Search | CSRC

Search Results

Showing 615 matching records.

Series	Number	Title Publications	Status	Release Date
NISTIR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers NISTIR 8246 Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final Download: NISTIR 8246 (DOI); Local Download; National Vulnerability Database (NVD)	Final	12/15/2020
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53B (DOI); Local Download; Security Control Overlay Repository (SCOR); OSCAL [an OSCAL version of 800-53B is in development]; NIST news article	Final	12/10/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53 Rev. 5 (DOI); Local Download; Analysis of updates between 800-53 Rev. 5 and Rev. 4, by MITRE Corp. for ODNI; Mapping: Appendix J Privacy Controls (Rev. 4) to Rev. 5; Mappings: Cybersecurity Framework and Privacy Framework to Rev. 5; Mapping: Rev. 5 to ISO/IEC 27001; OSCAL Version of Rev. 5 controls; Control Collaboration Index Template; Control Collaboration Index Template; Blog post	Final	12/10/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-25 (DOI); Local Download; SP 1800-25 volumes and project homepage	Final	12/08/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-26 (DOI); Local Download; SP 1800-26 volumes and project homepage	Final	12/08/2020
NISTIR	8278	National Online Informative References (OLIR) Program: Program Overview and OLIR Uses NISTIR 8278 National Online Informative References (OLIR) Program: Program Overview and OLIR Uses 11/20/2020 Status: Final Download: NISTIR 8278 (DOI); Local Download; OLIR homepage; OLIR catalog	Final	11/20/2020
NISTIR	8278A	National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers NISTIR 8278A National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 11/20/2020 Status: Final Download: NISTIR 8278A (DOI); Local Download; OLIR homepage; Focal Document Templates; OLIR Validation Tool; OLIR catalog	Final	11/20/2020
White Paper		Observations on COMET White Paper Observations on COMET 11/16/2020 Status: Final Download: Paper; NIST Lightweight Cryptography project	Final	11/16/2020
SP	800-181 Rev. 1	Workforce Framework for Cybersecurity (NICE Framework) SP 800-181 Rev. 1 Workforce Framework for Cybersecurity (NICE Framework) 11/16/2020 Status: Final Download: SP 800-181 Rev. 1 (DOI); Local Download; NICE Framework homepage; Blog post: "Back to the Basics: Announcing the New NICE Framework"	Final	11/16/2020
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 Recommendation for Stateful Hash-Based Signature Schemes 10/29/2020 Status: Final Download: SP 800-208 (DOI); Local Download; Comments received	Final	10/29/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 Security Guidelines for Storage Infrastructure 10/26/2020 Status: Final Download: SP 800-209 (DOI); Local Download	Final	10/26/2020
White Paper	NIST Technical Note (TN) 2111	An Empirical Study on Flow-based Botnet Attacks Prediction White Paper NIST Technical Note (TN) 2111 An Empirical Study on Flow-based Botnet Attacks Prediction 10/22/2020 Status: Final Download: White Paper (DOI); Local Download	Final	10/22/2020
White Paper		[Project Description] Implementing a Zero Trust Architecture White Paper [Project Description] Implementing a Zero Trust Architecture 10/21/2020 Status: Final Download: Project Description; Project homepage	Final	10/21/2020
NISTIR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) NISTIR 8286 Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final Download: NISTIR 8286 (DOI); Local Download; (JSON) Cybersecurity Risk Register - Schema, Short-Form; (JSON) Cybersecurity Risk Register - Schema, Long-Form; (JSON) Cybersecurity Risk Register - Example; (JSON) Enterprise Risk Register - Schema, Short-Form; (JSON) Enterprise Risk Register - Schema, Long-Form; (JSON) Enterprise Risk Register - Example; OLIR Mapping NISTIR 8286 to Cybersecurity Framework v1.1	Final	10/13/2020
NISTIR	8183 Rev. 1	Cybersecurity Framework Version 1.1 Manufacturing Profile NISTIR 8183 Rev. 1 Cybersecurity Framework Version 1.1 Manufacturing Profile 10/07/2020 Status: Final Download: NISTIR 8183 Rev. 1 (DOI); Local Download; NIST Cybersecurity Framework	Final	10/07/2020
White Paper		Can you tell? SSNet - a Sagittal Stratum-inspired Neural Network Framework for Sentiment Analysis White Paper Can you tell? SSNet - a Sagittal Stratum-inspired Neural Network Framework for Sentiment Analysis 9/24/2020 Status: Final Download: Paper	Final	9/24/2020
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events 9/22/2020 Status: Final Download: SP 1800-11 (DOI); Local Download; SP 1800-11 volumes and Project Homepage	Final	9/22/2020
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final Download: SP 1800-21 (DOI); Local Download; SP 1800-21 volumes and Project Homepage	Final	9/15/2020
NISTIR	8006	NIST Cloud Computing Forensic Science Challenges NISTIR 8006 NIST Cloud Computing Forensic Science Challenges 8/25/2020 Status: Final Download: NISTIR 8006 (DOI); Local Download	Final	8/25/2020
NISTIR	8272	Impact Analysis Tool for Interdependent Cyber Supply Chain Risks NISTIR 8272 Impact Analysis Tool for Interdependent Cyber Supply Chain Risks 8/25/2020 Status: Final Download: NISTIR 8272 (DOI); Local Download; CSRC - Source Code, Sample Data, and Installer Packages; GitHub - Source Code, Sample Data, and Installer Packages	Final	8/25/2020
SP	800-211	2019 NIST/ITL Cybersecurity Program Annual Report SP 800-211 2019 NIST/ITL Cybersecurity Program Annual Report 8/24/2020 Status: Final Download: SP 800-211 (DOI); Local Download	Final	8/24/2020
SP	1500-16	Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report SP 1500-16 Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report 8/20/2020 Status: Final Download: SP 1500-16 (DOI); Local Download	Final	8/20/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 8/18/2020 Status: Final Download: SP 800-56C Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 2	Final	8/18/2020
SP	800-207	Zero Trust Architecture SP 800-207 Zero Trust Architecture 8/11/2020 Status: Final Download: SP 800-207 (DOI); Local Download; ZTA project at NCCoE; Japanese translation (unofficial--from PwC Consulting LLC for IPA, Japan)	Final	8/11/2020
ITL Bulletin		Security Considerations for Exchanging Files Over the Internet ITL Bulletin Security Considerations for Exchanging Files Over the Internet 8/03/2020 Status: Final Download: August 2020 ITL Bulletin; Infographic: Play the Secure File Exchange Game	Final	8/03/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final Download: SP 800-210 (DOI); Local Download	Final	7/31/2020
White Paper	NIST Technical Note (TN) 2066	OpenFMB Proof of Concept Implementation Research White Paper NIST Technical Note (TN) 2066 OpenFMB Proof of Concept Implementation Research 7/29/2020 Status: Final Download: White Paper (DOI); NIST TN 2066	Final	7/29/2020
NISTIR	8309	Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8309 Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process 7/22/2020 Status: Final Download: NISTIR 8309 (DOI); Local Download; PQC Standardization Project; NIST news article	Final	7/22/2020
NISTIR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection NISTIR 8219 Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 7/16/2020 Status: Final Download: NISTIR 8219 (DOI); Local Download; Project Homepage	Final	7/16/2020
NISTIR	8214A	NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives NISTIR 8214A NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives 7/07/2020 Status: Final Download: NISTIR 8214A (DOI); Local Download; NIST news article; Diff file - shows changes from draft & public comment resolutions	Final	7/07/2020
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 Guide to IPsec VPNs 6/30/2020 Status: Final Download: SP 800-77 Rev. 1 (DOI); Local Download	Final	6/30/2020
ITL Bulletin		NIST Privacy Framework: An Overview ITL Bulletin NIST Privacy Framework: An Overview 6/24/2020 Status: Final Download: June 2020 ITL Bulletin	Final	6/24/2020
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 Securing Web Transactions: TLS Server Certificate Management 6/16/2020 Status: Final Download: SP 1800-16 (DOI); Local Download; SP 1800-16 volumes and Project Homepage	Final	6/16/2020
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 Recommendation for Cryptographic Key Generation 6/04/2020 Status: Final Download: SP 800-133 Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-133 Rev. 2	Final	6/04/2020
White Paper		Notes on Interrogating Random Quantum Circuits White Paper Notes on Interrogating Random Quantum Circuits 5/29/2020 Status: Final Download: White Paper (DOI)	Final	5/29/2020
NISTIR	8259	Foundational Cybersecurity Activities for IoT Device Manufacturers NISTIR 8259 Foundational Cybersecurity Activities for IoT Device Manufacturers 5/29/2020 Status: Final Download: NISTIR 8259 (DOI); Local Download; Blog post; Video overview of NIST recommendations	Final	5/29/2020
NISTIR	8259A	IoT Device Cybersecurity Capability Core Baseline NISTIR 8259A IoT Device Cybersecurity Capability Core Baseline 5/29/2020 Status: Final Download: NISTIR 8259A (DOI); Local Download; Federal Profile of NISTIR 8259A; NIST Cybersecurity for IoT Program; Blog post; Video overview of NIST recommendations	Final	5/29/2020
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final Download: SP 800-204A (DOI); Local Download	Final	5/27/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 5/21/2020 Status: Final Download: SP 800-137A (DOI); Local Download; Element Catalog for SP 800-137A	Final	5/21/2020
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 5/20/2020 Status: Final Download: SP 1800-23 (DOI); Local Download; Web version; Project Homepage	Final	5/20/2020
NISTIR	8196	Security Analysis of First Responder Mobile and Wearable Devices NISTIR 8196 Security Analysis of First Responder Mobile and Wearable Devices 5/11/2020 Status: Final Download: NISTIR 8196 (DOI); Local Download; Security Research Portfolio (from NIST's Public Safety Communications Research Division)	Final	5/11/2020
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 Recommendation for Key Management: Part 1 – General 5/04/2020 Status: Final Download: SP 800-57 Part 1 Rev. 5 (DOI); Local Download	Final	5/04/2020
NISTIR	8294	Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) NISTIR 8294 Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) 4/29/2020 Status: Final Download: NISTIR 8294 (DOI); Local Download	Final	4/29/2020
NISTIR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management NISTIR 8011 Vol. 4 Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final Download: NISTIR 8011 Vol. 4 (DOI); Local Download	Final	4/28/2020
White Paper		Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files White Paper Protecting Data from Ransomware and Other Data Loss Events: A Guide for Managed Service Providers to Conduct, Maintain, and Test Backup Files 4/24/2020 Status: Final Download: Detailed Guide with Recommendations; Brief Guide; Project: Improving Cybersecurity of Managed Service Providers	Final	4/24/2020
White Paper		Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) White Paper Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF) 4/23/2020 Status: Final Download: White Paper (DOI); Local Download	Final	4/23/2020
White Paper		5G Cybersecurity: Preparing a Secure Evolution to 5G White Paper 5G Cybersecurity: Preparing a Secure Evolution to 5G 4/13/2020 Status: Final Download: Project Description; Project homepage	Final	4/13/2020
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final Download: SP 800-175B Rev. 1 (DOI); Local Download	Final	3/31/2020
White Paper		[Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise White Paper [Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final Download: Project Description; Project homepage	Final	3/30/2020
White Paper		[Project Description] Validating the Integrity of Computing Devices: Supply Chain Assurance White Paper [Project Description] Validating the Integrity of Computing Devices: Supply Chain Assurance 3/26/2020 Status: Final Download: Project Description; Project homepage	Final	3/26/2020
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140 (DOI); Local Download	Final	3/20/2020
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140A (DOI); Local Download	Final	3/20/2020
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140C (DOI); Local Download	Final	3/20/2020
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140D (DOI); Local Download	Final	3/20/2020
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 3/20/2020 Status: Final Download: SP 800-140B (DOI); Local Download	Final	3/20/2020
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 SP 800-140E CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 3/20/2020 Status: Final Download: SP 800-140E (DOI); Local Download	Final	3/20/2020
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140F (DOI); Local Download	Final	3/20/2020
NISTIR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework 3/19/2020 Status: Final Download: NISTIR 8170 (DOI); Local Download; Cybersecurity Framework homepage	Final	3/19/2020
ITL Bulletin		Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions ITL Bulletin Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions 3/18/2020 Status: Final Download: March 2020 ITL Bulletin	Final	3/18/2020
SP	800-206	Annual Report 2018: NIST/ITL Cybersecurity Program SP 800-206 Annual Report 2018: NIST/ITL Cybersecurity Program 3/13/2020 Status: Final Download: SP 800-206 (DOI); Local Download	Final	3/13/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 Digital Identity Guidelines 3/02/2020 Status: Final Download: SP 800-63-3 (DOI); Local Download; FAQ; SP 800-63 (GitHub)	Final	3/02/2020
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A Digital Identity Guidelines: Enrollment and Identity Proofing 3/02/2020 Status: Final Download: SP 800-63A (DOI); Local Download	Final	3/02/2020
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management 3/02/2020 Status: Final Download: SP 800-63B (DOI); Local Download	Final	3/02/2020
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C Digital Identity Guidelines: Federation and Assertions 3/02/2020 Status: Final Download: SP 800-63C (DOI); Local Download	Final	3/02/2020
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 2/21/2020 Status: Final Download: SP 800-171 Rev. 2 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 2	Final	2/21/2020
NISTIR	8287	A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce NISTIR 8287 A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce 2/20/2020 Status: Final Download: NISTIR 8287 (DOI); Local Download	Final	2/20/2020
White Paper		[Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector White Paper [Project Description] Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 2/07/2020 Status: Final Download: Project Description; Project homepage	Final	2/07/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company White Paper Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company White Paper Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. White Paper Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Seagate Technology White Paper Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic White Paper Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company White Paper Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final Download: White Paper (DOI); Local Download; Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations White Paper Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final Download: White Paper (DOI); Cyber SCRM Key Practices and Case Studies	Final	2/04/2020
White Paper		On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms White Paper On the Profitability of Selfish Mining Against Multiple Difficulty Adjustment Algorithms 1/29/2020 Status: Final Download: Paper	Final	1/29/2020
White Paper		NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 White Paper NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 1/16/2020 Status: Final Download: White Paper (DOI); Local Download; Privacy Framework and Core	Final	1/16/2020
White Paper		A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems White Paper A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 1/14/2020 Status: Final Download: White Paper (DOI); Local Download	Final	1/14/2020
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final Download: SP 800-189 (DOI); Local Download	Final	12/17/2019
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
White Paper		[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches White Paper [Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Developing Cyber Resilient Systems: A Systems Security Engineering Approach 11/27/2019 Status: Final Download: SP 800-160 Vol. 2 (DOI); Local Download	Final	11/27/2019
White Paper		A Nonlinear Multivariate Cryptosystem Based on a Random Linear Code White Paper A Nonlinear Multivariate Cryptosystem Based on a Random Linear Code 11/24/2019 Status: Final Download: Paper	Final	11/24/2019
SP	1500-4r2	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 SP 1500-4r2 NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 10/21/2019 Status: Final Download: SP 1500-4r2 (DOI); Local Download; NIST Big Data Interoperability Framework V3.0; NIST news article	Final	10/21/2019
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final Download: SP 800-128 (DOI); Local Download	Final	10/10/2019
NISTIR	8268	Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process NISTIR 8268 Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process 10/07/2019 Status: Final Download: NISTIR 8268 (DOI); Local Download; Lightweight Cryptography project	Final	10/07/2019
NISTIR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case NISTIR 8183A Vol. 2 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 2 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance NISTIR 8183A Vol. 1 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 1 (DOI); Local Download	Final	9/30/2019
NISTIR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case NISTIR 8183A Vol. 3 Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 9/30/2019 Status: Final Download: NISTIR 8183A Vol. 3 (DOI); Local Download	Final	9/30/2019
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final Download: SP 800-52 Rev. 2 (DOI); Local Download	Final	8/29/2019
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 Derived Personal Identity Verification (PIV) Credentials 8/27/2019 Status: Final Download: SP 1800-12 (DOI); Local Download; Web version; Project Homepage	Final	8/27/2019
White Paper		[Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources White Paper [Project Description] Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 8/15/2019 Status: Final Download: Project Description; Project homepage	Final	8/15/2019
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 Situational Awareness for Electric Utilities 8/07/2019 Status: Final Download: SP 1800-7 (DOI); Local Download; Web version; Project Homepage	Final	8/07/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final Download: SP 800-204 (DOI); Local Download	Final	8/07/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	8/02/2019
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final Download: SP 1800-17 (DOI); Local Download; Web version; Project Homepage	Final	7/30/2019
White Paper		Practical Cryptanalysis of k-ary C* White Paper Practical Cryptanalysis of k-ary C* 7/18/2019 Status: Final Download: Paper	Final	7/18/2019
White Paper	NIST Technical Note (TN) 2051	Cybersecurity Framework Smart Grid Profile White Paper NIST Technical Note (TN) 2051 Cybersecurity Framework Smart Grid Profile 7/09/2019 Status: Final Download: White Paper (DOI); Local Download; Cybersecurity Framework	Final	7/09/2019
NISTIR	7298 Rev. 3	Glossary of Key Information Security Terms NISTIR 7298 Rev. 3 Glossary of Key Information Security Terms 7/03/2019 Status: Final Download: NISTIR 7298 Rev. 3 (DOI); Local Download; Online Glossary	Final	7/03/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final Download: SP 1800-14 (DOI); Local Download; Web version; Project Homepage	Final	6/28/2019
NISTIR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks NISTIR 8228 Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final Download: NISTIR 8228 (DOI); Local Download; NIST news article	Final	6/25/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 Attribute Considerations for Access Control Systems 6/18/2019 Status: Final Download: SP 800-205 (DOI); Local Download	Final	6/18/2019
NISTIR	8221	A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data NISTIR 8221 A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data 6/05/2019 Status: Final Download: NISTIR 8221 (DOI); Local Download	Final	6/05/2019
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations 5/23/2019 Status: Final Download: SP 800-57 Part 2 Rev. 1 (DOI); Local Download	Final	5/23/2019
NISTIR	8183	Cybersecurity Framework Manufacturing Profile NISTIR 8183 Cybersecurity Framework Manufacturing Profile 5/20/2019 Status: Final Download: NISTIR 8183 (DOI); Local Download; NIST Cybersecurity Framework	Final	5/20/2019
ITL Bulletin		FIPS 140-3 Adopts ISO/IEC Standards ITL Bulletin FIPS 140-3 Adopts ISO/IEC Standards 5/20/2019 Status: Final Download: May 2019 ITL Bulletin	Final	5/20/2019
White Paper		[Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector White Paper [Project Description] Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector 5/13/2019 Status: Final Download: Project Description; Project homepage	Final	5/13/2019
White Paper		BowTie – A deep learning feedforward neural network for sentiment analysis White Paper BowTie – A deep learning feedforward neural network for sentiment analysis 4/22/2019 Status: Final Download: White Paper (DOI); Local Download; Artificial Intelligence at NIST	Final	4/22/2019
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 Vetting the Security of Mobile Applications 4/19/2019 Status: Final Download: SP 800-163 Rev. 1 (DOI); Local Download	Final	4/19/2019
ITL Bulletin		Time to Standardize Threshold Schemes for Cryptographic Primitives ITL Bulletin Time to Standardize Threshold Schemes for Cryptographic Primitives 4/09/2019 Status: Final Download: April 2019 ITL Bulletin	Final	4/09/2019
FIPS	140-3	Security Requirements for Cryptographic Modules FIPS 140-3 Security Requirements for Cryptographic Modules 3/22/2019 Status: Final Download: FIPS 140-3 (DOI); Local Download; Cryptographic Module Validation Program (CMVP); NIST News Article	Final	3/22/2019
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Final Download: SP 800-131A Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-131A Rev. 2	Final	3/21/2019
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Final Download: SP 800-56B Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56B Rev. 2 (July 2018)	Final	3/21/2019
NISTIR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography NISTIR 8214 Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 3/01/2019 Status: Final Download: NISTIR 8214 (DOI); Local Download; Diff file - shows changes from draft & public comment resolutions	Final	3/01/2019
ITL Bulletin		The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk ITL Bulletin The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk 2/28/2019 Status: Final Download: February 2019 ITL Bulletin	Final	2/28/2019
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 Trustworthy Email 2/26/2019 Status: Final Download: SP 800-177 Rev. 1 (DOI); Local Download; High Assurance Domains project	Final	2/26/2019
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 Mobile Device Security: Cloud and Hybrid Builds 2/21/2019 Status: Final Download: SP 1800-4 (DOI); Local Download; Web version; Project Homepage	Final	2/21/2019
NISTIR	8240	Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process NISTIR 8240 Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process 1/31/2019 Status: Final Download: NISTIR 8240 (DOI); Local Download; NIST PQC Standardization homepage; Round 2 Submissions	Final	1/31/2019
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Final Download: SP 800-37 Rev. 2 (DOI); Local Download	Final	12/20/2018
ITL Bulletin		Securing Wireless Infusion Pumps ITL Bulletin Securing Wireless Infusion Pumps 12/19/2018 Status: Final Download: December 2018 ITL Bulletin	Final	12/19/2018
NISTIR	8241	Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs NISTIR 8241 Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs 12/17/2018 Status: Final Download: NISTIR 8241 (DOI); Local Download	Final	12/17/2018
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Final Download: NISTIR 8011 Vol. 3 (DOI); Local Download	Final	12/06/2018
NISTIR	8200	Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) NISTIR 8200 Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) 11/29/2018 Status: Final Download: NISTIR 8200 (DOI); Local Download; NIST Cybersecurity for IoT Program	Final	11/29/2018
ITL Bulletin		One Block at a Time – Helping to Build Blockchain Knowledge ITL Bulletin One Block at a Time – Helping to Build Blockchain Knowledge 10/25/2018 Status: Final Download: October 2018 ITL Bulletin	Final	10/25/2018
NISTIR	8202	Blockchain Technology Overview NISTIR 8202 Blockchain Technology Overview 10/03/2018 Status: Final Download: NISTIR 8202 (DOI); Local Download	Final	10/03/2018
ITL Bulletin		Automated Cryptographic Validation (ACV) Testing ITL Bulletin Automated Cryptographic Validation (ACV) Testing 9/20/2018 Status: Final Download: September 2018 ITL Bulletin	Final	9/20/2018
White Paper		Transitioning to the Security Content Automation Protocol (SCAP) Version 2 White Paper Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Final Download: White Paper (DOI); Transitioning to SCAP v2	Final	9/10/2018
White Paper		The Economic Impacts of the Advanced Encryption Standard, 1996-2017 White Paper The Economic Impacts of the Advanced Encryption Standard, 1996-2017 9/07/2018 Status: Final Download: White Paper (DOI); Final Report; Press Release (09-07-2018)	Final	9/07/2018
SP	1800-5	IT Asset Management SP 1800-5 IT Asset Management 9/07/2018 Status: Final Download: SP 1800-5 (DOI); Local Download; Web version; Project Homepage	Final	9/07/2018
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 8/17/2018 Status: Final Download: SP 1800-8 (DOI); Local Download; Web version; Project Homepage	Final	8/17/2018
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 Securing Electronic Health Records on Mobile Devices 7/27/2018 Status: Final Download: SP 1800-1 (DOI); Local Download; Web version; Project Homepage	Final	7/27/2018
ITL Bulletin		Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements ITL Bulletin Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements 7/26/2018 Status: Final Download: July 2018 ITL Bulletin	Final	7/26/2018
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 Identity and Access Management for Electric Utilities 7/13/2018 Status: Final Download: SP 1800-2 (DOI); Local Download; Other Publication Files; Project Homepage	Final	7/13/2018
SP	800-203	2017 NIST/ITL Cybersecurity Program Annual Report SP 800-203 2017 NIST/ITL Cybersecurity Program Annual Report 7/02/2018 Status: Final Download: SP 800-203 (DOI); Local Download	Final	7/02/2018
SP	800-116 Rev. 1	Guidelines for the Use of PIV Credentials in Facility Access SP 800-116 Rev. 1 Guidelines for the Use of PIV Credentials in Facility Access 6/29/2018 Status: Final Download: SP 800-116 Rev. 1 (DOI); Local Download	Final	6/29/2018
ITL Bulletin		Putting First Things First – A Model Process for Criticality Analysis ITL Bulletin Putting First Things First – A Model Process for Criticality Analysis 6/26/2018 Status: Final Download: June 2018 ITL Bulletin	Final	6/26/2018
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Final Download: SP 800-171A (DOI); Local Download; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Final Download: SP 800-125A Rev. 1 (DOI); Local Download	Final	6/07/2018
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/07/2018 Status: Final Download: SP 800-171 Rev. 1 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 1	Final	6/07/2018
White Paper		Extracting Linearization Equations from Noisy Sources White Paper Extracting Linearization Equations from Noisy Sources 5/31/2018 Status: Final Download: Paper	Final	5/31/2018
White Paper		A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats White Paper A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats 5/30/2018 Status: Final Download: Final Report on Enhancing Resilience Against Botnets; Road Map Towards Resilience Against Botnets; About the report--Commerce.gov; NIST News Release	Final	5/30/2018
White Paper		A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future White Paper A Report to the President on Supporting the Growth and Sustainment of the Nation's Cybersecurity Workforce: Building the Foundation for a More Secure American Future 5/30/2018 Status: Final Download: Final Report on Supporting the Nation's Cybersecurity Workforce; NIST News Release; Workshop on Cybersecurity Workforce Development (Aug. 2017)	Final	5/30/2018
ITL Bulletin		Protecting Software Integrity Through Code Signing ITL Bulletin Protecting Software Integrity Through Code Signing 5/23/2018 Status: Final Download: May 2018 ITL Bulletin	Final	5/23/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Final Download: SP 800-202 (DOI); Local Download; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Final	5/10/2018
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 Platform Firmware Resiliency Guidelines 5/04/2018 Status: Final Download: SP 800-193 (DOI); Local Download	Final	5/04/2018
ITL Bulletin		Improving the Trustworthiness of Email, and Beyond! ITL Bulletin Improving the Trustworthiness of Email, and Beyond! 4/25/2018 Status: Final Download: April 2018 ITL Bulletin	Final	4/25/2018
NISTIR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements NISTIR 7511 Rev. 5 Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Final Download: NISTIR 7511 Rev. 5 (DOI); Local Download; SCAP Validation Program	Final	4/20/2018
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Final Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Final Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
White Paper		Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 White Paper Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 4/16/2018 Status: Final Download: White Paper (DOI); Cybersecurity Framework v1.1; Press Release (04-16-2018); Cybersecurity Framework homepage	Final	4/16/2018
NISTIR	8179	Criticality Analysis Process Model: Prioritizing Systems and Components NISTIR 8179 Criticality Analysis Process Model: Prioritizing Systems and Components 4/09/2018 Status: Final Download: NISTIR 8179 (DOI); Local Download; Process Model (XML); Process Model Diagram; Process Model Diagram (SVG)	Final	4/09/2018
ITL Bulletin		Safeguards for Securing Virtualized Servers ITL Bulletin Safeguards for Securing Virtualized Servers 3/27/2018 Status: Final Download: March 2018 ITL Bulletin	Final	3/27/2018
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Final Download: SP 800-160 Vol. 1 (DOI); Local Download; Appendix D Supplement; "Rethinking Cybersecurity from the Inside Out" (blog post)	Final	3/21/2018
SP	500-325	Fog Computing Conceptual Model SP 500-325 Fog Computing Conceptual Model 3/14/2018 Status: Final Download: SP 500-325 (DOI); Local Download	Final	3/14/2018
ITL Bulletin		Securing Tomorrow's Information Through Post-Quantum Cryptography ITL Bulletin Securing Tomorrow's Information Through Post-Quantum Cryptography 2/27/2018 Status: Final Download: February 2018 ITL Bulletin	Final	2/27/2018
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Final Download: SP 800-70 Rev. 4 (DOI); Local Download; National Checklist Program	Final	2/15/2018
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Final Download: SP 800-126 Rev. 3 (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Final Download: SP 800-126A (DOI); Local Download; SCAP project	Final	2/14/2018
White Paper		[Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 2/07/2018 Status: Final Download: Project Description; Project homepage	Final	2/07/2018
White Paper		[Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events White Paper [Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 2/07/2018 Status: Final Download: Project Description; Project homepage	Final	2/07/2018
ITL Bulletin		Guidance for Improving LTE-Based Mobile Communications Security ITL Bulletin Guidance for Improving LTE-Based Mobile Communications Security 1/29/2018 Status: Final Download: January 2018 ITL Bulletin	Final	1/29/2018
White Paper		Security Considerations for Code Signing White Paper Security Considerations for Code Signing 1/26/2018 Status: Final Download: White Paper (DOI); Local Download	Final	1/26/2018
White Paper		[Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector White Paper [Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector 1/23/2018 Status: Final Download: Project Description; Project Homepage	Final	1/23/2018
SP	1800-6	Domain Name System-Based Electronic Mail Security SP 1800-6 Domain Name System-Based Electronic Mail Security 1/19/2018 Status: Final Download: SP 1800-6 (DOI); Local Download; Project Homepage (with links to HTML version)	Final	1/19/2018
NISTIR	8149	Developing Trust Frameworks to Support Identity Federations NISTIR 8149 Developing Trust Frameworks to Support Identity Federations 1/12/2018 Status: Final Download: NISTIR 8149 (DOI); Local Download	Final	1/12/2018
NISTIR	8112	Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes NISTIR 8112 Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes 1/12/2018 Status: Final Download: NISTIR 8112 (DOI); Local Download	Final	1/12/2018
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation 1/10/2018 Status: Final Download: SP 800-90B (DOI); Local Download; 2nd Draft SP 800-90B; Comments received on 2nd Draft; Summary of Changes (from 2nd Draft to Final); Markup of Changes (from 2nd Draft to Final)	Final	1/10/2018
NISTIR	8201	Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings NISTIR 8201 Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings 12/22/2017 Status: Final Download: NISTIR 8201 (DOI); Local Download; IoT Cybersecurity Colloquium Event Page	Final	12/22/2017
SP	800-187	Guide to LTE Security SP 800-187 Guide to LTE Security 12/21/2017 Status: Final Download: SP 800-187 (DOI); Local Download	Final	12/21/2017
White Paper		[Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) White Paper [Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) 12/14/2017 Status: Final Download: Project Description; Project Homepage	Final	12/14/2017
ITL Bulletin		Guidance on TDEA Block Ciphers ITL Bulletin Guidance on TDEA Block Ciphers 11/27/2017 Status: Final Download: November 2017 ITL Bulletin	Final	11/27/2017
SP	800-67 Rev. 2	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 2 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 11/17/2017 Status: Final Download: SP 800-67 Rev. 2 (DOI); Local Download; NIST Statement on Current Use and Deprecation of TDEA (7/11/17)	Final	11/17/2017
