Search Publications

NIST Authors in Bold

Displaying 301 - 325 of 410

Interfaces For Personal Identity Verification, 2006 Edition

March 15, 2006

Author(s)

James F. Dray Jr., Scott Guthery, Teresa T. Schwarzhoff

[Superseded by SP 800-73-2 (September 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=901358] This document specifies the PIV data model, Application Programming Interface (API), and card interface requirements necessary to comply with

Guide for Developing Security Plans for Information Technology Systems

February 24, 2006

Author(s)

Marianne M. Swanson, Joan Hash, Pauline Bowen

The objective of system security planning is to improve protection of information system resources. All federal systems have some level of sensitivity and require protection as part of good management practice. The protection of a system must be documented

Codes for the Identification of Federal and Federally Assisted Organizations (NIST SP 800-87 v1.0, Jan. 2006 edition)

January 11, 2006

Author(s)

William C. Barker, Hildegard Ferraiolo

[Superseded by SP 800-87 v1.0 (March 2007): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51132] The Homeland Security Presidential Directive HSPD-12 called for new standards to be adopted governing the interoperable use of identity

Guide to IPsec VPNs: Recommendations of the National Institute of Standards and Technology

December 1, 2005

Author(s)

Sheila E. Frankel, Karen Kent, Ryan Lewkowski, Angela Orebaugh, Ronald Ritchey, Steven Sharma

IPsec is a framework of open standards for ensuring private communications over public networks. It has become the most common network layer security control, typically used to create a virtual private network (VPN). A VPN is a virtual network ,built on

Guideline for Implementing Cryptography In the Federal Government [Second Edition]

December 1, 2005

Author(s)

Elaine B. Barker, William C. Barker

[Superseded by SP 800-175A (August 2016): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=921233; and SP 800-175B (August 2016): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=921185] This Second Edition of NIST Special

Guide to Malware Incident Prevention and Handling

November 23, 2005

Author(s)

Peter M. Mell, Karen Kent, Joseph Nusbaum

[Superseded by SP 800-83 Rev. 1 (July 2013): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=913930] This publication provides recommendations for improving an organizations malware incident prevention measures. It also gives extensive

Creating a Patch and Vulnerability Management Program

November 16, 2005

Author(s)

Peter M. Mell, Tiffany Bergeron, Dave Henning

[Superseded by SP 800-40 Rev. 3 (July 2013): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=913929] This document provides guidance on creating a security patch and vulnerability management program and testing the effectiveness of that

Guidance for Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist

October 20, 2005

Author(s)

Murugiah P. Souppaya, Paul M. Johnson, Karen Kent

[Superseded by SP 800-68 Rev. 1 (October 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=914530] NIST Special Publication 800-68 has been created to assist IT professionals, in particularly Windows XP system administrators and

PIV Middleware and PIV Card Application Conformance Test Guidance (SP 800-73 Compliance)

October 19, 2005

Author(s)

Ramaswamy Chandramouli, Levent Eyuboglu, Ketan Mehta

[Superseded by: SP 800-85A (April 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151318 and SP 800-85B (July 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=50848] This document specifies the test plan, processes

Codes for the Identification of Federal and Federally Assisted Organizations Version 1.0 (NIST SP 800-87 v1.0)

October 14, 2005

Author(s)

William C. Barker, Hildegard Ferraiolo

[Superseded by SP 800-87 v1.0(January 2005): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=150589] The Homeland Security Presidential Directive HSPD-12 called for new standards to be adopted governing the interoperable use of identity

Recommendation for Key Management, Part 1: General

August 1, 2005

Author(s)

Elaine B. Barker, William C. Barker, William E. Burr, William T. Polk, Miles Smid

[Superseded by SP 800-57 Part 1 Revised (May 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=917474] This Recommendation provides cryptographic key management guidance. It consists of three parts. Part 1 provides general guidance and

Guidelines for the Certification and Accreditation of PIV Card Issuing Organizations

July 1, 2005

Author(s)

Dennis K. Branstad, Alicia Clay Jones, Joan Hash

[Superseded by SP 800-79-1 (June 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152182] Homeland Security Presidential Directive 12 (HSPD-12) established a policy for all Federal departments and agencies to create and use a government

Recommended Security Controls for Federal Information Systems [includes updates through 6/17/05]

June 17, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers

[Superseded by NIST SP 800-53 Revision 1 (December 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=50945] The purpose of this publication is to provide guidelines for selecting and specifying security controls for information systems

Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations

June 9, 2005

Author(s)

C M. Chernick, Charles Edington III, Matthew J. Fanto, R Rosenthal

[WITHDRAWN 3/13/13. Superseded by SP 800-52 Rev. 1 (April 2014): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=915295] These Guidelines briefly introduce computer communications architectural concepts. The Guidelines place the responsibility

