U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Insights

a NIST blog

Search Cybersecurity Insights

Put exact phrase in quotes (e.g., "information technology")
Displaying 201 - 225 of 337
Paul Watrobski

Paul Watrobski

October 17, 2023
… Paul Watrobski is an IT Security Specialist in the Applied Cybersecurity Division (ACD) of the … (PI) for the  Trusted IoT Device Network-Layer Onboarding and Lifecycle Management  project and the upcoming  Software Supply Chain and DevOps Security Practices  project. He previously  participated in the Securing …
Murugiah Souppaya

Murugiah Souppaya

June 15, 2023
… Murugiah Souppaya is a computer scientist in the Computer Security Division of the Information Technology Laboratory at the National Institute of Standards and Technology.  He advocates the adoption of modern secure technology … by collaborating with industry partners to research, engineer, and build practical cybersecurity solutions, and develop associated …
Bill Newhouse headshot

Bill Newhouse

September 30, 2022
… Technology Laboratory at the National Institute of Standards and Technology (NIST). His work pushes for the adoption of functional … communities of interest with members from industry, academia, and government to gain insight and passion about the areas of cybersecurity risk that need to be …
Stephen Quinn

Stephen Quinn

June 28, 2022
… Mr. Stephen Quinn joined the National Institute of Standards and Technology (NIST) in 2004 and serves as a senior computer scientist … Reference (OLIR) programs at NIST.  He is a co-originator of the NIST Security Content Automation Protocol (SCAP) . Stephen was named to the … Department of Commence Gold Medal Award for his work in automating security protocols for applications. He also received the Federal CIO …
Keith Stouffer Image

Keith Stouffer

June 8, 2021
… mechanical engineer at the National Institute of Standards and Technology. He leads the Trustworthy Systems, Components, and Data … Program and is the lead author of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security, which provides guidance on how to secure ICS while addressing …
David Temoshok

David Temoshok

September 28, 2017
… Advisor Applied Cybersecurity for the National Institute of Standards and Technology. In this capacity, Mr. Temoshok is responsible for the development and implementation of United States national and international standards …
Suzanne Lightman

Suzanne Lightman

September 28, 2017
… Suzanne Lightman has over a decade of experience in information security policy in positions all over the government, as well as in the private sector.  She has held positions in both the legislative and executive branches which gives her a unique perspective on the development and implementation of government policy. Currently, Ms. Lightman is a Senior …

NSTIC Federal Funding Opportunity: Evaluate the NSTIC State Government Pilots

May 20, 2013
… of the Identity Ecosystem, specifically by helping us identify and make available to our broad community of stakeholders key lessons … applications from eligible applicants to evaluate the benefits and impacts of identity solutions for accessing government services that embrace and advance the NSTIC vision: that individuals and organizations utilize …

The NSTIC 2013 Pilot Opportunity Has Launched!

January 30, 2013
… to support the President’s strategy to improve the privacy, security, and convenience of online transactions through innovation in the … details, click here . Pilots have been an integral part of the NSTIC implementation plan, with NIST looking to fund pilot solutions that can …

Coming Soon: New NSTIC Pilots Opportunity for the New Year

January 8, 2013
… barriers to the identity ecosystem. As we wrap up this holiday season and enter the new year, we wanted to talk not of the pilots past and present, but about the pilots yet to come. The NSTIC National … The size of this round of pilot awards is not yet certain; full implementation of the program and issuance of awards will be subject to …

The IDESG hits a big milestone on the road to creating the Identity Ecosystem Framework

March 19, 2015
Jeremy Grant
… the upcoming IDEF – due out this summer – will enable individuals and organizations to start using a new generation of more secure, … overarching set of interoperability standards, risk models, privacy and liability policies, requirements, and accountability mechanisms that … Over the last year, four IDESG committees (privacy, user experience, security, and standards)—each of which is dedicated to building parts of …

Protecting Model Updates in Privacy-Preserving Federated Learning: Part Two

May 2, 2024
David Darais, Joseph Near, Mark Durkee, Dave Buckley
… models on different columns of the data (but overlapping rows ) and then compose them afterwards. Instead, we need methods to be able to … compute financial aid statistics without revealing students’ social security numbers.   Some PSI approaches reveal only the number of … team from the US side of the  UK-US PETs Prize Challenges . Their solution is shown in Figure 2.   In the first step, feature mining is …

Celebrating Two Years of CSF 2.0!

