenary

September 8, 2017

Mike Garcia

… hard part: supporting agencies as they implement the new SP 800-63 and driving towards global alignment of digital identity standards. Next week at the IDESG Plenary and the Federal Identity Forum, both at the convention center in … of SP 800-63. 11:00 AM: Jamie Danker from the Department of Homeland Security and Naomi will hold their session, “Practical Application of …

Breaking news: the IDEFv1 is now available to the public!

October 20, 2015

… “overarching set of interoperability standards, risk models, privacy and liability policies, requirements, and accountability mechanisms that structure the Identity Ecosystem.” … document. This framework raises the bar for online transactions and substantially advances the Identity Ecosystem. The IDEF provides a …

NIST’s International Cybersecurity and Privacy Engagement Update – New Translations

December 18, 2024

Amy Mahn

… on opportunities for future enhanced international collaboration and resource sharing. Here are some updates from the past few months: … Technology Laboratory (ITL) at NIST and Switzerland’s National Cyber Security Centre (NCSC) in October on opportunities for continued … 2.0 Polish - CSF 2.0 French - CSF 2.0 & Small Business Quick Start Guide French - CSF 2.0 Resource & Overview Guide Portuguese - CSF 2.0 …

NSTIC Implementation Hits an Important Milestone: The Identity Ecosystem Steering Group Exists!

August 23, 2012

… Last week, implementation of the National Strategy for Trusted Identities in … allow individuals to prove online that they are who they claim to be, and enhance privacy. The launch of the Steering Group represented the … surpassed even our greatest expectations. In total, 364 organizations and companies registered to participate in the new Steering Group, along …

Differential Privacy Bugs and Why They’re Hard to Find

May 11, 2021

Joseph Near, David Darais

… posts we have explored what differential privacy is, how it works, and how to answer questions about data in ways that protect privacy. All … these bugs typically look like, why it is so hard to detect them, and approaches to software assurance that can ensure your implementation is free from bugs. What Does a Privacy Bug Look Like? …

Celebrating Data Privacy Day and everything it stands for!

January 28, 2016

… NSTIC Guiding Principles is that solutions will be privacy-enhancing and voluntary, and today we would like to take the opportunity to talk … federation solutions. The goal of this effort is to develop a solution, using commercially available products, that protects … federation. Once complete, we will release a cybersecurity practice guide that details the integration steps we completed so that other …

Introducing Cybersecurity Insights: Director’s Corner

September 30, 2019

Matthew Scholl

… into the cybersecurity work we are so proud of accomplishing day in and day out. Each blog will cover a specific division at NIST in the … will highlight how NIST’s cybersecurity, privacy, and information security-related projects are making a difference in the field and … in this series, we interviewed Matthew Scholl, chief of the Computer Security Division (CSD). As head of CSD, he is responsible for leading …

NSTIC.GOV Gets a Makeover

February 7, 2014

… fronts implementing the NSTIC, we are pleased to announce a new look and feel for our website, [link no longer active]. With three rounds of … from the NSTIC NPO – that leverages trusted identities to improve security and enhance the privacy of citizen interaction with the federal … the marketplace with “NSTIC-aligned” solutions to enhance privacy, security and convenience in online transactions. STREAMLINED NAVIGATION: …

Small Business is a Big Priority: NIST Expands Outreach to the Small Business Community

April 20, 2023

Kristina Rigopoulos, Daniel Eliot

… for our country—but they’re often faced with limited resources and budgets. Many of them need cybersecurity solutions, guidance, and … share business insights, expertise, challenges, and perspectives to guide our work. By forming a COI dedicated specifically to small … to manage privacy risks associated with data analytics. June 28: Security Segmentation for Small Manufacturers Meet the authors of the …

Cybersecurity Awareness Month Blog Image

NIST Celebrates October as Cybersecurity Awareness Month

September 29, 2020

Kristina Rigopoulos

… to remember the importance of cybersecurity across the nation and ensure that all Americans have the resources they need to be more … to cybersecurity, we have teamed up with the National Cyber Security Alliance (NCSA) to be a 2020 Champion Organization , which … In the era of all sorts of phishing scams (coronavirus, Social Security, banking, general email), it is everyone’s job to protect …

Banner with a cityscape and pictures of cybersecurity-related imagery

Cybersecurity Awareness Month 2023 Blog Series | Using Strong Passwords and a Password Manager

October 10, 2023

Meghan Anderson, Yee-Yin Choong

… is the second one in our 2023 Cybersecurity Awareness Month series and examines different factors associated with using strong passwords … practices, perceptions, and knowledge regarding passwords, online security, online privacy, and online risks—as well as studies to examine … involved in their children’s passwords and understandings of online security and privacy. From our survey study with over 1,500 kids …

Cybersecurity Awareness Month 2022: Updating Software

October 12, 2022

Michael Ogata

… Cybersecurity Awareness Month is flying by, and today’s blog identifies different security vulnerabilities that can be exposed if you are unable to keep … multiple owners. Due to the complexity of all this software, some security vulnerabilities will inevitably be discovered after release to …

Differentially Private Synthetic Data

May 3, 2021

Joseph Near, David Darais

… the way we answer queries - usually by adding noise to the answer - and modifying the tools we would normally use for analyzing data. What … objectives. Differentially private synthetic data can be an excellent solution in these scenarios. Generating Synthetic Data Conceptually, all … privacy to answer interesting questions about data. However, implementation of differential privacy alone is not enough to protect …

NSTIC on the Global Identity Stage

April 9, 2013

… should we take the “N” in NSTIC? Stakeholders both in the U.S. and abroad have asked whether the fact that NSTIC is a “National” … NPO is also engaging foreign governments to provide updates on NSTIC implementation, especially on U.S. government identity initiatives such … moving government services to the cloud and improving the safety and security of transactions online. In the course of this outreach, the …

Three Hundred Million Reasons to Federate Identity: an IRS Case Study

July 9, 2013

… an improved identity management system. By adopting an NSTIC-aligned solution, the IRS could save up to $111 million up-front and $19 million annually relative to deploying a proprietary system. The … by enjoying greater convenience, enhanced privacy, and improved security. For the full IRS study, please click here . …

Competing on Privacy in the Tower of Babel

September 5, 2014

… great. Consumers can make choices based on their privacy preferences, and the marketplace will respond. In practice, there are some … The NSTIC calls for the Identity Ecosystem to be privacy-enhancing and voluntary and provides some high-level considerations around these … But how do they move from high-level considerations to actual implementation? Moreover, how do they achieve an implementation that …