Recommendation for Block Cipher Modes of Operation: The CMAC Mode for Authentication

May 1, 2005

Author(s)

Morris J. Dworkin

This Recommendation specifies a message authentication code (MAC) algorithm based on a symmetric key block cipher. This block cipher-based MAC algorithm, called CMAC, may be used to provide assurance of the authenticity, and, hence, the integrity, of

Security Configuration Checklists Program for IT Products: Guidance For Checklists Users and Developers

May 1, 2005

Author(s)

Murugiah P. Souppaya, John P. Wack, Karen Kent

[Superseded by SP 800-70 Rev. 1 (September 2009): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=901337] The National Institute of Standards and Technology (NIST) has produced Security Configuration Checklists Program for IT Products

Cryptographic Algorithms and Key Sizes for Personal Identity Verification

April 25, 2005

Author(s)

William T. Polk, Donna F. Dodson, William E. Burr

[Superseded by SP 800-78-1 (August 2007): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51215] The Homeland Security Presidential Directive (HSPD) 12 mandated the creation of new standards for interoperable identity credentials for physical

Recommended Security Controls for Federal Information Systems [includes updates through 4/22/05]

April 22, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 6/17/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151305] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Interfaces for Personal Identity Verification

April 1, 2005

Author(s)

James F. Dray Jr., Scott Guthery, Teresa T. Schwarzhoff

[Superseded by SP 800-73-1 (March 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=150633] SP 800-73 specifies smart card interfaces used to retrieve and use identity credentials. These specifications reflect the design goals of

Recommended Security Controls for Federal Information Systems

February 28, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 4/22/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918658] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Integrating IT Security into the Capital Planning and Investment Control Process

January 1, 2005

Author(s)

Joan Hash, N Bartol, H Rollins, W Robinson, J Abeles, S Batdorff

Traditionally, information technology (IT) security and capital planning and investment control (CPIC) processes have been performed independently by security and capital planning practitioners. However, the Federal Information Security Management Act

Guidelines on PDA Forensics, Recommendations of the National Institute of Standards and Technology

November 1, 2004

Author(s)

Wayne Jansen, Richard Ayers

Forensic specialists periodically encounter unusual devices and new technologies normally not envisaged as having immediate relevance from a digital forensics perspective. The objective of the guide is twofold: to help organizations evolve appropriate

Electronic Authentication Guideline

September 27, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by SP 800-63 Ver. 1.0.2 (April 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918434] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation covers

Electronic Authentication Guideline

June 30, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by NIST SP 800-63 Ver. 1.0.1 (September 2004): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151295] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation

Engineering Principles for IT Security (A Baseline for Achieving Security), Revision A

June 21, 2004

Author(s)

G Stoneburner, Clark Hayden, Alexis Feringa

The Engineering Principles for Information Technology (IT) Security (EP-ITS) presents a list of system-level security principles to be considered in the design, development, and operation of an information system. This document is to be used by IT security

