Search CSRC

Type: Presentation

Type: Presentation

Type: Presentation

Type: Presentation

Type: Presentation

Type: Presentation

Abstract: This report is designed to help small businesses use the NIST Cybersecurity Framework (CSF) 2.0 [1] to manage their cybersecurity risks. The document is tailored to the smallest of businesses — those with no employees other than the owner, or “non-employer” firms as defined by the...

Abstract: This report describes NIST’s approach to transitioning from quantum-vulnerable cryptographic algorithms to post-quantum digital signature algorithms and key-establishment schemes. It identifies existing quantum-vulnerable cryptographic standards and the quantum-resistant standards to which inf...

Abstract: This white paper is part of a series called Applying 5G Cybersecurity and Privacy Capabilities, which covers 5G cybersecurity- and privacy-supporting capabilities that were implemented as part of the 5G Cybersecurity testbed at the National Cybersecurity Center of Excellence (NCCoE). This white pape...

Abstract: The Sustainable Hardware Security (SUSHI@NIST) Workshop on January 26, 2026, convened stakeholders from industry, academia, and government to identify priorities and develop actionable recommendations for advancing hardware security across the semiconductor ecosystem. This report summarizes the work...

Abstract: Securing sensitive data within databases is a paramount concern for modern applications. Traditional database access control mechanisms often fall short in providing the fine-grained control and centralized management required to mitigate evolving security threats. This paper examines the limitation...

Abstract: Working group participants submitted challenges, which were aggregated and reviewed. The challenges were first categorized as either security- or authorization-related, and then as functional or technical. Multi-cloud environments present unique security challenges arising from using multiple CSPs a...

Abstract: This concept paper introduces NIST’s goal to publish guidelines and resources to assist organizations and professionals in addressing the human aspects of cybersecurity, collectively known as human-centered cybersecurity.

Abstract: This document is a Cybersecurity Framework (CSF) Community Profile developed to support United States-based transit agencies. This “Transit Profile” is aligned with transit sector priorities and best practices and can be used as a guide for prioritizing cybersecurity activities and outco...

Abstract: This report summarizes the discussion at the first “Cyber AI Profile Workshop” in April 2025 during which NIST sought feedback toward the development of a NIST Cybersecurity Framework Community Profile for AI. The Cyber AI Profile will provide guidelines for managing cybersecurity risks...

Abstract: Cryptographic (crypto) agility refers to the capabilities needed to replace and adapt cryptographic algorithms in protocols, applications, software, hardware, firmware, and infrastructures while preserving security and ongoing operations. This white paper provides an in-depth survey of current appro...

Abstract: Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access. Attackers may also steal an organization’s information and demand an additional payment in return for not disclosing the information to authorities, competitors,...

Journal: IEEE Security & Privacy Abstract: Three cybersecurity experts from academia and industry discuss the reasons why many phishing training programs fail to change behavior, the importance of meaningful measures of effectiveness, and strategies for improving organizational resilience against current and future phishing threats.

Abstract: Confidential computing addresses data security and privacy concerns for organizations that move sensitive workloads to the cloud. It is a critical advancement that enables the encryption of data both while it is being processed in memory and in active use. As cloud adoption continues to grow, confid...

Conference: 27th International Symposium on Quality Electronic Design (ISQED 2026) Abstract: Resource isolation plays a crucial role in ensuring the security of hardware systems. Existing hardware security verification measures can identify improper isolation of hardware resources, but coverage is incomplete. As the search space increases with hardware size, the chances of an integrity flaw...

Conference: 19th IEEE International Conference on Software Testing, Verification and Validation (ICST) Abstract: Although there are many available approaches for designing machine learning models and experiments, not all of these approaches are explainable or interpretable. Combination frequency differencing (CFD) provides information on the relationship between feature values and predicted class in the form o...

Journal: IEEE Security & Privacy Abstract: This article establishes information-theoretic limitations for robustness of artificial intelligence (AI) security and alignment. Knowing these limitations and preparing for their challenges is essential for responsible adoption of AI. Broader implications for cognitive reasoning limitations of AI s...

Journal: IEEE Security & Privacy Abstract: We present the key themes from the workshop “ConnectCon: Minding the Gaps in Human-Centered Cybersecurity,” which can inform efforts of researchers and practitioners toward a collective goal of improving cybersecurity outcomes for all.

Abstract: Internet of Things (IoT) products often lack product cybersecurity capabilities their customers—organizations and individuals—can use to help mitigate their cybersecurity risks. Manufacturers can help their customers by improving the securability of their IoT products by providing necess...

Abstract: This paper describes design mechanisms that reconfigure component firmware as a network of forensic units that passively observe bus traffic to extract and share forensic data beyond typical communication. By employing consensus-building algorithms among these distributed units, the augmented firmwa...