Search Publications

NIST Authors in Bold

Displaying 301 - 325 of 402

PIV Middleware and PIV Card Application Conformance Test Guidance (SP 800-73 Compliance)

October 19, 2005

Author(s)

Ramaswamy Chandramouli, Levent Eyuboglu, Ketan Mehta

[Superseded by: SP 800-85A (April 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151318 and SP 800-85B (July 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=50848] This document specifies the test plan, processes

Codes for the Identification of Federal and Federally Assisted Organizations Version 1.0 (NIST SP 800-87 v1.0)

October 14, 2005

Author(s)

William C. Barker, Hildegard Ferraiolo

[Superseded by SP 800-87 v1.0(January 2005): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=150589] The Homeland Security Presidential Directive HSPD-12 called for new standards to be adopted governing the interoperable use of identity

Recommendation for Key Management, Part 1: General

August 1, 2005

Author(s)

Elaine B. Barker, William C. Barker, William E. Burr, William T. Polk, Miles Smid

[Superseded by SP 800-57 Part 1 Revised (May 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=917474] This Recommendation provides cryptographic key management guidance. It consists of three parts. Part 1 provides general guidance and

Guidelines for the Certification and Accreditation of PIV Card Issuing Organizations

July 1, 2005

Author(s)

Dennis K. Branstad, Alicia Clay Jones, Joan Hash

[Superseded by SP 800-79-1 (June 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152182] Homeland Security Presidential Directive 12 (HSPD-12) established a policy for all Federal departments and agencies to create and use a government

Recommended Security Controls for Federal Information Systems [includes updates through 6/17/05]

June 17, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers

[Superseded by NIST SP 800-53 Revision 1 (December 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=50945] The purpose of this publication is to provide guidelines for selecting and specifying security controls for information systems

Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations

June 9, 2005

Author(s)

C M. Chernick, Charles Edington III, Matthew J. Fanto, R Rosenthal

[WITHDRAWN 3/13/13. Superseded by SP 800-52 Rev. 1 (April 2014): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=915295] These Guidelines briefly introduce computer communications architectural concepts. The Guidelines place the responsibility

Recommendation for Block Cipher Modes of Operation: The CMAC Mode for Authentication

May 1, 2005

Author(s)

Morris J. Dworkin

This Recommendation specifies a message authentication code (MAC) algorithm based on a symmetric key block cipher. This block cipher-based MAC algorithm, called CMAC, may be used to provide assurance of the authenticity, and, hence, the integrity, of

Security Configuration Checklists Program for IT Products: Guidance For Checklists Users and Developers

May 1, 2005

Author(s)

Murugiah P. Souppaya, John P. Wack, Karen Kent

[Superseded by SP 800-70 Rev. 1 (September 2009): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=901337] The National Institute of Standards and Technology (NIST) has produced Security Configuration Checklists Program for IT Products

Cryptographic Algorithms and Key Sizes for Personal Identity Verification

April 25, 2005

Author(s)

William T. Polk, Donna F. Dodson, William E. Burr

[Superseded by SP 800-78-1 (August 2007): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51215] The Homeland Security Presidential Directive (HSPD) 12 mandated the creation of new standards for interoperable identity credentials for physical

Recommended Security Controls for Federal Information Systems [includes updates through 4/22/05]

April 22, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 6/17/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151305] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Interfaces for Personal Identity Verification

April 1, 2005

Author(s)

James F. Dray Jr., Scott Guthery, Teresa T. Schwarzhoff

[Superseded by SP 800-73-1 (March 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=150633] SP 800-73 specifies smart card interfaces used to retrieve and use identity credentials. These specifications reflect the design goals of

Recommended Security Controls for Federal Information Systems

February 28, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 4/22/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918658] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Integrating IT Security into the Capital Planning and Investment Control Process

January 1, 2005

Author(s)

Joan Hash, N Bartol, H Rollins, W Robinson, J Abeles, S Batdorff

Traditionally, information technology (IT) security and capital planning and investment control (CPIC) processes have been performed independently by security and capital planning practitioners. However, the Federal Information Security Management Act

Guidelines on PDA Forensics, Recommendations of the National Institute of Standards and Technology

November 1, 2004

Author(s)

Wayne Jansen, Richard Ayers

Forensic specialists periodically encounter unusual devices and new technologies normally not envisaged as having immediate relevance from a digital forensics perspective. The objective of the guide is twofold: to help organizations evolve appropriate

Electronic Authentication Guideline

September 27, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by SP 800-63 Ver. 1.0.2 (April 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918434] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation covers

Electronic Authentication Guideline

June 30, 2004

Author(s)