White Paper		[Project Description] TLS Server Certificate Management White Paper [Project Description] TLS Server Certificate Management 11/09/2017 Status: Final Download: Project Description; Project Homepage	Final	11/09/2017
ITL Bulletin		NIST Guidance on Application Container Security ITL Bulletin NIST Guidance on Application Container Security 10/24/2017 Status: Final Download: October 2017 ITL Bulletin	Final	10/24/2017
White Paper		NSRL Kaspersky dataset documentation White Paper NSRL Kaspersky dataset documentation 10/23/2017 Status: Final Download: Documentation; NSRL Curated Kaspersky Hash Set 2017; Related DHS Statement; NSRL	Final	10/23/2017
NISTIR	8176	Security Assurance Requirements for Linux Application Container Deployments NISTIR 8176 Security Assurance Requirements for Linux Application Container Deployments 10/11/2017 Status: Final Download: NISTIR 8176 (DOI); Local Download	Final	10/11/2017
NISTIR	8194	Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario NISTIR 8194 Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario 10/10/2017 Status: Final Download: NISTIR 8194 (DOI); Local Download	Final	10/10/2017
SP	800-195	2016 NIST/ITL Cybersecurity Program Annual Report SP 800-195 2016 NIST/ITL Cybersecurity Program Annual Report 9/28/2017 Status: Final Download: SP 800-195 (DOI); Local Download	Final	9/28/2017
ITL Bulletin		Updating the Keys for DNS Security ITL Bulletin Updating the Keys for DNS Security 9/27/2017 Status: Final Download: September 2017 ITL Bulletin	Final	9/27/2017
SP	800-190	Application Container Security Guide SP 800-190 Application Container Security Guide 9/25/2017 Status: Final Download: SP 800-190 (DOI); Local Download; Japanese translation (unofficial--from IPA, Japan)	Final	9/25/2017
NISTIR	8192	Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings NISTIR 8192 Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings 9/18/2017 Status: Final Download: NISTIR 8192 (DOI); Local Download; NTIA Report on Promoting Stakeholder Action Against Botnets and Other Automated Threats	Final	9/18/2017
White Paper		[Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector White Paper [Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector 9/13/2017 Status: Final Download: Project Description; Project Homepage	Final	9/13/2017
ITL Bulletin		Understanding the Major Update to NIST SP 800-63: Digital Identity Guidelines ITL Bulletin Understanding the Major Update to NIST SP 800-63: Digital Identity Guidelines 8/29/2017 Status: Final Download: August 2017 ITL Bulletin	Final	8/29/2017
ITL Bulletin		Updated NIST Guidance for Bluetooth Security ITL Bulletin Updated NIST Guidance for Bluetooth Security 7/25/2017 Status: Final Download: July 2017 ITL Bulletin	Final	7/25/2017
White Paper		An Elementary Proof of Private Random Number Generation from Bell Inequalities White Paper An Elementary Proof of Private Random Number Generation from Bell Inequalities 7/20/2017 Status: Final Download: Paper	Final	7/20/2017
White Paper		[Project Description] Secure Inter-Domain Routing--Part 1: Route Hijacks White Paper [Project Description] Secure Inter-Domain Routing--Part 1: Route Hijacks 7/06/2017 Status: Final Download: Project Description; Project Homepage	Final	7/06/2017
White Paper		SPHINCS-Simpira: Fast Stateless Hash-based Signatures with Post-quantum Security White Paper SPHINCS-Simpira: Fast Stateless Hash-based Signatures with Post-quantum Security 6/29/2017 Status: Final Download: Paper	Final	6/29/2017
White Paper		Tightly Secure Short Signatures from Weak PRFs White Paper Tightly Secure Short Signatures from Weak PRFs 6/27/2017 Status: Final Download: Paper	Final	6/27/2017
SP	800-192	Verification and Test Methods for Access Control Policies/Models SP 800-192 Verification and Test Methods for Access Control Policies/Models 6/27/2017 Status: Final Download: SP 800-192 (DOI); Local Download	Final	6/27/2017
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 An Introduction to Information Security 6/22/2017 Status: Final Download: SP 800-12 Rev. 1 (DOI); Local Download	Final	6/22/2017
ITL Bulletin		Toward Standardizing Lightweight Cryptography ITL Bulletin Toward Standardizing Lightweight Cryptography 6/20/2017 Status: Final Download: June 2017 ITL Bulletin	Final	6/20/2017
NISTIR	8011 Vol. 2	Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management NISTIR 8011 Vol. 2 Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management 6/06/2017 Status: Final Download: NISTIR 8011 Vol. 2 (DOI); Local Download	Final	6/06/2017
NISTIR	8011 Vol. 1	Automation Support for Security Control Assessments: Volume 1: Overview NISTIR 8011 Vol. 1 Automation Support for Security Control Assessments: Volume 1: Overview 6/06/2017 Status: Final Download: NISTIR 8011 Vol. 1 (DOI); Local Download	Final	6/06/2017
White Paper		Graphical Methods in Device-Independent Quantum Cryptography White Paper Graphical Methods in Device-Independent Quantum Cryptography 5/25/2017 Status: Final Download: Paper	Final	5/25/2017
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 Guide to Bluetooth Security 5/08/2017 Status: Final Download: SP 800-121 Rev. 2 (DOI); Local Download	Final	5/08/2017
ITL Bulletin		Cyber-Threat Intelligence and Information Sharing ITL Bulletin Cyber-Threat Intelligence and Information Sharing 5/08/2017 Status: Final Download: May 2017 ITL Bulletin	Final	5/08/2017
ITL Bulletin		Building the Bridge Between Privacy and Cybersecurity for Federal Systems ITL Bulletin Building the Bridge Between Privacy and Cybersecurity for Federal Systems 4/18/2017 Status: Final Download: April 2017 ITL Bulletin	Final	4/18/2017
White Paper		Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance White Paper Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance 4/02/2017 Status: Final Download: Baldrige Cybersecurity Excellence Builder v1.0; BCEB Categories 1–7 Questions and Notes Only; BCEB Self-Analysis Worksheet; Baldrige Cybersecurity Initiative Homepage (and FAQs)	Final	4/02/2017
NISTIR	8114	Report on Lightweight Cryptography NISTIR 8114 Report on Lightweight Cryptography 3/28/2017 Status: Final Download: NISTIR 8114 (DOI); Local Download; Comments received on Draft (Aug. 2016)	Final	3/28/2017
ITL Bulletin		Fundamentals of Small Business Information Security ITL Bulletin Fundamentals of Small Business Information Security 3/13/2017 Status: Final Download: March 2017 ITL Bulletin	Final	3/13/2017
White Paper		[Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems White Paper [Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems 3/09/2017 Status: Final Download: Project Description; Project Homepage	Final	3/09/2017
ITL Bulletin		Guide for Cybersecurity Incident Recovery ITL Bulletin Guide for Cybersecurity Incident Recovery 2/17/2017 Status: Final Download: February 2017 ITL Bulletin	Final	2/17/2017
NISTIR	8165	Impact of Code Complexity on Software Analysis NISTIR 8165 Impact of Code Complexity on Software Analysis 2/09/2017 Status: Final Download: NISTIR 8165 (DOI); Local Download	Final	2/09/2017
NISTIR	8136	An Overview of Mobile Application Vetting Services for Public Safety NISTIR 8136 An Overview of Mobile Application Vetting Services for Public Safety 1/27/2017 Status: Final Download: NISTIR 8136 (DOI); Local Download	Final	1/27/2017
ITL Bulletin		Dramatically Reducing Software Vulnerabilities ITL Bulletin Dramatically Reducing Software Vulnerabilities 1/17/2017 Status: Final Download: January 2017 ITL Bulletin	Final	1/17/2017
NISTIR	8062	An Introduction to Privacy Engineering and Risk Management in Federal Systems NISTIR 8062 An Introduction to Privacy Engineering and Risk Management in Federal Systems 1/04/2017 Status: Final Download: NISTIR 8062 (DOI); Local Download; "Making Privacy Concrete (three words not usually found together)" (blog post)	Final	1/04/2017
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 12/22/2016 Status: Final Download: SP 800-185 (DOI); Local Download; Comments Received on Draft SP 800-185	Final	12/22/2016
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 Guide for Cybersecurity Event Recovery 12/22/2016 Status: Final Download: SP 800-184 (DOI); Local Download; Press Release (12-22-2016)	Final	12/22/2016
ITL Bulletin		Rethinking Security Through Systems Security Engineering ITL Bulletin Rethinking Security Through Systems Security Engineering 12/21/2016 Status: Final Download: December 2016 ITL Bulletin	Final	12/21/2016
SP	800-179	Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist 12/05/2016 Status: Final Download: SP 800-179 (DOI); Local Download; Supplemental Content (GitHub); National Checklist Program	Final	12/05/2016
NISTIR	8151	Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy NISTIR 8151 Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy 11/30/2016 Status: Final Download: NISTIR 8151 (DOI); Local Download	Final	11/30/2016
White Paper		[Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders White Paper [Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders 11/28/2016 Status: Final Download: Project Description (Final); Project Homepage	Final	11/28/2016
ITL Bulletin		Exploring the Next Generation of Access Control Methodologies ITL Bulletin Exploring the Next Generation of Access Control Methodologies 11/21/2016 Status: Final Download: November 2016 ITL Bulletin	Final	11/21/2016
SP	500-320	Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) SP 500-320 Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) 11/10/2016 Status: Final Download: SP 500-320 (DOI); Local Download	Final	11/10/2016
NISTIR	7621 Rev. 1	Small Business Information Security: The Fundamentals NISTIR 7621 Rev. 1 Small Business Information Security: The Fundamentals 11/03/2016 Status: Final Download: NISTIR 7621 Rev. 1 (DOI); Local Download; Press Release; "Ignoring Cybersecurity is Risky Business" (blog post)	Final	11/03/2016
ITL Bulletin		Making Email Trustworthy ITL Bulletin Making Email Trustworthy 10/24/2016 Status: Final Download: October 2016 ITL Bulletin	Final	10/24/2016
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 10/06/2016 Status: Final Download: SP 800-38B (DOI); Local Download	Final	10/06/2016
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 Guide to Cyber Threat Information Sharing 10/04/2016 Status: Final Download: SP 800-150 (DOI); Local Download	Final	10/04/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 10/03/2016 Status: Final Download: SP 800-178 (DOI); Local Download	Final	10/03/2016
ITL Bulletin		Demystifying the Internet of Things ITL Bulletin Demystifying the Internet of Things 9/23/2016 Status: Final Download: September 2016 ITL Bulletin	Final	9/23/2016
White Paper		[Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector White Paper [Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector 9/20/2016 Status: Final Download: Project Description (Final); Project Homepage	Final	9/20/2016
NISTIR	8103	Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps NISTIR 8103 Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps 9/19/2016 Status: Final Download: NISTIR 8103 (DOI); Local Download	Final	9/19/2016
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 8/22/2016 Status: Final Download: SP 800-175A (DOI); Local Download; Comments Received from Final Draft	Final	8/22/2016
SP	800-182	Computer Security Division 2015 Annual Report SP 800-182 Computer Security Division 2015 Annual Report 8/10/2016 Status: Final Download: SP 800-182 (DOI); Local Download	Final	8/10/2016
ITL Bulletin		NIST Updates Personal Identity Verification (PIV) Guidelines ITL Bulletin NIST Updates Personal Identity Verification (PIV) Guidelines 8/09/2016 Status: Final Download: August 2016 ITL Bulletin	Final	8/09/2016
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-46 Rev. 2 (DOI); Local Download	Final	7/29/2016
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 User's Guide to Telework and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-114 Rev. 1 (DOI); Local Download	Final	7/29/2016
SP	800-183	Networks of 'Things' SP 800-183 Networks of 'Things' 7/28/2016 Status: Final Download: SP 800-183 (DOI); Local Download; Press Release	Final	7/28/2016
NISTIR	8080	Usability and Security Considerations for Public Safety Mobile Authentication NISTIR 8080 Usability and Security Considerations for Public Safety Mobile Authentication 7/27/2016 Status: Final Download: NISTIR 8080 (DOI); Local Download	Final	7/27/2016
ITL Bulletin		Improving Security and Software Management Through the Use of SWID Tags ITL Bulletin Improving Security and Software Management Through the Use of SWID Tags 7/13/2016 Status: Final Download: July 2016 ITL Bulletin	Final	7/13/2016
SP	800-166	Derived PIV Application and Data Model Test Guidelines SP 800-166 Derived PIV Application and Data Model Test Guidelines 6/06/2016 Status: Final Download: SP 800-166 (DOI); Local Download	Final	6/06/2016
ITL Bulletin		Extending Network Security into Virtualized Infrastructure ITL Bulletin Extending Network Security into Virtualized Infrastructure 6/03/2016 Status: Final Download: June 2016 ITL Bulletin	Final	6/03/2016
NISTIR	8135	Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report NISTIR 8135 Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report 6/01/2016 Status: Final Download: NISTIR 8135 (DOI); Local Download	Final	6/01/2016
SP	800-156	Representation of PIV Chain-of-Trust for Import and Export SP 800-156 Representation of PIV Chain-of-Trust for Import and Export 5/20/2016 Status: Final Download: SP 800-156 (DOI); Local Download; XSD Schema File for SP 800-156 Chain of Trust	Final	5/20/2016
ITL Bulletin		Combinatorial Testing for Cybersecurity and Reliability ITL Bulletin Combinatorial Testing for Cybersecurity and Reliability 5/12/2016 Status: Final Download: May 2016 ITL Bulletin	Final	5/12/2016
White Paper		User's Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite White Paper User's Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite 5/12/2016 Status: Final Download: Paper; GitHub site	Final	5/12/2016
White Paper		[Project Description] Data Integrity: Recovering from a destructive malware attack White Paper [Project Description] Data Integrity: Recovering from a destructive malware attack 5/09/2016 Status: Final Download: Project Description; Data Integrity homepage	Final	5/09/2016
NISTIR	8105	Report on Post-Quantum Cryptography NISTIR 8105 Report on Post-Quantum Cryptography 4/28/2016 Status: Final Download: NISTIR 8105 (DOI); Local Download; Press Release; Comments received on Draft NISTIR 8105	Final	4/28/2016
NISTIR	8040	Measuring the Usability and Security of Permuted Passwords on Mobile Platforms NISTIR 8040 Measuring the Usability and Security of Permuted Passwords on Mobile Platforms 4/25/2016 Status: Final Download: NISTIR 8040 (DOI); Local Download	Final	4/25/2016
NISTIR	8060	Guidelines for the Creation of Interoperable Software Identification (SWID) Tags NISTIR 8060 Guidelines for the Creation of Interoperable Software Identification (SWID) Tags 4/22/2016 Status: Final Download: NISTIR 8060 (DOI); Local Download; Guideline Summary for NISTIR 8060; Schema Definition for NISTIR 8060	Final	4/22/2016
White Paper		Best Practices for Privileged User PIV Authentication White Paper Best Practices for Privileged User PIV Authentication 4/21/2016 Status: Final Download: White Paper (DOI); Local Download	Final	4/21/2016
ITL Bulletin		New NIST Security Standard Can Protect Credit Cards, Health Information ITL Bulletin New NIST Security Standard Can Protect Credit Cards, Health Information 4/14/2016 Status: Final Download: April 2016 ITL Bulletin	Final	4/14/2016
SP	800-85A-4	PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) SP 800-85A-4 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) 4/13/2016 Status: Final Download: SP 800-85A-4 (DOI); Local Download	Final	4/13/2016
NISTIR	7977	NIST Cryptographic Standards and Guidelines Development Process NISTIR 7977 NIST Cryptographic Standards and Guidelines Development Process 3/31/2016 Status: Final Download: NISTIR 7977 (DOI); Local Download; Press Release; Summary of Second Draft Comments (released Jan. 2016); Comments received on Second Draft (Jan. 2015); Second Draft NISTIR 7977 (Jan. 2015); Summary of First Draft Comments; Comments received on First Draft (Feb. 2014); First Draft NISTIR 7977 (Feb. 2014)	Final	3/31/2016
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 3/29/2016 Status: Final Download: SP 800-38G (DOI); Local Download; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Press Release	Final	3/29/2016
ITL Bulletin		Updates to the NIST SCAP Validation Program and Associated Test Requirements ITL Bulletin Updates to the NIST SCAP Validation Program and Associated Test Requirements 3/15/2016 Status: Final Download: March 2016 ITL Bulletin	Final	3/15/2016
NISTIR	8054	NSTIC Pilots: Catalyzing the Identity Ecosystem NISTIR 8054 NSTIC Pilots: Catalyzing the Identity Ecosystem 3/15/2016 Status: Final Download: NISTIR 8054 (DOI); Local Download	Final	3/15/2016
SP	800-125B	Secure Virtual Network Configuration for Virtual Machine (VM) Protection SP 800-125B Secure Virtual Network Configuration for Virtual Machine (VM) Protection 3/07/2016 Status: Final Download: SP 800-125B (DOI); Local Download	Final	3/07/2016
Building Block		[Project Description] Domain Name System-Based Security for Electronic Mail Building Block [Project Description] Domain Name System-Based Security for Electronic Mail 3/04/2016 Status: Final Download: Project Description; Project homepage	Final	3/04/2016
ITL Bulletin		Implementing Trusted Geolocation Services in the Cloud ITL Bulletin Implementing Trusted Geolocation Services in the Cloud 2/17/2016 Status: Final Download: February 2016 ITL Bulletin	Final	2/17/2016
