Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Insights

a NIST blog

Search Cybersecurity Insights

Displaying 101 - 113 of 113

Proposed Identity Ecosystem Steering Group Workplan

August 3, 2012

… in the National Strategy for Trusted Identities in Cyberspace (NSTIC) into concrete work streams for the Steering Group and its …

Making Privacy Concrete (Three Words Not Usually Found Together)

January 4, 2017

Sean Brooks, Mike Garcia, Naomi Lefkovitz, Suzanne Lightman, Ellen Nadeau

… driver. The pilots need to demonstrate their alignment with the NSTIC Guiding Principles, but in the first couple of years of the …

New pilot opportunity: health records + federated identity = a better online experience

March 31, 2016

… PDF: https://www.nist.gov/system/files/documents/2017/05/19/2016-nist-nstic-02.pdf An applicant’s conference webinar took place on April 18, …

The Attribute Metadata NISTIR “implementers’ draft” is now ready for public comment!

August 1, 2016

Following the “Applying Measurement Science in the Identity Ecosystem” workshop, we heard that attendees wanted a more complete treatment of attribute metadata. So we took the attribute metadata whitepaper we released in the winter, feedback from the workshop, and additional input from a few helpful

Many thanks for a successful 800-63-3 public preview!

September 20, 2016

Paul Grassi

As summer has flown by, you have kept us very busy reviewing your comments on GitHub to Special Publication (SP) 800-63-3 and engaged in a dialog about how this material can be enhanced to better support the public and private sectors. The response we’ve received to SP 800-63-3 – and this new

Build Trust and Verify: New funding opportunity to assess our state pilots!

March 10, 2017

Trusted Identities Group

Last year we issued five grants so state and local jurisdictions could use digital identity technologies to improve delivery of services. Now, we want to evaluate how well those pilots have done: we’re issuing a new funding opportunity to quantify the benefits these solutions bring to the

New publication: January workshop next steps

February 17, 2016

I’ve said it before and I’ll say it again: NIST’s efforts in defining measurement science and metrics in digital identity management must be aligned with the goals of the community. Today I’m pleased to announce the draft release of NISTIR 8103: Advanced Identity Workshop on Applying Measurement

Announcing Draft Special Publication 800-63-3: Digital Authentication Guideline!

May 8, 2016

Today, we’re releasing the public preview of draft Special Publication 800-63-3, Digital Authentication Guideline. We’re excited to share the updates we’ve made—along with the new process that enables our stakeholders to more contribute to the document in a more dynamic way.

SOFA Talk: Strength of Function for Authenticators Framework Now Open for Comment!

October 18, 2016

Elaine Newton

Back in January, NIST's Applied Cybersecurity Division hosted the “Applying Measurement Science in the Identity Ecosystem” workshop. Among the knotty issues under consideration, 220+ participants discussed the concept of measuring the strength of authentication.

Calling all 800-63-3 comments!

July 18, 2016

Have you done your summer reading yet? We’re approaching this summer’s halfway point – which means we’re halfway through the public preview of draft NIST Special Publication 800-63-3: Digital Authentication Guideline. Don’t let the dog days of summer get you down - we still need your feedback and

REGISTER NOW: Privacy Controls Workshop on next steps for NIST SP 800-53, Appendix J!

August 17, 2016

We’re pleased to announce that on September 8, 2016, NIST and the Department of Transportation will hold a technical workshop on the next steps for NIST Special Publication 800-53, Appendix J…and registration is now open! Workshop participation from security and privacy engineers, privacy subject

Got trust? Seeking public comment on new NIST publication for developing trust frameworks to support identity federation

September 30, 2016

David Temoshok

Some communities and organizations that share common user bases and transaction types are addressing challenges to users’ privacy and security by allowing users to access multiple services through common login processes. This approach – known as federated identity management – enables users to

Questions…and buzz surrounding draft NIST Special Publication 800-63-3

July 29, 2016

Here’s the backstory: You may have noticed that we've been getting a wee bit of attention on the proposed deprecation of SMS as an out-of-band second authentication factor in section 5.1.3.2 of draft NIST Special Publication 800-63-3: Digital Authentication Guideline. First, we're happy to get the