Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
White Paper		NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management (Preliminary Draft) White Paper (DRAFT) NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management (Preliminary Draft) 9/09/2019 Status: Draft Download: Preliminary Draft; Additional info (comment template; core Excel file); NIST Informative References; Cybersecurity Insights blog post	Draft	9/09/2019
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 (DRAFT) Developing Cyber Resilient Systems: A Systems Security Engineering Approach 9/04/2019 Status: Draft Download: Draft (FPD) SP 800-160 Vol. 2; Draft (FPD) SP 800-160 Vol. 2 (with line numbers); Comment Template	Draft	9/04/2019
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final Download: SP 800-52 Rev. 2 (DOI); Local Download	Final	8/29/2019
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 Derived Personal Identity Verification (PIV) Credentials 8/27/2019 Status: Final Download: SP 1800-12 (DOI); Local Download; Web version; Project Homepage	Final	8/27/2019
White Paper		[Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources White Paper [Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 8/15/2019 Status: Final Download: Project Description; Project homepage	Final	8/15/2019
Conference Paper		Perceptions of Smart Home Privacy and Security Responsibility, Concerns, and Mitigations Conference Paper Perceptions of Smart Home Privacy and Security Responsibility, Concerns, and Mitigations 8/11/2019 Status: Final Download: Poster description	Final	8/11/2019
Conference Paper		Security Awareness in Action: A Case Study [extended abstract] Conference Paper Security Awareness in Action: A Case Study [extended abstract] 8/11/2019 Status: Final Download: Paper	Final	8/11/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final Download: SP 800-204 (DOI); Local Download	Final	8/07/2019
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 Situational Awareness for Electric Utilities 8/07/2019 Status: Final Download: SP 1800-7 (DOI); Local Download; Web version; Project Homepage	Final	8/07/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	8/02/2019
NISTIR	8204	Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template NISTIR 8204 Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template 8/01/2019 Status: Final Download: NISTIR 8204 (DOI); Local Download; OLIR Template; OLIR Validation Tool; Informative References homepage	Final	8/01/2019
NISTIR	8259	Core Cybersecurity Feature Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers NISTIR 8259 (DRAFT) Core Cybersecurity Feature Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers 7/31/2019 Status: Draft Download: NISTIR 8259 (DRAFT) (DOI); Local Download; NIST news article	Draft	7/31/2019
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final Download: SP 1800-17 (DOI); Local Download; Web version; Project Homepage	Final	7/30/2019
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 Recommendation for Cryptographic Key Generation 7/23/2019 Status: Final Download: SP 800-133 Rev. 1 (DOI); Local Download	Final	7/23/2019
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 (DRAFT) Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 7/22/2019 Status: Draft Download: Draft SP 1800-21 volumes and Project Homepage; Submit Comments	Draft	7/22/2019
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (DRAFT) Securing Web Transactions: TLS Server Certificate Management 7/17/2019 Status: Draft Download: Draft SP 1800-16 volumes and Project Homepage; Submit Comments	Draft	7/17/2019
White Paper		A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper (DRAFT) A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 7/09/2019 Status: Draft Download: White Paper (DOI); Local Download; Comment template	Draft	7/09/2019
White Paper	NIST Technical Note (TN) 2051	Cybersecurity Framework Smart Grid Profile White Paper NIST Technical Note (TN) 2051 Cybersecurity Framework Smart Grid Profile 7/09/2019 Status: Final Download: White Paper (DOI); Local Download; Cybersecurity Framework	Final	7/09/2019
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 (DRAFT) Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 7/03/2019 Status: Draft Download: SP 800-175B Rev. 1 (DRAFT) (DOI); Local Download	Draft	7/03/2019
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 Glossary of Key Information Security Terms 7/03/2019 Status: Final Download: NISTIR 7298 Rev. 3 (DOI); Local Download; Online Glossary	Final	7/03/2019
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 (DRAFT) Guide to IPsec VPNs 7/02/2019 Status: Draft Download: SP 800-77 Rev. 1 (DRAFT) (DOI); Local Download	Draft	7/02/2019
Journal Article		On Addition-subtraction Chains of Numbers with Low Hamming Weight Journal Article On Addition-subtraction Chains of Numbers with Low Hamming Weight 7/01/2019 Status: Final Download: Journal Article (DOI)	Final	7/01/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final Download: SP 1800-14 (DOI); Local Download; Web version; Project Homepage	Final	6/28/2019
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final Download: NISTIR 8228 (DOI); Local Download; NIST news article	Final	6/25/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper (DRAFT) [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 6/24/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/24/2019

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

Quick Links

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Quick Links

Computer Security
Resource Center