Search Cybersecurity Insights

Displaying 226 - 250 of 337

Privacy-Preserving Federated Learning – Future Collaboration and Continued Research

January 27, 2025

… federated learning . The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), … They shared thoughts and considerations for scalability , implementation , data pipeline challenges , and more. The scope of this … is a PPFL model architecture with a genomics use-case. The model solution will allow us to explore the contours of the difficulty in …

NIST Unveils Newly Named Human-Centered Cybersecurity Program

September 27, 2023

Julie Haney, Jody Jacobs

… program (formerly Usable Cybersecurity) is part of the Visualization and Usability Group at NIST. It was created in 2008, but we’ve known for … making errors, becoming frustrated, or trying workarounds. After all, security is not most people’s primary task. Usability was originally and … keeping safe online. Program efforts related to users’ smart home security perceptions helped inform labeling considerations in NIST’s …

IoT Assignment Completed! Report on Barriers to U.S. IoT Adoption

October 22, 2024

Katerina Megas, Alison Kahn

… recommendations for overcoming those barriers. As Benson Chan (Chair) and Dan Caprio (Vice Chair) of the IoT Advisory Board state in the … a profound transformation, one that is driven by economic, societal, and cultural innovations brought about by the IoT. These innovations intertwine connectivity and digital innovation with the opportunity to drive a revolutionary …

Protecting Trained Models in Privacy-Preserving Federated Learning

July 12, 2024

Joseph Near, David Darais

… federated learning. The series is a collaboration between NIST and the UK government’s Responsible Technology Adoption Unit (RTA), … Carlini et al. showed that sensitive training data like social security numbers could be extracted from trained language models, and … Scarlet Pets team used a variant of this approach in their winning solution for the UK-US PETs Prize Challenges . In the case of vertically …

Five Years Later: Evolving IoT Cybersecurity Guidelines

May 6, 2025

Katerina Megas, Michael Fagan

… The Background…and NIST’s Plan for Improving IoT Cybersecurity The passage of the … tasked NIST with developing cybersecurity guidelines to manage and secure IoT effectively. As an early building block, we developed … opportunities with three central needs emerging: Lifecycle-Centric Security: Addressing cybersecurity throughout the IoT product lifecycle …

Celebrating 50 years of Cybersecurity at NIST

NIST’s Expanding International Engagement on Cybersecurity

July 14, 2022

Amy Mahn

… has taken the global context into account when determining priorities and approaches. Our participation in Standards Developing Organizations (SDOs) has expanded steadily, and we encourage international participation in the development of our … Privacy Framework in Arabic The NIST Privacy Framework Quick Start Guide in Spanish The NIST Privacy Framework Quick Start Guide in …

A NICE Retrospective on Shaping Cybersecurity’s Future

December 1, 2025

Rodney Petersen

… as the Director of NICE at the National Institute for Standards and Technology (NIST) for the past eleven years where his focus has been … and skills development, nurture a diverse learning community, and guide career development and workforce planning. The current strategic … necessitating coordination, cooperation, organization, and implementation at the community level through local and regional …

Looking back on happenings at the IDESG plenary

June 13, 2016

… (IDESG) launched the Identity Ecosystem Framework (IDEF) Registry and publicly listed the first four organizations to self-attest. At the … this new phase for the IDESG, focused on sharing this product far and wide, encouraging organizations to get listed on the Registry and publicly attest their dedication to the NSTIC Guiding Principles,” …

Banner that looks like an abstract city that says 'blog series 2023'

Cybersecurity Awareness Month 2023 Blog Series | Recognizing and Reporting Phishing

October 24, 2023

Shanée Dawkins, Jody Jacobs

… we sat down with two of our NIST experts from the Visualization and Usability Group at NIST — Shanée Dawkins and Jody Jacobs — who … phishing awareness training programs to assess their phishing-related security risks. In these programs, organizations send simulated phishing … phishing messages in the wild— reducing potential compromise of security and privacy for both the individual and their organization. 3. …

There’s Still Time to Comment on IoT Cybersecurity Guidance – Send Us Your Feedback Today!

February 19, 2021

Michael Fagan

… guidance drafts, including draft NISTIRs 8259B , 8259C , 8259D , and draft Special Publication 800-213 . We have extended the comment deadline for all four draft publications to February 26 th , and we hope reviewers will use the extra time to let us know what they … this exciting new work. To those who have already submitted comments and reviews on the draft publications, thank you! We also want to thank …

Matthew Scholl

August 6, 2019

… Matthew Scholl is the Chief of the Computer Security Division in the Information Technology Laboratory at the National Institute of Standards and Technology (NIST). His responsibilities include cryptographic … NIST, and Cybersecurity Standards and Guidelines for Federal Agency Security Programs. He also co-leads NIST's participation with …

Counting Queries: Extracting Key Business Metrics from Datasets

October 28, 2020

David Darais, Joseph Near

… This post is part of a series on differential privacy. Learn more and browse all the posts published to date on the differential privacy … a solved problem, and what follows is a summary of the general solution. As described in our first post , we add noise drawn from the … using PostgreSQL, Google's library provides a directly deployable solution for answering queries written in SQL. The library also provides …

Getting Down to the Nitty Gritty: Perspectives on the IDESG Boston Plenary

August 6, 2013

… We were thrilled to see more than 150 in-person and remote participants take time out of their summers to attend the … strong attendance, we were most excited by comments from enthusiasts and skeptics alike that the IDESG was getting down to the nitty gritty – … a number of steps to flesh out the Identity Ecosystem Framework and move us ever closer to realizing the vision of the NSTIC. While …

Privacy Attacks in Federated Learning

January 24, 2024

Joseph Near, David Darais, Dave Buckley, Mark Durkee

… federated learning. The series is a collaboration between NIST and the UK government’s Centre for Data Ethics and Innovation. Learn more and read all the posts published to date at … model updates suggest that federated learning alone is not a complete solution for protecting privacy during the training process. Many …

Director's Corner Series with Ram D. Sriram

July 2, 2020

Ram Sriram

… Ram D. Sriram, NIST’s Information Technology Laboratory’s Software and Systems Division (SSD) chief. Ram oversees the work of NIST staff … software systems. Software is like a house’s plumbing system. If security is not properly designed into software, then harmful leaks can … happen. We are developing materials to help people find and prevent security-relevant software bugs through the Software Assurance Reference …

Latest NICE Framework Update Offers Improvements for the Cybersecurity Workforce

May 9, 2024

Karen Wetzel

… Framework components, which includes: Revised Work Role Categories and Work Roles – including one new Work Role. Eleven new Competency … skills competitions, online tools, and support services to guide career pathways; and by employers and employees to help shape … may be an understatement, and for each change there are new security considerations and risks to defend against. The March …

Summation and Average Queries: Detecting Trends in Your Data

December 14, 2020

David Darais, Joseph Near

… This post is part of a series on differential privacy. Learn more and browse all the posts published to date on the differential privacy … there may be a cafe somewhere that charges more than the limit. The solution to this problem is called clipping . The idea is to enforce an … to bounding the sensitivity of averages. A simple and effective solution for answering an average query using differential privacy is by …

Macro photo of tooth wheel mechanism with COMPETENCE concept related words imprinted on metal surface

Why Employers Should Embrace Competency-Based Learning in Cybersecurity

October 13, 2022

Marni Baker-Stein, Bridgett Paradise, Rodney Petersen

… There is a growing movement toward increasing the use of competency and skills-based education and hiring practices in both the public and … education and training providers that are willing to be part of the solution. Competency-based education and hiring is a more objective, … ticketing queue to observe how someone operates with efficiency, or a security research assessment tool might look at how someone worked …

A major NSTIC milestone: IDEFv1 set for October 20th public release

September 30, 2015

… Friday afternoon, committees had finalized the baseline requirements and supplemental guidance for v1 of the Identity Ecosystem Framework … release on October 20 th ! The IDEF, chartered for establishment and governance by the IDESG, will stand as the policy foundation for the … adherence—to the Baseline Requirements for privacy, interoperability, security, and usability. Received updates on the NSTIC pilot progress …

Heather Flanagan

December 18, 2025

… strategy, Heather is known for her ability to bridge communities, guide collaborative work, and make standards development a little less intimidating. Heather is … on standards, governance, and the real-world challenges of identity implementation. …

Michael Prebil

July 7, 2025

… Analyst for NICE at NIST, supporting the development, improvement, and implementation of the NICE Workforce Framework for Cybersecurity (NICE … he focused on issues related to apprenticeship, community colleges, and job quality. In that role, Michael studied credentialing and …

Alison Kahn

October 22, 2024

… is an Electronics Engineer with the National Institute of Standards and Technology (NIST) Public Safety Communications Research (PSCR) … Area Network research, sponsored by the Department of Homeland Security Science and Technology directorate. This project is working to identify and …

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 16, 2024

Shanée Dawkins

… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity … It is the means by which we are connected with others in the U.S. and around the world, both professionally and personally. With its ever-increasing ubiquity, cybersecurity threats …

NIST’s International Cybersecurity and Privacy Engagement Update – Mexico City, RSA Conference, and More

June 10, 2024

Amy Mahn

… engagement continues through our support to the Department of State and the International Trade Administration (ITA) during numerous … dialogues to share information on NIST resources with France, Sweden, and Spain. NIST representatives have been traveling the world to … which included information on the content of CSF 2.0, approaches to implementation, developing community profiles, and international …

Dave Buckley

December 6, 2023

… is a Senior Technology Adviser at the UK’s Centre for Data Ethics and Innovation, where he leads the Centre’s work on privacy enhancing … technologies. He has led development of CDEI’s PETs Adoption Guide, was a co-editor of the 2023 UN PET Guide, and was a member of the core delivery team for the UK-US PETs prize …