U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Special Publication (NIST SP)

Recommendation for Cryptographic Key Generation

Author(s)
Elaine B. Barker, Allen L. Roginsky
Cryptography is often used in an information technology security environment to protect data that is sensitive, has a high value, or is vulnerable to

Attribute Considerations for Access Control Systems

Author(s)
Chung Tong Hu, David F. Ferraiolo, David Kuhn
Attribute-based access control systems rely upon attributes to not only define access control policy rules but also enforce the access control. Attributes need

Vetting the Security of Mobile Applications

Author(s)
Michael Ogata, Josh Franklin, Jeff Voas, Vincent Sritapan, Stephen Quirolgico
Mobile applications are an integral part of our everyday personal and professional lives. As both public and private organizations rely more on mobile

UCEF 1.0.0-ALPHA Kickoff Workshop: Workshop Report

Author(s)
Martin J. Burns, Thomas P. Roth
This report summarizes the results of a workshop held at NIST on July 27, 2017. The goal of this workshop was to introduce participants to the newly constructed

Cyber-Physical Systems and Internet of Things

Author(s)
Christopher Greer, Martin J. Burns, David Wollman, Edward Griffor
This NIST Special Publication describes the relationship between the phrases "cyber-physical systems" and "Internet of Things." CPS and IoT both refer to trends

Trustworthy Email

Author(s)
Scott W. Rose, J. S. Nightingale, Simson Garfinkel, Ramaswamy Chandramouli
This document gives recommendations and guidelines for enhancing trust in email. The primary audience includes enterprise email administrators, information

Mobile Device Security: Cloud and Hybrid Builds

Author(s)
Christopher J. Brown, Spike E. Dog, Sallie P. Edwards, Neil C. McNab, Matt Steele, Joshua M. Franklin
This document proposes a reference design on how to architect enterprise-class protection for mobile devices accessing corporate resources. The example

NIST Smart Grid Interoperability Test Tools

Author(s)
Dhananjay Anand, Kevin G. Brady, Yuyin Song, Cuong T. Nguyen, Kang B. Lee, Gerald J. FitzPatrick, Allen R. Goldstein, YaShian Li-Baboud
The National Institute of Standards and Technology (NIST), participated in the Universal Communication Architecture International User Group (UCAIug)