February 23, 2026
Stephen Quinn
… on cybersecurity supply chain risk management, updated categories and subcategories to address current threat and technology shifts, and expansion into a suite of resources designed to make the CSF 2.0 …

Digital Identities: Getting to Know the Verifiable Digital Credential Ecosystem

December 16, 2025
Bill Fisher, Ryan Galluzzo, Heather Flanagan
… VDC ecosystem as technology that can change how we present identity and attributes (both in person and online). While credential variety is … And because digital credentials often intersect with regulation, security, privacy, and user experience, organizations may need to … for identity verification and online account creation, while ensuring security and privacy. As part of this project, the NCCoE worked with a …
Image representing the EXECUTIVE ORDER 14028, IMPROVING THE NATION'S CYBERSECURITY

Hot Topics in Consumer Cybersecurity Labeling – Our December 2021 Workshop

January 10, 2022
Katerina Megas
… among other things, tasked NIST to develop cybersecurity criteria and labeling approaches for consumer software and Internet of Things … the goals of labeling, types of labels, and NIST’s preferred solution – for both consumer IoT products and consumer software – of a … approach of including risk as an important element in guiding the implementation of labeling schemes. Questions in this area related to …
differential privacy blog series banner

Automatic Proofs of Differential Privacy

July 8, 2021
Chike Abuah
… expands the state of the art in the subject of this blog post: static and dynamic analysis approaches to automatic proofs of differential … we have discussed some differentially private algorithms and implementation bugs which can cause these algorithms to fail to protect … taint analysis, which has historically been used to enforce other security properties such as information control flow (confidentiality, …

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 17, 2024
Jess Dickson
… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity.    This year’s Cybersecurity … theme is a reminder of the global nature of NIST’s cybersecurity and privacy work-- that it doesn’t and shouldn’t happen in a vacuum. NIST has so much work happening in the …

Reflections from the Second NIST Cyber AI Profile Workshop

March 18, 2026
Katerina Megas, Barbara Cuthill, Julie Nethery Snyder, Christina Sames, Ishika Khemani
… on the Preliminary Draft during this workshop has been invaluable and is informing the development of the next draft of the NIST Cyber AI … emphasized the need for both enterprise risk management and implementation level resources, especially to benefit smaller … would be helpful to include use cases (e.g., operational technology (OT) cybersecurity) and illustrative examples in the Profile. Ideas for …

A Retrospective Look: Eating our own dog food with dogged determination

April 30, 2015
… means having very few (or no) examples to demonstrate what to do…and what not to do. Being the guinea pig is no easy feat, but we at the … with the NSTIC NPO, the General Services Administration (GSA), and the U.S. Postal Service (USPS). We worked closely together to … allows individuals to use a digital credential they may already have—and that they can ideally use online at non-government sites—to connect …

A Great Leap Forward: Thoughts on Last Week’s IDESG Plenary in Atlanta

February 5, 2015
Jeremy Grant
… different last week as more than 120 people gathered, both in person and virtually, for a meeting of the Identity Ecosystem Steering Group … had; attendees came out of the event with a great deal of momentum and excitement. What was different? For starters, the organization’s … reached consensus on a path forward to create an IDEF of standards and processes that will enable interoperability of secure, convenient, …

NSTIC Pilot Common Considerations: 1 - Terminology

April 12, 2013
… up NSTIC pilots focused on advancing the NSTIC vision, objectives and guiding principles, demonstrating innovative frameworks that can … the Identity Ecosystem from being fully realized. Six months into the implementation of the pilots, they are all making great progress – as … for items such as: remedy of a breach; system protection via security safeguards; or compliance with privacy principles (such as the …

Owning Your Role in Cybersecurity

October 15, 2019
Rickie Grigsby
… October is National Cybersecurity Awareness Month (NCSAM), and we all have a part to play to help reduce our cybersecurity risks and help make the Internet – and our digital identities and devices - … a few questions about her NICE experience and how that has helped guide her future career in cybersecurity.  What is cybersecurity? Is …

International Engagement – Brussels and Beyond

July 18, 2023
Amy Mahn
… (CSF 2.0) update , our update to the digital identity guidelines, and increasing awareness of the NIST Privacy Framework and IoT … about policy issues within Europe and the lessons learned from the implementation of the Network Information Security (NIS) 2 Directive. This feedback will be valuable as NIST …
Was this page helpful?