Publication Search

Search Results

Showing 70 matching records.

Series	Number	Title Publications	Status	Release Date
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper (DRAFT) [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 6/24/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/24/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper (DRAFT) [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 6/24/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/24/2019
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 (DRAFT) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/19/2019 Status: Draft Download: Draft SP 800-171 Rev. 2; Draft SP 800-171 Rev. 2 with Line Numbers; Comment template; NIST news article	Draft	6/19/2019
SP	800-171B	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets SP 800-171B (DRAFT) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets 6/19/2019 Status: Draft Download: Draft SP 800-171B; Draft SP 800-171B (with line numbers); Comment template for SP 800-171B; Comments received on SP 800-171B (@Protecting CUI Project); DoD cost estimate of Draft SP 800-171B; Submit/View comments on DoD cost estimate of Draft SP 800-171B; NIST news article	Draft	6/19/2019
White Paper		[Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses White Paper (DRAFT) [Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/17/2019
White Paper		[Project Description] Detecting and Protecting Against Data Integrity Attacks in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector White Paper (DRAFT) [Project Description] Detecting and Protecting Against Data Integrity Attacks in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 6/12/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/12/2019
White Paper		Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) White Paper (DRAFT) Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) 6/11/2019 Status: Draft Download: SSDF Draft	Draft	6/11/2019
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) SP 1800-13 (DRAFT) Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) 5/29/2019 Status: Draft Download: Second Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	5/29/2019
NISTIR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 1 – General Implementation Guidance NISTIR 8183A Vol. 1 (DRAFT) Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 1 – General Implementation Guidance 5/28/2019 Status: Draft Download: NISTIR 8183A Vol. 1 (DRAFT) (DOI); Local Download; Comment template	Draft	5/28/2019
NISTIR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case NISTIR 8183A Vol. 2 (DRAFT) Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 5/28/2019 Status: Draft Download: NISTIR 8183A Vol. 2 (DRAFT) (DOI); Local Download; Comment template	Draft	5/28/2019
NISTIR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case NISTIR 8183A Vol. 3 (DRAFT) Cybersecurity Framework Manufacturing Profile Low Security Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 5/28/2019 Status: Draft Download: NISTIR 8183A Vol. 3 (DRAFT) (DOI); Local Download; Comment template	Draft	5/28/2019
White Paper		An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning White Paper (DRAFT) An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning 5/22/2019 Status: Draft Download: Draft White Paper	Draft	5/22/2019
NISTIR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 NISTIR 8213 (DRAFT) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft Download: NISTIR 8213 (DRAFT) (DOI); Local Download; NIST Randomness Beacon project	Draft	5/06/2019
White Paper		[Project Description] Securing the Industrial Internet of Things: Scenario-Based Cybersecurity for the Energy Sector White Paper (DRAFT) [Project Description] Securing the Industrial Internet of Things: Scenario-Based Cybersecurity for the Energy Sector 5/06/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	5/06/2019
White Paper		NIST Privacy Framework: An Enterprise Risk Management Tool (Discussion Draft) White Paper (DRAFT) NIST Privacy Framework: An Enterprise Risk Management Tool (Discussion Draft) 4/30/2019 Status: Draft Download: NIST Privacy Framework (Discussion Draft); Comment template (optional); NIST Privacy Framework project	Draft	4/30/2019
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (DRAFT) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 4/24/2019 Status: Draft Download: SP 1800-15 (Preliminary Draft); Submit Comments on SP 1800-15; Project Homepage	Draft	4/24/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 (DRAFT) Security Strategies for Microservices-based Application Systems 3/25/2019 Status: Draft Download: SP 800-204 (DRAFT) (DOI); Local Download	Draft	3/25/2019
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 (DRAFT) Recommendation for Cryptographic Key Generation 3/06/2019 Status: Draft Download: SP 800-133 Rev. 1 (DRAFT) (DOI); Local Download	Draft	3/06/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (DRAFT) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft Download: SP 800-38G Rev. 1 (DRAFT) (DOI); Local Download; Block Cipher Techniques project	Draft	2/28/2019
White Paper		[Project Description] Security for IoT Sensor Networks: Building Management Case Study White Paper (DRAFT) [Project Description] Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	2/01/2019
