Publication Search

Search Results

Showing 63 matching records.

Series	Number	Title Publications	Status	Release Date
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 (DRAFT) Security Strategies for Microservices-based Application Systems 3/25/2019 Status: Download: SP 800-204 (DRAFT) (DOI); Local Download	Draft	3/25/2019
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 (DRAFT) Recommendation for Cryptographic Key Generation 3/06/2019 Status: Download: SP 800-133 Rev. 1 (DRAFT) (DOI); Local Download	Draft	3/06/2019
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (DRAFT) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Download: SP 800-38G Rev. 1 (DRAFT) (DOI); Local Download; Block Cipher Techniques project	Draft	2/28/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 (DRAFT) Attribute Considerations for Access Control Systems 2/13/2019 Status: Download: SP 800-205 (DRAFT) (DOI); Local Download	Draft	2/13/2019
White Paper		[Project Description] Security for IoT Sensor Networks: Building Management Case Study White Paper (DRAFT) [Project Description] Security for IoT Sensor Networks: Building Management Case Study 2/01/2019 Status: Download: Project Description; Submit Comments; Project homepage	Draft	2/01/2019
SP	800-189	Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation SP 800-189 (DRAFT) Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation 12/17/2018 Status: Download: SP 800-189 (DRAFT) (DOI); Local Download	Draft	12/17/2018
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 (DRAFT) Security Analysis of First Responder Mobile and Wearable Devices 12/03/2018 Status: Download: NISTIR 8196 (DRAFT) (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Draft	12/03/2018
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (DRAFT) Securing Web Transactions: TLS Server Certificate Management 11/29/2018 Status: Download: SP 1800-16B (Prelim. Draft 1); SP 1800-16A (Prelim. Draft 1); Submit Comments; Project Homepage	Draft	11/29/2018
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (DRAFT) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 11/20/2018 Status: Download: SP 1800-19B (Preliminary Draft 1); Submit Comments on 1800-19B; SP 1800-19A (Preliminary Draft 1); Project Homepage	Draft	11/20/2018
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organizations (2nd Draft) SP 800-57 Part 2 Rev. 1 (DRAFT) Recommendation for Key Management, Part 2: Best Practices for Key Management Organizations (2nd Draft) 11/20/2018 Status: Download: Draft (2nd) SP 800-57 Part 2 Rev. 1	Draft	11/20/2018
White Paper		[Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector White Paper (DRAFT) [Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector 11/19/2018 Status: Download: Project Description; Submit Comments; Project homepage	Draft	11/19/2018
NISTIR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection NISTIR 8219 (DRAFT) Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 11/06/2018 Status: Download: Draft NISTIR 8219; Submit Comments; Project Homepage	Draft	11/06/2018
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (DRAFT) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
White Paper		Internet of Things (IoT) Trust Concerns White Paper (DRAFT) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) SP 800-52 Rev. 2 (DRAFT) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) 10/15/2018 Status: Download: Draft (2nd) SP 800-52 Rev. 2; Comments received	Draft	10/15/2018
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 (DRAFT) Glossary of Key Information Security Terms 9/28/2018 Status: Download: Draft NISTIR 7298 Rev. 3; Online Glossary	Draft	9/28/2018
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (DRAFT) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 (DRAFT) Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 9/24/2018 Status: Download: NISTIR 8228 (DRAFT) (DOI); Local Download; Comment Template	Draft	9/24/2018
NISTIR	8221	A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks NISTIR 8221 (DRAFT) A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks 9/21/2018 Status: Download: Draft NISTIR 8221	Draft	9/21/2018
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 (DRAFT) Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 9/04/2018 Status: Download: Draft SP 1800-14 volumes and Project Homepage; Submit Comments	Draft	9/04/2018
SP	1800-17	Multifactor Authentication for E-Commerce SP 1800-17 (DRAFT) Multifactor Authentication for E-Commerce 8/22/2018 Status: Download: Draft SP 1800-17 volumes and Project Homepage; Submit Comments	Draft	8/22/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials (2nd Draft) SP 1800-12 (DRAFT) Derived Personal Identity Verification (PIV) Credentials (2nd Draft) 8/02/2018 Status: Download: Draft SP 1800-12 volumes and Project Homepage; Submit Comments	Draft	8/02/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (DRAFT) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Download: Draft SP 800-71	Draft	7/02/2018
White Paper		A Data Structure for Integrity Protection with Erasure Capability White Paper (DRAFT) A Data Structure for Integrity Protection with Erasure Capability 5/31/2018 Status: Download: Block Matrix Draft	Draft	5/31/2018
NISTIR	8204	Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template NISTIR 8204 (DRAFT) Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template 5/17/2018 Status: Download: Draft NISTIR 8204; Informative References homepage; OLIR Submission Template; Online Informative Reference Validation (OLIRVal) tool	Draft	5/17/2018
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders SP 1800-13 (DRAFT) Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders 4/16/2018 Status: Download: Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	4/16/2018
SP	800-160 Vol. 2	Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 2 (DRAFT) Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Download: Draft SP 800-160 Vol. 2; Comment Template; Presentation: "Building Cyber Resilient Systems"	Draft	3/21/2018
White Paper		[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry White Paper (DRAFT) [Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 1/16/2018 Status: Download: Project Description; Submit Comments; Project homepage	Draft	1/16/2018
NISTIR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles NISTIR 8193 (DRAFT) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Download: Draft NISTIR 8193	Draft	11/08/2017
White Paper		[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector White Paper (DRAFT) [Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Download: Draft Project Description; Submit Comments; Project Homepage	Draft	10/12/2017
