Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards.
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security SP 1800 Cybersecurity practice guides SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

CSV file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
NISTIR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements NISTIR 7511 Rev. 5 Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Download: NISTIR 7511 Rev. 5 (DOI); Local Download; SCAP Validation Program	Final	4/20/2018
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
White Paper		Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 White Paper Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 4/16/2018 Status: Download: White Paper (DOI); Cybersecurity Framework v1.1; Press Release (04-16-2018); Cybersecurity Framework homepage	Final	4/16/2018
SP	800-56C Rev. 1	Recommendation for Key Derivation through Extraction-then-Expansion SP 800-56C Rev. 1 Recommendation for Key Derivation through Extraction-then-Expansion 4/16/2018 Status: Download: SP 800-56C Rev. 1 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 1	Final	4/16/2018
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders SP 1800-13 (DRAFT) Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders 4/16/2018 Status: Download: Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	4/16/2018
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 (DRAFT) Security Recommendations for Server-based Hypervisor Platforms 4/11/2018 Status: Download: Draft SP 800-125A Rev. 1; Markup copy	Draft	4/11/2018
NISTIR	8179	Criticality Analysis Process Model: Prioritizing Systems and Components NISTIR 8179 Criticality Analysis Process Model: Prioritizing Systems and Components 4/09/2018 Status: Download: NISTIR 8179 (DOI); Local Download; Process Model (XML); Process Model Diagram; Process Model Diagram (SVG)	Final	4/09/2018
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organization SP 800-57 Part 2 Rev. 1 (DRAFT) Recommendation for Key Management, Part 2: Best Practices for Key Management Organization 4/06/2018 Status: Download: Draft SP 800-57 Part 2 Rev. 1	Draft	4/06/2018
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 (DRAFT) Automation Support for Security Control Assessments: Software Asset Management 4/05/2018 Status: Download: Draft NISTIR 8011 Vol. 3	Draft	4/05/2018
ITL Bulletin		Safeguards for Securing Virtualized Servers ITL Bulletin Safeguards for Securing Virtualized Servers 3/27/2018 Status: Download: March 2018 ITL Bulletin	Final	3/27/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 (DRAFT) Quick Start Guide for Populating Mobile Test Devices 3/26/2018 Status: Download: Draft SP 800-202; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Draft	3/26/2018
SP	800-160 Vol. 2	Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 2 (DRAFT) Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Download: Draft SP 800-160 Vol. 2; Comment Template	Draft	3/21/2018
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Download: SP 800-160 Vol. 1 (DOI); Local Download; "Rethinking Cybersecurity from the Inside Out" (blog post)	Final	3/21/2018
SP	500-325	Fog Computing Conceptual Model SP 500-325 Fog Computing Conceptual Model 3/14/2018 Status: Download: SP 500-325 (DOI); Local Download	Final	3/14/2018
ITL Bulletin	February 2018	Securing Tomorrow's Information Through Post-Quantum Cryptography ITL Bulletin February 2018 Securing Tomorrow's Information Through Post-Quantum Cryptography 2/27/2018 Status: Download: February 2018 ITL Bulletin	Final	2/27/2018
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 2/20/2018 Status: Download: SP 800-171 Rev. 1 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 1	Final	2/20/2018
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information (Final Draft) SP 800-171A (DRAFT) Assessing Security Requirements for Controlled Unclassified Information (Final Draft) 2/20/2018 Status: Download: Final Draft SP 800-171A; Comment template; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Draft	2/20/2018
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Download: SP 800-70 Rev. 4 (DOI); Local Download; National Checklist Program	Final	2/15/2018
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Download: SP 800-126 Rev. 3 (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Download: SP 800-126A (DOI); Local Download; SCAP project	Final	2/14/2018
NISTIR	8200	Interagency Report on Status of International Cybersecurity Standardization for the Internet of Things (IoT) NISTIR 8200 (DRAFT) Interagency Report on Status of International Cybersecurity Standardization for the Internet of Things (IoT) 2/14/2018 Status: Download: Draft NISTIR 8200; Comment template; View comments received to-date	Draft	2/14/2018
White Paper		[Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 2/07/2018 Status: Download: Project Description; Project homepage	Final	2/07/2018
White Paper		[Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 2/07/2018 Status: Download: Project Description; Project homepage	Final	2/07/2018
ITL Bulletin	January 2018	Guidance for Improving LTE-Based Mobile Communications Security ITL Bulletin January 2018 Guidance for Improving LTE-Based Mobile Communications Security 1/29/2018 Status: Download: January 2018 ITL Bulletin	Final	1/29/2018

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Computer Security
Resource Center