Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Publications

Search Title, Abstract, Conference, Citation, Keyword or Author

Title

Author

NIST Pub Series

NIST Topic Areas

Report Number

Publication Date

Max Publication Date

NIST Authors in Bold

Displaying 276 - 300 of 372

Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations

June 9, 2005

Author(s)

C M. Chernick, Charles Edington III, Matthew J. Fanto, R Rosenthal

[WITHDRAWN 3/13/13. Superseded by SP 800-52 Rev. 1 (April 2014): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=915295] These Guidelines briefly introduce computer communications architectural concepts. The Guidelines place the responsibility

Recommendation for Block Cipher Modes of Operation: The CMAC Mode for Authentication

May 1, 2005

Author(s)

Morris J. Dworkin

This Recommendation specifies a message authentication code (MAC) algorithm based on a symmetric key block cipher. This block cipher-based MAC algorithm, called CMAC, may be used to provide assurance of the authenticity, and, hence, the integrity, of

Security Configuration Checklists Program for IT Products: Guidance For Checklists Users and Developers

May 1, 2005

Author(s)

Murugiah P. Souppaya, John P. Wack, Karen Kent

[Superseded by SP 800-70 Rev. 1 (September 2009): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=901337] The National Institute of Standards and Technology (NIST) has produced Security Configuration Checklists Program for IT Products

Cryptographic Algorithms and Key Sizes for Personal Identity Verification

April 25, 2005

Author(s)

William T. Polk, Donna F. Dodson, William E. Burr

[Superseded by SP 800-78-1 (August 2007): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51215] The Homeland Security Presidential Directive (HSPD) 12 mandated the creation of new standards for interoperable identity credentials for physical

Recommended Security Controls for Federal Information Systems [includes updates through 4/22/05]

April 22, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 6/17/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151305] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Interfaces for Personal Identity Verification

April 1, 2005

Author(s)

James F. Dray Jr., Scott Guthery, Teresa T. Schwarzhoff

[Superseded by SP 800-73-1 (March 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=150633] SP 800-73 specifies smart card interfaces used to retrieve and use identity credentials. These specifications reflect the design goals of

Recommended Security Controls for Federal Information Systems

February 28, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 4/22/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918658] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Integrating IT Security into the Capital Planning and Investment Control Process

January 1, 2005

Author(s)

Joan Hash, N Bartol, H Rollins, W Robinson, J Abeles, S Batdorff

Traditionally, information technology (IT) security and capital planning and investment control (CPIC) processes have been performed independently by security and capital planning practitioners. However, the Federal Information Security Management Act

Guidelines on PDA Forensics, Recommendations of the National Institute of Standards and Technology

November 1, 2004

Author(s)

Wayne Jansen, Richard Ayers

Forensic specialists periodically encounter unusual devices and new technologies normally not envisaged as having immediate relevance from a digital forensics perspective. The objective of the guide is twofold: to help organizations evolve appropriate

Electronic Authentication Guideline

September 27, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by SP 800-63 Ver. 1.0.2 (April 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918434] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation covers

Electronic Authentication Guideline

June 30, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by NIST SP 800-63 Ver. 1.0.1 (September 2004): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151295] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation

Engineering Principles for IT Security (A Baseline for Achieving Security), Revision A

June 21, 2004

Author(s)

G Stoneburner, Clark Hayden, Alexis Feringa

The Engineering Principles for Information Technology (IT) Security (EP-ITS) presents a list of system-level security principles to be considered in the design, development, and operation of an information system. This document is to be used by IT security

Security Considerations in the Information System Development Life Cycle

June 16, 2004

Author(s)

Timothy Grance, Joan Hash, Marc Stevens

[Superseded by SP 800-64 Rev. 2 (October 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=890097] The need to provide protection for federal information systems has been present since computers were first used. Including security early

Guide for Mapping Types of Information and Information Systems to Security Categories (2 vols.)

