Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

CSV file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (DRAFT) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
White Paper		Internet of Things (IoT) Trust Concerns White Paper (DRAFT) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) SP 800-52 Rev. 2 (DRAFT) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) 10/15/2018 Status: Download: Draft (2nd) SP 800-52 Rev. 2	Draft	10/15/2018
NISTIR	8202	Blockchain Technology Overview NISTIR 8202 Blockchain Technology Overview 10/03/2018 Status: Download: NISTIR 8202 (DOI); Local Download	Final	10/03/2018
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Final Public Draft) SP 800-37 Rev. 2 (DRAFT) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Final Public Draft) 10/02/2018 Status: Download: Draft SP 800-37 Rev. 2; Draft, with line numbers; Comment template	Draft	10/02/2018
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 (DRAFT) Glossary of Key Information Security Terms 9/28/2018 Status: Download: Draft NISTIR 7298 Rev. 3; Online Glossary	Draft	9/28/2018
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (DRAFT) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 (DRAFT) Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 9/24/2018 Status: Download: NISTIR 8228 (DRAFT) (DOI); Local Download; Comment Template	Draft	9/24/2018
NISTIR	8221	A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks NISTIR 8221 (DRAFT) A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks 9/21/2018 Status: Download: Draft NISTIR 8221	Draft	9/21/2018
ITL Bulletin		Automated Cryptographic Validation (ACV) Testing ITL Bulletin Automated Cryptographic Validation (ACV) Testing 9/20/2018 Status: Download: September 2018 ITL Bulletin	Final	9/20/2018
NISTIR	8222	Internet of Things (IoT) Trust Concerns NISTIR 8222 (DRAFT) (WITHDRAWN) Internet of Things (IoT) Trust Concerns 9/17/2018 Status: Download: None available	Draft (Withdrawn)	9/17/2018
White Paper		Transitioning to the Security Content Automation Protocol (SCAP) Version 2 White Paper Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Download: White Paper (DOI); Transitioning to SCAP v2	Final	9/10/2018
White Paper		The Economic Impacts of the Advanced Encryption Standard, 1996-2017 White Paper The Economic Impacts of the Advanced Encryption Standard, 1996-2017 9/07/2018 Status: Download: White Paper (DOI); Final Report; Press Release (09-07-2018)	Final	9/07/2018
SP	1800-5	IT Asset Management SP 1800-5 IT Asset Management 9/07/2018 Status: Download: SP 1800-5 (DOI); Local Download; Web version; Project Homepage	Final	9/07/2018
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 (DRAFT) Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 9/04/2018 Status: Download: Draft SP 1800-14 volumes and Project Homepage; Submit Comments	Draft	9/04/2018
Journal Article		Finding Bugs in Cryptographic Hash Function Implementations Journal Article Finding Bugs in Cryptographic Hash Function Implementations 9/01/2018 Status: Download: Journal Article (DOI); Preprint	Final	9/01/2018
Journal Article		Improved upper bounds for the expected circuit complexity of dense systems of linear equations over GF(2) Journal Article Improved upper bounds for the expected circuit complexity of dense systems of linear equations over GF(2) 9/01/2018 Status: Download: Journal Article (DOI); Preprint	Final	9/01/2018
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (DRAFT) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 8/24/2018 Status: Download: SP 1800-19A (Preliminary Draft 1); Project Homepage	Draft	8/24/2018
SP	1800-17	Multifactor Authentication for E-Commerce SP 1800-17 (DRAFT) Multifactor Authentication for E-Commerce 8/22/2018 Status: Download: Draft SP 1800-17 volumes and Project Homepage; Submit Comments	Draft	8/22/2018
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 8/17/2018 Status: Download: SP 1800-8 (DOI); Local Download; Web version; Project Homepage	Final	8/17/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials (2nd Draft) SP 1800-12 (DRAFT) Derived Personal Identity Verification (PIV) Credentials (2nd Draft) 8/02/2018 Status: Download: Draft SP 1800-12 volumes and Project Homepage; Submit Comments	Draft	8/02/2018
Conference Proceedings		Quantifying Information Exposure in Internet Routing Conference Proceedings Quantifying Information Exposure in Internet Routing 8/01/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	8/01/2018
Conference Proceedings		Managed Blockchain Based Cryptocurrencies with Consensus Enforced Rules and Transparency Conference Proceedings Managed Blockchain Based Cryptocurrencies with Consensus Enforced Rules and Transparency 8/01/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	8/01/2018
Journal Article		Cybertrust in the IoT Age Journal Article Cybertrust in the IoT Age 7/31/2018 Status: Download: Journal Article (DOI); Preprint	Final	7/31/2018
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 Securing Electronic Health Records on Mobile Devices 7/27/2018 Status: Download: SP 1800-1 (DOI); Local Download; Web version; Project Homepage	Final	7/27/2018

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Computer Security
Resource Center