SP	800-189	Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation SP 800-189 (DRAFT) Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation 12/17/2018 Status: Draft Download: SP 800-189 (DRAFT) (DOI); Local Download	Draft	12/17/2018
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 (DRAFT) Security Analysis of First Responder Mobile and Wearable Devices 12/03/2018 Status: Draft Download: NISTIR 8196 (DRAFT) (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Draft	12/03/2018
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (DRAFT) Securing Web Transactions: TLS Server Certificate Management 11/29/2018 Status: Draft Download: SP 1800-16B (Prelim. Draft 1); SP 1800-16A (Prelim. Draft 1); Submit Comments; Project Homepage	Draft	11/29/2018
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (DRAFT) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 11/20/2018 Status: Draft Download: SP 1800-19B (Preliminary Draft 1); Submit Comments on 1800-19B; SP 1800-19A (Preliminary Draft 1); Project Homepage	Draft	11/20/2018
NISTIR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection NISTIR 8219 (DRAFT) Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 11/06/2018 Status: Draft Download: Draft NISTIR 8219; Submit Comments; Project Homepage	Draft	11/06/2018
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (DRAFT) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Draft Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
White Paper		Internet of Things (IoT) Trust Concerns White Paper (DRAFT) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) SP 800-52 Rev. 2 (DRAFT) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) 10/15/2018 Status: Draft Download: Draft (2nd) SP 800-52 Rev. 2; Comments received	Draft	10/15/2018
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 (DRAFT) Glossary of Key Information Security Terms 9/28/2018 Status: Draft Download: Draft NISTIR 7298 Rev. 3; Online Glossary	Draft	9/28/2018
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (DRAFT) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Draft Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 (DRAFT) Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 9/04/2018 Status: Draft Download: Draft SP 1800-14 volumes and Project Homepage; Submit Comments	Draft	9/04/2018
SP	1800-17	Multifactor Authentication for E-Commerce SP 1800-17 (DRAFT) Multifactor Authentication for E-Commerce 8/22/2018 Status: Draft Download: Draft SP 1800-17 volumes and Project Homepage; Submit Comments	Draft	8/22/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials (2nd Draft) SP 1800-12 (DRAFT) Derived Personal Identity Verification (PIV) Credentials (2nd Draft) 8/02/2018 Status: Draft Download: Draft SP 1800-12 volumes and Project Homepage; Submit Comments	Draft	8/02/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (DRAFT) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft Download: Draft SP 800-71	Draft	7/02/2018
White Paper		A Data Structure for Integrity Protection with Erasure Capability White Paper (DRAFT) A Data Structure for Integrity Protection with Erasure Capability 5/31/2018 Status: Draft Download: Block Matrix Draft	Draft	5/31/2018
SP	800-160 Vol. 2	Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 2 (DRAFT) Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Draft Download: Draft SP 800-160 Vol. 2; Comment Template; Presentation: "Building Cyber Resilient Systems"	Draft	3/21/2018
White Paper		[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry White Paper (DRAFT) [Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 1/16/2018 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	1/16/2018
NISTIR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles NISTIR 8193 (DRAFT) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Draft Download: Draft NISTIR 8193	Draft	11/08/2017
White Paper		[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector White Paper (DRAFT) [Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Draft Download: Draft Project Description; Submit Comments; Project Homepage	Draft	10/12/2017
SP	1800-3	Attribute Based Access Control (2nd Draft) SP 1800-3 (DRAFT) Attribute Based Access Control (2nd Draft) 9/20/2017 Status: Draft Download: Draft SP 1800-3 volumes and Project Homepage; Submit Comments	Draft	9/20/2017
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 (DRAFT) Data Integrity: Recovering from Ransomware and Other Destructive Events 9/06/2017 Status: Draft Download: Draft SP 1800-11 volumes and Project Homepage; Submit Comments	Draft	9/06/2017
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (DRAFT) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Draft Download: Draft 1800-9 volumes and homepage; Submit Comments; Learn more about this project	Draft	8/31/2017
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (DRAFT) Security and Privacy Controls for Information Systems and Organizations 8/15/2017 Status: Draft Download: Draft SP 800-53 Rev. 5; Draft SP 800-53 Rev. 5 Controls Markup; Draft SP 800-53 Rev. 5 Baseline Markup	Draft	8/15/2017
NISTIR	8170	The Cybersecurity Framework: Implementation Guidance for Federal Agencies NISTIR 8170 (DRAFT) The Cybersecurity Framework: Implementation Guidance for Federal Agencies 5/12/2017 Status: Draft Download: Draft NISTIR 8170; Mapping SP 800-53 Rev. 4 controls to subcategories of NIST CSF v1.0	Draft	5/12/2017