SP	800-73-4	Interfaces for Personal Identity Verification SP 800-73-4 Interfaces for Personal Identity Verification 2/12/2016 Status: Final Download: SP 800-73-4 (DOI); Local Download; Press Release (06-16-2015)	Final	2/12/2016
NISTIR	7511 Rev. 4	Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements NISTIR 7511 Rev. 4 Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 1/28/2016 Status: Final Download: NISTIR 7511 Rev. 4 (DOI); Local Download; SCAP Validation Program	Final	1/28/2016
NISTIR	8055	Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research NISTIR 8055 Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research 1/20/2016 Status: Final Download: NISTIR 8055 (DOI); Local Download	Final	1/20/2016
ITL Bulletin		Securing Interactive and Automated Access Management Using Secure Shell (SSH) ITL Bulletin Securing Interactive and Automated Access Management Using Secure Shell (SSH) 1/11/2016 Status: Final Download: January 2016 ITL Bulletin	Final	1/11/2016
NISTIR	8074 Vol. 1	Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity NISTIR 8074 Vol. 1 Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final Download: NISTIR 8074 Vol. 1 (DOI); Local Download	Final	12/23/2015
NISTIR	8074 Vol. 2	Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity NISTIR 8074 Vol. 2 Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final Download: NISTIR 8074 Vol. 2 (DOI); Local Download	Final	12/23/2015
ITL Bulletin		Stopping Malware and Unauthorized Software through Application Whitelisting ITL Bulletin Stopping Malware and Unauthorized Software through Application Whitelisting 12/15/2015 Status: Final Download: December 2015 ITL Bulletin	Final	12/15/2015
NISTIR	7904	Trusted Geolocation in the Cloud: Proof of Concept Implementation NISTIR 7904 Trusted Geolocation in the Cloud: Proof of Concept Implementation 12/10/2015 Status: Final Download: NISTIR 7904 (DOI); Local Download	Final	12/10/2015
Use Case		[Project Description] Wireless Medical Infusion Pumps: Medical Device Security Use Case [Project Description] Wireless Medical Infusion Pumps: Medical Device Security 12/01/2015 Status: Final Download: Project description; Project homepage	Final	12/01/2015
ITL Bulletin		Tailoring Security Controls for Industrial Control Systems ITL Bulletin Tailoring Security Controls for Industrial Control Systems 11/16/2015 Status: Final Download: November 2015 ITL Bulletin	Final	11/16/2015
SP	800-152	A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) SP 800-152 A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) 10/28/2015 Status: Final Download: SP 800-152 (DOI); Local Download; Comments received on final (3rd) Draft (Dec. 2014); Draft 3 (Dec. 2014); Draft 2 (Jan. 2014); Draft (Aug. 2012)	Final	10/28/2015
SP	800-167	Guide to Application Whitelisting SP 800-167 Guide to Application Whitelisting 10/28/2015 Status: Final Download: SP 800-167 (DOI); Local Download; Press Release	Final	10/28/2015
White Paper		The Number of Boolean Functions with Multiplicative Complexity 2 White Paper The Number of Boolean Functions with Multiplicative Complexity 2 10/27/2015 Status: Final Download: Paper	Final	10/27/2015
NISTIR	7987 Rev. 1	Policy Machine: Features, Architecture, and Specification NISTIR 7987 Rev. 1 Policy Machine: Features, Architecture, and Specification 10/27/2015 Status: Final Download: NISTIR 7987 Rev. 1 (DOI); Local Download	Final	10/27/2015
NISTIR	8053	De-Identification of Personal Information NISTIR 8053 De-Identification of Personal Information 10/22/2015 Status: Final Download: NISTIR 8053 (DOI); Local Download	Final	10/22/2015
ITL Bulletin		Protection of Controlled Unclassified Information ITL Bulletin Protection of Controlled Unclassified Information 10/19/2015 Status: Final Download: October 2015 ITL Bulletin	Final	10/19/2015
NISTIR	7966	Security of Interactive and Automated Access Management Using Secure Shell (SSH) NISTIR 7966 Security of Interactive and Automated Access Management Using Secure Shell (SSH) 10/15/2015 Status: Final Download: NISTIR 7966 (DOI); Local Download	Final	10/15/2015
ITL Bulletin		Additional Secure Hash Algorithm Standards Offer New Opportunities for Data Protection ITL Bulletin Additional Secure Hash Algorithm Standards Offer New Opportunities for Data Protection 9/24/2015 Status: Final Download: September 2015 ITL Bulletin	Final	9/24/2015
White Paper		Multiplicative Complexity of Vector Value Boolean Functions White Paper Multiplicative Complexity of Vector Value Boolean Functions 9/21/2015 Status: Final Download: Paper	Final	9/21/2015
Building Block		[Project Description] Software Asset Management: Continuous Monitoring Building Block [Project Description] Software Asset Management: Continuous Monitoring 9/16/2015 Status: Final Download: Project Description; Project homepage	Final	9/16/2015
SP	800-176	Computer Security Division 2014 Annual Report SP 800-176 Computer Security Division 2014 Annual Report 8/20/2015 Status: Final Download: SP 800-176 (DOI); Local Download	Final	8/20/2015
ITL Bulletin		Recommendation for Random Number Generation Using Deterministic Random Bit Generators ITL Bulletin Recommendation for Random Number Generation Using Deterministic Random Bit Generators 8/13/2015 Status: Final Download: August 2015 ITL Bulletin	Final	8/13/2015
FIPS	202	SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions FIPS 202 SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions 8/04/2015 Status: Final Download: FIPS 202 (DOI); Local Download; Federal Register Notice; Press Release; Comments received on Draft FIPS 202; Draft FIPS 202 (May 2014)	Final	8/04/2015
FIPS	180-4	Secure Hash Standard (SHS) FIPS 180-4 Secure Hash Standard (SHS) 8/04/2015 Status: Final Download: FIPS 180-4 (DOI); Local Download; Federal Register Notice; Comments received on Draft FIPS 180-4 (Aug. 2014)	Final	8/04/2015
SP	800-79-2	Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) SP 800-79-2 Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) 7/30/2015 Status: Final Download: SP 800-79-2 (DOI); Local Download	Final	7/30/2015
ITL Bulletin		Improved Security and Mobility Through Updated Interfaces for PIV Cards ITL Bulletin Improved Security and Mobility Through Updated Interfaces for PIV Cards 7/21/2015 Status: Final Download: July 2015 ITL Bulletin	Final	7/21/2015
SP	800-90A Rev. 1	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90A Rev. 1 Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/24/2015 Status: Final Download: SP 800-90A Rev. 1 (DOI); Local Download; Press Release	Final	6/24/2015
SP	500-304	Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information SP 500-304 Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information 6/24/2015 Status: Final Download: SP 500-304 (DOI); Local Download; BioCTS homepage	Final	6/24/2015
NISTIR	7863	Cardholder Authentication for the PIV Digital Signature Key NISTIR 7863 Cardholder Authentication for the PIV Digital Signature Key 6/18/2015 Status: Final Download: NISTIR 7863 (DOI); Local Download	Final	6/18/2015
ITL Bulletin		Increasing Visibility and Control of Your ICT Supply Chains ITL Bulletin Increasing Visibility and Control of Your ICT Supply Chains 6/15/2015 Status: Final Download: June 2015 ITL Bulletin	Final	6/15/2015
White Paper		Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool White Paper Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool 6/10/2015 Status: Final Download: Report	Final	6/10/2015
SP	800-82 Rev. 2	Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 2 Guide to Industrial Control Systems (ICS) Security 6/03/2015 Status: Final Download: SP 800-82 Rev. 2 (DOI); Local Download; Press Release	Final	6/03/2015
SP	800-78-4	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-4 Cryptographic Algorithms and Key Sizes for Personal Identity Verification 5/29/2015 Status: Final Download: SP 800-78-4 (DOI); Local Download	Final	5/29/2015
ITL Bulletin		Authentication Considerations for Public Safety Mobile Networks ITL Bulletin Authentication Considerations for Public Safety Mobile Networks 5/14/2015 Status: Final Download: May 2015 ITL Bulletin	Final	5/14/2015
ITL Bulletin		Is Your Replication Device Making An Extra Copy For Someone Else? ITL Bulletin Is Your Replication Device Making An Extra Copy For Someone Else? 4/16/2015 Status: Final Download: April 2015 ITL Bulletin	Final	4/16/2015
NISTIR	8041	Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium NISTIR 8041 Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium 4/10/2015 Status: Final Download: NISTIR 8041 (DOI); Local Download	Final	4/10/2015
SP	800-161	Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Supply Chain Risk Management Practices for Federal Information Systems and Organizations 4/08/2015 Status: Final Download: SP 800-161 (DOI); Local Download	Final	4/08/2015
White Paper		Analysis of VAES3 (FF2) White Paper Analysis of VAES3 (FF2) 4/02/2015 Status: Final Download: Paper	Final	4/02/2015
Building Block	V.2	[Project Description] Attribute Based Access Control Building Block V.2 [Project Description] Attribute Based Access Control 4/01/2015 Status: Final Download: Project Description; Project homepage	Final	4/01/2015
NISTIR	8014	Considerations for Identity Management in Public Safety Mobile Networks NISTIR 8014 Considerations for Identity Management in Public Safety Mobile Networks 3/30/2015 Status: Final Download: NISTIR 8014 (DOI); Local Download; Press Release	Final	3/30/2015
ITL Bulletin		Guidance for Secure Authorization of Mobile Applications in the Corporate Environment ITL Bulletin Guidance for Secure Authorization of Mobile Applications in the Corporate Environment 3/19/2015 Status: Final Download: March 2015 ITL Bulletin	Final	3/19/2015
White Paper		User's Guide to Running the Draft NIST SP 800-90B Section 9 Entropy Estimation Tests White Paper User's Guide to Running the Draft NIST SP 800-90B Section 9 Entropy Estimation Tests 3/10/2015 Status: Final Download: None available	Final	3/10/2015
NISTIR	7823	Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework NISTIR 7823 Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework 3/02/2015 Status: Final Download: NISTIR 7823 (DOI); Local Download	Final	3/02/2015
NISTIR	8023	Risk Management for Replication Devices NISTIR 8023 Risk Management for Replication Devices 2/23/2015 Status: Final Download: NISTIR 8023 (DOI); Local Download	Final	2/23/2015
ITL Bulletin		NIST Special Publication 800-88 Revision 1, Guidelines for Media Sanitization ITL Bulletin NIST Special Publication 800-88 Revision 1, Guidelines for Media Sanitization 2/05/2015 Status: Final Download: February 2015 ITL Bulletin	Final	2/05/2015
ITL Bulletin		Release of NIST Special Publication 800-53A, Revision 4, Assessing Security and Privacy Controls in Federal Information Systems and Organizations ITL Bulletin Release of NIST Special Publication 800-53A, Revision 4, Assessing Security and Privacy Controls in Federal Information Systems and Organizations 1/29/2015 Status: Final Download: January 2015 ITL Bulletin	Final	1/29/2015
SP	800-57 Part 3 Rev. 1	Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance SP 800-57 Part 3 Rev. 1 Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance 1/22/2015 Status: Final Download: SP 800-57 Part 3 Rev. 1 (DOI); Local Download	Final	1/22/2015
SP	800-53 Rev. 4	Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 4 Security and Privacy Controls for Federal Information Systems and Organizations 1/22/2015 Status: Final Download: SP 800-53 Rev. 4 (DOI); Local Download; Word version of SP 800-53 Rev. 4 (01-22-2015); 800-53 Rev 4 Control Database; XML file for SP 800-53 Rev. 4 (01-15-2014); Summary of NIST SP 800-53 Revision 4; Press Release (04-30-2013)	Final	1/22/2015
NISTIR	8018	Public Safety Mobile Application Security Requirements Workshop Summary NISTIR 8018 Public Safety Mobile Application Security Requirements Workshop Summary 1/22/2015 Status: Final Download: NISTIR 8018 (DOI); Local Download	Final	1/22/2015
ITL Bulletin		Release Of NIST Special Publication 800-157, Guidelines For Derived Personal Identity Verification (PIV) Credentials ITL Bulletin Release Of NIST Special Publication 800-157, Guidelines For Derived Personal Identity Verification (PIV) Credentials 12/30/2014 Status: Final Download: December 2014 ITL Bulletin	Final	12/30/2014
SP	800-157	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Guidelines for Derived Personal Identity Verification (PIV) Credentials 12/19/2014 Status: Final Download: SP 800-157 (DOI); Local Download; Comments and resolutions on Draft SP 800-157 (Mar. 2014)	Final	12/19/2014
SP	800-53A Rev. 4	Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans SP 800-53A Rev. 4 Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans 12/18/2014 Status: Final Download: SP 800-53A Rev. 4 (DOI); Local Download; Word version of SP 800-53A Rev. 4 (12-18-2014); XML file for SP 800-53A Rev. 4 (06-16-2015); Press Release	Final	12/18/2014
SP	800-88 Rev. 1	Guidelines for Media Sanitization SP 800-88 Rev. 1 Guidelines for Media Sanitization 12/17/2014 Status: Final Download: SP 800-88 Rev. 1 (DOI); Local Download	Final	12/17/2014
ITL Bulletin		Cryptographic Module Validation Program (CMVP) ITL Bulletin Cryptographic Module Validation Program (CMVP) 12/01/2014 Status: Final Download: November 2014 ITL Bulletin	Final	12/01/2014
ITL Bulletin		Release of NIST Special Publication 800-147B, BIOS Protection Guidelines for Servers ITL Bulletin Release of NIST Special Publication 800-147B, BIOS Protection Guidelines for Servers 10/29/2014 Status: Final Download: October 2014 ITL Bulletin	Final	10/29/2014
ITL Bulletin		Release of NIST Interagency Report 7628 Revision 1, Guidelines for Smart Grid Cybersecurity ITL Bulletin Release of NIST Interagency Report 7628 Revision 1, Guidelines for Smart Grid Cybersecurity 9/29/2014 Status: Final Download: September 2014 ITL Bulletin	Final	9/29/2014
NISTIR	7628 Rev. 1	Guidelines for Smart Grid Cybersecurity NISTIR 7628 Rev. 1 Guidelines for Smart Grid Cybersecurity 9/25/2014 Status: Final Download: NISTIR 7628 Rev. 1 (DOI); Local Download; NIST Project: Cybersecurity for Smart Grid Systems	Final	9/25/2014
Building Block	V.2	[Project Description] Mobile Device Security for Enterprises Building Block V.2 [Project Description] Mobile Device Security for Enterprises 9/12/2014 Status: Final Download: Project Description; Project homepage	Final	9/12/2014
SP	800-170	Computer Security Division 2013 Annual Report SP 800-170 Computer Security Division 2013 Annual Report 9/04/2014 Status: Final Download: SP 800-170 (DOI); Local Download	Final	9/04/2014
ITL Bulletin		Policy Machine: Towards a General-Purpose Enterprise-Wide Operating Environment ITL Bulletin Policy Machine: Towards a General-Purpose Enterprise-Wide Operating Environment 8/28/2014 Status: Final Download: August 2014 ITL Bulletin	Final	8/28/2014
SP	800-147B	BIOS Protection Guidelines for Servers SP 800-147B BIOS Protection Guidelines for Servers 8/28/2014 Status: Final Download: SP 800-147B (DOI); Local Download	Final	8/28/2014
ITL Bulletin		Release of NIST Interagency Report 7946, CVSS Implementation Guidance ITL Bulletin Release of NIST Interagency Report 7946, CVSS Implementation Guidance 7/10/2014 Status: Final Download: July 2014 ITL Bulletin	Final	7/10/2014
SP	800-168	Approximate Matching: Definition and Terminology SP 800-168 Approximate Matching: Definition and Terminology 7/02/2014 Status: Final Download: SP 800-168 (DOI); Local Download	Final	7/02/2014
ITL Bulletin		ITL Forensic Science Program ITL Bulletin ITL Forensic Science Program 6/05/2014 Status: Final Download: June 2014 ITL Bulletin	Final	6/05/2014
SP	800-101 Rev. 1	Guidelines on Mobile Device Forensics SP 800-101 Rev. 1 Guidelines on Mobile Device Forensics 5/15/2014 Status: Final Download: SP 800-101 Rev. 1 (DOI); Local Download	Final	5/15/2014
ITL Bulletin		Small and Medium-Size Business Information Security Outreach Program ITL Bulletin Small and Medium-Size Business Information Security Outreach Program 5/13/2014 Status: Final Download: May 2014 ITL Bulletin	Final	5/13/2014
NISTIR	7946	CVSS Implementation Guidance NISTIR 7946 CVSS Implementation Guidance 4/28/2014 Status: Final Download: NISTIR 7946 (DOI); Local Download	Final	4/28/2014
NISTIR	7991	United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study NISTIR 7991 United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study 4/08/2014 Status: Final Download: NISTIR 7991 (DOI); Local Download	Final	4/08/2014
ITL Bulletin		Attribute Based Access Control (ABAC) Definition and Considerations ITL Bulletin Attribute Based Access Control (ABAC) Definition and Considerations 3/07/2014 Status: Final Download: March 2014 ITL Bulletin	Final	3/07/2014
NISTIR	7849	A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification NISTIR 7849 A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification 3/05/2014 Status: Final Download: NISTIR 7849 (DOI); Local Download	Final	3/05/2014
White Paper		NISTIR 7628 User's Guide White Paper NISTIR 7628 User's Guide 2/26/2014 Status: Final Download: None available	Final	2/26/2014
White Paper		Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations White Paper Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations 2/19/2014 Status: Final Download: White Paper (DOI); Local Download	Final	2/19/2014
ITL Bulletin		Framework for Improving Critical Infrastructure Cybersecurity ITL Bulletin Framework for Improving Critical Infrastructure Cybersecurity 2/19/2014 Status: Final Download: February 2014 ITL Bulletin	Final	2/19/2014
White Paper		Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 White Paper Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 2/12/2014 Status: Final Download: White Paper (DOI); Local Download	Final	2/12/2014
