*
Bookmark and Share

Secure Systems and Applications Group

Welcome

In our security research, we focus on identifying emerging and high-priority technologies, and on developing security solutions that will have a high impact on the U.S. critical information infrastructure. We conduct research and development on behalf of government and industry from the earliest stages of technology development through proof-of-concept, reference and prototype implementations, and demonstrations. We work to transfer new technologies to industry, to produce new standards and guidance for federal agencies and industry, and to develop tests, test methodologies, and assurance methods.

Programs/Projects

Mobile Security and Forensics—The goal of the project is to improve the security of mobile devices and software. To that end, we devise and implement, as proof-of-concept prototypes, various types of security mechanisms and …

Personal Identity Verification (PIV) of Federal Employees and Contractors—On August 27, 2004, the President signed Homeland Security Presidential Directive 12 (HSPD-12), entitled "Policy for a Common Identification Standard for Federal Employees and …

Model Driven Security Functional Testing—Model-Driven Engineering (MDE) is emerging as a promising approach that uses models to support various phases of system development lifecycle such as Code Generation and Verification/Validation (V …

IT System and Network Administration—The Information Technology (IT) System and Network Administration site represents NIST resources for managing, maintaining, and securing IT products that are widely deployed across the organization …

Access Control Policy Tool (ACPT)—Access control (AC) systems are among the most critical of information security components. Faulty policies, misconfigurations, or flaws in software implementation can result in serious …

 
Contact

General Information:
David Ferraiolo, Group Manager
Phone: 301-975-3046
Email: david.ferraiolo@nist.gov

100 Bureau Drive, M/S 8930
Gaithersburg, MD 20899-8930