Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 26 through 50 of 74 matching records.

<< < 1 | 2 | 3 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
CSWP	7	Transitioning to the Security Content Automation Protocol (SCAP) Version 2 CSWP 7 (Final) Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Final	Final	9/10/2018	41%
ITL Bulletin		Updates to the NIST SCAP Validation Program and Associated Test Requirements ITL Bulletin (Final) Updates to the NIST SCAP Validation Program and Associated Test Requirements 3/15/2016 Status: Final	Final	3/15/2016	41%
IR	7511 Rev. 4	Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements IR 7511 Rev. 4 (Final) Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 1/28/2016 Status: Final	Final	1/28/2016	41%
ITL Bulletin		Release of NIST Interagency Report 7946, CVSS Implementation Guidance ITL Bulletin (Final) Release of NIST Interagency Report 7946, CVSS Implementation Guidance 7/10/2014 Status: Final	Final	7/10/2014	41%
IR	7946	CVSS Implementation Guidance IR 7946 (Final) CVSS Implementation Guidance 4/28/2014 Status: Final	Final	4/28/2014	41%
IR	7275 Rev. 4	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 IR 7275 Rev. 4 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 3/01/2012 Status: Final	Final	3/01/2012	41%
IR	7694	Specification for Asset Reporting Format 1.1 IR 7694 (Final) Specification for Asset Reporting Format 1.1 6/21/2011 Status: Final	Final	6/21/2011	41%
IR	7693	Specification for Asset Identification 1.1 IR 7693 (Final) Specification for Asset Identification 1.1 6/17/2011 Status: Final	Final	6/17/2011	41%
IR	7275 Rev. 3	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 IR 7275 Rev. 3 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 1/01/2008 Status: Final	Final	1/01/2008	41%
IR	7435	The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems IR 7435 (Final) The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems 8/30/2007 Status: Final	Final	8/30/2007	41%
SP	800-95	Guide to Secure Web Services SP 800-95 (Final) Guide to Secure Web Services 8/29/2007 Status: Final	Final	8/29/2007	41%
SP	800-219 Rev. 1	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Rev. 1 (Final) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 7/20/2023 Status: Final	Final	7/20/2023	35%
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 (Final) Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final	Final	10/10/2019	35%
IR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements IR 7511 Rev. 5 (Final) Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Final	Final	4/20/2018	35%
IR	7987 Rev. 1	Policy Machine: Features, Architecture, and Specification IR 7987 Rev. 1 (Final) Policy Machine: Features, Architecture, and Specification 10/27/2015 Status: Final	Final	10/27/2015	35%
ITL Bulletin		Guidance for Secure Authorization of Mobile Applications in the Corporate Environment ITL Bulletin (Final) Guidance for Secure Authorization of Mobile Applications in the Corporate Environment 3/19/2015 Status: Final	Final	3/19/2015	35%
ITL Bulletin		Policy Machine: Towards a General-Purpose Enterprise-Wide Operating Environment ITL Bulletin (Final) Policy Machine: Towards a General-Purpose Enterprise-Wide Operating Environment 8/28/2014 Status: Final	Final	8/28/2014	35%
ITL Bulletin		The National Vulnerability Database (NVD): Overview ITL Bulletin (Final) The National Vulnerability Database (NVD): Overview 12/18/2013 Status: Final	Final	12/18/2013	35%
IR	7697	Common Platform Enumeration: Dictionary Specification Version 2.3 IR 7697 (Final) Common Platform Enumeration: Dictionary Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011	35%
IR	7695	Common Platform Enumeration: Naming Specification Version 2.3 IR 7695 (Final) Common Platform Enumeration: Naming Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011	35%
IR	7698	Common Platform Enumeration: Applicability Language Specification Version 2.3 IR 7698 (Final) Common Platform Enumeration: Applicability Language Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011	35%
IR	7696	Common Platform Enumeration: Name Matching Specification Version 2.3 IR 7696 (Final) Common Platform Enumeration: Name Matching Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011	35%
SP	800-51 Rev. 1	Guide to Using Vulnerability Naming Schemes SP 800-51 Rev. 1 (Final) Guide to Using Vulnerability Naming Schemes 2/25/2011 Status: Final	Final	2/25/2011	35%
IR	7502	The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities IR 7502 (Final) The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities 12/27/2010 Status: Final	Final	12/27/2010	35%
SP	1800-15	Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Final) Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 5/26/2021 Status: Final	Final	5/26/2021	29%

<< first < previous 1 2 3 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs