Publication Search

Search Results

Showing 61 matching records.

Series	Number	Title Publications	Status	Release Date
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) SP 800-52 Rev. 2 (DRAFT) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations (2nd Draft) 10/15/2018 Status: Download: Draft (2nd) SP 800-52 Rev. 2	Draft	10/15/2018
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Final Public Draft) SP 800-37 Rev. 2 (DRAFT) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Final Public Draft) 10/02/2018 Status: Download: Draft SP 800-37 Rev. 2; Draft, with line numbers; Comment template	Draft	10/02/2018
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 (DRAFT) Glossary of Key Information Security Terms 9/28/2018 Status: Download: Draft NISTIR 7298 Rev. 3; Online Glossary	Draft	9/28/2018
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (DRAFT) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 (DRAFT) Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 9/24/2018 Status: Download: NISTIR 8228 (DRAFT) (DOI); Local Download; Comment Template	Draft	9/24/2018
NISTIR	8221	A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks NISTIR 8221 (DRAFT) A Methodology for Determining Forensic Data Requirements for Detecting Hypervisor Attacks 9/21/2018 Status: Download: Draft NISTIR 8221	Draft	9/21/2018
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 (DRAFT) Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 9/04/2018 Status: Download: Draft SP 1800-14 volumes and Project Homepage; Submit Comments	Draft	9/04/2018
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (DRAFT) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 8/24/2018 Status: Download: SP 1800-19A (Preliminary Draft 1); Project Homepage	Draft	8/24/2018
SP	1800-17	Multifactor Authentication for E-Commerce SP 1800-17 (DRAFT) Multifactor Authentication for E-Commerce 8/22/2018 Status: Download: Draft SP 1800-17 volumes and Project Homepage; Submit Comments	Draft	8/22/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials (2nd Draft) SP 1800-12 (DRAFT) Derived Personal Identity Verification (PIV) Credentials (2nd Draft) 8/02/2018 Status: Download: Draft SP 1800-12 volumes and Project Homepage; Submit Comments	Draft	8/02/2018
NISTIR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography NISTIR 8214 (DRAFT) Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 7/26/2018 Status: Download: Draft NISTIR 8214	Draft	7/26/2018
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 (DRAFT) Vetting the Security of Mobile Applications 7/23/2018 Status: Download: Draft SP 800-163 Rev. 1	Draft	7/23/2018
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 (DRAFT) Transitioning the Use of Cryptographic Algorithms and Key Lengths 7/19/2018 Status: Download: Draft SP 800-131A Rev. 2	Draft	7/19/2018
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 (DRAFT) Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 7/10/2018 Status: Download: Draft SP 800-56B Rev. 2	Draft	7/10/2018
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (DRAFT) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Download: Draft SP 800-71	Draft	7/02/2018
White Paper		A Data Structure for Integrity Protection with Erasure Capability White Paper (DRAFT) A Data Structure for Integrity Protection with Erasure Capability 5/31/2018 Status: Download: Block Matrix Draft	Draft	5/31/2018
NISTIR	8204	Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template NISTIR 8204 (DRAFT) Cybersecurity Framework Online Informative References (OLIR) Submissions: Specification for Completing the OLIR Template 5/17/2018 Status: Download: Draft NISTIR 8204; Informative References homepage; OLIR Submission Template	Draft	5/17/2018
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders SP 1800-13 (DRAFT) Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders 4/16/2018 Status: Download: Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	4/16/2018
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organization SP 800-57 Part 2 Rev. 1 (DRAFT) Recommendation for Key Management, Part 2: Best Practices for Key Management Organization 4/06/2018 Status: Download: Draft SP 800-57 Part 2 Rev. 1	Draft	4/06/2018
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 (DRAFT) Automation Support for Security Control Assessments: Software Asset Management 4/05/2018 Status: Download: Draft NISTIR 8011 Vol. 3	Draft	4/05/2018
