Search Cybersecurity Insights

Displaying 126 - 150 of 337

REMINDER: 10th IDESG Plenary Meeting in Tampa, September 17-19

September 9, 2014

… Launch a new strategic planning effort, focused on growing and maturing the organization. Receive a $1.6 million cooperative … detailing how to bring Framework components together in a phased implementation over the next 18 months. The Board presentation will be … of Human Services Commonwealth of Pennsylvania Functional Model The Security Committee led development of a Functional Model to provide …

Differential Privacy for Complex Data: Answering Queries Across Multiple Data Tables

March 24, 2021

Xi He

… with joins while preserving differential privacy. - Joseph Near and David Darais So far in this blog series, we have discussed the … Google’s Differential Privacy Library Conceptually, the simplest solution to ensuring an upper bound on the sensitivity of a query with … of privacy relationships in the context of joins, but no open-source implementation is currently available. As differential privacy becomes …

Join Us NEXT WEEK at RSA to Discuss How Privacy Enhancing Technologies Can Secure Identity Online

February 20, 2014

… online, the use of privacy-enhancing technology (PET) solutions, and challenges of commercial viability for PETs in identity systems. …

Out with the old, in with the new: making MFA the norm

June 28, 2016

… MFA. Betty White’s on board , too. The attention is well-deserved – and MFA is here to stay; organizations are implementing and consumers … second factor can reduce costs, improve user experience, and enhance security and privacy. How’s NIST working on this? For government, the … with Michael Kaiser , the Executive Director of the National Cyber Security Alliance (NCSA). …

Does That Cloud Look Like A Pig? Putting the Fed in Federation: Part II

August 21, 2013

… The U.S. Government as Early Adopter of the Identity Ecosystem and thought “when pigs fly,” you probably weren’t alone. But with the … keep your eye on the horizon. This award is another milestone in the implementation of the NSTIC, and means that the FCCX project can move … is more than just the deployment of a technical hub-style federation solution though. The General Services Administration (GSA) has …

NIST civic hacking day challenge sparks the creation of an innovative new API

September 10, 2015

… Multi-factor authentication (MFA) is near and dear to our hearts at NSTIC. We understand how important it is to the security and privacy of online transactions and we get excited about any … Two colleagues at Code HS in San Francisco joined forces to work on a solution for us: Kurt Hepler and John Kelly. Kurt and John both recently …

NSTIC Pilot Common Considerations 4: Attributes

May 7, 2013

… fourth blog in our series highlighting some of the common questions and observations that have emerged as the NSTIC pilots have moved … services in identity architectures, to ensure that appropriate security and privacy safeguards are in place. To date, existing Trust … indicators of interest in the IDESG on these topics, we note that the Security Committee has a work item on Attribute Assurance and Confidence …

NSTIC Pilot Common Considerations: 2 – Trust Frameworks

April 12, 2013

… up NSTIC pilots focused on advancing the NSTIC vision, objectives and guiding principles, demonstrating innovative frameworks that can … the Identity Ecosystem from being fully realized. Six months into the implementation of the pilots, they are all making great progress – as … including clauses for enforcement and remedies, Operating Policies, Security Safeguards, Privacy Safeguards, Governance Structure, Service …

Giving NIST Digital Identity Guidelines a Boost: Supplement for Incorporating Syncable Authenticators

April 15, 2024

Ryan Galluzzo

… to our NIST SP 800-63B, Digital Identity Guidelines: Authentication and Lifecycle Management . Today, we published a supplement that … any AAL2 authenticators can be shared. but contrary to years of security policies, some implementations promote syncable authenticator … need for many agencies by providing direction on how to use a new security technology that provides strong, usable, phishing resistant …

Jeffrey Cichonski

November 22, 2023

… a broad array of technologies at the National Institute of Standards and Technology; working in the Applied Cybersecurity Division of the … group, the standards group responsible for specifying cellular security architectures and has been engaged in the development of 5G security. He is leading the National Cybersecurity Center of …

The Identity Ecosystem Emerges

May 17, 2013

… after an initial growth period in the fertile soil of working groups and committees, getting ready to spread its wings and eventually to fly.* The two-day meeting opened with remarks from the … team and a presentation on a formal work plan for the IDESG to guide its work in establishing the rules, policies, and standards that …

Collaborating on Privacy in the Identity Ecosystem: Process and Opportunity

July 27, 2012

… potential to generate numerous benefits for individuals, businesses and organizations, a poorly designed Identity Ecosystem could allow for … everything about themselves. Combined with better ways to secure and protect personal information, the Ecosystem can help to give … guiding principle, it will not happen on its own. To facilitate the implementation of the guiding principles, NSTIC calls for all …

Travel Update! The NIST CSF 2.0 is HERE…Along with Many Helpful Resources…

February 14, 2024

Kevin Stine

… the right way, NIST would need to work alongside industry, academia, and other government agencies. This is exactly what we did—and have been … implemented. To better integrate related resources, NIST’s mapping solution demonstrates how users can move quickly from CSF outcome statements to better cybersecurity in practice. New implementation examples enables users to review action-oriented steps …