NISTIR	7983	Report: Authentication Diary Study NISTIR 7983 Report: Authentication Diary Study 2/04/2014 Status: Final Download: NISTIR 7983 (DOI); Local Download	Final	2/04/2014
ITL Bulletin		A Profile of the Key Management Framework for the Federal Government ITL Bulletin A Profile of the Key Management Framework for the Federal Government 1/09/2014 Status: Final Download: January 2014 ITL Bulletin	Final	1/09/2014
ITL Bulletin		The National Vulnerability Database (NVD): Overview ITL Bulletin The National Vulnerability Database (NVD): Overview 12/18/2013 Status: Final Download: December 2013 ITL Bulletin	Final	12/18/2013
NISTIR	7970	Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language NISTIR 7970 Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language 12/09/2013 Status: Final Download: NISTIR 7970 (DOI); Local Download	Final	12/09/2013
Use Case		Identity and Access Management: Securing Networked Infrastructure for the Energy Sector Use Case Identity and Access Management: Securing Networked Infrastructure for the Energy Sector 11/05/2013 Status: Final Download: Use Case; Project Homepage	Final	11/05/2013
ITL Bulletin		ITL Releases Preliminary Cybersecurity Framework ITL Bulletin ITL Releases Preliminary Cybersecurity Framework 11/04/2013 Status: Final Download: November 2013 ITL Bulletin	Final	11/04/2013
ITL Bulletin		ITL Updates Federal Information Processing Standard (FIPS) for Personal Identity Verification (PIV) of Federal Employees and Contractors ITL Bulletin ITL Updates Federal Information Processing Standard (FIPS) for Personal Identity Verification (PIV) of Federal Employees and Contractors 10/22/2013 Status: Final Download: October 2013 ITL Bulletin	Final	10/22/2013
NISTIR	7956	Cryptographic Key Management Issues & Challenges in Cloud Services NISTIR 7956 Cryptographic Key Management Issues & Challenges in Cloud Services 9/18/2013 Status: Final Download: NISTIR 7956 (DOI); Local Download	Final	9/18/2013
SP	800-81-2	Secure Domain Name System (DNS) Deployment Guide SP 800-81-2 Secure Domain Name System (DNS) Deployment Guide 9/18/2013 Status: Final Download: SP 800-81-2 (DOI); Local Download	Final	9/18/2013
NISTIR	7957	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions NISTIR 7957 Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions 9/18/2013 Status: Final Download: NISTIR 7957 (DOI); Local Download	Final	9/18/2013
ITL Bulletin		NIST Opens Draft Special Publication 800-90A, Recommendation for Random Number Generation Using Deterministic Random Bit Generators, For Review and Comment (Supplemental ITL Bulletin for September 2013) ITL Bulletin NIST Opens Draft Special Publication 800-90A, Recommendation for Random Number Generation Using Deterministic Random Bit Generators, For Review and Comment (Supplemental ITL Bulletin for September 2013) 9/09/2013 Status: Final Download: Sep 2013 ITL Bulletin	Final	9/09/2013
FIPS	201-2	Personal Identity Verification (PIV) of Federal Employees and Contractors FIPS 201-2 Personal Identity Verification (PIV) of Federal Employees and Contractors 9/05/2013 Status: Final Download: FIPS 201-2 (DOI); Local Download; 2012 Draft Comments and Dispositions; Revised Draft (July 2012); 2011 Draft Comments and Dispositions; Draft FIPS 201-2 (March 2011)	Final	9/05/2013
ITL Bulletin		ITL Publishes Guidance on Preventing and Handling Malware Incidents ITL Bulletin ITL Publishes Guidance on Preventing and Handling Malware Incidents 8/22/2013 Status: Final Download: September 2013 ITL Bulletin	Final	8/22/2013
SP	800-130	A Framework for Designing Cryptographic Key Management Systems SP 800-130 A Framework for Designing Cryptographic Key Management Systems 8/15/2013 Status: Final Download: SP 800-130 (DOI); Local Download	Final	8/15/2013
ITL Bulletin		ITL Publishes Guidance on Enterprise Patch Management Technologies ITL Bulletin ITL Publishes Guidance on Enterprise Patch Management Technologies 8/08/2013 Status: Final Download: August 2013 ITL Bulletin	Final	8/08/2013
SP	800-83 Rev. 1	Guide to Malware Incident Prevention and Handling for Desktops and Laptops SP 800-83 Rev. 1 Guide to Malware Incident Prevention and Handling for Desktops and Laptops 7/22/2013 Status: Final Download: SP 800-83 Rev. 1 (DOI); Local Download	Final	7/22/2013
SP	800-40 Rev. 3	Guide to Enterprise Patch Management Technologies SP 800-40 Rev. 3 Guide to Enterprise Patch Management Technologies 7/22/2013 Status: Final Download: SP 800-40 Rev. 3 (DOI); Local Download; Press Release	Final	7/22/2013
SP	800-165	Computer Security Division 2012 Annual Report SP 800-165 Computer Security Division 2012 Annual Report 7/22/2013 Status: Final Download: SP 800-165 (DOI); Local Download	Final	7/22/2013
FIPS	186-4	Digital Signature Standard (DSS) FIPS 186-4 Digital Signature Standard (DSS) 7/19/2013 Status: Final Download: FIPS 186-4 (DOI); Local Download; Comments received on FIPS 186-4 (Dec. 2015); Request for Comments on FIPS 186-4 (Oct. 2015); Press Release (07-23-2013); Proposed Change Notice for FIPS 186-3 (Apr. 2012); Request for Comments on Proposed Change Notice (Apr. 2012)	Final	7/19/2013
ITL Bulletin		ITL Issues Guidelines for Managing the Security of Mobile Devices ITL Bulletin ITL Issues Guidelines for Managing the Security of Mobile Devices 7/15/2013 Status: Final Download: July 2013 ITL Bulletin	Final	7/15/2013
SP	800-76-2	Biometric Specifications for Personal Identity Verification SP 800-76-2 Biometric Specifications for Personal Identity Verification 7/11/2013 Status: Final Download: SP 800-76-2 (DOI); Local Download	Final	7/11/2013
White Paper		Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management, National Institute of Standards and Technology, October 15-16, 2012 White Paper Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management, National Institute of Standards and Technology, October 15-16, 2012 7/10/2013 Status: Final Download: None available	Final	7/10/2013
SP	800-124 Rev. 1	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 1 Guidelines for Managing the Security of Mobile Devices in the Enterprise 6/21/2013 Status: Final Download: SP 800-124 Rev. 1 (DOI); Local Download; SP 800-124 Rev. 1 (EPUB); Press Release	Final	6/21/2013
NISTIR	7933	Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record NISTIR 7933 Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record 6/21/2013 Status: Final Download: NISTIR 7933 (DOI); Local Download	Final	6/21/2013
ITL Bulletin		ITL Publishes Security And Privacy Controls For Federal Agencies ITL Bulletin ITL Publishes Security And Privacy Controls For Federal Agencies 5/01/2013 Status: Final Download: May 2013 ITL Bulletin	Final	5/01/2013
ITL Bulletin		Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements ITL Bulletin Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 4/10/2013 Status: Final Download: April 2013 ITL Bulletin	Final	4/10/2013
ITL Bulletin		NIST to Develop a Cybersecurity Framework to Protect Critical Infrastructure ITL Bulletin NIST to Develop a Cybersecurity Framework to Protect Critical Infrastructure 3/21/2013 Status: Final Download: March 2013 ITL Bulletin	Final	3/21/2013
NISTIR	7916	Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 NISTIR 7916 Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 2/15/2013 Status: Final Download: NISTIR 7916 (DOI); Local Download	Final	2/15/2013
ITL Bulletin		Managing Identity Requirements for Remote Users of Information Systems to Protect System Security and Information Privacy ITL Bulletin Managing Identity Requirements for Remote Users of Information Systems to Protect System Security and Information Privacy 1/29/2013 Status: Final Download: January 2013 ITL Bulletin	Final	1/29/2013
White Paper		Summary of the Workshop on Cryptographic Key Management Systems (CKMS), National Institute of Standards and Technology, September 10-11, 2012 White Paper Summary of the Workshop on Cryptographic Key Management Systems (CKMS), National Institute of Standards and Technology, September 10-11, 2012 1/10/2013 Status: Final Download: Workshop Summary	Final	1/10/2013
ITL Bulletin		Generating Secure Cryptographic Keys: A Critical Component of Cryptographic Key Management and the Protection of Sensitive Information ITL Bulletin Generating Secure Cryptographic Keys: A Critical Component of Cryptographic Key Management and the Protection of Sensitive Information 12/19/2012 Status: Final Download: December 2012 ITL Bulletin	Final	12/19/2012
SP	800-38F	Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping SP 800-38F Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping 12/13/2012 Status: Final Download: SP 800-38F (DOI); Local Download	Final	12/13/2012
White Paper		Proof of Concept for an ICT SCRM Enterprise Assessment Package White Paper Proof of Concept for an ICT SCRM Enterprise Assessment Package 12/01/2012 Status: Final Download: Report	Final	12/01/2012
NISTIR	7817	A Credential Reliability and Revocation Model for Federated Identities NISTIR 7817 A Credential Reliability and Revocation Model for Federated Identities 11/29/2012 Status: Final Download: NISTIR 7817 (DOI); Local Download	Final	11/29/2012
ITL Bulletin		Practices for Managing Supply Chain Risks to Protect Federal Information Systems ITL Bulletin Practices for Managing Supply Chain Risks to Protect Federal Information Systems 11/27/2012 Status: Final Download: November 2012 ITL Bulletin	Final	11/27/2012
White Paper		Challenging Security Requirements for US Government Cloud Computing Adoption White Paper Challenging Security Requirements for US Government Cloud Computing Adoption 11/19/2012 Status: Final Download: Paper	Final	11/19/2012
NISTIR	7896	Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition NISTIR 7896 Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition 11/15/2012 Status: Final Download: NISTIR 7896 (DOI); Local Download	Final	11/15/2012
NISTIR	7878	Combinatorial Coverage Measurement NISTIR 7878 Combinatorial Coverage Measurement 10/26/2012 Status: Final Download: NISTIR 7878 (DOI); Local Download	Final	10/26/2012
ITL Bulletin		Conducting Information Security-Related Risk Assessments: Updated Guidelines for Comprehensive Risk Management Programs ITL Bulletin Conducting Information Security-Related Risk Assessments: Updated Guidelines for Comprehensive Risk Management Programs 10/25/2012 Status: Final Download: October 2012 ITL Bulletin	Final	10/25/2012
NISTIR	7622	Notional Supply Chain Risk Management Practices for Federal Information Systems NISTIR 7622 Notional Supply Chain Risk Management Practices for Federal Information Systems 10/16/2012 Status: Final Download: NISTIR 7622 (DOI); Local Download; Press Release	Final	10/16/2012
ITL Bulletin		Revised Guide Helps Organizations Handle Security Related Incidents ITL Bulletin Revised Guide Helps Organizations Handle Security Related Incidents 9/27/2012 Status: Final Download: September 2012 ITL Bulletin	Final	9/27/2012
SP	800-30 Rev. 1	Guide for Conducting Risk Assessments SP 800-30 Rev. 1 Guide for Conducting Risk Assessments 9/17/2012 Status: Final Download: SP 800-30 Rev. 1 (DOI); Local Download; SP 800-30 Rev. 1 (EPUB); Press Release	Final	9/17/2012
NISTIR	7877	BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records NISTIR 7877 BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records 9/14/2012 Status: Final Download: NISTIR 7877 (DOI); Local Download	Final	9/14/2012
NISTIR	7874	Guidelines for Access Control System Evaluation Metrics NISTIR 7874 Guidelines for Access Control System Evaluation Metrics 9/14/2012 Status: Final Download: NISTIR 7874 (DOI); Local Download	Final	9/14/2012
SP	800-107 Rev. 1	Recommendation for Applications Using Approved Hash Algorithms SP 800-107 Rev. 1 Recommendation for Applications Using Approved Hash Algorithms 8/24/2012 Status: Final Download: SP 800-107 Rev. 1 (DOI); Local Download	Final	8/24/2012
White Paper		The Role of the National Institute of Standards and Technology in Mobile Security White Paper The Role of the National Institute of Standards and Technology in Mobile Security 8/23/2012 Status: Final Download: The Role of NIST in Mobile Security	Final	8/23/2012
ITL Bulletin		Security of Bluetooth Systems and Devices: Updated Guide Issued by the National Institute of Standards and Technology (NIST) ITL Bulletin Security of Bluetooth Systems and Devices: Updated Guide Issued by the National Institute of Standards and Technology (NIST) 8/13/2012 Status: Final Download: August 2012 ITL Bulletin	Final	8/13/2012
SP	800-61 Rev. 2	Computer Security Incident Handling Guide SP 800-61 Rev. 2 Computer Security Incident Handling Guide 8/06/2012 Status: Final Download: SP 800-61 Rev. 2 (DOI); Local Download; Press Release	Final	8/06/2012
NISTIR	7867 Rev. 2012	Usability of PIV Smartcards for Logical Access NISTIR 7867 Rev. 2012 Usability of PIV Smartcards for Logical Access 8/01/2012 Status: Final Download: NISTIR 7867 Rev. 2012 (DOI); Local Download	Final	8/01/2012
NISTIR	7870	NIST Test Personal Identity Verification (PIV) Cards NISTIR 7870 NIST Test Personal Identity Verification (PIV) Cards 7/12/2012 Status: Final Download: NISTIR 7870 (DOI); Local Download	Final	7/12/2012
ITL Bulletin		Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance ITL Bulletin Preparing for and Responding to Certification Authority Compromise and Fraudulent Certificate Issuance 7/10/2012 Status: Final Download: July 2012 ITL Bulletin	Final	7/10/2012
NISTIR	7864	The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities NISTIR 7864 The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities 7/10/2012 Status: Final Download: NISTIR 7864 (DOI); Local Download; Press Release	Final	7/10/2012
ITL Bulletin		Cloud Computing: A Review of Features, Benefits, and Risks, and Recommendations for Secure, Efficient Implementations ITL Bulletin Cloud Computing: A Review of Features, Benefits, and Risks, and Recommendations for Secure, Efficient Implementations 6/27/2012 Status: Final Download: June 2012 ITL Bulletin	Final	6/27/2012
SP	800-146	Cloud Computing Synopsis and Recommendations SP 800-146 Cloud Computing Synopsis and Recommendations 5/29/2012 Status: Final Download: SP 800-146 (DOI); Local Download; SP 800-146 (EPUB); Press Release	Final	5/29/2012
ITL Bulletin		Secure Hash Standard: Updated Specifications Approved and Issued as Federal Information Processing Standard (FIPS) 180-4 ITL Bulletin Secure Hash Standard: Updated Specifications Approved and Issued as Federal Information Processing Standard (FIPS) 180-4 5/09/2012 Status: Final Download: May 2012 ITL Bulletin	Final	5/09/2012
NISTIR	7816	Computer Security Division 2011 Annual Report NISTIR 7816 Computer Security Division 2011 Annual Report 5/08/2012 Status: Final Download: NISTIR 7816 (DOI); Local Download	Final	5/08/2012
White Paper		Adaptive Preimage Resistance Analysis Revisited: Requirements, Subtleties and Implications White Paper Adaptive Preimage Resistance Analysis Revisited: Requirements, Subtleties and Implications 4/16/2012 Status: Final Download: None available	Final	4/16/2012
ITL Bulletin		Guidelines for Improving Security and Privacy in Public Cloud Computing ITL Bulletin Guidelines for Improving Security and Privacy in Public Cloud Computing 3/28/2012 Status: Final Download: March 2012 ITL Bulletin	Final	3/28/2012
SP	800-126 Rev. 2	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 SP 800-126 Rev. 2 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 3/19/2012 Status: Final Download: SP 800-126 Rev. 2 (DOI); Local Download; SCAP Project	Final	3/19/2012
NISTIR	7275 Rev. 4	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 NISTIR 7275 Rev. 4 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 3/01/2012 Status: Final Download: NISTIR 7275 Rev. 4; NISTIR 7275 Rev. 4 (markup)	Final	3/01/2012
ITL Bulletin		Guidelines for Securing Wireless Local Area Networks (WLANs) ITL Bulletin Guidelines for Securing Wireless Local Area Networks (WLANs) 2/27/2012 Status: Final Download: February 2012 ITL Bulletin	Final	2/27/2012
SP	800-153	Guidelines for Securing Wireless Local Area Networks (WLANs) SP 800-153 Guidelines for Securing Wireless Local Area Networks (WLANs) 2/21/2012 Status: Final Download: SP 800-153 (DOI); Local Download; Press Release (Mar. 6, 2012)	Final	2/21/2012
ITL Bulletin		Advancing Security Automation and Standardization: Revised Technical Specifications Issued for the Security Content Automation Protocol (SCAP) ITL Bulletin Advancing Security Automation and Standardization: Revised Technical Specifications Issued for the Security Content Automation Protocol (SCAP) 1/24/2012 Status: Final Download: January 2012 ITL Bulletin	Final	1/24/2012
SP	800-135 Rev. 1	Recommendation for Existing Application-Specific Key Derivation Functions SP 800-135 Rev. 1 Recommendation for Existing Application-Specific Key Derivation Functions 12/23/2011 Status: Final Download: SP 800-135 Rev. 1 (DOI); Local Download; Informative Note (09-19-2016)	Final	12/23/2011
ITL Bulletin		Revised Guideline for Electronic Authentication of Users Helps Organizations Protect the Security of Their Information Systems ITL Bulletin Revised Guideline for Electronic Authentication of Users Helps Organizations Protect the Security of Their Information Systems 12/22/2011 Status: Final Download: December 2011 ITL Bulletin	Final	12/22/2011
SP	800-144	Guidelines on Security and Privacy in Public Cloud Computing SP 800-144 Guidelines on Security and Privacy in Public Cloud Computing 12/09/2011 Status: Final Download: SP 800-144 (DOI); Local Download; SP 800-144 (EPUB); Press Release	Final	12/09/2011
White Paper		The ICT SCRM Community Framework Development Project: Final Report White Paper The ICT SCRM Community Framework Development Project: Final Report 12/01/2011 Status: Final Download: Report	Final	12/01/2011
