Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins, and White Papers

RSS/Atom and JSON feeds are available for our Draft Publications Open for Comment

See the Crypto Publication Review Project for current reviews of numerous cryptography standards, recommendations, and guidelines.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 (Draft) Recommendation for Key Derivation Using Pseudorandom Functions 10/18/2021 Status: Draft Download: SP 800-108 Rev. 1 (Draft) (DOI); Local Download	Draft	10/18/2021
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Draft) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 9/30/2021 Status: Draft Download: SP 800-218 (Draft) (DOI); Local Download; SSDF Project homepage	Draft	9/30/2021
White Paper		Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards White Paper Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards 9/29/2021 Status: Final Download: White Paper (DOI); Local Download; Public Data Resource	Final	9/29/2021
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C (Draft) Implementation of DevSecOps for a Microservices-based Application with Service Mesh 9/29/2021 Status: Draft Download: SP 800-204C (Draft) (DOI); Local Download	Draft	9/29/2021
SP	800-214	2020 Cybersecurity and Privacy Annual Report SP 800-214 2020 Cybersecurity and Privacy Annual Report 9/28/2021 Status: Final Download: SP 800-214 (DOI); Local Download	Final	9/28/2021
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 (Draft) Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 9/23/2021 Status: Draft Download: Draft SP 1800-10; Submit comments	Draft	9/23/2021
SP	800-50 Rev. 1	PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program SP 800-50 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program 9/21/2021 Status: Draft Download: None available	Draft	9/21/2021
SP	1800-32	Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources SP 1800-32 (Draft) Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 9/21/2021 Status: Draft Download: Draft SP 1800-32 files; Submit Comments	Draft	9/21/2021
NISTIR	8360	Machine Learning for Access Control Policy Verification NISTIR 8360 Machine Learning for Access Control Policy Verification 9/16/2021 Status: Final Download: NISTIR 8360 (DOI); Local Download	Final	9/16/2021
White Paper	NIST Technical Note (TN) 2060	BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards White Paper NIST Technical Note (TN) 2060 BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards 9/15/2021 Status: Final Download: White Paper (DOI); Local Download; BGP-SRx Prototype; Public Data Resource	Final	9/15/2021
NISTIR	8379	Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance NISTIR 8379 Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance 9/09/2021 Status: Final Download: NISTIR 8379 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	9/09/2021
NISTIR	8374	Cybersecurity Framework Profile for Ransomware Risk Management NISTIR 8374 (Draft) Cybersecurity Framework Profile for Ransomware Risk Management 9/08/2021 Status: Draft Download: NISTIR 8374 (Draft) (DOI); Local Download	Draft	9/08/2021
NISTIR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management NISTIR 8286B (Draft) Prioritizing Cybersecurity Risk for Enterprise Risk Management 9/01/2021 Status: Draft Download: NISTIR 8286B (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	9/01/2021
SP	1800-34	Validating the Integrity of Computing Devices (Preliminary Draft) SP 1800-34 (Draft) Validating the Integrity of Computing Devices (Preliminary Draft) 8/31/2021 Status: Draft Download: SP 1800-34B (Prelim. Draft); SP 1800-34A (Prelim. Draft)	Draft	8/31/2021
White Paper		[Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector White Paper (Draft) [Project Description] Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector 8/31/2021 Status: Draft Download: Draft Project Description; Submit comments; Project homepage	Draft	8/31/2021
NISTIR	8259B	IoT Non-Technical Supporting Capability Core Baseline NISTIR 8259B IoT Non-Technical Supporting Capability Core Baseline 8/25/2021 Status: Final Download: NISTIR 8259B (DOI); Local Download; IoT Device Cybersecurity Requirement Catalogs	Final	8/25/2021
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders SP 1800-13 Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders 8/25/2021 Status: Final Download: SP 1800-13 (DOI); Local Download; SP 1800-13 volumes and project homepage	Final	8/25/2021
SP	800-140F Rev. 1	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F Rev. 1 (Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140F Rev. 1 (Draft) (DOI); Local Download; Comment template	Draft	8/20/2021
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 (Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140D Rev. 1 (Draft) (DOI); Local Download; Comments template	Draft	8/20/2021
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 (Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140C Rev. 1 (Draft) (DOI); Local Download; Comment template	Draft	8/20/2021
NISTIR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework 8/17/2021 Status: Final Download: NISTIR 8170 (DOI); Local Download; Cybersecurity Framework homepage	Final	8/17/2021
Journal Article		Development of the Advanced Encryption Standard Journal Article Development of the Advanced Encryption Standard 8/16/2021 Status: Final Download: Journal Article (DOI); Local Download	Final	8/16/2021
Conference Proceedings		It's the Company, the Government, You and I: User Perceptions of Responsibility for Smart Home Privacy and Security Conference Proceedings It's the Company, the Government, You and I: User Perceptions of Responsibility for Smart Home Privacy and Security 8/11/2021 Status: Final Download: Paper	Final	8/11/2021
SP	800-204B	Attribute-based Access Control for Microservices-based Applications using a Service Mesh SP 800-204B Attribute-based Access Control for Microservices-based Applications using a Service Mesh 8/06/2021 Status: Final Download: SP 800-204B (DOI); Local Download	Final	8/06/2021
SP	1271	Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide SP 1271 Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide 8/06/2021 Status: Final Download: SP 1271 (DOI); Local Download	Final	8/06/2021

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Publications

Recent Publications

Current Publications