June 10, 2004

Author(s)

William C. Barker, Annabelle Lee

[Superseded by SP 800-60 Rev. 1 (August 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152106] Title III of the E-Government Act, titled the Federal Information Security Management Act (FISMA) of 2002, tasked NIST to develop (1)

Guide for the Security Certification and Accreditation of Federal Information Systems

May 20, 2004

Author(s)

Ronald S. Ross, Marianne M. Swanson, G Stoneburner, Stuart W. Katzke, L A. Johnson

[Superseded by SP 800-37 Rev. 1 (February 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=904985] The purpose of this publication is to provide guidelines for the security certification and accreditation of information systems

Recommendation for Block Cipher Modes of Operation: The CCM Mode for Authentication and Confidentiality [including updates through 7/20/2007]

May 12, 2004

Author(s)

Morris J. Dworkin

This Recommendation defines a mode of operation, called Counter with Cipher Block Chaining-Message Authentication Code (CCM), for a symmetric key block cipher algorithm. CCM may be used to provide assurance of the confidentiality and the authenticity of

Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher

May 1, 2004

Author(s)

William C. Barker

[Superseded by SP 800-67 Rev. 1 (January 2012): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=910079] The selective application of technological and related procedural safeguards is an important responsibility of every Federal organization

Computer Security Incident Handling Guide

January 16, 2004

Author(s)

Timothy Grance, Karen Kent, Brian Kim

[Superseded by SP 800-61 Rev. 1 (March 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51289] NIST Special Publication 800-61, Computer Security Incident Handling Guide, assists organizations in mitigating the potential business impact

Guideline on Network Security Testing

October 15, 2003

Author(s)

John P. Wack, Miles C. Tracy, Murugiah P. Souppaya

[Superseded by NIST SP 800-115, Technical Guide to Information Security Testing and Assessment, http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152164] The purpose of this document is to provide guidance for security program manager, technical

Guide to Information Technology Security Services

October 13, 2003

Author(s)

Timothy Grance, Joan Hash, Marc Stevens, K O'Neal, N Bartol

Organizations frequently must evaluate and select a variety of information technology (IT) security services in order to maintain and improve their overall IT security program and enterprise architecture. IT security services, which range from security

Security Considerations in the Information System Development Life Cycle

October 10, 2003

Author(s)

Timothy Grance, Joan Hash, Marc Stevens

[Superseded by SP 800-64 Rev. 1 (June 2004): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151285] The need to provide protection for federal information systems has been present since computers were first used. Including security early in

Guide to Information Technology Security Services

October 9, 2003

Author(s)

Timothy Grance, Joan Hash, Marc Stevens, Kristofor O'Neal, Nadya Bartol

Guide to Selecting Information Technology Security Products

October 9, 2003

Author(s)

Timothy Grance, Marc Stevens, Marissa Myers

The selection of IT security products is an integral part of the design, development and maintenance of an IT security infrastructure that ensures confidentiality, integrity, and availability of mission critical information. The guide seeks to assist in

Building an Information Technology Security Awareness and Training Program

October 1, 2003

Author(s)

Mark Wilson, Joan Hash

NIST Special Publication 800-50, Building An Information Technology Security Awareness and Training Program, provides guidance for building an effective information technology (IT) security program and supports requirements specified in the Federal

Guidelines for Identifying an Information System as a National Security System

August 20, 2003

Author(s)

William C. Barker

This document provides guidelines developed in conjunction with the Department of Defense, including the National Security Agency, for identifying an information system as a national security system. The basis for these guidelines is the Federal