William E. Burr, Donna F. Dodson, William T. Polk

[Superseded by NIST SP 800-63 Ver. 1.0.1 (September 2004): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151295] This recommendation provides technical guidance to Federal agencies implementing electronic authentication. The recommendation

Engineering Principles for IT Security (A Baseline for Achieving Security), Revision A

June 21, 2004

Author(s)

G Stoneburner, Clark Hayden, Alexis Feringa

The Engineering Principles for Information Technology (IT) Security (EP-ITS) presents a list of system-level security principles to be considered in the design, development, and operation of an information system. This document is to be used by IT security

Security Considerations in the Information System Development Life Cycle

June 16, 2004

Author(s)

Timothy Grance, Joan Hash, Marc Stevens

[Superseded by SP 800-64 Rev. 2 (October 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=890097] The need to provide protection for federal information systems has been present since computers were first used. Including security early

Guide for Mapping Types of Information and Information Systems to Security Categories (2 vols.)

June 10, 2004

Author(s)

William C. Barker, Annabelle Lee

[Superseded by SP 800-60 Rev. 1 (August 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152106] Title III of the E-Government Act, titled the Federal Information Security Management Act (FISMA) of 2002, tasked NIST to develop (1)

Guide for the Security Certification and Accreditation of Federal Information Systems

May 20, 2004

Author(s)

Ronald S. Ross, Marianne M. Swanson, G Stoneburner, Stuart W. Katzke, L A. Johnson

[Superseded by SP 800-37 Rev. 1 (February 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=904985] The purpose of this publication is to provide guidelines for the security certification and accreditation of information systems

Recommendation for Block Cipher Modes of Operation: The CCM Mode for Authentication and Confidentiality [including updates through 7/20/2007]

May 12, 2004

Author(s)

Morris J. Dworkin

This Recommendation defines a mode of operation, called Counter with Cipher Block Chaining-Message Authentication Code (CCM), for a symmetric key block cipher algorithm. CCM may be used to provide assurance of the confidentiality and the authenticity of

Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher

May 1, 2004

Author(s)

William C. Barker

[Superseded by SP 800-67 Rev. 1 (January 2012): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=910079] The selective application of technological and related procedural safeguards is an important responsibility of every Federal organization

Computer Security Incident Handling Guide

January 16, 2004

Author(s)

Timothy Grance, Karen Kent, Brian Kim

[Superseded by SP 800-61 Rev. 1 (March 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51289] NIST Special Publication 800-61, Computer Security Incident Handling Guide, assists organizations in mitigating the potential business impact

Guideline on Network Security Testing

October 15, 2003

Author(s)

John P. Wack, Miles C. Tracy, Murugiah P. Souppaya

[Superseded by NIST SP 800-115, Technical Guide to Information Security Testing and Assessment, http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152164] The purpose of this document is to provide guidance for security program manager, technical

Guide to Information Technology Security Services

October 13, 2003

Author(s)

Timothy Grance, Joan Hash, Marc Stevens, K O'Neal, N Bartol

Organizations frequently must evaluate and select a variety of information technology (IT) security services in order to maintain and improve their overall IT security program and enterprise architecture. IT security services, which range from security

