Ramaswamy Chandramouli

Selected Publications

PIV Card Application and Middleware Interface Test Guidelines (SP800-73-2 compliance)

March 31, 2009

Author(s)

Ramaswamy Chandramouli, Hildegard Ferraiolo, Ketan L. Mehta

[Superseded by SP 800-85A-2 (July 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=906167] The objective of this document [SP 800-85A-1] is

Interfaces for Personal Identity Verification

September 18, 2008

Author(s)

Ramaswamy Chandramouli, James F. Dray Jr., Hildegard Ferraiolo, Scott Guthery, William I. MacGregor, Ketan L. Mehta

[Superseded by SP 800-73-3 (February 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=504797] SP 800-73-2 specifies the PIV data model

Guidelines for the Accreditation of Personal Identity Verification Card Issuers

June 18, 2008

Author(s)

Ramaswamy Chandramouli, Dennis Bailey, Nabil Ghadiali, Dennis K. Branstad

[Superseded by SP 800-79-2 (July 2015): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918845] The purpose of this publication is to provide

Publications

Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines

February 12, 2024

Author(s)

Ramaswamy Chandramouli, Frederick Kautz, Santiago Torres-Arias

The predominant application architecture for cloud-native applications consists of multiple microservices, accompanied in some instances by a centralized

High-Performance Computing Security Architecture, Threat Analysis, and Security Posture

February 9, 2024

Author(s)

Yang Guo, Ramaswamy Chandramouli, Lowell Wofford, Rickey Gregg, Gary Key, Antwan Clark, Catherine Hinton, Andrew Prout, Albert Reuther, Ryan Adamson, Aron Warren, Purushotham Bangalore, Erik Deumens, Csilla Farkas

Security is essential component of high-performance computing (HPC). HPC systems often differ based on the evolution of their system designs, the applications

A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments

September 13, 2023

Author(s)

Ramaswamy Chandramouli, Zack Butcher

One of the basic tenets of zero trust is to remove the implicit trust in users, services, and devices based only on their network location, affiliation, and

Guide to a Secure Enterprise Network Landscape

November 17, 2022

Author(s)

Ramaswamy Chandramouli

Access to multiple cloud services, the geographic spread of enterprise Information Technology (IT) resources (including multiple data centers), and the

Implementation of DevSecOps for a Microservices-based Application with Service Mesh

March 8, 2022

Author(s)

Ramaswamy Chandramouli

Cloud-native applications have evolved into a standardized architecture consisting of multiple loosely coupled components called microservices (often typically

View more Publications

Ramaswamy Chandramouli (Fed)

Computer Scientist

Selected Publications

PIV Card Application and Middleware Interface Test Guidelines (SP800-73-2 compliance)

Interfaces for Personal Identity Verification

Guidelines for the Accreditation of Personal Identity Verification Card Issuers

Publications

Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines

High-Performance Computing Security Architecture, Threat Analysis, and Security Posture

A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments

Guide to a Secure Enterprise Network Landscape

Implementation of DevSecOps for a Microservices-based Application with Service Mesh