ITL Bulletin		Continuous Monitoring of Information Security: An Essential Component of Risk Management ITL Bulletin Continuous Monitoring of Information Security: An Essential Component of Risk Management 10/25/2011 Status: Final Download: October 2011 ITL Bulletin	Final	10/25/2011
SP	800-137	Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations 9/30/2011 Status: Final Download: SP 800-137 (DOI); Local Download; Press Release	Final	9/30/2011
SP	800-145	The NIST Definition of Cloud Computing SP 800-145 The NIST Definition of Cloud Computing 9/28/2011 Status: Final Download: SP 800-145 (DOI); Local Download; SP 800-145 (EPUB); Press Release	Final	9/28/2011
ITL Bulletin		Managing the Configuration of Information Systems with a Focus on Security ITL Bulletin Managing the Configuration of Information Systems with a Focus on Security 9/26/2011 Status: Final Download: September 2011 ITL Bulletin	Final	9/26/2011
NISTIR	7802	Trust Model for Security Automation Data 1.0 (TMSAD) NISTIR 7802 Trust Model for Security Automation Data 1.0 (TMSAD) 9/20/2011 Status: Final Download: NISTIR 7802 (DOI); Local Download	Final	9/20/2011
NISTIR	7806	ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions NISTIR 7806 ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions 9/16/2011 Status: Final Download: NISTIR 7806 (DOI); Local Download	Final	9/16/2011
NISTIR	7682	Information System Security Best Practices for UOCAVA-Supporting Systems NISTIR 7682 Information System Security Best Practices for UOCAVA-Supporting Systems 9/15/2011 Status: Final Download: NISTIR 7682 (DOI); Local Download	Final	9/15/2011
NISTIR	7711	Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters NISTIR 7711 Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters 9/15/2011 Status: Final Download: NISTIR 7711 (DOI); Local Download	Final	9/15/2011
ITL Bulletin		Protecting Industrial Control Systems – Key Components of Our Nation's Critical Infrastructures ITL Bulletin Protecting Industrial Control Systems – Key Components of Our Nation's Critical Infrastructures 8/24/2011 Status: Final Download: August 2011 ITL Bulletin	Final	8/24/2011
NISTIR	7697	Common Platform Enumeration: Dictionary Specification Version 2.3 NISTIR 7697 Common Platform Enumeration: Dictionary Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7697 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
NISTIR	7695	Common Platform Enumeration: Naming Specification Version 2.3 NISTIR 7695 Common Platform Enumeration: Naming Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7695 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
NISTIR	7698	Common Platform Enumeration: Applicability Language Specification Version 2.3 NISTIR 7698 Common Platform Enumeration: Applicability Language Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7698 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
NISTIR	7696	Common Platform Enumeration: Name Matching Specification Version 2.3 NISTIR 7696 Common Platform Enumeration: Name Matching Specification Version 2.3 8/19/2011 Status: Final Download: NISTIR 7696 (DOI); Local Download; Press Release (for NISTIRs 7695-7698)	Final	8/19/2011
NISTIR	7788	Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs NISTIR 7788 Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs 8/01/2011 Status: Final Download: NISTIR 7788 (DOI); Local Download	Final	8/01/2011
NISTIR	7815	Access Control for SAR Systems NISTIR 7815 Access Control for SAR Systems 7/01/2011 Status: Final Download: NISTIR 7815 (DOI); Local Download	Final	7/01/2011
ITL Bulletin		Guidelines for Protecting Basic Input/Output System (BIOS) Firmware ITL Bulletin Guidelines for Protecting Basic Input/Output System (BIOS) Firmware 6/28/2011 Status: Final Download: June 2011 ITL Bulletin	Final	6/28/2011
NISTIR	7791	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 NISTIR 7791 Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 6/22/2011 Status: Final Download: NISTIR 7791 (DOI); Local Download	Final	6/22/2011
NISTIR	7694	Specification for Asset Reporting Format 1.1 NISTIR 7694 Specification for Asset Reporting Format 1.1 6/21/2011 Status: Final Download: NISTIR 7694 (DOI); Local Download	Final	6/21/2011
White Paper		A depth-16 circuit for the AES S-box White Paper A depth-16 circuit for the AES S-box 6/17/2011 Status: Final Download: Paper	Final	6/17/2011
NISTIR	7693	Specification for Asset Identification 1.1 NISTIR 7693 Specification for Asset Identification 1.1 6/17/2011 Status: Final Download: NISTIR 7693 (DOI); Local Download	Final	6/17/2011
NISTIR	7751	Computer Security Division 2010 Annual Report NISTIR 7751 Computer Security Division 2010 Annual Report 5/31/2011 Status: Final Download: NISTIR 7751 (DOI); Local Download	Final	5/31/2011
ITL Bulletin		Using Security Configuration Checklists and the National Checklist Program ITL Bulletin Using Security Configuration Checklists and the National Checklist Program 5/25/2011 Status: Final Download: May 2011 ITL Bulletin	Final	5/25/2011
SP	800-147	BIOS Protection Guidelines SP 800-147 BIOS Protection Guidelines 4/29/2011 Status: Final Download: SP 800-147 (DOI); Local Download; Press Release	Final	4/29/2011
ITL Bulletin		Full Virtualization Technologies: Guidelines for Secure Implementation and Management ITL Bulletin Full Virtualization Technologies: Guidelines for Secure Implementation and Management 4/25/2011 Status: Final Download: April 2011 ITL Bulletin	Final	4/25/2011
NISTIR	7692	Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 NISTIR 7692 Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 4/07/2011 Status: Final Download: NISTIR 7692 (DOI); Local Download	Final	4/07/2011
White Paper		Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice White Paper Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice 4/01/2011 Status: Final Download: Report	Final	4/01/2011
ITL Bulletin		Managing Information Security Risk: Organization, Mission and Information System View ITL Bulletin Managing Information Security Risk: Organization, Mission and Information System View 3/22/2011 Status: Final Download: March 2011 ITL Bulletin	Final	3/22/2011
SP	800-39	Managing Information Security Risk: Organization, Mission, and Information System View SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View 3/01/2011 Status: Final Download: SP 800-39 (DOI); Local Download; Press Release	Final	3/01/2011
NISTIR	7771	Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 NISTIR 7771 Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 2/28/2011 Status: Final Download: NISTIR 7771 (DOI); Local Download	Final	2/28/2011
SP	800-126 Rev. 1	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 SP 800-126 Rev. 1 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 2/25/2011 Status: Final Download: SP 800-126 Rev. 1 (DOI); Local Download	Final	2/25/2011
SP	800-51 Rev. 1	Guide to Using Vulnerability Naming Schemes SP 800-51 Rev. 1 Guide to Using Vulnerability Naming Schemes 2/25/2011 Status: Final Download: SP 800-51 Rev. 1 (DOI); Local Download; Press Release	Final	2/25/2011
NISTIR	7764	Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition NISTIR 7764 Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition 2/23/2011 Status: Final Download: NISTIR 7764 (DOI); Local Download	Final	2/23/2011
NISTIR	7770	Security Considerations for Remote Electronic UOCAVA Voting NISTIR 7770 Security Considerations for Remote Electronic UOCAVA Voting 2/21/2011 Status: Final Download: NISTIR 7770 (DOI); Local Download	Final	2/21/2011
ITL Bulletin		Internet Protocol Version 6 (IPv6): NIST Guidelines Help Organizations Manage the Secure Deployment of the New Network Protocol ITL Bulletin Internet Protocol Version 6 (IPv6): NIST Guidelines Help Organizations Manage the Secure Deployment of the New Network Protocol 1/31/2011 Status: Final Download: January 2011 ITL Bulletin	Final	1/31/2011
SP	800-125	Guide to Security for Full Virtualization Technologies SP 800-125 Guide to Security for Full Virtualization Technologies 1/28/2011 Status: Final Download: SP 800-125 (DOI); Local Download; Press Release	Final	1/28/2011
SP	800-119	Guidelines for the Secure Deployment of IPv6 SP 800-119 Guidelines for the Secure Deployment of IPv6 12/29/2010 Status: Final Download: SP 800-119 (DOI); Local Download	Final	12/29/2010
NISTIR	7502	The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities NISTIR 7502 The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities 12/27/2010 Status: Final Download: NISTIR 7502 (DOI); Local Download	Final	12/27/2010
ITL Bulletin		Securing WiMAX Wireless Communications ITL Bulletin Securing WiMAX Wireless Communications 12/27/2010 Status: Final Download: December 2010 ITL Bulletin	Final	12/27/2010
SP	800-132	Recommendation for Password-Based Key Derivation: Part 1: Storage Applications SP 800-132 Recommendation for Password-Based Key Derivation: Part 1: Storage Applications 12/22/2010 Status: Final Download: SP 800-132 (DOI); Local Download	Final	12/22/2010
White Paper		Economic Analysis of Role-Based Access Control: Final Report White Paper Economic Analysis of Role-Based Access Control: Final Report 12/19/2010 Status: Final Download: Final Report	Final	12/19/2010
ITL Bulletin		The Exchange of Health Information: Designing a Security Architecture to Provide Information Security and Privacy ITL Bulletin The Exchange of Health Information: Designing a Security Architecture to Provide Information Security and Privacy 11/23/2010 Status: Final Download: November 2010 ITL Bulletin	Final	11/23/2010
SP	800-34 Rev. 1	Contingency Planning Guide for Federal Information Systems SP 800-34 Rev. 1 Contingency Planning Guide for Federal Information Systems 11/11/2010 Status: Final Download: SP 800-34 Rev. 1 (DOI); Local Download; Business Impact Analysis (BIA) Template; Contingency Planning: Low Impact System Template; Contingency Planning: Moderate Impact System Template; Contingency Planning: High Impact System Template	Final	11/11/2010
NISTIR	7773	An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events NISTIR 7773 An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events 11/01/2010 Status: Final Download: NISTIR 7773 (DOI); Local Download	Final	11/01/2010
SP	800-38A Addendum	Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode SP 800-38A Addendum Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode 10/21/2010 Status: Final Download: SP 800-38A Addendum (DOI); Local Download	Final	10/21/2010
SP	800-142	Practical Combinatorial Testing SP 800-142 Practical Combinatorial Testing 10/07/2010 Status: Final Download: SP 800-142 (DOI); Local Download	Final	10/07/2010
NISTIR	7497	Security Architecture Design Process for Health Information Exchanges (HIEs) NISTIR 7497 Security Architecture Design Process for Health Information Exchanges (HIEs) 9/30/2010 Status: Final Download: NISTIR 7497 (DOI); Local Download	Final	9/30/2010
ITL Bulletin		Security Content Automation Protocol (SCAP): Helping Organizations Maintain and Verify the Security of Their Information Systems ITL Bulletin Security Content Automation Protocol (SCAP): Helping Organizations Maintain and Verify the Security of Their Information Systems 9/27/2010 Status: Final Download: September 2010 ITL Bulletin	Final	9/27/2010
NISTIR	7601	Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure NISTIR 7601 Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure 8/31/2010 Status: Final Download: NISTIR 7601 (DOI); Local Download	Final	8/31/2010
ITL Bulletin		Contingency Planning for Information Systems: Updated Guide for Federal Organizations ITL Bulletin Contingency Planning for Information Systems: Updated Guide for Federal Organizations 7/20/2010 Status: Final Download: July 2010 ITL Bulletin	Final	7/20/2010
NISTIR	7559	Forensics Web Services (FWS) NISTIR 7559 Forensics Web Services (FWS) 6/30/2010 Status: Final Download: NISTIR 7559 (DOI); Local Download	Final	6/30/2010
ITL Bulletin		How to Identify Personnel with Significant Responsibilities for Information Security ITL Bulletin How to Identify Personnel with Significant Responsibilities for Information Security 6/22/2010 Status: Final Download: June 2010 ITL Bulletin	Final	6/22/2010
NISTIR	7676	Maintaining and Using Key History on Personal Identity Verification (PIV) Cards NISTIR 7676 Maintaining and Using Key History on Personal Identity Verification (PIV) Cards 6/18/2010 Status: Final Download: NISTIR 7676 (DOI); Local Download	Final	6/18/2010
SP	800-22 Rev. 1a	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1a A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 4/30/2010 Status: Final Download: SP 800-22 Rev. 1a (DOI); Local Download	Final	4/30/2010
ITL Bulletin		Guide to Protecting Personally Identifiable Information ITL Bulletin Guide to Protecting Personally Identifiable Information 4/28/2010 Status: Final Download: April 2010 ITL Bulletin	Final	4/28/2010
SP	800-122	Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) SP 800-122 Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) 4/06/2010 Status: Final Download: SP 800-122 (DOI); Local Download; SP 800-122 (EPUB)	Final	4/06/2010
NISTIR	7657	A Report on the Privilege (Access) Management Workshop NISTIR 7657 A Report on the Privilege (Access) Management Workshop 3/30/2010 Status: Final Download: NISTIR 7657 (DOI); Local Download	Final	3/30/2010
ITL Bulletin		Revised Guide Helps Federal Organizations Improve Their Risk Management Practices and Information System Security ITL Bulletin Revised Guide Helps Federal Organizations Improve Their Risk Management Practices and Information System Security 3/29/2010 Status: Final Download: March 2010 ITL Bulletin	Final	3/29/2010
NISTIR	7653	Computer Security Division 2009 Annual Report NISTIR 7653 Computer Security Division 2009 Annual Report 3/23/2010 Status: Final Download: NISTIR 7653 (DOI); Local Download	Final	3/23/2010
NISTIR	7658	Guide to SIMfill Use and Development NISTIR 7658 Guide to SIMfill Use and Development 2/24/2010 Status: Final Download: NISTIR 7658 (DOI); Local Download	Final	2/24/2010
ITL Bulletin		Secure Management of Keys in Cryptographic Applications: Guidance for Organizations ITL Bulletin Secure Management of Keys in Cryptographic Applications: Guidance for Organizations 2/24/2010 Status: Final Download: February 2010 ITL Bulletin	Final	2/24/2010
ITL Bulletin		Security Metrics: Measurements to Support the Continued Development of Information Security Technology ITL Bulletin Security Metrics: Measurements to Support the Continued Development of Information Security Technology 1/27/2010 Status: Final Download: January 2010 ITL Bulletin	Final	1/27/2010
SP	800-38E	Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices SP 800-38E Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices 1/18/2010 Status: Final Download: SP 800-38E (DOI); Local Download	Final	1/18/2010
NISTIR	7609	Cryptographic Key Management Workshop Summary -- June 8-9, 2009 NISTIR 7609 Cryptographic Key Management Workshop Summary -- June 8-9, 2009 1/08/2010 Status: Final Download: NISTIR 7609 (DOI); Local Download	Final	1/08/2010
NISTIR	7665	Proceedings of the Privilege Management Workshop, September 1-3, 2009 NISTIR 7665 Proceedings of the Privilege Management Workshop, September 1-3, 2009 1/01/2010 Status: Final Download: NISTIR 7665 (DOI); Local Download	Final	1/01/2010
ITL Bulletin		Cybersecurity Fundamentals for Small Business Owners ITL Bulletin Cybersecurity Fundamentals for Small Business Owners 11/19/2009 Status: Final Download: November 2009 ITL Bulletin	Final	11/19/2009
ITL Bulletin		Protecting Information Systems with Firewalls: Revised Guidelines on Firewall Technologies and Policies ITL Bulletin Protecting Information Systems with Firewalls: Revised Guidelines on Firewall Technologies and Policies 10/29/2009 Status: Final Download: October 2009 ITL Bulletin	Final	10/29/2009
NISTIR	7617	Mobile Forensic Reference Materials: a Methodology and Reification NISTIR 7617 Mobile Forensic Reference Materials: a Methodology and Reification 10/14/2009 Status: Final Download: NISTIR 7617 (DOI); Local Download	Final	10/14/2009
SP	800-108	Recommendation for Key Derivation Using Pseudorandom Functions (Revised) SP 800-108 Recommendation for Key Derivation Using Pseudorandom Functions (Revised) 10/01/2009 Status: Final Download: SP 800-108 (DOI); Local Download	Final	10/01/2009
NISTIR	7581	System and Network Security Acronyms and Abbreviations NISTIR 7581 System and Network Security Acronyms and Abbreviations 9/30/2009 Status: Final Download: NISTIR 7581 (DOI); Local Download	Final	9/30/2009
SP	800-41 Rev. 1	Guidelines on Firewalls and Firewall Policy SP 800-41 Rev. 1 Guidelines on Firewalls and Firewall Policy 9/28/2009 Status: Final Download: SP 800-41 Rev. 1 (DOI); Local Download	Final	9/28/2009
NISTIR	7620	Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition NISTIR 7620 Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition 9/23/2009 Status: Final Download: NISTIR 7620 (DOI); Local Download	Final	9/23/2009
SP	800-102	Recommendation for Digital Signature Timeliness SP 800-102 Recommendation for Digital Signature Timeliness 9/23/2009 Status: Final Download: SP 800-102 (DOI); Local Download	Final	9/23/2009
NISTIR	7611	Use of ISO/IEC 24727 NISTIR 7611 Use of ISO/IEC 24727 8/14/2009 Status: Final Download: NISTIR 7611 (DOI); Local Download	Final	8/14/2009
ITL Bulletin		Risk Management Framework: Helping Organizations Implement Effective Information Security Programs ITL Bulletin Risk Management Framework: Helping Organizations Implement Effective Information Security Programs 7/23/2009 Status: Final Download: July 2009 ITL Bulletin	Final	7/23/2009
