Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A (Draft) Building Secure Microservices-based Applications Using Service-Mesh Architecture 1/17/2020 Status: Draft Download: SP 800-204A (Draft) (DOI); Local Download	Draft	1/17/2020
White Paper		A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 1/14/2020 Status: Final Download: White Paper (DOI); Local Download	Final	1/14/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A (Draft) Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 1/13/2020 Status: Draft Download: SP 800-137A (Draft) (DOI); Local Download; Element Catalog for Draft SP 800-137A; Comment template	Draft	1/13/2020
NISTIR	8259	Recommendations for IoT Device Manufacturers: Foundational Activities and Core Device Cybersecurity Capability Baseline (2nd Draft) NISTIR 8259 (Draft) Recommendations for IoT Device Manufacturers: Foundational Activities and Core Device Cybersecurity Capability Baseline (2nd Draft) 1/07/2020 Status: Draft Download: NISTIR 8259 (Draft) (DOI); Local Download	Draft	1/07/2020
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final Download: SP 800-189 (DOI); Local Download	Final	12/17/2019
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 (Draft) Recommendation for Stateful Hash-Based Signature Schemes 12/11/2019 Status: Draft Download: SP 800-208 (Draft) (DOI); Local Download	Draft	12/11/2019
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Developing Cyber Resilient Systems: A Systems Security Engineering Approach 11/27/2019 Status: Final Download: SP 800-160 Vol. 2 (DOI); Local Download	Final	11/27/2019
White Paper		[Project Description] Validating the Integrity of Servers and Client Devices: Supply Chain Assurance White Paper (Draft) [Project Description] Validating the Integrity of Servers and Client Devices: Supply Chain Assurance 11/22/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	11/22/2019
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Draft) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 11/21/2019 Status: Draft Download: SP 1800-15 (2nd Preliminary Draft); Submit Comments on SP 1800-15; Project Homepage	Draft	11/21/2019
NISTIR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management NISTIR 8011 Vol. 4 (Draft) Automation Support for Security Control Assessments: Software Vulnerability Management 11/20/2019 Status: Draft Download: NISTIR 8011 Vol. 4 (Draft) (DOI); Local Download	Draft	11/20/2019
NISTIR	8214A	Towards NIST Standards for Threshold Schemes for Cryptographic Primitives: A Preliminary Roadmap NISTIR 8214A (Draft) Towards NIST Standards for Threshold Schemes for Cryptographic Primitives: A Preliminary Roadmap 11/08/2019 Status: Draft Download: NISTIR 8214A (Draft) (DOI); Local Download	Draft	11/08/2019
SP	800-186	Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Draft) Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters 10/31/2019 Status: Draft Download: SP 800-186 (Draft) (DOI); Local Download	Draft	10/31/2019
FIPS	186-5	Digital Signature Standard (DSS) FIPS 186-5 (Draft) Digital Signature Standard (DSS) 10/31/2019 Status: Draft Download: FIPS 186-5 (Draft) (DOI); Local Download	Draft	10/31/2019
NISTIR	8269	A Taxonomy and Terminology of Adversarial Machine Learning NISTIR 8269 (Draft) A Taxonomy and Terminology of Adversarial Machine Learning 10/30/2019 Status: Draft Download: NISTIR 8269 (Draft) (DOI); Local Download; Submit Comments; Project Homepage	Draft	10/30/2019
SP	1500-4r2	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 SP 1500-4r2 NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 10/21/2019 Status: Final Download: SP 1500-4r2 (DOI); Local Download; NIST Big Data Interoperability Framework V3.0; NIST news article	Final	10/21/2019
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final Download: SP 800-128 (DOI); Local Download	Final	10/10/2019
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B (Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 10/09/2019 Status: Draft Download: Draft SP 800-140B	Draft	10/09/2019
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C (Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft Download: Draft SP 800-140C	Draft	10/09/2019
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 (Draft) FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft Download: Draft SP 800-140	Draft	10/09/2019
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24579:2017 SP 800-140E (Draft) CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24579:2017 10/09/2019 Status: Draft Download: Draft SP 800-140E	Draft	10/09/2019
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A (Draft) CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft Download: Draft SP 800-140A	Draft	10/09/2019
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) SP 800-140D (Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) 10/09/2019 Status: Draft Download: Draft SP 800-140D	Draft	10/09/2019
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) SP 800-140F (Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) 10/09/2019 Status: Draft Download: Draft SP 800-140F	Draft	10/09/2019

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Current Publications

Publications

Recent Publications

Current Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Current Publications

Publications

Recent Publications

Current Publications

Computer Security
Resource Center