Advanced communications
-Open Radio Access Network (Open-RAN)
-Quantum communications
-Spectrum sharing
-Wireless (RF)
Bioscience
-Bioimaging
-Bioinformatics
-Biomanufacturing
-Biomaterials
-Cell biology
-Cell-free systems
-Engineering / synthetic biology
-Gene delivery systems
-Genome editing
-Genomics
-Glycomics
-Metabolomics
-Microbial measurements
-Proteomics
-Sequence screening
-Transcriptomics
Buildings and Construction
-Building codes and standards
-Building control systems
-Building damage and repair
-Building economics
-Building materials
-Energy efficiency
-Heating, ventilation and air conditioning equipment
-Indoor air quality
-Structural engineering
-Thermal comfort
Chemistry
-Analytical chemistry
-Chemical engineering and processing
-Chemical thermodynamics and chemical properties
-Molecular characterization
-Theoretical chemistry and modeling
-Thermochemical properties
Electronics
-Electromagnetics
-Flexible electronics
-Magnetoelectronics
-Optoelectronics
-Organic electronics
-Semiconductors
-Sensors
-Superconducting electronics
Energy
-Alternative energy
-Conventional energy
-Electric power / smart grid
-Fuels
Environment
-Air / water / soil quality
-Climate
-Environmental health
-Greenhouse gas measurements
-Marine science
-Sustainability
Fire
-Emergency building evacuation
-Fire detection
-Fire dynamics and science
-Fire fighting
-Fire modeling
-Fire risk reduction
-Materials flammability
-Structural fire resistance
-Wildland urban interface fire
Forensic Science
-Digital evidence
-Drugs and toxicology
-Firearms and toolmarks
-Forensic biometrics
-Forensic genetics
-Trace evidence
Health
-Biopharmaceuticals
-Cell and gene therapy
-Clinical diagnostics
-Dentistry
-Food and nutrition
-Human microbiome
-Medical imaging
-Precision medicine
-Regenerative medicine and advanced therapy
Information technology
-Artificial intelligence
--AI measurement and evaluation
--Applied AI
--Fundamental AI
--Hardware for AI
--Machine learning
--Trustworthy and responsible AI
-Biometrics
-Cloud computing and virtualization
-Complex systems
-Computational science
-Conformance testing
-Cyber-physical systems
--Smart cities
-Cybersecurity
--Cryptography
--Cybersecurity education and workforce development
--Cybersecurity measurement
--Identity and access management
--Privacy engineering
--Risk management
--Securing emerging technologies
--Trustworthy networks
--Trustworthy platforms
-Data and informatics
--Human language technology
--Information retrieval
--Natural language processing
-Federal information processing standards (FIPS)
-Health IT
-Internet of Things (IoT)
-Interoperability testing
-Location based services
-Mobile
-Networking
--Mobile and wireless networking
--Network management and monitoring
--Network modeling and analysis
--Network security and robustness
--Network test and measurement
--Next generation networks
--Protocol design and standardization
--Software defined and virtual networks
-Privacy
-Software research
--Software testing
-Usability and human factors
--Accessibility
-Video analytics
-Virtual / augmented reality
-Visualization research
-Voting systems
Infrastructure
Manufacturing
-Additive manufacturing
-Factory communications
-Factory operations planning and control
-Interoperability in manufacturing
-Machining
-Manufacturing economics
-Manufacturing quality assurance
-Manufacturing systems design and analysis
-Monitoring, diagnostics and prognostics
-Process improvement
-Process measurement and control
-Product data
-Robotics in manufacturing
--Agility and adaptability
--Collaborative robots
--Dexterous grasping
--Manipulation
--Mobility and industrial autonomous vehicles
--Navigation / actuation / control
--Sensing and perception
-Supply chain
-Sustainable manufacturing
-Systems engineering
-Systems integration
-Technology commercialization
Materials
-Ceramics
-Composites
-Concrete / cement
-Materials characterization
--Composition and structure
--Mechanical properties
--Thermal properties
-Metals
-Modeling and computational material science
-Polymers
-Superconductors
Mathematics and statistics
-Experiment design
-Image and signal processing
-Modeling and simulation research
-Numerical methods and software
-Statistical analysis
-Uncertainty quantification
Metrology
-Amount of substance
-Dimensional metrology
-Electrical / electromagnetic metrology
-Flow metrology and rheology
-Force metrology
-Humidity metrology
-Ionizing radiation metrology
-Mass metrology
-Metric
-Optical / photometry / laser metrology
-Pressure and vacuum metrology
-Thermometry metrology
-Time and frequency metrology
-Weights and measures
Nanotechnology
-Nanobiotechnology
-Nanochemistry
-Nanoelectronics
-Nanofabrication / manufacturing
--Lithography
--Self-assembly
-Nanofluidics
-Nanomagnetics
-Nanomaterials
-Nanomechanics
-Nanometrology
-Nanophotonics
-Nanophysics
-Nanoplasmonics
Neutron research
Performance excellence
-Assessment tools and services
-Baldrige award
-Baldrige examiners
-Baldrige Framework and Criteria
-Best practices
-Leadership development
Physics
-Atomic / molecular / quantum
-Biological physics
-Condensed matter
-Electron physics
-Magnetics
-Nuclear physics
-Optical physics and communications
-Quantum information science
-Radiation
-Spectroscopy
-Thermodynamics
-Time and frequency
Public safety
-Chemical / Biological / Radiological / Nuclear / Explosives (CBRNE)
-First responder preparedness
-Law enforcement
-Public safety communications research
-Response robots
Resilience
-Community resilience
-Disaster and failure studies
-Earthquake risk reduction
-Resilience economics
-Resilient materials
-Windstorm impact reduction
Standards
-Accreditation
-Calibration services
-Conformity assessment
-Documentary standards
-Frameworks
-Quality assurance
-Reference data
-Reference instruments
-Reference materials
-Standards education
Technology transfer
Transportation
-Aerospace
-Automotive