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 (DRAFT) Situational Awareness for Electric Utilities 2/16/2017 Status: Draft Download: Draft SP 1800-7 volumes and Project Homepage; Submit Comments; Learn more about this project	Draft	2/16/2017
NISTIR	8139	Identifying Uniformity with Entropy and Divergence NISTIR 8139 (DRAFT) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Draft Download: Draft NISTIR 8139	Draft	2/02/2017
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (DRAFT) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Draft Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
NISTIR	8138	Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities NISTIR 8138 (DRAFT) Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities 9/30/2016 Status: Draft Download: Draft NISTIR 8138; Comment Template	Draft	9/30/2016
White Paper		[Project Description] Authentication for Law Enforcement Vehicle Systems White Paper (DRAFT) [Project Description] Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Draft Download: Draft Project Description; Submit Comments; Project Homepage	Draft	9/13/2016
NISTIR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue NISTIR 8144 (DRAFT) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft Download: Draft NISTIR 8144; Mobile Threat Catalogue (GitHub); Press Release	Draft	9/12/2016
White Paper		[Concept Paper] Identity and Access Management for Smart Home Devices White Paper (DRAFT) [Concept Paper] Identity and Access Management for Smart Home Devices 6/06/2016 Status: Draft Download: Draft Concept Paper; Submit Comments; Project Homepage	Draft	6/06/2016
White Paper		[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector White Paper (DRAFT) [Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Draft Download: Draft Project Description; Submit Comments; Project Homepage	Draft	5/09/2016
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (DRAFT) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Draft Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (DRAFT) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (DRAFT) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
NISTIR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags NISTIR 8085 (DRAFT) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Draft Download: Draft NISTIR 8085	Draft	12/17/2015
NISTIR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content NISTIR 8058 (DRAFT) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Draft Download: Draft NISTIR 8058	Draft	5/01/2015
NISTIR	8050	Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps NISTIR 8050 (DRAFT) Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps 4/02/2015 Status: Draft Download: Draft NISTIR 8050	Draft	4/02/2015
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (DRAFT) PIV Data Model Test Guidelines 8/06/2014 Status: Draft Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
NISTIR	8006	NIST Cloud Computing Forensic Science Challenges NISTIR 8006 (DRAFT) NIST Cloud Computing Forensic Science Challenges 6/23/2014 Status: Draft Download: Draft NISTIR 8006; Comment Template	Draft	6/23/2014
NISTIR	7924	Reference Certificate Policy (2nd Draft) NISTIR 7924 (DRAFT) Reference Certificate Policy (2nd Draft) 5/29/2014 Status: Draft Download: Second Draft NISTIR 7924; Comment Template	Draft	5/29/2014
NISTIR	7981	Mobile, PIV, and Authentication NISTIR 7981 (DRAFT) Mobile, PIV, and Authentication 3/07/2014 Status: Draft Download: Draft NISTIR 7981; Comment Template	Draft	3/07/2014
SP	500-299	NIST Cloud Computing Security Reference Architecture SP 500-299 (DRAFT) NIST Cloud Computing Security Reference Architecture 5/05/2013 Status: Draft Download: Draft SP 500-299; NIST Cloud Computing Security Working Group homepage	Draft	5/05/2013
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (DRAFT) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Draft Download: Draft SP 800-164	Draft	10/31/2012
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (DRAFT) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Draft Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
NISTIR	7848	Specification for the Asset Summary Reporting Format 1.0 NISTIR 7848 (DRAFT) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Draft Download: Draft NISTIR 7848	Draft	5/07/2012
NISTIR	7800	Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains NISTIR 7800 (DRAFT) Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains 1/20/2012 Status: Draft Download: Draft NISTIR 7800	Draft	1/20/2012
NISTIR	7756	CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture NISTIR 7756 (DRAFT) CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture 1/06/2012 Status: Draft Download: Draft NISTIR 7756 (2nd public draft)	Draft	1/06/2012
NISTIR	7799	Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications NISTIR 7799 (DRAFT) Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications 1/06/2012 Status: Draft Download: Draft NISTIR 7799	Draft	1/06/2012
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (DRAFT) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft Download: Draft SP 800-155	Draft	12/08/2011

Quick Links

Draft Pubs
Final Pubs
FIPS
SP 800 series
All SP (Special Pubs) series
NISTIRs
ITL Bulletins
White Papers
Journal Articles
Conference Papers
Books