Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Information Technology

Cybersecurity and privacy

Search Publications

Search Title, Abstract, Conference, Citation, Keyword or Author

Title

Author

NIST Pub Series

Report Number

Published Date

Min

Max

Displaying 1251 - 1275 of 1509

Electronic Authentication Guideline

September 27, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by SP 800-63 Ver. 1.0.2 (April 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918434] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation covers

3rd Annual PKI R&D Workshop Proceedings

September 8, 2004

Author(s)

K I. Sankar, William Polk, Nelson Hastings

NIST hosted the third annual Public Key Infrastructure (PKI) Research Workshop on April 12-14, 2004. The two and a half day event brought together PKI experts from academia, industry, and government to explore the remaining challenges in deploying public

Information Security in the System Development Life Cycle

September 1, 2004

Author(s)

Annabelle Lee, Tanya L. Brewer

Many system development life cycle (SDLC) models exist that can be used by an organization to effectively develop an information system. Security should be incorporated into all phases, from initiation to disposition, of an SDLC model. This Bulletin lays

Electronic Authentication: Guidance for Selecting Secure Techniques

August 1, 2004

Author(s)

Shirley M. Radack

This ITL Bulletin summarizes the contents of NIST Special Publication 800-63, Electronic Authentication Guideline, by William E. Burr, Donna F. Dodson, and W. Timothy Polk, which provides technical guidance on existing and widely implemented methods for

Information Security (IS) in the System Development Life Cycle (SDLC)

August 1, 2004

Author(s)

Ae-kyoung Lee, Tanya L. Brewer

PDA Forensic Tools: an Overview and Analysis

August 1, 2004

Author(s)

Richard Ayers, Wayne Jansen

Adequate user authentication is a persistent problem, particularly with mobile devices such as Personal Digital Assistants (PDAs), which tend to be highly personal and at the fringes of an organization's influence. Yet these devices are being used

Guide for Mapping Types of Information and Information Systems to Security Categories

July 1, 2004

Author(s)

William C. Barker

This bulletin summarizes NIST Special Publication 800-60, "Guide for Mapping Types of Information and Information Systems to Security Categories," which was developed to assist federal government agencies in categorizing information and information systems

Electronic Authentication Guideline

June 30, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by NIST SP 800-63 Ver. 1.0.1 (September 2004): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151295] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation

Engineering Principles for IT Security (A Baseline for Achieving Security), Revision A

June 21, 2004

Author(s)

G Stoneburner, Clark Hayden, Alexis Feringa

The Engineering Principles for Information Technology (IT) Security (EP-ITS) presents a list of system-level security principles to be considered in the design, development, and operation of an information system. This document is to be used by IT security

Security Considerations in the Information System Development Life Cycle

June 16, 2004

Author(s)

Timothy Grance, Joan Hash, Marc Stevens

[Superseded by SP 800-64 Rev. 2 (October 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=890097] The need to provide protection for federal information systems has been present since computers were first used. Including security early

Guide for Mapping Types of Information and Information Systems to Security Categories (2 vols.)

June 10, 2004

Author(s)

William C. Barker, Annabelle Lee

[Superseded by SP 800-60 Rev. 1 (August 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152106] Title III of the E-Government Act, titled the Federal Information Security Management Act (FISMA) of 2002, tasked NIST to develop (1)

Guide for the Security Certification and Accreditation of Federal Information Systems

June 1, 2004

Author(s)

Elizabeth B. Lennon

This ITL Bulletin summarizes NIST SP 800-37, Guide for the Security Certification and Accreditation of Federal Information Systems.

Information Technology Security Services: How to Select, Implement, and Manage

June 1, 2004

Author(s)

Shirley M. Radack

This ITL Bulletin summarizes the contents of NIST Special Publication (SP) 800-35, Guide to Information Technology Security Services, Recommendations of the National Institute of Standards and Technology. SP 800-35 provides guidance to help organizations

Guide for the Security Certification and Accreditation of Federal Information Systems

May 20, 2004

Author(s)

Ronald S. Ross, Marianne M. Swanson, G Stoneburner, Stuart W. Katzke, L A. Johnson

[Superseded by SP 800-37 Rev. 1 (February 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=904985] The purpose of this publication is to provide guidelines for the security certification and accreditation of information systems

Authenticating Mobile Device Users Through Image Selection

May 19, 2004

Author(s)

Wayne Jansen

Recommendation for Block Cipher Modes of Operation: The CCM Mode for Authentication and Confidentiality [including updates through 7/20/2007]

May 12, 2004

Author(s)

Morris J. Dworkin

This Recommendation defines a mode of operation, called Counter with Cipher Block Chaining-Message Authentication Code (CCM), for a symmetric key block cipher algorithm. CCM may be used to provide assurance of the confidentiality and the authenticity of

Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher

May 1, 2004

Author(s)

William C. Barker

[Superseded by SP 800-67 Rev. 1 (January 2012): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=910079] The selective application of technological and related procedural safeguards is an important responsibility of every Federal organization

Computer Security Division 2003 Annual Report

April 30, 2004

Author(s)

Tanya L. Brewer

This report covers the work conducted within the National Institute of Standards and Technology's Computer Security Division during the Fiscal Year 2003. It discusses all projects and programs within the Division, staff highlights, and publications. For

Selecting Information Technology Security Products

April 28, 2004

Author(s)

Shirley M. Radack

This bulletin summarizes NIST Special Publication 800-36, "Guide to Selecting Information Technology Security Products." The selection of IT security products is an integral part of the design, development and maintenance of an IT security infrastructure

2nd Annual PKI Research Workshop Proceedings

April 1, 2004

Author(s)

Carl M. Ellison, William Polk, Nelson Hastings, Sean W. Smith

NIST hosted the second annual Public Key Infrastructure (PKI) Research Workshop on April 28-29, 2003. The two-day event brought together PKI experts from academia, industry, and government to explore the remaining challenges in deploying public key

Setup and Test Procedures for Testing Interrupt 0x13 Based Software Write Block Tools

April 1, 2004

Author(s)

James R. Lyle

Card Technology Developments and Gap Analysis Interagency Report

March 1, 2004

Author(s)

William C. Barker, Deborah Howard, Timothy Grance, Levent Eyuboglu

This Card Technology Developments and Gap Analysis Interagency Report (IR) provides information regarding current technical capabilities and limitations of storage and processor cards, current user requirements for individual and integrated technologies

Federal Information Processing Standard (FIPS) 199, Standards for Security

March 1, 2004

Author(s)

Shirley M. Radack

This ITL Bulletin describes FIPS 199, Standards for Security Categorization of Federal Information and Information Systems, which is an important component of a suite of standards and guidelines that NIST is developing to improve the security in federal

Standards for Security Categorization of Federal Information and Information Systems

February 1, 2004

Author(s)

National Institute of Standards and Technology (NIST), Ronald S. Ross, Marianne M. Swanson

The purpose of this document is to provide a standard for categorizing federal information and information systems according to an agency's level of concern for confidentiality, integrity, and availability and the potential impact on agency assets and

Computer Security Incident Handling Guide

January 16, 2004

Author(s)

Timothy Grance, Karen Kent, Brian Kim

[Superseded by SP 800-61 Rev. 1 (March 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51289] NIST Special Publication 800-61, Computer Security Incident Handling Guide, assists organizations in mitigating the potential business impact

Was this page helpful?