Murugiah Souppaya

Selected Publications

Guide to Enterprise Telework and Remote Access Security

June 16, 2009

Author(s)

Karen A. Scarfone, Paul Hoffman, Murugiah P. Souppaya

[Superseded by NIST SP 800-46 Rev. 2 (July 2016): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=921406] Many organizations employees and

Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist

October 24, 2008

Author(s)

Karen A. Scarfone, Murugiah P. Souppaya, Paul M. Johnson

This publication assists IT professionals in securing Windows XP workstations, mobile computers, and computers used by telecommuters within various environments

Technical Guide to Information Security Testing and Assessment

September 30, 2008

Author(s)

Murugiah P. Souppaya, Karen A. Scarfone

The purpose of this document is to assist organizations in planning and conducting technical information security tests and examinations, analyzing findings

Publications

Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile

July 26, 2024

Author(s)

Harold Booth, Murugiah Souppaya, Apostol Vassilev, Michael Ogata, Martin Stanley, Karen Scarfone

This document augments the secure software development practices and tasks defined in Secure Software Development Framework (SSDF) version 1.1 by adding

Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings

February 26, 2024

Author(s)

Karen Scarfone, Murugiah Souppaya, Michael Fagan

This document describes NIST's approach to mapping the elements of documentary standards, regulations, frameworks, and guidelines to a particular NIST

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

July 20, 2023

Author(s)

Mark Trapnell, Eric Trapnell, Murugiah Souppaya, Bob Gendler, Dan Brodjieski, Allen Golbig, Karen Scarfone, Blair Heiserman

The macOS Security Compliance Project (mSCP) provides resources that system administrators, security professionals, security policy authors, information

Guidelines for Managing the Security of Mobile Devices in the Enterprise

May 17, 2023

Author(s)

Murugiah Souppaya, Gema Howell, Karen Scarfone, Joshua Franklin, Vincent Sritapan

Mobile devices were initially personal consumer communication devices, but they are now permanent fixtures in enterprises and are used to access modern networks

Supply Chain Assurance: Validating the Integrity of Computing Devices

December 9, 2022

Author(s)

Nakia R. Grayson, Murugiah Souppaya, Andrew Regenscheid, Tim Polk, Christopher Brown, Karen Scarfone, Chelsea Deane

Product integrity and the ability to distinguish trustworthy products is a critical foundation of C-SCRM. Authoritative information regarding the provenance and

View more Publications

Murugiah Souppaya (Fed)

Computer Scientist

Selected Publications

Guide to Enterprise Telework and Remote Access Security

Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist

Technical Guide to Information Security Testing and Assessment

Publications

Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile

Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

Guidelines for Managing the Security of Mobile Devices in the Enterprise

Supply Chain Assurance: Validating the Integrity of Computing Devices