Advanced communications
-Open Radio Access Network (Open-RAN)
-Quantum communications
-Spectrum sharing
-Wireless (RF)
Artificial intelligence
-AI measurement and evaluation
-Autonomous systems
--Automated vehicles
--Autonomous laboratories
-Applied AI
-Fundamental AI
-Hardware for AI
-Machine learning
-Trustworthy and responsible AI
Bioscience
-Bioeconomy
--Biological data
-Bioimaging
-Bioinformatics
-Biomanufacturing
-Biomaterials
-Biometrology
-Biosecurity
--Biosurveillance
--Genomic cybersecurity
--Nucleic acid sequence screening
-Cell measurements
-Engineering / synthetic biology
--Biofabrication
--Cell-free systems
--Genome engineering
--Protein engineering
-Gene delivery systems
-Genome editing
-Genomics
-Glycomics
-Metabolomics
-Microbial measurements
-Proteomics
Buildings and Construction
-Building codes and standards
-Building control systems
-Building damage and repair
-Building economics
-Building materials
-Energy efficiency
-Heating, ventilation and air conditioning equipment
-Indoor air quality
-Structural engineering
-Thermal comfort
Chemistry
-Analytical chemistry
-Chemical engineering and processing
-Chemical thermodynamics and chemical properties
-Molecular characterization
-Theoretical chemistry and modeling
-Thermochemical properties
Electronics
-Electromagnetics
-Flexible electronics
-Magnetoelectronics
-Optoelectronics
-Organic electronics
-Semiconductors
-Sensors
-Superconducting electronics
Energy
-Alternative energy
-Conventional energy
-Electric power / smart grid
-Fuels
Environment
-Air / water / soil quality
-Climate Measurements
-Environmental health
-Greenhouse gas measurements
-Marine science
-Sustainability
Fire
-Fire detection
-Fire dynamics and science
-Fire fighting
-Fire modeling
-Fire risk reduction
-Materials flammability
-Structural fire resistance
-Wildland urban interface fire
Forensic Science
-Digital evidence
-Drugs and toxicology
-Firearms and toolmarks
-Forensic biometrics
-Forensic genetics
-Trace evidence
Health
-Biopharmaceuticals
-Cell and gene therapy
-Clinical diagnostics
--Cancer
--Medical imaging
-Food and nutrition
-Human microbiome
-Precision medicine
-Regenerative medicine and advanced therapy
--Flow cytometry
Information technology
-Biometrics
-Cloud computing and virtualization
-Complex systems
-Computational science
-Conformance testing
-Cyber-physical systems
--Smart cities
-Cybersecurity and privacy
--Cryptography
--Cybersecurity education and workforce development
--Cybersecurity measurement
--Identity and access management
--Privacy engineering
--Risk management
--Securing emerging technologies
--Trustworthy networks
--Trustworthy platforms
-Data and informatics
--Human language technology
--Information retrieval
--Natural language processing
-Digital twins
-Federal information processing standards (FIPS)
-Health IT
-Internet of Things (IoT)
-Interoperability testing
-Location based services
-Mobile
-Networking
--Mobile and wireless networking
--Network management and monitoring
--Network modeling and analysis
--Network security and robustness
--Network test and measurement
--Next generation networks
--Protocol design and standardization
--Software defined and virtual networks
-Software research
--Software testing
-Usability and human factors
--Accessibility
-Video analytics
-Virtual / augmented reality
-Visualization research
-Voting systems
Infrastructure
Manufacturing
-Additive manufacturing
-Factory communications
-Factory operations planning and control
-Interoperability in manufacturing
-Machining
-Manufacturing economics
-Manufacturing quality assurance
-Manufacturing systems design and analysis
-Monitoring, diagnostics and prognostics
-Process improvement
-Process measurement and control
-Product data
-Robotics
--Agility and adaptability
--Collaborative robots
--Dexterous grasping
--Manipulation
--Mobility and industrial autonomous vehicles
--Navigation / actuation / control
--Sensing and perception
-Supply chain
-Sustainable manufacturing
-Systems engineering
-Systems integration
-Technology commercialization
Materials
-Ceramics
-Composites
-Concrete / cement
-Materials characterization
--Composition and structure
--Mechanical properties
--Thermal properties
-Metals
-Modeling and computational material science
-Polymers
-Superconductors
Mathematics and statistics
-Experiment design
-Image and signal processing
-Modeling and simulation research
-Numerical methods and software
-Statistical analysis
-Uncertainty quantification
Metrology
-Amount of substance
-Dimensional metrology
-Electrical / electromagnetic metrology
-Flow metrology and rheology
-Force metrology
-Humidity metrology
-Ionizing radiation metrology
-Mass metrology
-Metric
-Optical / photometry / laser metrology
-Pressure and vacuum metrology
-Thermometry metrology
-Time and frequency metrology
-Weights and measures
Nanotechnology
-Nanobiotechnology
-Nanochemistry
-Nanoelectronics
-Nanofabrication / manufacturing
--Lithography
--Self-assembly
-Nanofluidics
-Nanomagnetics
-Nanomaterials
-Nanomechanics
-Nanometrology
-Nanophotonics
-Nanophysics
-Nanoplasmonics
Neutron research
Performance excellence
-Assessment tools and services
-Baldrige award
-Baldrige examiners
-Baldrige Framework and Criteria
-Best practices
-Leadership development
Physics
-Atomic / molecular / quantum
-Biological physics
-Condensed matter
-Electron physics
-Magnetics
-Nuclear physics
-Optical physics and communications
-Quantum information science
-Radiation
-Spectroscopy
-Thermodynamics
-Time and frequency
Public safety
-Chemical / Biological / Radiological / Nuclear / Explosives (CBRNE)
-First responder preparedness
-Law enforcement
-Public safety communications research
-Response robots
Resilience
-Community resilience
--Recovery
--Resilience metrics
-Disaster and failure studies
-Earthquake risk reduction
-Resilience economics
-Resilient materials
-Windstorm impact reduction
Standards
-Accreditation
-Calibration services
-Conformity assessment
-Documentary standards
-Frameworks
-Quality assurance
-Reference data
-Reference instruments
-Reference materials
-Standards education
Technology transfer
Transportation
-Aerospace
-Automotive