Search | CSRC

Search Results

Showing 312 matching records.

Series	Number	Title Publications	Status	Release Date
IR	8539	Security Property Verification by Transition Model IR 8539 (Initial Public Draft) Security Property Verification by Transition Model 10/08/2024 Status: Draft	Draft	10/08/2024
IR	8536	Supply Chain Traceability: Manufacturing Meta-Framework IR 8536 (Initial Public Draft) Supply Chain Traceability: Manufacturing Meta-Framework 9/27/2024 Status: Draft	Draft	9/27/2024
IR	8532	Workshop on Enhancing Security of Devices and Components Across the Supply Chain IR 8532 (Initial Public Draft) Workshop on Enhancing Security of Devices and Components Across the Supply Chain 8/14/2024 Status: Draft	Draft	8/14/2024
IR	8528	Status Report on the First Round of the Additional Digital Signature Schemes for the NIST Post-Quantum Cryptography Standardization Process IR 8528 (Final) Status Report on the First Round of the Additional Digital Signature Schemes for the NIST Post-Quantum Cryptography Standardization Process 10/24/2024 Status: Final	Final	10/24/2024
IR	8517	Hardware Security Failure Scenarios: Potential Weaknesses in Hardware Design IR 8517 (Initial Public Draft) Hardware Security Failure Scenarios: Potential Weaknesses in Hardware Design 6/13/2024 Status: Draft	Draft	6/13/2024
IR	8505	A Data Protection Approach for Cloud-Native Applications IR 8505 (Final) A Data Protection Approach for Cloud-Native Applications 9/30/2024 Status: Final	Final	9/30/2024
IR	8504	Access Control on NoSQL Databases IR 8504 (Final) Access Control on NoSQL Databases 5/07/2024 Status: Final	Final	5/07/2024
IR	8498	Cybersecurity for Smart Inverters: Guidelines for Residential and Light Commercial Solar Energy Systems IR 8498 (Initial Public Draft) Cybersecurity for Smart Inverters: Guidelines for Residential and Light Commercial Solar Energy Systems 5/10/2024 Status: Draft	Draft	5/10/2024
IR	8496	Data Classification Concepts and Considerations for Improving Data Collection IR 8496 (Initial Public Draft) Data Classification Concepts and Considerations for Improving Data Collection 11/15/2023 Status: Draft	Draft	11/15/2023
IR	8481	Cybersecurity for Research: Findings and Possible Paths Forward IR 8481 (Initial Public Draft) Cybersecurity for Research: Findings and Possible Paths Forward 8/31/2023 Status: Draft	Draft	8/31/2023
IR	8480	Attribute Validation Services for Identity Management: Architecture, Security, Privacy, and Operational Considerations IR 8480 (Initial Public Draft) Attribute Validation Services for Identity Management: Architecture, Security, Privacy, and Operational Considerations 10/07/2024 Status: Draft	Draft	10/07/2024
IR	8477	Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings IR 8477 (Final) Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings 2/26/2024 Status: Final	Final	2/26/2024
IR	8476	3rd High-Performance Computing Security Workshop: Joint NIST-NSF Workshop Report IR 8476 (Final) 3rd High-Performance Computing Security Workshop: Joint NIST-NSF Workshop Report 9/26/2023 Status: Final	Final	9/26/2023
IR	8475	A Security Perspective on the Web3 Paradigm IR 8475 (Initial Public Draft) A Security Perspective on the Web3 Paradigm 4/11/2024 Status: Draft	Draft	4/11/2024
IR	8473	Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure IR 8473 (Final) Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure 10/16/2023 Status: Final	Final	10/16/2023
IR	8472	Non-Fungible Token Security IR 8472 (Final) Non-Fungible Token Security 3/01/2024 Status: Final	Final	3/01/2024
IR	8467	Cybersecurity Framework Profile for Genomic Data IR 8467 (Initial Public Draft) Cybersecurity Framework Profile for Genomic Data 6/15/2023 Status: Draft	Draft	6/15/2023
IR	8460	State Machine Replication and Consensus with Byzantine Adversaries IR 8460 (Initial Public Draft) State Machine Replication and Consensus with Byzantine Adversaries 4/26/2023 Status: Draft	Draft	4/26/2023
IR	8459	Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series IR 8459 (Final) Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series 9/10/2024 Status: Final	Final	9/10/2024
IR	8454	Status Report on the Final Round of the NIST Lightweight Cryptography Standardization Process IR 8454 (Final) Status Report on the Final Round of the NIST Lightweight Cryptography Standardization Process 6/16/2023 Status: Final	Final	6/16/2023
IR	8450	Overview and Considerations of Access Control Based on Attribute Encryption IR 8450 (Final) Overview and Considerations of Access Control Based on Attribute Encryption 12/20/2023 Status: Final	Final	12/20/2023
IR	8446	Bridging the Gap between Standards on Random Number Generation: Comparison of SP 800-90 Series and AIS 20/31 IR 8446 (Initial Public Draft) Bridging the Gap between Standards on Random Number Generation: Comparison of SP 800-90 Series and AIS 20/31 9/16/2024 Status: Draft	Draft	9/16/2024
