cyber security

Zero Trust Networks

NIST is working with industry to define the fundamental tenets of Zero Trust Architecture (ZTA) and research, develop and standardize the technologies and

Trustworthy Networks Program

NIST works with industry partners to advance the research, standardization and adoption of technologies necessary to increase the security, privacy, resilience

illustration with boat on water. Under the water there are fish. Some have green checkmarks and some have red question marks. All but one of the red question mark fish are caught in a net

Database of Software “Fingerprints” Expands to Include Computer Games

September 10, 2018

One of the largest software libraries in the world just grew larger. The National Software Reference Library (NSRL), which archives copies of the world’s most

Database of Software “Fingerprints” Expands to Include Mobile Apps

December 15, 2016

A group of computer scientists at the National Institute of Standards and Technology (NIST) has been working for more than 15 years on an impossible task: to

High Assurance Domains

NIST is working with the Internet industry to design, standardize and foster deployment of technologies to improve the security and robustness of enterprise

Interagency Report Advocates Support for International Cybersecurity Standardization

August 11, 2015

A new draft report by an interagency working group lays out objectives and recommendations for enhancing the U.S. government's coordination and participation in

Securing a Public Safety Broadband Network with Identity Management

April 14, 2015

The First Responder Network Authority (FirstNet), part of the National Telecommunications and Information Administration (NTIA), is building a nationwide public

NIST Invites Comments on Challenges in Protecting Consumer Data

April 2, 2015

The National Institute of Standards and Technology (NIST) invites the public to comment on a report from the Feb. 12, 2015, Executive Technical Workshop on

NIST Announces Pilot Grants Competition to Improve Security and Privacy of Online Identity Verification Systems

February 12, 2015

The National Institute of Standards and Technology (NIST) is launching a competition for a fourth round of grants to pilot online identity verification systems

Vendors Sought to Develop Model System to Monitor Security of Energy Industry Networked Control Systems

February 10, 2015

The National Cybersecurity Center of Excellence (NCCoE) is seeking collaborators on an effort to help energy companies improve the security of the networked

NIST Releases Update of Industrial Control Systems Security Guide for Final Public Review

February 10, 2015

The National Institute of Standards and Technology (NIST) has issued proposed updates to its Guide to Industrial Control Systems (ICS) Security (NIST Special

NIST Meeting: Cybersecurity Is a Key Ingredient In the Manufacturing Mix

January 20, 2015

The National Institute of Standards and Technology (NIST) is bringing experts together to discuss the cybersecurity challenges faced by the rapidly developing

Small Business, Large Cybersecurity Risks?

June 24, 2014

Is cybersecurity something you need to worry about as a small manufacturer? In 2011 50 percent of small businesses thought they were too small to be a hacker

NCCoE Seeks Vendors to Develop Model IT Asset Management System for Financial Services Companies

May 6, 2014

The National Cybersecurity Center of Excellence (NCCoE) is seeking collaborators to provide products and technical expertise to create a model, standards-based

NIST Seeks Private-Sector Input at Cybersecurity Framework Workshop

June 20, 2013

The National Institute of Standards and Technology (NIST) has opened registration for its 3rd Cybersecurity Framework Workshop, to be held July 10-12, 2013, in

NIST Seeks Comments on Security Control Catalog for Federal Information Systems and Organizations

March 1, 2011

Computer scientists at the National Institute of Standards and Technology (NIST) are requesting comments from interested parties on their biennial update of the

Awareness, Training, Education (ATE)

Public Law 100-235, "The Computer Security Act of 1987," mandated NIST and OPM to create guidelines on computer security awareness and training based on