Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
White Paper		A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper (DRAFT) A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 7/09/2019 Status: Draft Download: White Paper (DOI); Local Download; Comment template	Draft	7/09/2019
White Paper	NIST Technical Note (TN) 2051	Cybersecurity Framework Smart Grid Profile White Paper NIST Technical Note (TN) 2051 Cybersecurity Framework Smart Grid Profile 7/09/2019 Status: Final Download: White Paper (DOI); Local Download; Cybersecurity Framework	Final	7/09/2019
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 (DRAFT) Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 7/03/2019 Status: Draft Download: SP 800-175B Rev. 1 (DRAFT) (DOI); Local Download	Draft	7/03/2019
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 Glossary of Key Information Security Terms 7/03/2019 Status: Final Download: NISTIR 7298 Rev. 3 (DOI); Local Download; Online Glossary	Final	7/03/2019
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 (DRAFT) Guide to IPsec VPNs 7/02/2019 Status: Draft Download: SP 800-77 Rev. 1 (DRAFT) (DOI); Local Download	Draft	7/02/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final Download: SP 1800-14 (DOI); Local Download; Web version; Project Homepage	Final	6/28/2019
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final Download: NISTIR 8228 (DOI); Local Download; NIST news article	Final	6/25/2019
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper (DRAFT) [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 6/24/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/24/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper (DRAFT) [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 6/24/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/24/2019
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 (DRAFT) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/19/2019 Status: Draft Download: Draft SP 800-171 Rev. 2; Draft SP 800-171 Rev. 2 with Line Numbers; Comment template; NIST news article	Draft	6/19/2019
SP	800-171B	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets SP 800-171B (DRAFT) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets 6/19/2019 Status: Draft Download: Draft SP 800-171B; Draft SP 800-171B (with line numbers); Comment template for SP 800-171B; Comments received on SP 800-171B (@Protecting CUI Project); DoD cost estimate of Draft SP 800-171B; Submit/View comments on DoD cost estimate of Draft SP 800-171B; NIST news article	Draft	6/19/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 Attribute Considerations for Access Control Systems 6/18/2019 Status: Final Download: SP 800-205 (DOI); Local Download	Final	6/18/2019
White Paper		[Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses White Paper (DRAFT) [Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/17/2019
White Paper		[Project Description] Detecting and Protecting Against Data Integrity Attacks in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector White Paper (DRAFT) [Project Description] Detecting and Protecting Against Data Integrity Attacks in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 6/12/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/12/2019
White Paper		Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) White Paper (DRAFT) Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) 6/11/2019 Status: Draft Download: SSDF Draft	Draft	6/11/2019
NISTIR	8221	A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data NISTIR 8221 A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data 6/05/2019 Status: Final Download: NISTIR 8221 (DOI); Local Download	Final	6/05/2019
NISTIR	8204	Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template NISTIR 8204 Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template 5/31/2019 Status: Final Download: NISTIR 8204 (DOI); Local Download; OLIR Template; OLIR Validation Tool; Informative References homepage	Final	5/31/2019
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) SP 1800-13 (DRAFT) Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) 5/29/2019 Status: Draft Download: Second Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	5/29/2019
NISTIR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 1 – General Implementation Guidance NISTIR 8183A Vol. 1 (DRAFT) Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 1 – General Implementation Guidance 5/28/2019 Status: Draft Download: NISTIR 8183A Vol. 1 (DRAFT) (DOI); Local Download; Comment template	Draft	5/28/2019
NISTIR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case NISTIR 8183A Vol. 2 (DRAFT) Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 5/28/2019 Status: Draft Download: NISTIR 8183A Vol. 2 (DRAFT) (DOI); Local Download; Comment template	Draft	5/28/2019
NISTIR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case NISTIR 8183A Vol. 3 (DRAFT) Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 5/28/2019 Status: Draft Download: NISTIR 8183A Vol. 3 (DRAFT) (DOI); Local Download; Comment template	Draft	5/28/2019
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations 5/23/2019 Status: Final Download: SP 800-57 Part 2 Rev. 1 (DOI); Local Download	Final	5/23/2019
White Paper		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning White Paper (DRAFT) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft Download: Draft White Paper	Draft	5/22/2019
ITL Bulletin		FIPS 140-3 Adopts ISO/IEC Standards ITL Bulletin FIPS 140-3 Adopts ISO/IEC Standards 5/20/2019 Status: Final Download: May 2019 ITL Bulletin	Final	5/20/2019
NISTIR	8183	Cybersecurity Framework Manufacturing Profile NISTIR 8183 Cybersecurity Framework Manufacturing Profile 5/20/2019 Status: Final Download: NISTIR 8183 (DOI); Local Download; NIST Cybersecurity Framework	Final	5/20/2019

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

Quick Links

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Quick Links

Computer Security
Resource Center