Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Information Technology

Cybersecurity

Search Publications

Search Title, Abstract, Conference, Citation, Keyword or Author

Title

Author

NIST Pub Series

Report Number

Published Date

Min

Max

Displaying 451 - 475 of 2840

Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment

May 21, 2020

Author(s)

Kelley L. Dempsey, Victoria Yan Pillitteri, Chad Baer, Robert Niemeyer, Ron Rudman, Susan Urban

This publication describes an approach for the development of Information Security Continuous Monitoring (ISCM) program assessments that can be used to evaluate ISCM programs within federal, state, and local governmental organizations and commercial

Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE)

April 29, 2020

Author(s)

Suzanne Lightman, Tanya L. Brewer

Electric vehicles are becoming common on the Nation's roads, and the electric vehicle supply equipment infrastructure (EVSE) is being created to support that growth. The NIST Information Technology Lab (ITL) hosted a one-day symposium to showcase federally

Cybercrime Losses: An Examination of U.S. Manufacturing and the Total Economy

April 20, 2020

Author(s)

Douglas Thomas

Cybercrime puts America's competitive edge and economic future at risk; however, there is some debate as to the extent that this activity is impacting economic activity. This report examines a selection of the current estimates of U.S. losses due to

Simulation Testbed for Railway Infrastructure Security and Resilience Evaluation

April 8, 2020

Author(s)

Bradley Potteiger, Himanshu Neema, Xenofon Koutsoukos, CheeYee Tang, Keith A. Stouffer

The last decade has seen an influx of digital connectivity, operation automation, and remote sensing and control mechanisms in the railway domain. The management of the railway operations through the use of distributed sensors and controllers and with

The More the Merrier: Adding Hidden Measurements for Anomaly Detection and Mitigation in Industrial Control Systems

April 8, 2020

Author(s)

Jairo Giraldo, CheeYee Tang, David Urbina, Alvaro A. Cardenas

Industrial Control Systems (ICS) collect information from a variety of sensors throughout the process, and then use that information to control some physical quantities. Control engineers usually have to pick which measurements they are going to use and

CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24759:2017

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140E replaces the approved authentication mechanism requirements of ISO/IEC 19790 Annex E. As a validation authority, the Cryptographic Module Validation Program (CMVP) may supersede this Annex in its entirety with its own

CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2017

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140F replaces the approved non-invasive attack mitigation test metric requirements of ISO/IEC 19790 Annex F. As a validation authority, the Cryptographic Module Validation Program (CMVP) may supersede this Annex in its

CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140C replaces the approved security functions of ISO/IEC 19790 Annex C. As a validation authority, the Cryptographic Module Validation Program (CMVP) may supersede this Annex in its entirety. This document supersedes ISO

CMVP Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2017(E)

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140D replaces the approved sensitive security parameter generation and establishment methods requirements of ISO/IEC 19790 Annex D. As a validation authority, the Cryptographic Module Validation Program (CMVP) may

Approaches for Federal Agencies to Use the Cybersecurity Framework

March 19, 2020

Author(s)

Jeffrey A. Marron, Victoria Y. Pillitteri, Jon M. Boyens, Stephen D. Quinn, Gregory A. Witte, Larry Feldman

Automatic Recognition of Advanced Persistent Threat Tactics for Enterprise Security

March 16, 2020

Author(s)

Qingtian Zou, Anoop Singhal, Xiaoyan Sun, Peng Liu

Advanced Persistent Threats (APT) has become the concern of many enterprise networks. APT can remain undetected for a long time span and lead to undesirable consequences such as stealing of sensitive data, broken workflow, and so on. To achieve the attack

Annual Report 2018: NIST/ITL Cybersecurity Program

March 13, 2020

Author(s)

Patrick D. O'Reilly, Kristina G. Rigopoulos, Larry Feldman, Gregory A. Witte

Title III of the E-Government Act of 2002, entitled the Federal Information Security Management Act (FISMA) of 2002, requires NIST to prepare an annual public report on activities undertaken in the previous year, and planned for the coming year, to carry

SCAP Composer User Guide

February 28, 2020

Author(s)

Joshua Lubell

SCAP Composer is a software application for creating Security Content Automation Protocol (SCAP) source data stream collections from Extensible Markup Language (XML) documents valid with respect to schemas defined in SCAP component specifications. SCAP