REGISTER NOW - Privacy Risk Assessment: Prerequisite for Privacy Risk Management Workshop

May 10, 2017

Naomi Lefkovitz

… the next workshop in NIST's ongoing series on privacy engineering and risk management - Privacy Risk Assessment: A Prerequisite for … and communicate privacy risks, as well as to enable effective implementation of privacy principles. Participants will discuss the role … cybersecurity risk management guidance. As such, system design, security, and privacy engineers, security and privacy officers, and …

Questions…and buzz surrounding draft NIST Special Publication 800-63-3

July 29, 2016

… Sure, this is a NIST document, but the point of public comment—and our extended public preview of the draft on GitHub—is to make sure … is missing than when they're remotely in your account. So while no security approach is perfect, truly tying authentication to a physical … hit send—that’s part of the internet’s magic. But it does matter for security. That's why we're proposing that federal agencies first verify …

Panorama aerial view in the cityscape skyline with smart services and icons, internet of things, networks and augmented reality concept , night scene .

Our Quest: Advancing Product Labels to Help Consumers Consider Cybersecurity

February 15, 2022

Katerina Megas, Michael Ogata

… may come from the manufacturer or from a third party who has reviewed and perhaps tested the product. ( This appliance has been tested to meet … information, such as whether the labeled software is still receiving security related updates and how those updates are delivered to the … supporting activities needed from device manufacturers for the security of IoT devices in real world applications. Although we hadn’t …

Register now: Applying measurement science in the Identity Ecosystem workshop

November 19, 2015

… of technology vendors, cybersecurity researchers, policy makers, and other experts from the public and commercial sectors to tackle three … have to communicate to your organization for you to trust their solution? How is comparability assessed among disparate technologies and … metadata really matters to your organization’s decision-making? What implementation options should be evaluated to reduce the impact on …

Differential Privacy for Privacy-Preserving Data Analysis: An Introduction to our Blog Series

July 24, 2020

Joseph Near, David Darais, Kaitlin Boeckl

… Does your organization want to aggregate and analyze data to learn trends, but in a way that protects privacy? Or … “How many people name Joe Near live in Vermont?” The most widely used solution is called de-identification (or anonymization ), which removes … Stay tuned: our next post will build on this one by exploring the security issues involved in deploying systems for differential privacy, …

The Preliminary Draft of the NIST Privacy Framework is Here!

September 9, 2019

Naomi Lefkovitz

… Privacy and NIST are in the headlines today and in good way! We are delighted to … risk portfolios? How do we address the overlap between data security and privacy breaches in cost-effective and practical ways? … Framework should have overlapping Functions with respect to data security, so we decided to workshop it. We proposed two options for the …

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 4, 2024

Amy Mahn

… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity … strongly with me. I am very fortunate to have the role of leading and supporting international engagement on cybersecurity and privacy … at American University. I also worked at the Department of Homeland Security (DHS) for several years, and while at DHS I developed an …

Managing Cybersecurity and Privacy Risks in the Age of Artificial Intelligence: Launching a New Program at NIST

September 18, 2024

Katerina Megas

… Intelligence (AI) promises significant value for industry, consumers, and broader society, but as with many technologies, new risks from … skills , and highlights the importance of ensuring that any solution is explainable and interpretable. Furthermore, as business … Privacy Guarantees (NIST SP 800-226) ; Recent introduction of Security of AI as a Competency Area as part of the NICE Workforce …

Cybersecurity takes center stage at NIST’s third annual DC CyberWeek event

October 31, 2019

Kristina Rigopoulos

… The third annual event titled, “Cybersecurity Innovation at NIST…and Beyond,” was part of CyberScoop’s DC CyberWeek activities in … for NIST Computer Scientist Mike Bartock and NIST IT Lab Computer Security Division Chief Matt Scholl, who respectively spoke about … partner with SineWave Ventures and former chief of the National Security Agency’s Trusted System Group. The panelists discussed the work …

NIST Celebrates National Entrepreneurship Week

February 13, 2024

Daniel Eliot

… together a network of partners from Maui to Miami to educate, engage, and build equitable access to America's Entrepreneurship Ecosystem.” … science, standards, and technology in ways that enhance economic security and improve our quality of life. The small business community … share business insights, expertise, challenges, and perspectives to guide our work and assist NIST in addressing the cybersecurity needs of …

A Retrospective Look: Smelling the roses in the IDESG

April 22, 2015

… (NSTIC). It serves as a forum to build the core set of rules and standards to promote privacy, security, interoperability, and ease of use for online services. I … our office the last two years and was previously chair of the IDESG security committee, likes to remind us that, “nothing raises folks' …

Coming to the IDESG Plenary in Santa Clara May 9-10: Identity Ecosystem Use Case Workshop

April 4, 2013

… is shifting into high gear to develop the policies, standards, and accreditation processes for the Identity Ecosystem Framework. The … Tilton , the workshop will identify the use cases that will help guide the work of the IDESG. Made up of a set of possible sequences of … standards and policies. For example, use cases can help identify security requirements for a particular application. Based on this, the …