SP	800-160 Vol. 2	Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 2 (DRAFT) Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Download: Draft SP 800-160 Vol. 2; Comment Template; Presentation: "Building Cyber Resilient Systems"	Draft	3/21/2018
NISTIR	8200	Interagency Report on Status of International Cybersecurity Standardization for the Internet of Things (IoT) NISTIR 8200 (DRAFT) Interagency Report on Status of International Cybersecurity Standardization for the Internet of Things (IoT) 2/14/2018 Status: Download: Draft NISTIR 8200; Comment template; View comments received to-date	Draft	2/14/2018
White Paper		[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry White Paper (DRAFT) [Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 1/16/2018 Status: Download: Project Description; Submit Comments; Project homepage	Draft	1/16/2018
SP	800-177 Rev. 1	Trustworthy Email (2nd Draft) SP 800-177 Rev. 1 (DRAFT) Trustworthy Email (2nd Draft) 12/15/2017 Status: Download: Draft (2nd) SP 800-177 Rev. 1; Comment template	Draft	12/15/2017
NISTIR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles NISTIR 8193 (DRAFT) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Download: Draft NISTIR 8193	Draft	11/08/2017
White Paper		[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector White Paper (DRAFT) [Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Download: Draft Project Description; Submit Comments; Project Homepage	Draft	10/12/2017
SP	1800-3	Attribute Based Access Control (2nd Draft) SP 1800-3 (DRAFT) Attribute Based Access Control (2nd Draft) 9/20/2017 Status: Download: Draft SP 1800-3 volumes and Project Homepage; Submit Comments	Draft	9/20/2017
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 (DRAFT) Data Integrity: Recovering from Ransomware and Other Destructive Events 9/06/2017 Status: Download: Draft SP 1800-11 volumes and Project Homepage; Submit Comments	Draft	9/06/2017
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (DRAFT) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Download: Draft 1800-9 volumes and homepage; Submit Comments; Learn more about this project	Draft	8/31/2017
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (DRAFT) Security and Privacy Controls for Information Systems and Organizations 8/15/2017 Status: Download: Draft SP 800-53 Rev. 5; Draft SP 800-53 Rev. 5 Controls Markup; Draft SP 800-53 Rev. 5 Baseline Markup	Draft	8/15/2017
NISTIR	8170	The Cybersecurity Framework: Implementation Guidance for Federal Agencies NISTIR 8170 (DRAFT) The Cybersecurity Framework: Implementation Guidance for Federal Agencies 5/12/2017 Status: Download: Draft NISTIR 8170; Mapping SP 800-53 Rev. 4 controls to subcategories of NIST CSF v1.0	Draft	5/12/2017
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 (DRAFT) Situational Awareness for Electric Utilities 2/16/2017 Status: Download: Draft SP 1800-7 volumes and Project Homepage; Submit Comments; Learn more about this project	Draft	2/16/2017
NISTIR	8139	Identifying Uniformity with Entropy and Divergence NISTIR 8139 (DRAFT) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Download: Draft NISTIR 8139	Draft	2/02/2017
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (DRAFT) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
NISTIR	8138	Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities NISTIR 8138 (DRAFT) Vulnerability Description Ontology (VDO): a Framework for Characterizing Vulnerabilities 9/30/2016 Status: Download: Draft NISTIR 8138; Comment Template	Draft	9/30/2016
White Paper		[Project Description] Authentication for Law Enforcement Vehicle Systems White Paper (DRAFT) [Project Description] Authentication for Law Enforcement Vehicle Systems 9/13/2016 Status: Download: Draft Project Description; Submit Comments; Project Homepage	Draft	9/13/2016
NISTIR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue NISTIR 8144 (DRAFT) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Download: Draft NISTIR 8144; Mobile Threat Catalogue (GitHub); Press Release	Draft	9/12/2016
White Paper		[Concept Paper] Identity and Access Management for Smart Home Devices White Paper (DRAFT) [Concept Paper] Identity and Access Management for Smart Home Devices 6/06/2016 Status: Download: Draft Concept Paper; Submit Comments; Project Homepage	Draft	6/06/2016
White Paper		[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector White Paper (DRAFT) [Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector 5/09/2016 Status: Download: Draft Project Description; Submit Comments; Project Homepage	Draft	5/09/2016
