Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
White Paper		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning White Paper (DRAFT) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft Download: Draft White Paper	Draft	5/22/2019
NISTIR	8183	Cybersecurity Framework Manufacturing Profile NISTIR 8183 Cybersecurity Framework Manufacturing Profile 5/20/2019 Status: Final Download: NISTIR 8183 (DOI); Local Download; NIST Cybersecurity Framework	Final	5/20/2019
ITL Bulletin		FIPS 140-3 Adopts ISO/IEC Standards ITL Bulletin FIPS 140-3 Adopts ISO/IEC Standards 5/20/2019 Status: Final Download: May 2019 ITL Bulletin	Final	5/20/2019
White Paper		[Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector White Paper [Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector 5/13/2019 Status: Final Download: Project Description; Project homepage	Final	5/13/2019
NISTIR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 NISTIR 8213 (DRAFT) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft Download: NISTIR 8213 (DRAFT) (DOI); Local Download; NIST Randomness Beacon project	Draft	5/06/2019
White Paper		[Project Description] Securing the Industrial Internet of Things: Scenario-Based Cybersecurity for the Energy Sector White Paper (DRAFT) [Project Description] Securing the Industrial Internet of Things: Scenario-Based Cybersecurity for the Energy Sector 5/06/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	5/06/2019
White Paper		NIST Privacy Framework: An Enterprise Risk Management Tool (Discussion Draft) White Paper (DRAFT) NIST Privacy Framework: An Enterprise Risk Management Tool (Discussion Draft) 4/30/2019 Status: Draft Download: NIST Privacy Framework (Discussion Draft); Comment template (optional); NIST Privacy Framework project	Draft	4/30/2019
NISTIR	8204	Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template NISTIR 8204 Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template 4/26/2019 Status: Final Download: NISTIR 8204 (DOI); Local Download; OLIR Template; OLIR Validation Tool; Informative References homepage	Final	4/26/2019
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (DRAFT) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 4/24/2019 Status: Draft Download: SP 1800-15 (Preliminary Draft); Submit Comments on SP 1800-15; Project Homepage	Draft	4/24/2019
White Paper		BowTie – A deep learning feedforward neural network for sentiment analysis White Paper BowTie – A deep learning feedforward neural network for sentiment analysis 4/22/2019 Status: Final Download: White Paper (DOI); Local Download; Artificial Intelligence at NIST	Final	4/22/2019
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 Vetting the Security of Mobile Applications 4/19/2019 Status: Final Download: SP 800-163 Rev. 1 (DOI); Local Download	Final	4/19/2019
ITL Bulletin		Time to Standardize Threshold Schemes for Cryptographic Primitives ITL Bulletin Time to Standardize Threshold Schemes for Cryptographic Primitives 4/09/2019 Status: Final Download: April 2019 ITL Bulletin	Final	4/09/2019
Conference Proceedings		Smart Contract Federated Identity Management without Third Party Authentication Services Conference Proceedings Smart Contract Federated Identity Management without Third Party Authentication Services 3/28/2019 Status: Final Download: Paper	Final	3/28/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 (DRAFT) Security Strategies for Microservices-based Application Systems 3/25/2019 Status: Draft Download: SP 800-204 (DRAFT) (DOI); Local Download	Draft	3/25/2019
FIPS	140-3	Security Requirements for Cryptographic Modules FIPS 140-3 Security Requirements for Cryptographic Modules 3/22/2019 Status: Final Download: FIPS 140-3 (DOI); Local Download; Cryptographic Module Validation Program (CMVP); NIST News Article	Final	3/22/2019
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Final Download: SP 800-131A Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-131A Rev. 2	Final	3/21/2019
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Final Download: SP 800-56B Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56B Rev. 2 (July 2018)	Final	3/21/2019
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 (DRAFT) Recommendation for Cryptographic Key Generation 3/06/2019 Status: Draft Download: SP 800-133 Rev. 1 (DRAFT) (DOI); Local Download	Draft	3/06/2019
NISTIR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography NISTIR 8214 Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 3/01/2019 Status: Final Download: NISTIR 8214 (DOI); Local Download; Diff file - shows changes from draft & public comment resolutions	Final	3/01/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (DRAFT) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft Download: SP 800-38G Rev. 1 (DRAFT) (DOI); Local Download; Block Cipher Techniques project	Draft	2/28/2019
ITL Bulletin		The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk ITL Bulletin The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk 2/28/2019 Status: Final Download: February 2019 ITL Bulletin	Final	2/28/2019
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 Trustworthy Email 2/26/2019 Status: Final Download: SP 800-177 Rev. 1 (DOI); Local Download; High Assurance Domains project	Final	2/26/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 2/25/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	2/25/2019
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 Mobile Device Security: Cloud and Hybrid Builds 2/21/2019 Status: Final Download: SP 1800-4 (DOI); Local Download; Web version; Project Homepage	Final	2/21/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 (DRAFT) Attribute Considerations for Access Control Systems 2/13/2019 Status: Draft Download: SP 800-205 (DRAFT) (DOI); Local Download	Draft	2/13/2019

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

Quick Links

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Quick Links

Computer Security
Resource Center