Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 26 through 50 of 84 matching records.

<< < 1 | 2 | 3 | 4 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
Conference Paper		A Historical and Statistical Study of the Software Vulnerability Landscape Conference Paper (Final) A Historical and Statistical Study of the Software Vulnerability Landscape 4/18/2021 Status: Final	Final	4/18/2021	50%
Project Description		Critical Cybersecurity Hygiene: Patching the Enterprise Project Description (Final) Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final	Final	3/30/2020	50%
Conference Paper		Determining Forensic Data Requirements for Detecting Hypervisor Attacks Conference Paper (Final) Determining Forensic Data Requirements for Detecting Hypervisor Attacks 1/28/2019 Status: Final	Final	1/28/2019	50%
Journal Article		Using a Capability Oriented Methodology to Build Your Cloud Ecosystem Journal Article (Final) Using a Capability Oriented Methodology to Build Your Cloud Ecosystem 3/31/2016 Status: Final	Final	3/31/2016	50%
Conference Paper		Aggregating CVSS Base Scores for Semantics-Rich Network Security Metrics Conference Paper (Final) Aggregating CVSS Base Scores for Semantics-Rich Network Security Metrics 10/11/2012 Status: Final	Final	10/11/2012	50%
Conference Paper		The Generation of Software Security Scoring Systems Leveraging Human Expert Opinion Conference Paper (Final) The Generation of Software Security Scoring Systems Leveraging Human Expert Opinion 11/18/2022 Status: Final	Final	11/18/2022	43%
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Final) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 2/03/2022 Status: Final	Final	2/03/2022	43%
IR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers IR 8246 (Final) Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final	Final	12/15/2020	43%
CSWP	7	Transitioning to the Security Content Automation Protocol (SCAP) Version 2 CSWP 7 (Final) Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Final	Final	9/10/2018	43%
Conference Paper		Combinatorial Security Testing Course Conference Paper (Final) Combinatorial Security Testing Course 4/10/2018 Status: Final	Final	4/10/2018	43%
Journal Article		Surviving Unpatchable Vulnerabilities through Multi-Option Network Hardening Journal Article (Final) Surviving Unpatchable Vulnerabilities through Multi-Option Network Hardening 3/23/2018 Status: Final	Final	3/23/2018	43%
Project Description		Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry Project Description (Final) Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 3/01/2018 Status: Final	Final	3/01/2018	43%
ITL Bulletin		Dramatically Reducing Software Vulnerabilities ITL Bulletin (Final) Dramatically Reducing Software Vulnerabilities 1/17/2017 Status: Final	Final	1/17/2017	43%
IR	8151	Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy IR 8151 (Final) Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy 11/30/2016 Status: Final	Final	11/30/2016	43%
SP	500-320	Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) SP 500-320 (Final) Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) 11/10/2016 Status: Final	Final	11/10/2016	43%
ITL Bulletin		Release of NIST Interagency Report 7946, CVSS Implementation Guidance ITL Bulletin (Final) Release of NIST Interagency Report 7946, CVSS Implementation Guidance 7/10/2014 Status: Final	Final	7/10/2014	43%
IR	7946	CVSS Implementation Guidance IR 7946 (Final) CVSS Implementation Guidance 4/28/2014 Status: Final	Final	4/28/2014	43%
IR	7435	The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems IR 7435 (Final) The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems 8/30/2007 Status: Final	Final	8/30/2007	43%
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 (Final) Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 4/06/2022 Status: Final	Final	4/06/2022	37%
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 (Final) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final	Final	4/06/2022	37%
Conference Paper		Evaluating the Effects of Cyber-Attacks on Cyber Physical Systems using a Hardware-in-the-Loop Simulation Testbed Conference Paper (Final) Evaluating the Effects of Cyber-Attacks on Cyber Physical Systems using a Hardware-in-the-Loop Simulation Testbed 9/18/2017 Status: Final	Final	9/18/2017	37%
Conference Paper		Securing Networks Against Unpatchable and Unknown Vulnerabilities Using Heterogeneous Hardening Options Conference Paper (Final) Securing Networks Against Unpatchable and Unknown Vulnerabilities Using Heterogeneous Hardening Options 6/22/2017 Status: Final	Final	6/22/2017	37%
Conference Paper		Diversifying Network Services under Cost Constraints for Better Resilience against Unknown Attacks Conference Paper (Final) Diversifying Network Services under Cost Constraints for Better Resilience against Unknown Attacks 7/20/2016 Status: Final	Final	7/20/2016	37%
Project Description		Data Integrity: Recovering from a destructive malware attack Project Description (Final) Data Integrity: Recovering from a destructive malware attack 5/09/2016 Status: Final	Final	5/09/2016	37%
ITL Bulletin		Guidance for Secure Authorization of Mobile Applications in the Corporate Environment ITL Bulletin (Final) Guidance for Secure Authorization of Mobile Applications in the Corporate Environment 3/19/2015 Status: Final	Final	3/19/2015	37%

<< first < previous 1 2 3 4 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs