Skip to main content

NIST Pubs

Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks

Author(s)
Kaitlin R. Boeckl, Michael J. Fagan, William J. Fisher, Naomi B. Lefkovitz, Katerina N. Megas, Ellen M. Nadeau, Benjamin M. Piccarreta, Danna G. O'Rourke, Karen A. Scarfone
The Internet of Things (IoT) is a rapidly evolving and expanding collection of diverse technologies that interact with the physical world. Many organizations

Nail to Nail Fingerprint Challenge: Enrollment Set Size Variability

Author(s)
Gregory P. Fiumara, Kenneth Ko, Elham Tabassi, Patricia A. Flanagan, John D. Grantham, Karen Marshall, Matthew Schwarz, Bryan Woodgate
In September 2017, the Intelligence Advanced Research Projects Activity held a fingerprint data collection as part of the Nail to Nail Fingerprint Challenge

Attribute Considerations for Access Control Systems

Author(s)
Chung Tong Hu, David F. Ferraiolo, David R. Kuhn
Attribute-based access control systems rely upon attributes to not only define access control policy rules but also enforce the access control. Attributes need

Health Assessment Measurements Quality Assurance Program: Exercise 2 Final Report

Author(s)
Charles A. Barber, Jeanice M. Brown Thomas, Carolyn Q. Burdette, Johanna Camara, Stephen E. Long, Melissa M. Phillips, Benjamin J. Place, Catherine A. Rimmer, Laura J. Wood, Lee L. Yu
The NIST Health Assessment Measurements Quality Assurance Program (HAMQAP) was launched in collaboration with the National Institutes of Health (NIH) Office of

Cybersecurity Framework Manufacturing Profile

Author(s)
Keith A. Stouffer, Timothy A. Zimmerman, CheeYee Tang, Joshua Lubell, Jeffrey A. Cichonski, John McCarthy
This document provides the Cybersecurity Framework (CSF) implementation details developed for the manufacturing environment. The "Manufacturing Profile" of the

FIPS 140-3 Adopts ISO/IEC Standards

Author(s)
Kim B. Schaffer
This bulletin summarizes the information found in FIPS 140-3: Security Requirements for Cryptographic Modules which is applicable to all federal agencies that