SP	1800-3	Attribute Based Access Control (2nd Draft) SP 1800-3 (DRAFT) Attribute Based Access Control (2nd Draft) 9/20/2017 Status: Download: Draft SP 1800-3 volumes and Project Homepage; Submit Comments	Draft	9/20/2017
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 (DRAFT) Data Integrity: Recovering from Ransomware and Other Destructive Events 9/06/2017 Status: Download: Draft SP 1800-11 volumes and Project Homepage; Submit Comments	Draft	9/06/2017
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (DRAFT) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Download: Draft 1800-9 volumes and homepage; Submit Comments; Learn more about this project	Draft	8/31/2017
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (DRAFT) Security and Privacy Controls for Information Systems and Organizations 8/15/2017 Status: Download: Draft SP 800-53 Rev. 5; Draft SP 800-53 Rev. 5 Controls Markup; Draft SP 800-53 Rev. 5 Baseline Markup	Draft	8/15/2017
NISTIR	8170	The Cybersecurity Framework: Implementation Guidance for Federal Agencies NISTIR 8170 (DRAFT) The Cybersecurity Framework: Implementation Guidance for Federal Agencies 5/12/2017 Status: Download: Draft NISTIR 8170; Mapping SP 800-53 Rev. 4 controls to subcategories of NIST CSF v1.0	Draft	5/12/2017
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 (DRAFT) Situational Awareness for Electric Utilities 2/16/2017 Status: Download: Draft SP 1800-7 volumes and Project Homepage; Submit Comments; Learn more about this project	Draft	2/16/2017
NISTIR	8139	Identifying Uniformity with Entropy and Divergence NISTIR 8139 (DRAFT) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Download: Draft NISTIR 8139	Draft	2/02/2017
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (DRAFT) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
NISTIR	8138	Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities NISTIR 8138 (DRAFT) Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities 9/30/2016 Status: Download: Draft NISTIR 8138; Comment Template	Draft	9/30/2016
White Paper		[Project Description] Authentication for Law Enforcement Vehicle Systems White Paper (DRAFT) [Project Description] Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Download: Draft Project Description; Submit Comments; Project Homepage	Draft	9/13/2016
NISTIR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue NISTIR 8144 (DRAFT) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Download: Draft NISTIR 8144; Mobile Threat Catalogue (GitHub); Press Release	Draft	9/12/2016
White Paper		[Concept Paper] Identity and Access Management for Smart Home Devices White Paper (DRAFT) [Concept Paper] Identity and Access Management for Smart Home Devices 6/06/2016 Status: Download: Draft Concept Paper; Submit Comments; Project Homepage	Draft	6/06/2016
White Paper		[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector White Paper (DRAFT) [Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Download: Draft Project Description; Submit Comments; Project Homepage	Draft	5/09/2016
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (DRAFT) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (DRAFT) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (DRAFT) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
NISTIR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags NISTIR 8085 (DRAFT) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Download: Draft NISTIR 8085	Draft	12/17/2015
NISTIR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content NISTIR 8058 (DRAFT) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Download: Draft NISTIR 8058	Draft	5/01/2015
NISTIR	8050	Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps NISTIR 8050 (DRAFT) Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps 4/02/2015 Status: Download: Draft NISTIR 8050	Draft	4/02/2015
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (DRAFT) PIV Data Model Test Guidelines 8/06/2014 Status: Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
NISTIR	8006	NIST Cloud Computing Forensic Science Challenges NISTIR 8006 (DRAFT) NIST Cloud Computing Forensic Science Challenges 6/23/2014 Status: Download: Draft NISTIR 8006; Comment Template	Draft	6/23/2014
NISTIR	7924	Reference Certificate Policy (2nd Draft) NISTIR 7924 (DRAFT) Reference Certificate Policy (2nd Draft) 5/29/2014 Status: Download: Second Draft NISTIR 7924; Comment Template	Draft	5/29/2014
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) SP 800-16 Rev. 1 (DRAFT) A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) 3/14/2014 Status: Download: Draft SP 800-16 Rev. 1 (3rd draft)	Draft	3/14/2014
NISTIR	7981	Mobile, PIV, and Authentication NISTIR 7981 (DRAFT) Mobile, PIV, and Authentication 3/07/2014 Status: Download: Draft NISTIR 7981; Comment Template	Draft	3/07/2014
SP	500-299	NIST Cloud Computing Security Reference Architecture SP 500-299 (DRAFT) NIST Cloud Computing Security Reference Architecture 5/05/2013 Status: Download: Draft SP 500-299; NIST Cloud Computing Security Working Group homepage	Draft	5/05/2013
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (DRAFT) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Download: Draft SP 800-164	Draft	10/31/2012
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (DRAFT) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
NISTIR	7848	Specification for the Asset Summary Reporting Format 1.0 NISTIR 7848 (DRAFT) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Download: Draft NISTIR 7848	Draft	5/07/2012
NISTIR	7800	Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains NISTIR 7800 (DRAFT) Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains 1/20/2012 Status: Download: Draft NISTIR 7800	Draft	1/20/2012
NISTIR	7756	CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture NISTIR 7756 (DRAFT) CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture 1/06/2012 Status: Download: Draft NISTIR 7756 (2nd public draft)	Draft	1/06/2012
SP	800-117 Rev. 1	Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 SP 800-117 Rev. 1 (DRAFT) Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 1/06/2012 Status: Download: Draft SP 800-117 Rev. 1	Draft	1/06/2012
NISTIR	7799	Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications NISTIR 7799 (DRAFT) Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications 1/06/2012 Status: Download: Draft NISTIR 7799	Draft	1/06/2012
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (DRAFT) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Download: Draft SP 800-155	Draft	12/08/2011

Quick Links

Draft Pubs
Final Pubs
FIPS
SPs (Special Pubs)
NISTIRs
ITL Bulletins
White Papers
Journal Articles
Conference Papers
Books