Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

CSV file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Download: SP 800-171A (DOI); Local Download; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Download: SP 800-125A Rev. 1 (DOI); Local Download	Final	6/07/2018
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/07/2018 Status: Download: SP 800-171 Rev. 1 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 1	Final	6/07/2018
White Paper		A Data Structure for Integrity Protection with Erasure Capability White Paper (DRAFT) A Data Structure for Integrity Protection with Erasure Capability 5/31/2018 Status: Download: Block Matrix Draft	Draft	5/31/2018
White Paper		A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future White Paper A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future 5/30/2018 Status: Download: Final Report on Supporting the Nation's Cybersecurity Workforce; NIST News Release; Workshop on Cybersecurity Workforce Development (Aug. 2017)	Final	5/30/2018
White Paper		A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats White Paper A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats 5/30/2018 Status: Download: Final Report on Enhancing Resilience Against Botnets; NIST News Release	Final	5/30/2018
ITL Bulletin	May 2018	Protecting Software Integrity Through Code Signing ITL Bulletin May 2018 Protecting Software Integrity Through Code Signing 5/23/2018 Status: Download: May 2018 ITL Bulletin	Final	5/23/2018
NISTIR	8204	Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template NISTIR 8204 (DRAFT) Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template 5/17/2018 Status: Download: Draft NISTIR 8204; Informative References homepage; OLIR Submission Template	Draft	5/17/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Download: SP 800-202 (DOI); Local Download; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Final	5/10/2018
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 (DRAFT) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 5/09/2018 Status: Download: Draft SP 800-37 Rev. 2; Draft, with line numbers; Mark-up Copy of Draft SP 800-37 Rev. 2; Comment template; Presentation: RMF 2.0 (introduces the initial public draft); NIST Press Release	Draft	5/09/2018
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 Platform Firmware Resiliency Guidelines 5/04/2018 Status: Download: SP 800-193 (DOI); Local Download	Final	5/04/2018
ITL Bulletin	April 2018	Improving the Trustworthiness of Email, and Beyond! ITL Bulletin April 2018 Improving the Trustworthiness of Email, and Beyond! 4/25/2018 Status: Download: April 2018 ITL Bulletin	Final	4/25/2018
NISTIR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements NISTIR 7511 Rev. 5 Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Download: NISTIR 7511 Rev. 5 (DOI); Local Download; SCAP Validation Program	Final	4/20/2018
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
White Paper		Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 White Paper Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 4/16/2018 Status: Download: White Paper (DOI); Cybersecurity Framework v1.1; Press Release (04-16-2018); Cybersecurity Framework homepage	Final	4/16/2018
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
SP	800-56C Rev. 1	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 1 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 4/16/2018 Status: Download: SP 800-56C Rev. 1 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 1	Final	4/16/2018
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders SP 1800-13 (DRAFT) Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders 4/16/2018 Status: Download: Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	4/16/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 (DRAFT) Security Recommendations for Server-based Hypervisor Platforms 4/11/2018 Status: Download: Draft SP 800-125A Rev. 1; Markup copy	Draft (Withdrawn)	4/11/2018
Conference Proceedings		Combinatorial Security Testing Course Conference Proceedings Combinatorial Security Testing Course 4/10/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	4/10/2018
Conference Proceedings		What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors? [poster] Conference Proceedings What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors? [poster] 4/10/2018 Status: Download: Conference Proceedings (DOI); Poster	Final	4/10/2018
Conference Proceedings		HFERP - A New Multivariate Encryption Scheme Conference Proceedings HFERP - A New Multivariate Encryption Scheme 4/09/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	4/09/2018
NISTIR	8179	Criticality Analysis Process Model: Prioritizing Systems and Components NISTIR 8179 Criticality Analysis Process Model: Prioritizing Systems and Components 4/09/2018 Status: Download: NISTIR 8179 (DOI); Local Download; Process Model (XML); Process Model Diagram; Process Model Diagram (SVG)	Final	4/09/2018
Conference Proceedings		Improved Cryptanalysis of HFEv- via Projection Conference Proceedings Improved Cryptanalysis of HFEv- via Projection 4/08/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	4/08/2018
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organization SP 800-57 Part 2 Rev. 1 (DRAFT) Recommendation for Key Management, Part 2: Best Practices for Key Management Organization 4/06/2018 Status: Download: Draft SP 800-57 Part 2 Rev. 1	Draft	4/06/2018

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Computer Security
Resource Center