NISTIR	7564	Directions in Security Metrics Research NISTIR 7564 Directions in Security Metrics Research 4/30/2009 Status: Final Download: NISTIR 7564 (DOI); Local Download	Final	4/30/2009
ITL Bulletin		The Cryptographic Hash Algorithm Family: Revision of the Secure Hash Standard and Ongoing Competition for New Hash Algorithms ITL Bulletin The Cryptographic Hash Algorithm Family: Revision of the Secure Hash Standard and Ongoing Competition for New Hash Algorithms 3/25/2009 Status: Final Download: March 2009 ITL Bulletin	Final	3/25/2009
NISTIR	7536	Computer Security Division 2008 Annual Report NISTIR 7536 Computer Security Division 2008 Annual Report 3/16/2009 Status: Final Download: NISTIR 7536 (DOI); Local Download	Final	3/16/2009
ITL Bulletin		Using Personal Identity Verification (Piv) Credentials in Physical Access Control Systems (PACS) ITL Bulletin Using Personal Identity Verification (Piv) Credentials in Physical Access Control Systems (PACS) 2/26/2009 Status: Final Download: February 2009 ITL Bulletin	Final	2/26/2009
SP	800-106	Randomized Hashing for Digital Signatures SP 800-106 Randomized Hashing for Digital Signatures 2/25/2009 Status: Final Download: SP 800-106 (DOI); Local Download	Final	2/25/2009
NISTIR	7539	Symmetric Key Injection onto Smart Cards NISTIR 7539 Symmetric Key Injection onto Smart Cards 12/22/2008 Status: Final Download: NISTIR 7539 (DOI); Local Download	Final	12/22/2008
NISTIR	7551	A Threat Analysis on UOCAVA Voting Systems NISTIR 7551 A Threat Analysis on UOCAVA Voting Systems 12/19/2008 Status: Final Download: NISTIR 7551 (DOI); Local Download	Final	12/19/2008
ITL Bulletin		Guide to Information Security Testing and Assessment ITL Bulletin Guide to Information Security Testing and Assessment 12/18/2008 Status: Final Download: December 2008 ITL Bulletin	Final	12/18/2008
SP	800-66 Rev. 1	An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule SP 800-66 Rev. 1 An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 10/23/2008 Status: Final Download: SP 800-66 Rev. 1 (DOI); Local Download	Final	10/23/2008
ITL Bulletin		Keeping Information Technology (IT) System Servers Secure: A General Guide to Good Practices ITL Bulletin Keeping Information Technology (IT) System Servers Secure: A General Guide to Good Practices 10/15/2008 Status: Final Download: October 2008 ITL Bulletin	Final	10/15/2008
SP	800-115	Technical Guide to Information Security Testing and Assessment SP 800-115 Technical Guide to Information Security Testing and Assessment 9/30/2008 Status: Final Download: SP 800-115 (DOI); Local Download; SP 800-115 (EPUB)	Final	9/30/2008
ITL Bulletin		Using Performance Measurements to Evaluate and Strengthen Information System Security ITL Bulletin Using Performance Measurements to Evaluate and Strengthen Information System Security 9/18/2008 Status: Final Download: September 2008 ITL Bulletin	Final	9/18/2008
NISTIR	7516	Forensic Filtering of Cell Phone Protocols NISTIR 7516 Forensic Filtering of Cell Phone Protocols 8/27/2008 Status: Final Download: NISTIR 7516 (DOI); Local Download	Final	8/27/2008
SP	800-60 Vol. 2 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices SP 800-60 Vol. 2 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices 8/01/2008 Status: Final Download: SP 800-60 Vol. 2 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-60 Vol. 1 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 1 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories 8/01/2008 Status: Final Download: SP 800-60 Vol. 1 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-123	Guide to General Server Security SP 800-123 Guide to General Server Security 7/25/2008 Status: Final Download: SP 800-123 (DOI); Local Download; SP 800-123 (EPUB)	Final	7/25/2008
ITL Bulletin		Guidelines on Implementing A Secure Sockets Layer (SSL) Virtual Private Network (VPN) ITL Bulletin Guidelines on Implementing A Secure Sockets Layer (SSL) Virtual Private Network (VPN) 7/23/2008 Status: Final Download: July 2008 ITL Bulletin	Final	7/23/2008
FIPS	198-1	The Keyed-Hash Message Authentication Code (HMAC) FIPS 198-1 The Keyed-Hash Message Authentication Code (HMAC) 7/16/2008 Status: Final Download: FIPS 198-1 (DOI); Local Download	Final	7/16/2008
SP	800-55 Rev. 1	Performance Measurement Guide for Information Security SP 800-55 Rev. 1 Performance Measurement Guide for Information Security 7/16/2008 Status: Final Download: SP 800-55 Rev. 1 (DOI); Local Download	Final	7/16/2008
SP	800-113	Guide to SSL VPNs SP 800-113 Guide to SSL VPNs 7/01/2008 Status: Final Download: SP 800-113 (DOI); Local Download	Final	7/01/2008
ITL Bulletin		New Cryptographic Hash Algorithm Family: NIST Holds a Public Competition to Find New Algorithms ITL Bulletin New Cryptographic Hash Algorithm Family: NIST Holds a Public Competition to Find New Algorithms 5/28/2008 Status: Final Download: May 2008 ITL Bulletin	Final	5/28/2008
ITL Bulletin		Using Active Content and Mobile Code and Safeguarding the Security of Information Technology Systems ITL Bulletin Using Active Content and Mobile Code and Safeguarding the Security of Information Technology Systems 4/24/2008 Status: Final Download: April 2008 ITL Bulletin	Final	4/24/2008
NISTIR	7442	Computer Security Division 2007 Annual Report NISTIR 7442 Computer Security Division 2007 Annual Report 4/01/2008 Status: Final Download: NISTIR 7442 (DOI); Local Download	Final	4/01/2008
SP	800-28 Version 2	Guidelines on Active Content and Mobile Code SP 800-28 Version 2 Guidelines on Active Content and Mobile Code 3/07/2008 Status: Final Download: SP 800-28 Version 2 (DOI); Local Download	Final	3/07/2008
ITL Bulletin		Federal Desktop Core Configuration (FDCC): Improving Security for Windows Desktop Operating Systems ITL Bulletin Federal Desktop Core Configuration (FDCC): Improving Security for Windows Desktop Operating Systems 2/27/2008 Status: Final Download: February 2008 ITL Bulletin	Final	2/27/2008
ITL Bulletin		Secure Web Servers Protecting Web Sites that are Accessed by the Public ITL Bulletin Secure Web Servers Protecting Web Sites that are Accessed by the Public 1/31/2008 Status: Final Download: January 2008 ITL Bulletin	Final	1/31/2008
NISTIR	7275 Rev. 3	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 NISTIR 7275 Rev. 3 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 1/01/2008 Status: Final Download: NISTIR 7275 Rev. 3 (DOI); Local Download	Final	1/01/2008
NISTIR	7452	Secure Biometric Match-on-Card Feasibility Report NISTIR 7452 Secure Biometric Match-on-Card Feasibility Report 11/30/2007 Status: Final Download: NISTIR 7452 (DOI); Local Download	Final	11/30/2007
SP	800-38D	Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC SP 800-38D Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC 11/28/2007 Status: Final Download: SP 800-38D (DOI); Local Download	Final	11/28/2007
ITL Bulletin		Using Storage Encryption Technologies to Protect End User Devices ITL Bulletin Using Storage Encryption Technologies to Protect End User Devices 11/26/2007 Status: Final Download: November 2007 ITL Bulletin	Final	11/26/2007
SP	800-111	Guide to Storage Encryption Technologies for End User Devices SP 800-111 Guide to Storage Encryption Technologies for End User Devices 11/15/2007 Status: Final Download: SP 800-111 (DOI); Local Download	Final	11/15/2007
ITL Bulletin		The Common Vulnerability Scoring System (CVSS) ITL Bulletin The Common Vulnerability Scoring System (CVSS) 10/25/2007 Status: Final Download: October 2007 ITL Bulletin	Final	10/25/2007
SP	800-44 Version 2	Guidelines on Securing Public Web Servers SP 800-44 Version 2 Guidelines on Securing Public Web Servers 10/09/2007 Status: Final Download: SP 800-44 Version 2 (DOI); Local Download	Final	10/09/2007
NISTIR	7427	6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings NISTIR 7427 6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings 9/13/2007 Status: Final Download: NISTIR 7427 (DOI); Local Download	Final	9/13/2007
NISTIR	7435	The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems NISTIR 7435 The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems 8/30/2007 Status: Final Download: NISTIR 7435 (DOI); Local Download	Final	8/30/2007
SP	800-95	Guide to Secure Web Services SP 800-95 Guide to Secure Web Services 8/29/2007 Status: Final Download: SP 800-95 (DOI); Local Download	Final	8/29/2007
ITL Bulletin		Secure Web Services ITL Bulletin Secure Web Services 8/23/2007 Status: Final Download: None available	Final	8/23/2007
SP	800-38C	Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality SP 800-38C Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality 7/20/2007 Status: Final Download: SP 800-38C (DOI); Local Download	Final	7/20/2007
ITL Bulletin		Forensic Techniques for Cell Phones ITL Bulletin Forensic Techniques for Cell Phones 6/27/2007 Status: Final Download: June 2007 ITL Bulletin	Final	6/27/2007
ITL Bulletin		Securing Radio Frequency Identification (RFID) Systems ITL Bulletin Securing Radio Frequency Identification (RFID) Systems 5/17/2007 Status: Final Download: May 2007 ITL Bulletin	Final	5/17/2007
NISTIR	7275 Rev. 2	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 NISTIR 7275 Rev. 2 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 4/30/2007 Status: Final Download: None available	Final	4/30/2007
SP	800-98	Guidelines for Securing Radio Frequency Identification (RFID) Systems SP 800-98 Guidelines for Securing Radio Frequency Identification (RFID) Systems 4/06/2007 Status: Final Download: SP 800-98 (DOI); Local Download	Final	4/06/2007
ITL Bulletin		Improving The Security of Electronic Mail: Updated Guidelines Issued by NIST ITL Bulletin Improving The Security of Electronic Mail: Updated Guidelines Issued by NIST 3/28/2007 Status: Final Download: March 2007 ITL Bulletin	Final	3/28/2007
NISTIR	7399	Computer Security Division 2006 Annual Report NISTIR 7399 Computer Security Division 2006 Annual Report 3/21/2007 Status: Final Download: NISTIR 7399 (DOI); Local Download	Final	3/21/2007
NISTIR	7387	Cell Phone Forensic Tools: an Overview and Analysis Update NISTIR 7387 Cell Phone Forensic Tools: an Overview and Analysis Update 3/21/2007 Status: Final Download: NISTIR 7387 (DOI); Local Download	Final	3/21/2007
SP	800-100	Information Security Handbook: A Guide for Managers SP 800-100 Information Security Handbook: A Guide for Managers 3/07/2007 Status: Final Download: SP 800-100 (DOI); Local Download	Final	3/07/2007
ITL Bulletin		Intrusion Detection and Prevention Systems ITL Bulletin Intrusion Detection and Prevention Systems 2/26/2007 Status: Final Download: February 2007 ITL Bulletin	Final	2/26/2007
SP	800-45 Version 2	Guidelines on Electronic Mail Security SP 800-45 Version 2 Guidelines on Electronic Mail Security 2/20/2007 Status: Final Download: SP 800-45 Version 2 (DOI); Local Download	Final	2/20/2007
SP	800-94	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Guide to Intrusion Detection and Prevention Systems (IDPS) 2/20/2007 Status: Final Download: SP 800-94 (DOI); Local Download	Final	2/20/2007
SP	800-97	Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i SP 800-97 Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i 2/07/2007 Status: Final Download: SP 800-97 (DOI); Local Download	Final	2/07/2007
NISTIR	7359	Information Security Guide for Government Executives NISTIR 7359 Information Security Guide for Government Executives 1/01/2007 Status: Final Download: NISTIR 7359 (DOI); Local Download; Booklet	Final	1/01/2007
NISTIR	7358	Program Review for Information Security Management Assistance (PRISMA) NISTIR 7358 Program Review for Information Security Management Assistance (PRISMA) 1/01/2007 Status: Final Download: NISTIR 7358 (DOI); Local Download	Final	1/01/2007
SP	800-96	PIV Card to Reader Interoperability Guidelines SP 800-96 PIV Card to Reader Interoperability Guidelines 12/29/2006 Status: Final Download: SP 800-96 (DOI); Local Download	Final	12/29/2006
ITL Bulletin		Maintaining Effective Information Technology (IT) Security Through Test, Training, and Exercise Programs ITL Bulletin Maintaining Effective Information Technology (IT) Security Through Test, Training, and Exercise Programs 12/19/2006 Status: Final Download: December 2006 ITL Bulletin	Final	12/19/2006
SP	800-89	Recommendation for Obtaining Assurances for Digital Signature Applications SP 800-89 Recommendation for Obtaining Assurances for Digital Signature Applications 11/30/2006 Status: Final Download: SP 800-89 (DOI); Local Download	Final	11/30/2006
ITL Bulletin		Guide to Securing Computers Using Windows XP Home Edition ITL Bulletin Guide to Securing Computers Using Windows XP Home Edition 11/22/2006 Status: Final Download: November 2006 ITL Bulletin	Final	11/22/2006
NISTIR	7275	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 NISTIR 7275 Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 11/01/2006 Status: Final Download: NISTIR 7275 (DOI); Local Download	Final	11/01/2006
ITL Bulletin		Log Management: Using Computer and Network Records to Improve Information Security ITL Bulletin Log Management: Using Computer and Network Records to Improve Information Security 10/25/2006 Status: Final Download: October 2006 ITL Bulletin	Final	10/25/2006
NISTIR	7316	Assessment of Access Control Systems NISTIR 7316 Assessment of Access Control Systems 9/29/2006 Status: Final Download: NISTIR 7316 (DOI); Local Download	Final	9/29/2006
ITL Bulletin		Forensic Techniques: Helping Organizations Improve Their Responses to Information Security Incidents ITL Bulletin Forensic Techniques: Helping Organizations Improve Their Responses to Information Security Incidents 9/27/2006 Status: Final Download: September 2006 ITL Bulletin	Final	9/27/2006
SP	800-84	Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities SP 800-84 Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities 9/21/2006 Status: Final Download: SP 800-84 (DOI); Local Download; SP 800-84 (EPUB)	Final	9/21/2006
SP	800-92	Guide to Computer Security Log Management SP 800-92 Guide to Computer Security Log Management 9/13/2006 Status: Final Download: SP 800-92 (DOI); Local Download; SP 800-92 (EPUB)	Final	9/13/2006
SP	800-86	Guide to Integrating Forensic Techniques into Incident Response SP 800-86 Guide to Integrating Forensic Techniques into Incident Response 9/01/2006 Status: Final Download: SP 800-86 (DOI); Local Download	Final	9/01/2006
NISTIR	7337	Personal Identity Verification Demonstration Summary NISTIR 7337 Personal Identity Verification Demonstration Summary 8/31/2006 Status: Final Download: NISTIR 7337 (DOI); Local Download	Final	8/31/2006
ITL Bulletin		Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems ITL Bulletin Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems 8/30/2006 Status: Final Download: August 2006 ITL Bulletin	Final	8/30/2006
SP	800-85B	PIV Data Model Test Guidelines SP 800-85B PIV Data Model Test Guidelines 7/31/2006 Status: Final Download: SP 800-85B (DOI); Local Download	Final	7/31/2006
NISTIR	7313	5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings NISTIR 7313 5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings 7/18/2006 Status: Final Download: NISTIR 7313 (DOI); Local Download	Final	7/18/2006
ITL Bulletin		Protecting Sensitive Information Transmitted in Public Networks ITL Bulletin Protecting Sensitive Information Transmitted in Public Networks 4/21/2006 Status: Final Download: April 2006 ITL Bulletin	Final	4/21/2006
ITL Bulletin		Minimum Security Requirements for Federal Information and Information Systems: Federal Information Processing Standard (FIPS) 200 Approved by the Secretary of Commerce ITL Bulletin Minimum Security Requirements for Federal Information and Information Systems: Federal Information Processing Standard (FIPS) 200 Approved by the Secretary of Commerce 3/24/2006 Status: Final Download: March 2006 ITL Bulletin	Final	3/24/2006
NISTIR	7308	An Algorithm for Generating Very Large Covering Arrays NISTIR 7308 An Algorithm for Generating Very Large Covering Arrays 3/20/2006 Status: Final Download: NISTIR 7308 (DOI); Local Download	Final	3/20/2006
NISTIR	7290	Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation NISTIR 7290 Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation 3/01/2006 Status: Final Download: NISTIR 7290 (DOI); Local Download	Final	3/01/2006
FIPS	200	Minimum Security Requirements for Federal Information and Information Systems FIPS 200 Minimum Security Requirements for Federal Information and Information Systems 3/01/2006 Status: Final Download: FIPS 200 (DOI); Local Download	Final	3/01/2006
SP	800-18 Rev. 1	Guide for Developing Security Plans for Federal Information Systems SP 800-18 Rev. 1 Guide for Developing Security Plans for Federal Information Systems 2/24/2006 Status: Final Download: SP 800-18 Rev. 1 (DOI); Local Download	Final	2/24/2006
ITL Bulletin		Creating a Program to Manage Security Patches and Vulnerabilities: NIST Recommendations for Improving System Security ITL Bulletin Creating a Program to Manage Security Patches and Vulnerabilities: NIST Recommendations for Improving System Security 2/15/2006 Status: Final Download: February 2006 ITL Bulletin	Final	2/15/2006
NISTIR	7285	Computer Security Division 2005 Annual Report NISTIR 7285 Computer Security Division 2005 Annual Report 2/01/2006 Status: Final Download: NISTIR 7285 (DOI); Local Download	Final	2/01/2006
ITL Bulletin		Testing and Validation of Personal Identity Verification (PIV) Components and Subsystems for Conformance to Federal Information Processing Standard 201 ITL Bulletin Testing and Validation of Personal Identity Verification (PIV) Components and Subsystems for Conformance to Federal Information Processing Standard 201 1/25/2006 Status: Final Download: January 2006 ITL Bulletin	Final	1/25/2006