Advanced communications
-Open Radio Access Network (Open-RAN)
-Quantum communications
-Spectrum sharing
-Wireless (RF)
Artificial intelligence
-AI measurement and evaluation
-Autonomous systems
--Automated vehicles
--Autonomous laboratories
-Applied AI
-Fundamental AI
-Hardware for AI
-Machine learning
-Trustworthy and responsible AI
Bioscience
-Bioeconomy
--Biological data
-Bioimaging
-Bioinformatics
-Biomanufacturing
-Biomaterials
-Biometrology
-Biosecurity
--Biosurveillance
--Genomic cybersecurity
--Nucleic acid sequence screening
-Cell measurements
-Engineering / synthetic biology
--Biofabrication
--Cell-free systems
--Genome engineering
--Protein engineering
-Gene delivery systems
-Genome editing
-Genomics
-Glycomics
-Metabolomics
-Microbial measurements
-Proteomics
Buildings and construction
-Building codes and standards
-Building control systems
-Building damage and repair
-Building economics
-Building materials
-Energy efficiency
-Heating, ventilation and air conditioning equipment
-Indoor air quality
-Structural engineering
-Thermal comfort
Chemistry
-Analytical chemistry
-Chemical engineering and processing
-Chemical thermodynamics and chemical properties
-Molecular characterization
-Theoretical chemistry and modeling
-Thermochemical properties
Electronics
-Electromagnetics
-Flexible electronics
-Magnetoelectronics
-Optoelectronics
-Organic electronics
-Semiconductors
-Sensors
-Superconducting electronics
Energy
-Alternative energy
-Conventional energy
-Electric power / smart grid
-Fuels
Environment
-Air / water / soil quality
-Climate measurements
-Environmental health
-Greenhouse gas measurements
-Marine science
-Sustainability
Fire
-Fire detection
-Fire dynamics and science
-Fire fighting
-Fire modeling
-Fire risk reduction
-Materials flammability
-Structural fire resistance
-Wildland urban interface fire
Forensic science
-Digital evidence
-Drugs and toxicology
-Firearms and toolmarks
-Forensic biometrics
-Forensic genetics
-Trace evidence
Health
-Biopharmaceuticals
-Cell and gene therapy
-Clinical diagnostics
--Cancer
--Medical imaging
-Food and nutrition
-Human microbiome
-Precision medicine
-Regenerative medicine and advanced therapy
--Flow cytometry
Information technology
-Biometrics
-Cloud computing and virtualization
-Complex systems
-Computational science
-Conformance testing
-Cyber-physical systems
--Smart cities
-Cybersecurity and privacy
--Cryptography
--Cybersecurity education and workforce development
--Cybersecurity measurement
--Identity and access management
--Privacy engineering
--Risk management
--Securing emerging technologies
--Trustworthy networks
--Trustworthy platforms
-Data and informatics
--Human language technology
--Information retrieval
--Natural language processing
-Digital twins
-Federal information processing standards (FIPS)
-Health IT
-Internet of Things (IoT)
-Interoperability testing
-Location based services
-Mobile
-Networking
--Mobile and wireless networking
--Network management and monitoring
--Network modeling and analysis
--Network security and robustness
--Network test and measurement
--Next generation networks
--Protocol design and standardization
--Software defined and virtual networks
-Software research
--Software testing
-Usability and human factors
--Accessibility
-Video analytics
-Virtual / augmented reality
-Visualization research
-Voting systems
Infrastructure
Manufacturing
-Additive manufacturing
-Factory communications
-Factory operations planning and control
-Interoperability in manufacturing
-Machining
-Manufacturing economics
-Manufacturing quality assurance
-Manufacturing systems design and analysis
-Monitoring, diagnostics and prognostics
-Process improvement
-Process measurement and control
-Product data
-Robotics
--Agility and adaptability
--Collaborative robots
--Dexterous grasping
--Manipulation
--Mobility and industrial autonomous vehicles
--Navigation / actuation / control
--Sensing and perception
-Supply chain
-Sustainable manufacturing
-Systems engineering
-Systems integration
-Technology commercialization
Materials
-Ceramics
-Composites
-Concrete / cement
-Materials characterization
--Composition and structure
--Mechanical properties
--Thermal properties
-Metals
-Modeling and computational material science
-Polymers
-Superconductors
Mathematics and statistics
-Experiment design
-Image and signal processing
-Modeling and simulation research
-Numerical methods and software
-Statistical analysis
-Uncertainty quantification
Metrology
-Amount of substance
-Dimensional metrology
-Electrical / electromagnetic metrology
-Flow metrology and rheology
-Force metrology
-Humidity metrology
-Ionizing radiation metrology
-Mass metrology
-Metric
-Optical / photometry / laser metrology
-Pressure and vacuum metrology
-Thermometry metrology
-Time and frequency metrology
-Weights and measures
Nanotechnology
-Nanobiotechnology
-Nanochemistry
-Nanoelectronics
-Nanofabrication / manufacturing
--Lithography
--Self-assembly
-Nanofluidics
-Nanomagnetics
-Nanomaterials
-Nanomechanics
-Nanometrology
-Nanophotonics
-Nanophysics
-Nanoplasmonics
Neutron research
Performance excellence
-Assessment tools and services
-Baldrige award
-Baldrige examiners
-Baldrige framework and criteria
-Best practices
-Leadership development
Physics
-Atomic / molecular / quantum
-Biological physics
-Condensed matter
-Electron physics
-Magnetics
-Nuclear physics
-Optical physics and communications
-Quantum information science
-Radiation
-Spectroscopy
-Thermodynamics
-Time and frequency
Public safety
-Chemical / Biological / Radiological / Nuclear / Explosives (CBRNE)
-First responder preparedness
-Law enforcement
-Public safety communications research
-Response robots
Resilience
-Community resilience
--Recovery
--Resilience metrics
-Disaster and failure studies
-Earthquake risk reduction
-Resilience economics
-Resilient materials
-Windstorm impact reduction
Standards
-Accreditation
-Calibration services
-Conformity assessment
-Documentary standards
-Frameworks
-Quality assurance
-Reference data
-Reference instruments
-Reference materials
-Standards education
Technology transfer
Transportation
-Aerospace
-Automotive