Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

October 1, 2025: Due to a lapse in federal funding, this website is not being updated. Learn more.

Search Results

Showing 1 through 25 of 80 matching records.

1 | 2 | 3 | 4 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
IR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue IR 8144 (Initial Public Draft) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft	Draft	9/12/2016	100%
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Initial Public Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft	Draft	3/14/2016	93%
SP	1800-44	Secure Software Development, Security, and Operations (DevSecOps) Practices SP 1800-44 (Initial Public Draft) Secure Software Development, Security, and Operations (DevSecOps) Practices 7/30/2025 Status: Draft	Draft	7/30/2025	84%
Journal Article		Measuring the Exploitation of Weaknesses in the Wild Journal Article (Final) Measuring the Exploitation of Weaknesses in the Wild 6/26/2024 Status: Final	Final	6/26/2024	60%
Conference Paper		SMET: Semantic Mapping of CVE to ATT&CK and its Application to Cyber Security Conference Paper (Final) SMET: Semantic Mapping of CVE to ATT&CK and its Application to Cyber Security 7/12/2023 Status: Final	Final	7/12/2023	60%
Journal Article		Empirical Validation of Automated Vulnerability Curation and Characterization Journal Article (Final) Empirical Validation of Automated Vulnerability Curation and Characterization 2/28/2023 Status: Final	Final	2/28/2023	60%
IR	8409	Measuring the Common Vulnerability Scoring System Base Score Equation IR 8409 (Final) Measuring the Common Vulnerability Scoring System Base Score Equation 11/15/2022 Status: Final	Final	11/15/2022	60%
Conference Paper		A Suite of Metrics for Calculating the Most Significant Security Relevant Software Flaw Types Conference Paper (Final) A Suite of Metrics for Calculating the Most Significant Security Relevant Software Flaw Types 7/13/2020 Status: Final	Final	7/13/2020	60%
Other		On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms Other (Final) On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms 1/29/2020 Status: Final	Final	1/29/2020	60%
IR	8221	A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data IR 8221 (Final) A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data 6/05/2019 Status: Final	Final	6/05/2019	60%
Conference Paper		RTL-PSC: Automated Power Side-Channel Leakage Assessment at Register-Transfer Level Conference Paper (Final) RTL-PSC: Automated Power Side-Channel Leakage Assessment at Register-Transfer Level 4/23/2019 Status: Final	Final	4/23/2019	60%
Conference Paper		What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors? [poster] Conference Paper (Final) What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors? [poster] 4/10/2018 Status: Final	Final	4/10/2018	60%
Journal Article		It Doesn't Have to Be Like This: Cybersecurity Vulnerability Trends Journal Article (Final) It Doesn't Have to Be Like This: Cybersecurity Vulnerability Trends 11/28/2017 Status: Final	Final	11/28/2017	60%
Conference Paper		An Analysis of Vulnerability Trends, 2008-2016 Conference Paper (Final) An Analysis of Vulnerability Trends, 2008-2016 7/25/2017 Status: Final	Final	7/25/2017	60%
Journal Article		Defeating Buffer Overflow: A Trivial but Dangerous Bug Journal Article (Final) Defeating Buffer Overflow: A Trivial but Dangerous Bug 12/01/2016 Status: Final	Final	12/01/2016	60%
Conference Paper		A Probabilistic Network Forensics Model for Evidence Analysis Conference Paper (Final) A Probabilistic Network Forensics Model for Evidence Analysis 9/20/2016 Status: Final	Final	9/20/2016	60%
Journal Article		Metamorphic Testing for Cybersecurity Journal Article (Final) Metamorphic Testing for Cybersecurity 6/27/2016 Status: Final	Final	6/27/2016	60%
Book Section		Metrics of Security Book Section (Final) Metrics of Security 10/03/2014 Status: Final	Final	10/03/2014	60%
Conference Paper		Vulnerability Hierarchies in Access Control Configurations Conference Paper (Final) Vulnerability Hierarchies in Access Control Configurations 12/27/2011 Status: Final	Final	12/27/2011	60%
ITL Bulletin		Implementation Issues for Cryptography ITL Bulletin (Final) Implementation Issues for Cryptography 8/01/1996 Status: Final	Final	8/01/1996	60%
SP	800-216	Recommendations for Federal Vulnerability Disclosure Guidelines SP 800-216 (Final) Recommendations for Federal Vulnerability Disclosure Guidelines 5/24/2023 Status: Final	Final	5/24/2023	53%
Conference Paper		A Historical and Statistical Study of the Software Vulnerability Landscape Conference Paper (Final) A Historical and Statistical Study of the Software Vulnerability Landscape 4/18/2021 Status: Final	Final	4/18/2021	53%
Project Description		Critical Cybersecurity Hygiene: Patching the Enterprise Project Description (Final) Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final	Final	3/30/2020	53%
Conference Paper		Determining Forensic Data Requirements for Detecting Hypervisor Attacks Conference Paper (Final) Determining Forensic Data Requirements for Detecting Hypervisor Attacks 1/28/2019 Status: Final	Final	1/28/2019	53%
Journal Article		Using a Capability Oriented Methodology to Build Your Cloud Ecosystem Journal Article (Final) Using a Capability Oriented Methodology to Build Your Cloud Ecosystem 3/31/2016 Status: Final	Final	3/31/2016	53%

1 2 3 4 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs