Search Cybersecurity Insights

Displaying 226 - 250 of 347

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 17, 2024

… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity … theme is a reminder of the global nature of NIST’s cybersecurity and privacy work-- that it doesn’t and shouldn’t happen in a vacuum. NIST has so much work happening in the …

The UK-US Blog Series on Privacy-Preserving Federated Learning: Introduction

December 6, 2023

Joseph Near, David Darais, Naomi Lefkovitz, Dave Buckley

… federated learning. The series is a collaboration between CDEI and NIST. Advances in machine learning and AI, fueled by large-scale data availability and high-performance … due to privacy regulations or other legal restrictions. Apart from security and privacy concerns, in some cases the data may raise …

Reflections from the Second NIST Cyber AI Profile Workshop

March 18, 2026

Katerina Megas, Barbara Cuthill, Julie Nethery Snyder, Christina Sames, Ishika Khemani

… on the Preliminary Draft during this workshop has been invaluable and is informing the development of the next draft of the NIST Cyber AI … emphasized the need for both enterprise risk management and implementation level resources, especially to benefit smaller … would be helpful to include use cases (e.g., operational technology (OT) cybersecurity) and illustrative examples in the Profile. Ideas for …

A Retrospective Look: Eating our own dog food with dogged determination

April 30, 2015

… means having very few (or no) examples to demonstrate what to do…and what not to do. Being the guinea pig is no easy feat, but we at the … with the NSTIC NPO, the General Services Administration (GSA), and the U.S. Postal Service (USPS). We worked closely together to … allows individuals to use a digital credential they may already have—and that they can ideally use online at non-government sites—to connect …

A Great Leap Forward: Thoughts on Last Week’s IDESG Plenary in Atlanta

February 5, 2015

Jeremy Grant

… different last week as more than 120 people gathered, both in person and virtually, for a meeting of the Identity Ecosystem Steering Group … had; attendees came out of the event with a great deal of momentum and excitement. What was different? For starters, the organization’s … reached consensus on a path forward to create an IDEF of standards and processes that will enable interoperability of secure, convenient, …

NSTIC Pilot Common Considerations: 1 - Terminology

April 12, 2013

… up NSTIC pilots focused on advancing the NSTIC vision, objectives and guiding principles, demonstrating innovative frameworks that can … the Identity Ecosystem from being fully realized. Six months into the implementation of the pilots, they are all making great progress – as … for items such as: remedy of a breach; system protection via security safeguards; or compliance with privacy principles (such as the …

Owning Your Role in Cybersecurity

October 15, 2019

Rickie Grigsby

… October is National Cybersecurity Awareness Month (NCSAM), and we all have a part to play to help reduce our cybersecurity risks and help make the Internet – and our digital identities and devices - … a few questions about her NICE experience and how that has helped guide her future career in cybersecurity. What is cybersecurity? Is …

International Engagement – Brussels and Beyond

July 18, 2023

Amy Mahn

… (CSF 2.0) update , our update to the digital identity guidelines, and increasing awareness of the NIST Privacy Framework and IoT … about policy issues within Europe and the lessons learned from the implementation of the Network Information Security (NIS) 2 Directive. This feedback will be valuable as NIST …

Privacy-Preserving Federated Learning – Future Collaboration and Continued Research

January 27, 2025

Gary Howarth, Sue Anie

… federated learning . The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), … They shared thoughts and considerations for scalability , implementation , data pipeline challenges , and more. The scope of this … is a PPFL model architecture with a genomics use-case. The model solution will allow us to explore the contours of the difficulty in …

NIST Unveils Newly Named Human-Centered Cybersecurity Program

September 27, 2023

Julie Haney, Jody Jacobs

… program (formerly Usable Cybersecurity) is part of the Visualization and Usability Group at NIST. It was created in 2008, but we’ve known for … making errors, becoming frustrated, or trying workarounds. After all, security is not most people’s primary task. Usability was originally and … keeping safe online. Program efforts related to users’ smart home security perceptions helped inform labeling considerations in NIST’s …

IoT Assignment Completed! Report on Barriers to U.S. IoT Adoption

October 22, 2024

Katerina Megas, Alison Kahn

… recommendations for overcoming those barriers. As Benson Chan (Chair) and Dan Caprio (Vice Chair) of the IoT Advisory Board state in the … a profound transformation, one that is driven by economic, societal, and cultural innovations brought about by the IoT. These innovations intertwine connectivity and digital innovation with the opportunity to drive a revolutionary …

Protecting Trained Models in Privacy-Preserving Federated Learning

July 12, 2024

Joseph Near, David Darais

… federated learning. The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), … Carlini et al. showed that sensitive training data like social security numbers could be extracted from trained language models, and … Scarlet Pets team used a variant of this approach in their winning solution for the UK-US PETs Prize Challenges . In the case of vertically …

Five Years Later: Evolving IoT Cybersecurity Guidelines

May 6, 2025

Katerina Megas, Michael Fagan

… The Background…and NIST’s Plan for Improving IoT Cybersecurity The passage of the … tasked NIST with developing cybersecurity guidelines to manage and secure IoT effectively. As an early building block, we developed … opportunities with three central needs emerging: Lifecycle-Centric Security: Addressing cybersecurity throughout the IoT product lifecycle …

