Publications

The NIST Cybersecurity and Privacy Program develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This catalog includes the following NIST technical publication series:

FIPS	Federal Information Processing Standards Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (only pubs on cybersecurity and privacy)
IR	NIST Interagency or Internal Reports (NIST IR) Reports of research findings, including background information for FIPS and SPs. The subset IRs listed here are related to the NIST Cybersecurity and Privacy Program.
CSWP	NIST Cybersecurity White Papers General white papers, thought pieces, and official cybersecurity- and privacy-related papers not published as a FIPS, SP, or IR.
Project Descriptions	Project Descriptions from the National Cybersecurity Center of Excellence (NCCoE).
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins (1990-2020) Monthly overviews of NIST's security and privacy publications, programs and projects.
Some publications in this catalog are from other NIST technical series:
AI	Artificial Intelligence: NIST AI series reports focused on cybersecurity and privacy. See the NIST Trustworty & Responsible AI Resource Center for all NIST AI series publications.
GCR	Grant/Contract Reports: Work perfromed solely by an external person/organization under a grant or contract with NIST.
TN	Technical Notes: Studies or reports that are very restrictive in their treatment of a subject.
VTS	NIST Voting Technology Series: Reports related to the design, operations and use of voting technology.

Find more of our research in: Journal Articles, Conference Papers, Books, and Other miscellaneous papers. More of these publications from before 2008 will be added to this database.

More info:
- Translations are available for some publications.
- Download a spreadsheet (XLSX) of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and CSWPs.
- RSS/Atom and JSON feeds for Draft Publications Open for Comment.
- Learn about Digital Object Identifiers (DOI).
- See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.

Series	Number	Title Publications	Status	Release Date
IR	8579	Developing the NCCoE Chatbot: Technical and Security Learnings from the Initial Implementation IR 8579 (Initial Public Draft) Developing the NCCoE Chatbot: Technical and Security Learnings from the Initial Implementation 6/18/2025 Status: Draft	Draft	6/18/2025
CSWP	36E	5G Network Security Design Principles: Applying 5G Cybersecurity and Privacy Capabilities CSWP 36E (Initial Public Draft) 5G Network Security Design Principles: Applying 5G Cybersecurity and Privacy Capabilities 6/17/2025 Status: Draft	Draft	6/17/2025
SP	1800-35	Implementing a Zero Trust Architecture: High-Level Document SP 1800-35 (Final) Implementing a Zero Trust Architecture: High-Level Document 6/10/2025 Status: Final	Final	6/10/2025
SP	800-197A	PRE-DRAFT Call for Comments: NIST Launches Development of Cryptographic Accordions SP 800-197A (Initial Preliminary Draft) PRE-DRAFT Call for Comments: NIST Launches Development of Cryptographic Accordions 6/06/2025 Status: Draft	Draft	6/06/2025
CSWP	45	Metrics and Methodology for Hardware Security Constructs CSWP 45 (Final) Metrics and Methodology for Hardware Security Constructs 6/05/2025 Status: Final	Final	6/05/2025
Conference Paper		Exploring Prompt Patterns for Effective Vulnerability Repair in Real-World Code by Large Language Models Conference Paper (Final) Exploring Prompt Patterns for Effective Vulnerability Repair in Real-World Code by Large Language Models 6/05/2025 Status: Final	Final	6/05/2025
SP	800-18 Rev. 2	Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems SP 800-18 Rev. 2 (Initial Public Draft) Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems 6/04/2025 Status: Draft	Draft	6/04/2025
IR	8557	Report of the Virtual Workshop on Usable Cybersecurity and Privacy for Immersive Technologies IR 8557 (Final) Report of the Virtual Workshop on Usable Cybersecurity and Privacy for Immersive Technologies 5/23/2025 Status: Final	Final	5/23/2025
CSWP	41	Likely Exploited Vulnerabilities: A Proposed Metric for Vulnerability Exploitation Probability CSWP 41 (Final) Likely Exploited Vulnerabilities: A Proposed Metric for Vulnerability Exploitation Probability 5/19/2025 Status: Final	Final	5/19/2025
IR	8572	Workshop Summary Report for “Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers” IR 8572 (Final) Workshop Summary Report for “Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers” 5/13/2025 Status: Final	Final	5/13/2025
IR	8259 Rev. 1	Foundational Cybersecurity Activities for IoT Product Manufacturers IR 8259 Rev. 1 (Initial Public Draft) Foundational Cybersecurity Activities for IoT Product Manufacturers 5/13/2025 Status: Draft	Draft	5/13/2025
IR	7621 Rev. 2	Small Business Cybersecurity: Non-Employer Firms IR 7621 Rev. 2 (Initial Public Draft) Small Business Cybersecurity: Non-Employer Firms 5/01/2025 Status: Draft	Draft	5/01/2025
SP	800-234	High-Performance Computing (HPC) Security Overlay SP 800-234 (Initial Public Draft) High-Performance Computing (HPC) Security Overlay 5/01/2025 Status: Draft	Draft	5/01/2025
SP	800-236	Fiscal Year 2024 Cybersecurity and Privacy Annual Report SP 800-236 (Final) Fiscal Year 2024 Cybersecurity and Privacy Annual Report 4/28/2025 Status: Final	Final	4/28/2025
IR	8562	Summary Report for “Workshop on Updating Manufacturer Guidance for Securable Connected Product Development” IR 8562 (Final) Summary Report for “Workshop on Updating Manufacturer Guidance for Securable Connected Product Development” 4/16/2025 Status: Final	Final	4/16/2025
Conference Paper		Data Frequency Coverage Impact on AI Performance Conference Paper (Final) Data Frequency Coverage Impact on AI Performance 4/15/2025 Status: Final	Final	4/15/2025
CSWP	42	Towards Automating IoT Security: Implementing Trusted Network-Layer Onboarding CSWP 42 (Initial Public Draft) Towards Automating IoT Security: Implementing Trusted Network-Layer Onboarding 4/14/2025 Status: Draft	Draft	4/14/2025
CSWP	40	NIST Privacy Framework 1.1 CSWP 40 (Initial Public Draft) NIST Privacy Framework 1.1 4/14/2025 Status: Draft	Draft	4/14/2025
IR	8552	Requirements for Cryptographic Accordions IR 8552 (Final) Requirements for Cryptographic Accordions 4/11/2025 Status: Final	Final	4/11/2025
SP	800-81 Rev. 3	Secure Domain Name System (DNS) Deployment Guide SP 800-81 Rev. 3 (Initial Public Draft) Secure Domain Name System (DNS) Deployment Guide 4/10/2025 Status: Draft	Draft	4/10/2025
SP	800-61 Rev. 3	Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile SP 800-61 Rev. 3 (Final) Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile 4/03/2025 Status: Final	Final	4/03/2025
IR	8214C	NIST First Call for Multi-Party Threshold Schemes IR 8214C (2nd Public Draft) NIST First Call for Multi-Party Threshold Schemes 3/27/2025 Status: Draft	Draft	3/27/2025
SP	800-228	Guidelines for API Protection for Cloud-Native Systems SP 800-228 (Initial Public Draft) Guidelines for API Protection for Cloud-Native Systems 3/25/2025 Status: Draft	Draft	3/25/2025
AI	100-2 E2025	Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations AI 100-2 E2025 (Final) Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations 3/24/2025 Status: Final	Final	3/24/2025
SP	1800-33	5G Cybersecurity SP 1800-33 (Initial Public Draft) 5G Cybersecurity 3/18/2025 Status: Draft	Draft	3/18/2025

Current Publications

Publications

Recent Publications

Current Publications