Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 Guide to IPsec VPNs 6/30/2020 Status: Final Download: SP 800-77 Rev. 1 (DOI); Local Download	Final	6/30/2020
ITL Bulletin		NIST Privacy Framework: An Overview ITL Bulletin NIST Privacy Framework: An Overview 6/24/2020 Status: Final Download: June 2020 ITL Bulletin	Final	6/24/2020
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 Securing Web Transactions: TLS Server Certificate Management 6/16/2020 Status: Final Download: SP 1800-16 (DOI); Local Download; SP 1800-16 volumes and Project Homepage	Final	6/16/2020
SP	800-63-4	PRE-DRAFT Call for Comments: Digital Identity Guidelines SP 800-63-4 (Draft) PRE-DRAFT Call for Comments: Digital Identity Guidelines 6/08/2020 Status: Draft Download: None available	Draft	6/08/2020
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 Recommendation for Cryptographic Key Generation 6/04/2020 Status: Final Download: SP 800-133 Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-133 Rev. 2	Final	6/04/2020
NISTIR	8259	Foundational Cybersecurity Activities for IoT Device Manufacturers NISTIR 8259 Foundational Cybersecurity Activities for IoT Device Manufacturers 5/29/2020 Status: Final Download: NISTIR 8259 (DOI); Local Download; Blog post	Final	5/29/2020
NISTIR	8259A	IoT Device Cybersecurity Capability Core Baseline NISTIR 8259A IoT Device Cybersecurity Capability Core Baseline 5/29/2020 Status: Final Download: NISTIR 8259A (DOI); Local Download; Blog post	Final	5/29/2020
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final Download: SP 800-204A (DOI); Local Download	Final	5/27/2020
White Paper		Getting Ready for Post-Quantum Cryptography: Explore Challenges Associated with Adoption and Use of Post-Quantum Cryptographic Algorithms White Paper (Draft) Getting Ready for Post-Quantum Cryptography: Explore Challenges Associated with Adoption and Use of Post-Quantum Cryptographic Algorithms 5/26/2020 Status: Draft Download: White Paper (DOI); Local Download; NCCoE applied crypto agility project - Considerations for Migrating to PQC Algorithms; Post-Quantum Cryptography project	Draft	5/26/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 5/21/2020 Status: Final Download: SP 800-137A (DOI); Local Download; Element Catalog for SP 800-137A	Final	5/21/2020
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 5/20/2020 Status: Final Download: SP 1800-23 (DOI); Local Download; Web version; Project Homepage	Final	5/20/2020
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 Security Analysis of First Responder Mobile and Wearable Devices 5/11/2020 Status: Final Download: NISTIR 8196 (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Final	5/11/2020
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 Recommendation for Key Management: Part 1 – General 5/04/2020 Status: Final Download: SP 800-57 Part 1 Rev. 5 (DOI); Local Download	Final	5/04/2020
NISTIR	8294	Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) NISTIR 8294 Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) 4/29/2020 Status: Final Download: NISTIR 8294 (DOI); Local Download	Final	4/29/2020
White Paper		Hardware-Enabled Security for Server Platforms: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases White Paper (Draft) Hardware-Enabled Security for Server Platforms: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 4/28/2020 Status: Draft Download: White Paper (DOI); Local Download	Draft	4/28/2020
NISTIR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management NISTIR 8011 Vol. 4 Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final Download: NISTIR 8011 Vol. 4 (DOI); Local Download	Final	4/28/2020
White Paper		Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files White Paper Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files 4/24/2020 Status: Final Download: Detailed Guide with Recommendations; Brief Guide; Project: Improving Cybersecurity of Managed Service Providers	Final	4/24/2020
White Paper		Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) White Paper Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) 4/23/2020 Status: Final Download: White Paper (DOI); Local Download	Final	4/23/2020
White Paper		5G Cybersecurity: Preparing a Secure Evolution to 5G White Paper 5G Cybersecurity: Preparing a Secure Evolution to 5G 4/13/2020 Status: Final Download: Project Description; Project homepage	Final	4/13/2020
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Draft) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/13/2020 Status: Draft Download: SP 1800-19C (Prelim. Draft 1); Submit Comments on SP 1800-19C; SP 1800-19A (Prelim. Draft 1); SP 1800-19B (Prelim. Draft 1); Project Homepage	Draft	4/13/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 (Draft) General Access Control Guidance for Cloud Systems 4/01/2020 Status: Draft Download: SP 800-210 (Draft) (DOI); Local Download	Draft	4/01/2020
White Paper		Methodology for Characterizing Network Behavior of Internet of Things Devices White Paper (Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 4/01/2020 Status: Draft Download: White Paper (DOI); Local Download; Submit Comments; Project homepage	Draft	4/01/2020
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final Download: SP 800-175B Rev. 1 (DOI); Local Download	Final	3/31/2020
White Paper		[Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise White Paper [Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final Download: Project Description; Project homepage	Final	3/30/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 (Draft) Recommendation for Key-Derivation Methods in Key-Establishment Schemes 3/24/2020 Status: Draft Download: SP 800-56C Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Current Publications

Publications

Recent Publications

Current Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Current Publications

Publications

Recent Publications

Current Publications

Computer Security
Resource Center