Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Information Technology

Cybersecurity

Search Publications

Search Title, Abstract, Conference, Citation, Keyword or Author

Title

Author

NIST Pub Series

Report Number

Published Date

Min

Max

Displaying 451 - 475 of 2846

Foundational Cybersecurity Activities for IoT Device Manufacturers

May 29, 2020

Author(s)

Michael J. Fagan, Katerina N. Megas, Karen Scarfone, Matthew Smith

Internet of Things (IoT) devices often lack device cybersecurity capabilities their customers-- organizations and individuals--can use to help mitigate their cybersecurity risks. Manufacturers can help their customers by improving how securable the IoT

IoT Device Cybersecurity Capability Core Baseline

May 29, 2020

Author(s)

Michael J. Fagan, Katerina N. Megas, Karen Scarfone, Matthew Smith

Device cybersecurity capabilities are cybersecurity features or functions that computing devices provide through their own technical means (i.e., device hardware and software). This publication defines an Internet of Things (IoT) device cybersecurity

Building Secure Microservices-based Applications Using Service-Mesh Architecture

May 27, 2020

Author(s)

Ramaswamy Chandramouli, Zack Butcher

The increasing trend in building microservices-based applications calls for addressing security in all aspects of service-to-service interactions due to their unique characteristics. The distributed cross-domain nature of microservices needs secure token

Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment

May 21, 2020

Author(s)

Kelley L. Dempsey, Victoria Yan Pillitteri, Chad Baer, Robert Niemeyer, Ron Rudman, Susan Urban

This publication describes an approach for the development of Information Security Continuous Monitoring (ISCM) program assessments that can be used to evaluate ISCM programs within federal, state, and local governmental organizations and commercial

Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE)

April 29, 2020

Author(s)

Suzanne Lightman, Tanya L. Brewer

Electric vehicles are becoming common on the Nation's roads, and the electric vehicle supply equipment infrastructure (EVSE) is being created to support that growth. The NIST Information Technology Lab (ITL) hosted a one-day symposium to showcase federally

Cybercrime Losses: An Examination of U.S. Manufacturing and the Total Economy

April 20, 2020

Author(s)

Douglas Thomas

Cybercrime puts America's competitive edge and economic future at risk; however, there is some debate as to the extent that this activity is impacting economic activity. This report examines a selection of the current estimates of U.S. losses due to

Simulation Testbed for Railway Infrastructure Security and Resilience Evaluation

April 8, 2020

Author(s)

Bradley Potteiger, Himanshu Neema, Xenofon Koutsoukos, CheeYee Tang, Keith A. Stouffer

The last decade has seen an influx of digital connectivity, operation automation, and remote sensing and control mechanisms in the railway domain. The management of the railway operations through the use of distributed sensors and controllers and with

The More the Merrier: Adding Hidden Measurements for Anomaly Detection and Mitigation in Industrial Control Systems

April 8, 2020

Author(s)

Jairo Giraldo, CheeYee Tang, David Urbina, Alvaro A. Cardenas

Industrial Control Systems (ICS) collect information from a variety of sensors throughout the process, and then use that information to control some physical quantities. Control engineers usually have to pick which measurements they are going to use and

CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24759:2017

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140E replaces the approved authentication mechanism requirements of ISO/IEC 19790 Annex E. As a validation authority, the Cryptographic Module Validation Program (CMVP) may supersede this Annex in its entirety with its own

CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2017

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140F replaces the approved non-invasive attack mitigation test metric requirements of ISO/IEC 19790 Annex F. As a validation authority, the Cryptographic Module Validation Program (CMVP) may supersede this Annex in its

CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140C replaces the approved security functions of ISO/IEC 19790 Annex C. As a validation authority, the Cryptographic Module Validation Program (CMVP) may supersede this Annex in its entirety. This document supersedes ISO

CMVP Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2017(E)

March 20, 2020

Author(s)

Kim B. Schaffer

NIST Special Publication (SP) 800-140D replaces the approved sensitive security parameter generation and establishment methods requirements of ISO/IEC 19790 Annex D. As a validation authority, the Cryptographic Module Validation Program (CMVP) may

Approaches for Federal Agencies to Use the Cybersecurity Framework

March 19, 2020

Author(s)

Jeffrey A. Marron, Victoria Y. Pillitteri, Jon M. Boyens, Stephen D. Quinn, Gregory A. Witte, Larry Feldman

Was this page helpful?