Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Download: SP 800-37 Rev. 2 (DOI); Local Download	Final	12/20/2018
ITL Bulletin		Securing Wireless Infusion Pumps ITL Bulletin Securing Wireless Infusion Pumps 12/19/2018 Status: Download: December 2018 ITL Bulletin	Final	12/19/2018
SP	800-189	Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation SP 800-189 (DRAFT) Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation 12/17/2018 Status: Download: SP 800-189 (DRAFT) (DOI); Local Download	Draft	12/17/2018
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Download: NISTIR 8011 Vol. 3 (DOI); Local Download	Final	12/06/2018
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 (DRAFT) Security Analysis of First Responder Mobile and Wearable Devices 12/03/2018 Status: Download: NISTIR 8196 (DRAFT) (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Draft	12/03/2018
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (DRAFT) Securing Web Transactions: TLS Server Certificate Management 11/29/2018 Status: Download: SP 1800-16B (Prelim. Draft 1); SP 1800-16A (Prelim. Draft 1); Submit Comments; Project Homepage	Draft	11/29/2018
NISTIR	8200	Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) NISTIR 8200 Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) 11/29/2018 Status: Download: NISTIR 8200 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	11/29/2018
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organizations (2nd Draft) SP 800-57 Part 2 Rev. 1 (DRAFT) Recommendation for Key Management, Part 2: Best Practices for Key Management Organizations (2nd Draft) 11/20/2018 Status: Download: Draft (2nd) SP 800-57 Part 2 Rev. 1	Draft	11/20/2018
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (DRAFT) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 11/20/2018 Status: Download: SP 1800-19B (Preliminary Draft 1); Submit Comments on 1800-19B; SP 1800-19A (Preliminary Draft 1); Project Homepage	Draft	11/20/2018
White Paper		[Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector White Paper (DRAFT) [Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector 11/19/2018 Status: Download: Project Description; Submit Comments; Project homepage	Draft	11/19/2018
NISTIR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection NISTIR 8219 (DRAFT) Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 11/06/2018 Status: Download: Draft NISTIR 8219; Submit Comments; Project Homepage	Draft	11/06/2018
Journal Article		Access Control for Emerging Distributed Systems Journal Article Access Control for Emerging Distributed Systems 11/01/2018 Status: Download: Journal Article (DOI); Preprint	Final	11/01/2018
ITL Bulletin		One Block at a Time – Helping to Build Blockchain Knowledge ITL Bulletin One Block at a Time – Helping to Build Blockchain Knowledge 10/25/2018 Status: Download: October 2018 ITL Bulletin	Final	10/25/2018
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (DRAFT) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
White Paper		Internet of Things (IoT) Trust Concerns White Paper (DRAFT) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) SP 800-52 Rev. 2 (DRAFT) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) 10/15/2018 Status: Download: Draft (2nd) SP 800-52 Rev. 2; Comments received	Draft	10/15/2018
NISTIR	8202	Blockchain Technology Overview NISTIR 8202 Blockchain Technology Overview 10/03/2018 Status: Download: NISTIR 8202 (DOI); Local Download	Final	10/03/2018
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Final Public Draft) SP 800-37 Rev. 2 (DRAFT) (WITHDRAWN) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Final Public Draft) 10/02/2018 Status: Download: Draft SP 800-37 Rev. 2; Draft, with line numbers; Comment template	Draft (Withdrawn)	10/02/2018
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 (DRAFT) Glossary of Key Information Security Terms 9/28/2018 Status: Download: Draft NISTIR 7298 Rev. 3; Online Glossary	Draft	9/28/2018
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (DRAFT) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 (DRAFT) Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 9/24/2018 Status: Download: NISTIR 8228 (DRAFT) (DOI); Local Download; Comment Template	Draft	9/24/2018
NISTIR	8221	A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks NISTIR 8221 (DRAFT) A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks 9/21/2018 Status: Download: Draft NISTIR 8221	Draft	9/21/2018
ITL Bulletin		Automated Cryptographic Validation (ACV) Testing ITL Bulletin Automated Cryptographic Validation (ACV) Testing 9/20/2018 Status: Download: September 2018 ITL Bulletin	Final	9/20/2018
NISTIR	8222	Internet of Things (IoT) Trust Concerns NISTIR 8222 (DRAFT) (WITHDRAWN) Internet of Things (IoT) Trust Concerns 9/17/2018 Status: Download: None available	Draft (Withdrawn)	9/17/2018
White Paper		Transitioning to the Security Content Automation Protocol (SCAP) Version 2 White Paper Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Download: White Paper (DOI); Transitioning to SCAP v2	Final	9/10/2018

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Computer Security
Resource Center