NISTIR	7284	Personal Identity Verification Card Management Report NISTIR 7284 Personal Identity Verification Card Management Report 1/06/2006 Status: Final Download: NISTIR 7284 (DOI); Local Download	Final	1/06/2006
NISTIR	7250	Cell Phone Forensic Tools: an Overview and Analysis NISTIR 7250 Cell Phone Forensic Tools: an Overview and Analysis 10/19/2005 Status: Final Download: NISTIR 7250 (DOI); Local Download	Final	10/19/2005
NISTIR	7224	4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings NISTIR 7224 4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings 8/01/2005 Status: Final Download: NISTIR 7224 (DOI); Local Download	Final	8/01/2005
NISTIR	7219	Computer Security Division 2004 Annual Report NISTIR 7219 Computer Security Division 2004 Annual Report 8/01/2005 Status: Final Download: NISTIR 7219 (DOI); Local Download	Final	8/01/2005
ITL Bulletin		Implementation of FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors ITL Bulletin Implementation of FIPS 201, Personal Identity Verification (PIV) of Federal Employees and Contractors 8/01/2005 Status: Final Download: Aug 2005 ITL Bulletin	Final	8/01/2005
NISTIR	7206	Smart Cards and Mobile Device Authentication: an Overview and Implementation NISTIR 7206 Smart Cards and Mobile Device Authentication: an Overview and Implementation 7/01/2005 Status: Final Download: NISTIR 7206 (DOI); Local Download	Final	7/01/2005
NISTIR	7200	Proximity Beacons and Mobile Device Authentication: an Overview and Implementation NISTIR 7200 Proximity Beacons and Mobile Device Authentication: an Overview and Implementation 6/01/2005 Status: Final Download: NISTIR 7200 (DOI); Local Download	Final	6/01/2005
ITL Bulletin		Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule ITL Bulletin Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 4/01/2005 Status: Final Download: None available	Final	4/01/2005
ITL Bulletin		Integrating IT Security into the Capital Planning and Investment Control Process ITL Bulletin Integrating IT Security into the Capital Planning and Investment Control Process 1/27/2005 Status: Final Download: January 2005 ITL Bulletin	Final	1/27/2005
SP	800-58	Security Considerations for Voice Over IP Systems SP 800-58 Security Considerations for Voice Over IP Systems 1/01/2005 Status: Final Download: SP 800-58 (DOI); Local Download	Final	1/01/2005
NISTIR	7188	Specification for the Extensible Configuration Checklist Description Format (XCCDF) NISTIR 7188 Specification for the Extensible Configuration Checklist Description Format (XCCDF) 1/01/2005 Status: Final Download: NISTIR 7188 (DOI); Local Download	Final	1/01/2005
SP	800-72	Guidelines on PDA Forensics SP 800-72 Guidelines on PDA Forensics 11/01/2004 Status: Final Download: SP 800-72 (DOI); Local Download	Final	11/01/2004
ITL Bulletin		Understanding the New NIST Standards and Guidelines Required by FISMA: How Three Mandated Documents are Changing the Dynamic of Information Security for the Federal Government ITL Bulletin Understanding the New NIST Standards and Guidelines Required by FISMA: How Three Mandated Documents are Changing the Dynamic of Information Security for the Federal Government 11/01/2004 Status: Final Download: November 2004 ITL Bulletin	Final	11/01/2004
ITL Bulletin		Securing Voice Over Internet Protocol (IP) Networks ITL Bulletin Securing Voice Over Internet Protocol (IP) Networks 10/01/2004 Status: Final Download: October 2004 ITL Bulletin	Final	10/01/2004
NISTIR	7122	3rd Annual PKI Research Workshop Proceedings NISTIR 7122 3rd Annual PKI Research Workshop Proceedings 9/08/2004 Status: Final Download: None available	Final	9/08/2004
ITL Bulletin		Information Security Within the System Development Life Cycle (SDLC) ITL Bulletin Information Security Within the System Development Life Cycle (SDLC) 9/01/2004 Status: Final Download: September 2004 ITL Bulletin	Final	9/01/2004
NISTIR	7100	PDA Forensic Tools: an Overview and Analysis NISTIR 7100 PDA Forensic Tools: an Overview and Analysis 8/01/2004 Status: Final Download: NISTIR 7100 (DOI); Local Download	Final	8/01/2004
ITL Bulletin		Information Technology Security Services: How to Select, Implement, and Manage ITL Bulletin Information Technology Security Services: How to Select, Implement, and Manage 6/01/2004 Status: Final Download: June 2004 ITL Bulletin	Final	6/01/2004
NISTIR	7111	Computer Security Division 2003 Annual Report NISTIR 7111 Computer Security Division 2003 Annual Report 4/30/2004 Status: Final Download: NISTIR 7111 (DOI); Local Download	Final	4/30/2004
ITL Bulletin		Selecting Information Technology Security Products ITL Bulletin Selecting Information Technology Security Products 4/28/2004 Status: Final Download: April 2004 ITL Bulletin	Final	4/28/2004
NISTIR	6529-A	Common Biometric Exchange Formats Framework (CBEFF) NISTIR 6529-A Common Biometric Exchange Formats Framework (CBEFF) 4/05/2004 Status: Final Download: NISTIR 6529-A (DOI); Local Download	Final	4/05/2004
NISTIR	7085	2nd Annual PKI Research Workshop Proceedings NISTIR 7085 2nd Annual PKI Research Workshop Proceedings 4/01/2004 Status: Final Download: NISTIR 7085 (DOI); Local Download	Final	4/01/2004
ITL Bulletin		Federal Information Processing Standard (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems ITL Bulletin Federal Information Processing Standard (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems 3/01/2004 Status: Final Download: March 2004 ITL Bulletin	Final	3/01/2004
NISTIR	7056	Card Technology Developments and Gap Analysis Interagency Report NISTIR 7056 Card Technology Developments and Gap Analysis Interagency Report 3/01/2004 Status: Final Download: NISTIR 7056 (DOI); Local Download	Final	3/01/2004
FIPS	199	Standards for Security Categorization of Federal Information and Information Systems FIPS 199 Standards for Security Categorization of Federal Information and Information Systems 2/01/2004 Status: Final Download: FIPS 199 (DOI); Local Download	Final	2/01/2004
NISTIR	7059	1st Annual PKI Research Workshop Proceedings NISTIR 7059 1st Annual PKI Research Workshop Proceedings 11/12/2003 Status: Final Download: NISTIR 7059	Final	11/12/2003
ITL Bulletin		Information Technology Security Awareness, Training, Education, and Certification ITL Bulletin Information Technology Security Awareness, Training, Education, and Certification 10/15/2003 Status: Final Download: October 2003 ITL Bulletin	Final	10/15/2003
SP	800-35	Guide to Information Technology Security Services SP 800-35 Guide to Information Technology Security Services 10/09/2003 Status: Final Download: SP 800-35 (DOI); Local Download	Final	10/09/2003
SP	800-50	Building an Information Technology Security Awareness and Training Program SP 800-50 Building an Information Technology Security Awareness and Training Program 10/01/2003 Status: Final Download: SP 800-50 (DOI); Local Download	Final	10/01/2003
SP	800-59	Guideline for Identifying an Information System as a National Security System SP 800-59 Guideline for Identifying an Information System as a National Security System 8/20/2003 Status: Final Download: SP 800-59 (DOI); Local Download	Final	8/20/2003
NISTIR	7046	A Framework for Multi-mode Authentication: Overview and Implementation Guide NISTIR 7046 A Framework for Multi-mode Authentication: Overview and Implementation Guide 8/01/2003 Status: Final Download: NISTIR 7046 (DOI); Local Download	Final	8/01/2003
NISTIR	6887 2003 Edition	Government Smart Card Interoperability Specification, Version 2.1 NISTIR 6887 2003 Edition Government Smart Card Interoperability Specification, Version 2.1 7/16/2003 Status: Final Download: NISTIR 6887 2003 Edition (DOI); Local Download	Final	7/16/2003
NISTIR	7007	An Overview of Issues in Testing Intrusion Detection Systems NISTIR 7007 An Overview of Issues in Testing Intrusion Detection Systems 7/11/2003 Status: Final Download: NISTIR 7007 (DOI); Local Download	Final	7/11/2003
ITL Bulletin		Testing Intrusion Detection Systems ITL Bulletin Testing Intrusion Detection Systems 7/01/2003 Status: Final Download: Jul 2003 ITL Bulletin	Final	7/01/2003
NISTIR	7030	Picture Password: A Visual Login Technique for Mobile Devices NISTIR 7030 Picture Password: A Visual Login Technique for Mobile Devices 7/01/2003 Status: Final Download: NISTIR 7030 (DOI); Local Download	Final	7/01/2003
NISTIR	6977	Vulnerabilities in Quantum Key Distribution Protocols NISTIR 6977 Vulnerabilities in Quantum Key Distribution Protocols 5/01/2003 Status: Final Download: NISTIR 6977	Final	5/01/2003
NISTIR	6985	COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 NISTIR 6985 COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 4/01/2003 Status: Final Download: NISTIR 6985 (DOI); Local Download	Final	4/01/2003
NISTIR	6981	Policy Expression and Enforcement for Handheld Devices NISTIR 6981 Policy Expression and Enforcement for Handheld Devices 4/01/2003 Status: Final Download: NISTIR 6981 (DOI); Local Download	Final	4/01/2003
ITL Bulletin		Secure Interconnections for Information Technology Systems ITL Bulletin Secure Interconnections for Information Technology Systems 2/26/2003 Status: Final Download: February 2003 ITL Bulletin	Final	2/26/2003
FIPS	140-2	Security Requirements for Cryptographic Modules FIPS 140-2 Security Requirements for Cryptographic Modules 12/03/2002 Status: Final Download: FIPS 140-2 (DOI); Local Download; Annex A: Approved Security Functions; Annex B: Approved Protection Profiles; Annex C: Approved Random Number Generators; Annex D: Approved Key Establishment Techniques; FIPS 140-2 (EPUB); Comments on FIPS 140-1 (Oct. 1998)	Final	12/03/2002
SP	800-49	Federal S/MIME V3 Client Profile SP 800-49 Federal S/MIME V3 Client Profile 11/05/2002 Status: Final Download: SP 800-49 (DOI); Local Download	Final	11/05/2002
SP	800-47	Security Guide for Interconnecting Information Technology Systems SP 800-47 Security Guide for Interconnecting Information Technology Systems 9/01/2002 Status: Final Download: SP 800-47 (DOI); Local Download	Final	9/01/2002
ITL Bulletin		Techniques for System and Data Recovery ITL Bulletin Techniques for System and Data Recovery 4/01/2002 Status: Final Download: April 2002 ITL Bulletin	Final	4/01/2002
White Paper		The Economic Impact of Role-Based Access Control White Paper The Economic Impact of Role-Based Access Control 3/01/2002 Status: Final Download: Report	Final	3/01/2002
SP	800-38A	Recommendation for Block Cipher Modes of Operation: Methods and Techniques SP 800-38A Recommendation for Block Cipher Modes of Operation: Methods and Techniques 12/01/2001 Status: Final Download: SP 800-38A (DOI); Local Download	Final	12/01/2001
FIPS	197	Advanced Encryption Standard (AES) FIPS 197 Advanced Encryption Standard (AES) 11/26/2001 Status: Final Download: FIPS 197 (DOI); Local Download; Comments received on Draft FIPS 197	Final	11/26/2001
White Paper		The Economic Impacts of NIST's Data Encryption Standard (DES) Program White Paper The Economic Impacts of NIST's Data Encryption Standard (DES) Program 10/01/2001 Status: Final Download: Report	Final	10/01/2001
White Paper		Report on the Second Modes of Operation Workshop White Paper Report on the Second Modes of Operation Workshop 10/01/2001 Status: Final Download: Report	Final	10/01/2001
SP	800-32	Introduction to Public Key Technology and the Federal PKI Infrastructure SP 800-32 Introduction to Public Key Technology and the Federal PKI Infrastructure 2/26/2001 Status: Final Download: SP 800-32 (DOI); Local Download	Final	2/26/2001
White Paper		Report on the Symmetric Key Block Cipher Modes of Operation Workshop White Paper Report on the Symmetric Key Block Cipher Modes of Operation Workshop 12/01/2000 Status: Final Download: Report	Final	12/01/2000
White Paper		Federal Information Technology Security Assessment Framework White Paper Federal Information Technology Security Assessment Framework 11/28/2000 Status: Final Download: Report	Final	11/28/2000
SP	800-25	Federal Agency Use of Public Key Technology for Digital Signatures and Authentication SP 800-25 Federal Agency Use of Public Key Technology for Digital Signatures and Authentication 10/01/2000 Status: Final Download: SP 800-25 (DOI); Local Download	Final	10/01/2000
NISTIR	6483	Randomness Testing of the Advanced Encryption Standard Finalist Candidates NISTIR 6483 Randomness Testing of the Advanced Encryption Standard Finalist Candidates 4/01/2000 Status: Final Download: NISTIR 6483	Final	4/01/2000
White Paper		Report of the Workshop on Key Management Using Public Key Cryptography White Paper Report of the Workshop on Key Management Using Public Key Cryptography 2/28/2000 Status: Final Download: Report	Final	2/28/2000
NISTIR	6462	CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 NISTIR 6462 CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 12/01/1999 Status: Final Download: NISTIR 6462	Final	12/01/1999
NISTIR	6416	Applying Mobile Agents to Intrusion Detection and Response NISTIR 6416 Applying Mobile Agents to Intrusion Detection and Response 10/01/1999 Status: Final Download: NISTIR 6416	Final	10/01/1999
NISTIR	6390	Randomness Testing of the Advanced Encryption Standard Candidate Algorithms NISTIR 6390 Randomness Testing of the Advanced Encryption Standard Candidate Algorithms 9/01/1999 Status: Final Download: NISTIR 6390	Final	9/01/1999
NISTIR	6192	A Revised Model for Role Based Access Control NISTIR 6192 A Revised Model for Role Based Access Control 7/09/1998 Status: Final Download: NISTIR 6192 (DOI); Local Download; Citation Page for NISTIR 6192	Final	7/09/1998
SP	800-16	Information Technology Security Training Requirements: a Role- and Performance-Based Model SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model 4/01/1998 Status: Final Download: SP 800-16 (DOI); Local Download	Final	4/01/1998
SP	800-15	MISPC Minimum Interoperability Specification for PKI Components, Version 1 SP 800-15 MISPC Minimum Interoperability Specification for PKI Components, Version 1 1/01/1998 Status: Final Download: SP 800-15 (DOI); Local Download	Final	1/01/1998
NISTIR	6068	Report on the TMACH Experiment NISTIR 6068 Report on the TMACH Experiment 7/01/1997 Status: Final Download: None available	Final	7/01/1997
NISTIR	5820	Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications NISTIR 5820 Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications 4/01/1996 Status: Final Download: NISTIR 5820	Final	4/01/1996
NISTIR	5788	Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia NISTIR 5788 Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia 11/01/1995 Status: Final Download: None available	Final	11/01/1995
NISTIR	5540	Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example NISTIR 5540 Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example 12/01/1994 Status: Final Download: None available	Final	12/01/1994
NISTIR	5570	An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use NISTIR 5570 An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use 11/01/1994 Status: Final Download: None available	Final	11/01/1994
NISTIR	5472	A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 NISTIR 5472 A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 8/01/1994 Status: Final Download: NISTIR 5472 (DOI); Local Download	Final	8/01/1994
NISTIR	5590	Proceedings Report of the International Invitation Workshop on Developmental Assurance NISTIR 5590 Proceedings Report of the International Invitation Workshop on Developmental Assurance 6/01/1994 Status: Final Download: None available	Final	6/01/1994
NISTIR	5468	Report of the NIST Workshop on Key Escrow Encryption NISTIR 5468 Report of the NIST Workshop on Key Escrow Encryption 6/01/1994 Status: Final Download: None available	Final	6/01/1994
White Paper		Auditing Password Usage White Paper Auditing Password Usage 9/01/1988 Status: Final Download: GAO 75-01-75	Final	9/01/1988
White Paper		DoD Rainbow Series White Paper DoD Rainbow Series 12/26/1985 Status: Final Download: None available	Final	12/26/1985
White Paper	NBS Technical Note (TN) 906	A Methodology for Evaluating Alternative Technical and Information Management Approaches to Privacy Requirements White Paper NBS Technical Note (TN) 906 A Methodology for Evaluating Alternative Technical and Information Management Approaches to Privacy Requirements 6/01/1976 Status: Final Download: White Paper (DOI); Local Download	Final	6/01/1976
White Paper	NBS Technical Note (TN) 876	Exploring Privacy and Data Security Costs: A Summary of a Workshop White Paper NBS Technical Note (TN) 876 Exploring Privacy and Data Security Costs: A Summary of a Workshop 8/01/1975 Status: Final Download: White Paper (DOI); Local Download	Final	8/01/1975
White Paper	NBS Technical Note (TN) 827	Controlled Accessibility Workshop Report White Paper NBS Technical Note (TN) 827 Controlled Accessibility Workshop Report 5/01/1974 Status: Final Download: White Paper (DOI); Local Download	Final	5/01/1974
White Paper	NBS Technical Note (TN) 809	Government Looks at Privacy and Security in Computer Systems: Summary of a Conference held at the National Bureau of Standards, Gaithersburg, Maryland, November 19-20, 1973 White Paper NBS Technical Note (TN) 809 Government Looks at Privacy and Security in Computer Systems: Summary of a Conference held at the National Bureau of Standards, Gaithersburg, Maryland, November 19-20, 1973 2/01/1974 Status: Final Download: White Paper (DOI); Local Download	Final	2/01/1974
White Paper	NBS Technical Note (TN) 780	Controlled Accessibility Bibliography White Paper NBS Technical Note (TN) 780 Controlled Accessibility Bibliography 6/01/1973 Status: Final Download: White Paper (DOI); Local Download	Final	6/01/1973

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Search Results

Current Publications