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (DRAFT) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (DRAFT) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (DRAFT) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
NISTIR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags NISTIR 8085 (DRAFT) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Download: Draft NISTIR 8085	Draft	12/17/2015
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 (DRAFT) Mobile Device Security: Cloud and Hybrid Builds 11/02/2015 Status: Download: Draft SP 1800-4 volumes and Project Homepage; NIST Press Release; Submit Comments	Draft	11/02/2015
NISTIR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content NISTIR 8058 (DRAFT) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Download: Draft NISTIR 8058	Draft	5/01/2015
NISTIR	8050	Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps NISTIR 8050 (DRAFT) Executive Technical Workshop on Improving Cybersecurity and Consumer Privacy: Summary and Next Steps 4/02/2015 Status: Download: Draft NISTIR 8050	Draft	4/02/2015
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (DRAFT) PIV Data Model Test Guidelines 8/06/2014 Status: Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
NISTIR	8006	NIST Cloud Computing Forensic Science Challenges NISTIR 8006 (DRAFT) NIST Cloud Computing Forensic Science Challenges 6/23/2014 Status: Download: Draft NISTIR 8006; Comment Template	Draft	6/23/2014
NISTIR	7924	Reference Certificate Policy (2nd Draft) NISTIR 7924 (DRAFT) Reference Certificate Policy (2nd Draft) 5/29/2014 Status: Download: Second Draft NISTIR 7924; Comment Template	Draft	5/29/2014
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) SP 800-16 Rev. 1 (DRAFT) A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) 3/14/2014 Status: Download: Draft SP 800-16 Rev. 1 (3rd draft)	Draft	3/14/2014
NISTIR	7981	Mobile, PIV, and Authentication NISTIR 7981 (DRAFT) Mobile, PIV, and Authentication 3/07/2014 Status: Download: Draft NISTIR 7981; Comment Template	Draft	3/07/2014
SP	500-299	NIST Cloud Computing Security Reference Architecture SP 500-299 (DRAFT) NIST Cloud Computing Security Reference Architecture 5/05/2013 Status: Download: Draft SP 500-299; NIST Cloud Computing Security Working Group homepage	Draft	5/05/2013
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (DRAFT) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Download: Draft SP 800-164	Draft	10/31/2012
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (DRAFT) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
NISTIR	7848	Specification for the Asset Summary Reporting Format 1.0 NISTIR 7848 (DRAFT) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Download: Draft NISTIR 7848	Draft	5/07/2012
NISTIR	7800	Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains NISTIR 7800 (DRAFT) Applying the Continuous Monitoring Technical Reference Model to the Asset, Configuration, and Vulnerability Management Domains 1/20/2012 Status: Download: Draft NISTIR 7800	Draft	1/20/2012
SP	800-117 Rev. 1	Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 SP 800-117 Rev. 1 (DRAFT) Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 1/06/2012 Status: Download: Draft SP 800-117 Rev. 1	Draft	1/06/2012
NISTIR	7799	Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications NISTIR 7799 (DRAFT) Continuous Monitoring Reference Model Workflow, Subsystem, and Interface Specifications 1/06/2012 Status: Download: Draft NISTIR 7799	Draft	1/06/2012
NISTIR	7756	CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture NISTIR 7756 (DRAFT) CAESARS Framework Extension: An Enterprise Continuous Monitoring Technical Reference Architecture 1/06/2012 Status: Download: Draft NISTIR 7756 (2nd public draft)	Draft	1/06/2012
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (DRAFT) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Download: Draft SP 800-155	Draft	12/08/2011
NISTIR	5395	Preliminary Functional Specifications of a Prototype Electronic Research Notebook for NIST NISTIR 5395 (DRAFT) Preliminary Functional Specifications of a Prototype Electronic Research Notebook for NIST 4/01/1994 Status: Download: NISTIR 5395 (DRAFT) (DOI); Local Download	Draft	4/01/1994

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Publication Search

Quick Links

Search Results

Quick Links

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Publication Search

Quick Links

Search Results

Quick Links

Computer Security
Resource Center