Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

CSV file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	1800-19A	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments—Volume A: Executive Summary (Prelim. Draft 1) SP 1800-19A (DRAFT) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments—Volume A: Executive Summary (Prelim. Draft 1) 8/24/2018 Status: Download: SP 1800-19A (Preliminary Draft 1); Project Homepage	Draft	8/24/2018
SP	1800-17	Multifactor Authentication for E-Commerce SP 1800-17 (DRAFT) Multifactor Authentication for E-Commerce 8/22/2018 Status: Download: Draft SP 1800-17 volumes and Project Homepage; Submit Comments	Draft	8/22/2018
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 8/17/2018 Status: Download: SP 1800-8 (DOI); Local Download; Web version; Project Homepage	Final	8/17/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials (2nd Draft) SP 1800-12 (DRAFT) Derived Personal Identity Verification (PIV) Credentials (2nd Draft) 8/02/2018 Status: Download: Draft SP 1800-12 volumes and Project Homepage; Submit Comments	Draft	8/02/2018
Journal Article		Cybertrust in the IoT Age Journal Article Cybertrust in the IoT Age 7/31/2018 Status: Download: Journal Article (DOI); Preprint	Final	7/31/2018
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 Securing Electronic Health Records on Mobile Devices 7/27/2018 Status: Download: SP 1800-1 (DOI); Local Download; Web version; Project Homepage	Final	7/27/2018
NISTIR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography NISTIR 8214 (DRAFT) Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 7/26/2018 Status: Download: Draft NISTIR 8214	Draft	7/26/2018
ITL Bulletin		Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements ITL Bulletin Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements 7/26/2018 Status: Download: July 2018 ITL Bulletin	Final	7/26/2018
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 (DRAFT) Vetting the Security of Mobile Applications 7/23/2018 Status: Download: Draft SP 800-163 Rev. 1	Draft	7/23/2018
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 (DRAFT) Transitioning the Use of Cryptographic Algorithms and Key Lengths 7/19/2018 Status: Download: Draft SP 800-131A Rev. 2	Draft	7/19/2018
Journal Article		In IoT We Trust? Journal Article In IoT We Trust? 7/13/2018 Status: Download: Article	Final	7/13/2018
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 Identity and Access Management for Electric Utilities 7/13/2018 Status: Download: SP 1800-2 (DOI); Local Download; Other Publication Files; Project Homepage	Final	7/13/2018
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 (DRAFT) Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 7/10/2018 Status: Download: Draft SP 800-56B Rev. 2	Draft	7/10/2018
Conference Proceedings		Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs Conference Proceedings Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs 7/10/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	7/10/2018
Conference Proceedings		Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds Conference Proceedings Modeling and Mitigating the Insider Threat of Remote Administrators in Clouds 7/10/2018 Status: Download: Conference Proceedings (DOI); Preprint	Final	7/10/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (DRAFT) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Download: Draft SP 800-71	Draft	7/02/2018
SP	800-203	2017 NIST/ITL Cybersecurity Program Annual Report SP 800-203 (DRAFT) 2017 NIST/ITL Cybersecurity Program Annual Report 7/02/2018 Status: Download: SP 800-203 (PRE-Publication)	Draft	7/02/2018
SP	800-116 Rev. 1	Guidelines for the Use of PIV Credentials in Facility Access SP 800-116 Rev. 1 Guidelines for the Use of PIV Credentials in Facility Access 6/29/2018 Status: Download: SP 800-116 Rev. 1 (DOI); Local Download	Final	6/29/2018
Book Section		The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form Book Section The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form 6/27/2018 Status: Download: Book Section (DOI); Preprint	Final	6/27/2018
SP	1500-4r1	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 2 SP 1500-4r1 NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 2 6/26/2018 Status: Download: SP 1500-4r1 (DOI); Local Download; NIST Big Data Interoperability Framework V2.0	Final	6/26/2018
ITL Bulletin		Putting First Things First – A Model Process for Criticality Analysis ITL Bulletin Putting First Things First – A Model Process for Criticality Analysis 6/26/2018 Status: Download: June 2018 ITL Bulletin	Final	6/26/2018
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Download: SP 800-171A (DOI); Local Download; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018
Journal Article		Internet of Things (IoT) Metrology Journal Article Internet of Things (IoT) Metrology 6/11/2018 Status: Download: Journal Article (DOI); Preprint	Final	6/11/2018
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/07/2018 Status: Download: SP 800-171 Rev. 1 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 1	Final	6/07/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Download: SP 800-125A Rev. 1 (DOI); Local Download	Final	6/07/2018

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Computer Security
Resource Center