Publications

NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series:

FIPS	Federal Information Processing Standards: Security standards. `Learn more`
SP	NIST Special Publications Guidelines, technical specifications, recommendations and reference materials, comprising multiple sub-series: SP 800 Computer security `Learn more` SP 1800 Cybersecurity practice guides `Learn more` SP 500 Information technology (relevant documents)
NISTIR	NIST Internal or Interagency Reports Reports of research findings, including background information for FIPS and SPs.
ITL Bulletin	NIST Information Technology Laboratory (ITL) Bulletins Monthly overviews of NIST's security and privacy publications, programs and projects.

Find more of our research in: White Papers, Journal Articles, Conference Papers, and Books. Many of these publications (in this database) were published in 2008 or later, but older publications will be added in the future.

See NIST Publications for additional Cybersecurity Publications. See our DOI page for information on Digital Object Identifiers.

XLSX file: Download a spreadsheet of current (draft and final) FIPS, SPs, NISTIRs, ITL Bulletins and White Papers.

Recent Publications

Series	Number	Title Publications	Status	Release Date
White Paper		[Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources White Paper [Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 8/15/2019 Status: Final Download: Project Description; Project homepage	Final	8/15/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final Download: SP 800-204 (DOI); Local Download	Final	8/07/2019
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 Situational Awareness for Electric Utilities 8/07/2019 Status: Final Download: SP 1800-7 (DOI); Local Download; Web version; Project Homepage	Final	8/07/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	8/02/2019
NISTIR	8204	Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template NISTIR 8204 Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template 8/01/2019 Status: Final Download: NISTIR 8204 (DOI); Local Download; OLIR Template; OLIR Validation Tool; Informative References homepage	Final	8/01/2019
NISTIR	8259	Core Cybersecurity Feature Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers NISTIR 8259 (DRAFT) Core Cybersecurity Feature Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers 7/31/2019 Status: Draft Download: NISTIR 8259 (DRAFT) (DOI); Local Download; NIST news article	Draft	7/31/2019
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final Download: SP 1800-17 (DOI); Local Download; Web version; Project Homepage	Final	7/30/2019
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 Recommendation for Cryptographic Key Generation 7/23/2019 Status: Final Download: SP 800-133 Rev. 1 (DOI); Local Download	Final	7/23/2019
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 (DRAFT) Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 7/22/2019 Status: Draft Download: Draft SP 1800-21 volumes and Project Homepage; Submit Comments	Draft	7/22/2019
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (DRAFT) Securing Web Transactions: TLS Server Certificate Management 7/17/2019 Status: Draft Download: Draft SP 1800-16 volumes and Project Homepage; Submit Comments	Draft	7/17/2019
White Paper		A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper (DRAFT) A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 7/09/2019 Status: Draft Download: White Paper (DOI); Local Download; Comment template	Draft	7/09/2019
White Paper	NIST Technical Note (TN) 2051	Cybersecurity Framework Smart Grid Profile White Paper NIST Technical Note (TN) 2051 Cybersecurity Framework Smart Grid Profile 7/09/2019 Status: Final Download: White Paper (DOI); Local Download; Cybersecurity Framework	Final	7/09/2019
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 (DRAFT) Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 7/03/2019 Status: Draft Download: SP 800-175B Rev. 1 (DRAFT) (DOI); Local Download	Draft	7/03/2019
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 Glossary of Key Information Security Terms 7/03/2019 Status: Final Download: NISTIR 7298 Rev. 3 (DOI); Local Download; Online Glossary	Final	7/03/2019
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 (DRAFT) Guide to IPsec VPNs 7/02/2019 Status: Draft Download: SP 800-77 Rev. 1 (DRAFT) (DOI); Local Download	Draft	7/02/2019
Journal Article		On Addition-subtraction Chains of Numbers with Low Hamming Weight Journal Article On Addition-subtraction Chains of Numbers with Low Hamming Weight 7/01/2019 Status: Final Download: Journal Article (DOI)	Final	7/01/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final Download: SP 1800-14 (DOI); Local Download; Web version; Project Homepage	Final	6/28/2019
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final Download: NISTIR 8228 (DOI); Local Download; NIST news article	Final	6/25/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper (DRAFT) [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 6/24/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/24/2019
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper (DRAFT) [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 6/24/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/24/2019
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 (DRAFT) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/19/2019 Status: Draft Download: Draft SP 800-171 Rev. 2; Draft SP 800-171 Rev. 2 with Line Numbers; Comment template; NIST news article	Draft	6/19/2019
SP	800-171B	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets SP 800-171B (DRAFT) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets 6/19/2019 Status: Draft Download: Draft SP 800-171B; Draft SP 800-171B (with line numbers); Comment template for SP 800-171B; Comments received on SP 800-171B (@Protecting CUI Project); DoD cost estimate of Draft SP 800-171B; Submit/View comments on DoD cost estimate of Draft SP 800-171B; NIST news article	Draft	6/19/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 Attribute Considerations for Access Control Systems 6/18/2019 Status: Final Download: SP 800-205 (DOI); Local Download	Final	6/18/2019
White Paper		[Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses White Paper (DRAFT) [Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/17/2019
White Paper		[Project Description] Detecting and Protecting Against Data Integrity Attacks in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector White Paper (DRAFT) [Project Description] Detecting and Protecting Against Data Integrity Attacks in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 6/12/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/12/2019

View All Publications

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Quick Links

Publications

Recent Publications

Quick Links

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Quick Links

Publications

Recent Publications

Quick Links

Computer Security
Resource Center