Celebrating 50 years of Cybersecurity at NIST

NIST’s Expanding International Engagement on Cybersecurity

July 14, 2022

Amy Mahn

… has taken the global context into account when determining priorities and approaches. Our participation in Standards Developing Organizations (SDOs) has expanded steadily, and we encourage international participation in the development of our … Privacy Framework in Arabic The NIST Privacy Framework Quick Start Guide in Spanish The NIST Privacy Framework Quick Start Guide in …

A NICE Retrospective on Shaping Cybersecurity’s Future

December 1, 2025

Rodney Petersen

… as the Director of NICE at the National Institute for Standards and Technology (NIST) for the past eleven years where his focus has been … and skills development, nurture a diverse learning community, and guide career development and workforce planning. The current strategic … necessitating coordination, cooperation, organization, and implementation at the community level through local and regional …

Looking back on happenings at the IDESG plenary

June 13, 2016

… (IDESG) launched the Identity Ecosystem Framework (IDEF) Registry and publicly listed the first four organizations to self-attest. At the … this new phase for the IDESG, focused on sharing this product far and wide, encouraging organizations to get listed on the Registry and publicly attest their dedication to the NSTIC Guiding Principles,” …

Banner that looks like an abstract city that says 'blog series 2023'

Cybersecurity Awareness Month 2023 Blog Series | Recognizing and Reporting Phishing

October 24, 2023

Shanée Dawkins, Jody Jacobs

… we sat down with two of our NIST experts from the Visualization and Usability Group at NIST — Shanée Dawkins and Jody Jacobs — who … phishing awareness training programs to assess their phishing-related security risks. In these programs, organizations send simulated phishing … phishing messages in the wild— reducing potential compromise of security and privacy for both the individual and their organization. 3. …

There’s Still Time to Comment on IoT Cybersecurity Guidance – Send Us Your Feedback Today!

February 19, 2021

Michael Fagan

… guidance drafts, including draft NISTIRs 8259B , 8259C , 8259D , and draft Special Publication 800-213 . We have extended the comment deadline for all four draft publications to February 26 th , and we hope reviewers will use the extra time to let us know what they … this exciting new work. To those who have already submitted comments and reviews on the draft publications, thank you! We also want to thank …

Matthew Scholl

August 6, 2019

… Matthew Scholl is the Chief of the Computer Security Division in the Information Technology Laboratory at the National Institute of Standards and Technology (NIST). His responsibilities include cryptographic … NIST, and Cybersecurity Standards and Guidelines for Federal Agency Security Programs. He also co-leads NIST's participation with …

Counting Queries: Extracting Key Business Metrics from Datasets

October 28, 2020

David Darais, Joseph Near

… This post is part of a series on differential privacy. Learn more and browse all the posts published to date on the differential privacy … a solved problem, and what follows is a summary of the general solution. As described in our first post , we add noise drawn from the … using PostgreSQL, Google's library provides a directly deployable solution for answering queries written in SQL. The library also provides …

Getting Down to the Nitty Gritty: Perspectives on the IDESG Boston Plenary

August 6, 2013

… We were thrilled to see more than 150 in-person and remote participants take time out of their summers to attend the … strong attendance, we were most excited by comments from enthusiasts and skeptics alike that the IDESG was getting down to the nitty gritty – … a number of steps to flesh out the Identity Ecosystem Framework and move us ever closer to realizing the vision of the NSTIC. While …

Privacy Attacks in Federated Learning

January 24, 2024

Joseph Near, David Darais, Dave Buckley, Mark Durkee

… federated learning. The series is a collaboration between NIST and the UK government’s Centre for Data Ethics and Innovation. Learn more and read all the posts published to date at … model updates suggest that federated learning alone is not a complete solution for protecting privacy during the training process. Many …

Director's Corner Series with Ram D. Sriram

July 2, 2020

Ram Sriram

… Ram D. Sriram, NIST’s Information Technology Laboratory’s Software and Systems Division (SSD) chief. Ram oversees the work of NIST staff … software systems. Software is like a house’s plumbing system. If security is not properly designed into software, then harmful leaks can … happen. We are developing materials to help people find and prevent security-relevant software bugs through the Software Assurance Reference …

Latest NICE Framework Update Offers Improvements for the Cybersecurity Workforce

May 9, 2024

Karen Wetzel

… Framework components, which includes: Revised Work Role Categories and Work Roles – including one new Work Role. Eleven new Competency … skills competitions, online tools, and support services to guide career pathways; and by employers and employees to help shape … may be an understatement, and for each change there are new security considerations and risks to defend against. The March …

Summation and Average Queries: Detecting Trends in Your Data

December 14, 2020

David Darais, Joseph Near

… This post is part of a series on differential privacy. Learn more and browse all the posts published to date on the differential privacy … there may be a cafe somewhere that charges more than the limit. The solution to this problem is called clipping . The idea is to enforce an … to bounding the sensitivity of averages. A simple and effective solution for answering an average query using differential privacy is by …