Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-234 (Initial Public Draft)

High-Performance Computing (HPC) Security Overlay

Date Published: May 1, 2025
Comments Due: July 3, 2025
Email Comments to: sp800-234-comments@nist.gov

Author(s)

Yang Guo (NIST), Jeremy Licata (NIST), Jeff Neel (Argonne National Laboratory), Gary Key (DoD HPCMP), James Waterman (DoD HPCMP), Ian Lee (Lawrence Livermore National Laboratory, ShorePoint), Catherine Hinton (Los Alamos National Laboratory), David Shrader (Los Alamos National Laboratory), Andrew Prout (MIT Lincoln Laboratory), Albert Reuther (MIT Lincoln Laboratory), Ted Bohrer (NASA), Katsutoshi Ishisoko (NASA), Kyle Earley (Ohio Supercomputer Center), Aron Warren (Sandia National Laboratories), Tony DeNardo (Sandia National Laboratories), Ian Czarnezki (University of Arkansas), Erik Deumens (University of Florida)

Announcement

High-performance computing (HPC) systems provide fundamental computing infrastructure for large-scale artificial intelligence (AI) and machine learning (ML) model training, big data analysis, and complex simulations at exceptional speeds. Securing HPC systems is essential for safeguarding AI models, protecting sensitive data, and realizing the full benefits of HPC capabilities.

This NIST Special Publication introduces an HPC security overlay that is designed to address the unique characteristics and requirements of HPC systems. Built upon the moderate baseline defined in SP 800-53B, the overlay tailors 60 security controls with supplemental guidance and/or discussions to enhance their applicability in HPC contexts. This overlay aims to provide practical, performance-conscious security guidance that can be readily adopted. For many organizations, it offers a robust foundation for securing HPC environments while also allowing for further customization to meet specific operational or mission needs.

The public comment period is open through July 3rd, 2025. 

Additional information can be found at the NIST HPC Security Working Group website.

Note: A call for patent claims is included in the front matter of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.

Abstract

Keywords

high-performance computing; HPC reference architecture; HPC security; moderate control baselines; security control; security overlay
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-234.ipd
Download URL

Supplemental Material:
High-Performance Computing Security Working Group

Document History:
05/01/25: SP 800-234 (Draft)