IR	8441	Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) IR 8441 (Final) Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) 9/25/2023 Status: Final	Final	9/25/2023
IR	8432	Cybersecurity of Genomic Data IR 8432 (Final) Cybersecurity of Genomic Data 12/20/2023 Status: Final	Final	12/20/2023
IR	8431	Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” IR 8431 (Final) Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” 9/20/2022 Status: Final	Final	9/20/2022
IR	8427	Discussion on the Full Entropy Assumption of the SP 800-90 Series IR 8427 (Final) Discussion on the Full Entropy Assumption of the SP 800-90 Series 4/14/2023 Status: Final	Final	4/14/2023
IR	8425A	Recommended Cybersecurity Requirements for Consumer-Grade Router Products IR 8425A (Final) Recommended Cybersecurity Requirements for Consumer-Grade Router Products 9/10/2024 Status: Final	Final	9/10/2024
IR	8425	Profile of the IoT Core Baseline for Consumer IoT Products IR 8425 (Final) Profile of the IoT Core Baseline for Consumer IoT Products 9/20/2022 Status: Final	Final	9/20/2022
IR	8420B	The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities IR 8420B (Final) The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities 3/25/2022 Status: Final	Final	3/25/2022
IR	8420A	Approaches and Challenges of Federal Cybersecurity Awareness Programs IR 8420A (Final) Approaches and Challenges of Federal Cybersecurity Awareness Programs 3/25/2022 Status: Final	Final	3/25/2022
IR	8420	Federal Cybersecurity Awareness Programs: A Mixed Methods Research Study IR 8420 (Final) Federal Cybersecurity Awareness Programs: A Mixed Methods Research Study 3/25/2022 Status: Final	Final	3/25/2022
IR	8419	Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives IR 8419 (Final) Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives 4/07/2022 Status: Final	Final	4/07/2022
IR	8413	Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process IR 8413 (Final) Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process 9/29/2022 Status: Final	Final	9/29/2022
IR	8409	Measuring the Common Vulnerability Scoring System Base Score Equation IR 8409 (Final) Measuring the Common Vulnerability Scoring System Base Score Equation 11/15/2022 Status: Final	Final	11/15/2022
IR	8408	Understanding Stablecoin Technology and Related Security Considerations IR 8408 (Final) Understanding Stablecoin Technology and Related Security Considerations 9/05/2023 Status: Final	Final	9/05/2023
IR	8406	Cybersecurity Framework Profile for Liquefied Natural Gas IR 8406 (Final) Cybersecurity Framework Profile for Liquefied Natural Gas 10/10/2023 Status: Final	Final	10/10/2023
IR	8403	Blockchain for Access Control Systems IR 8403 (Final) Blockchain for Access Control Systems 5/26/2022 Status: Final	Final	5/26/2022
IR	8401	Satellite Ground Segment: Applying the Cybersecurity Framework to Satellite Command and Control IR 8401 (Final) Satellite Ground Segment: Applying the Cybersecurity Framework to Satellite Command and Control 12/30/2022 Status: Final	Final	12/30/2022
IR	8397	Guidelines on Minimum Standards for Developer Verification of Software IR 8397 (Final) Guidelines on Minimum Standards for Developer Verification of Software 10/06/2021 Status: Final	Final	10/06/2021
IR	8379	Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance IR 8379 (Final) Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance 9/09/2021 Status: Final	Final	9/09/2021
IR	8374	Ransomware Risk Management: A Cybersecurity Framework Profile IR 8374 (Final) Ransomware Risk Management: A Cybersecurity Framework Profile 2/23/2022 Status: Final	Final	2/23/2022
IR	8369	Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process IR 8369 (Final) Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process 7/21/2021 Status: Final	Final	7/21/2021
IR	8360	Machine Learning for Access Control Policy Verification IR 8360 (Final) Machine Learning for Access Control Policy Verification 9/16/2021 Status: Final	Final	9/16/2021
IR	8356	Considerations for Digital Twin Technology and Emerging Standards IR 8356 (Initial Public Draft) Considerations for Digital Twin Technology and Emerging Standards 4/16/2021 Status: Draft	Draft	4/16/2021
IR	8355	NICE Framework Competency Areas: Preparing a Job-Ready Cybersecurity Workforce IR 8355 (Final) NICE Framework Competency Areas: Preparing a Job-Ready Cybersecurity Workforce 6/21/2023 Status: Final	Final	6/21/2023
IR	8349	Methodology for Characterizing Network Behavior of Internet of Things Devices IR 8349 (Initial Public Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 1/11/2022 Status: Draft	Draft	1/11/2022
IR	8347	NIST Test Personal Identity Verification (PIV) Cards Version 2 IR 8347 (Final) NIST Test Personal Identity Verification (PIV) Cards Version 2 4/02/2021 Status: Final	Final	4/02/2021
IR	8344	Ontology for Authentication IR 8344 (Initial Public Draft) Ontology for Authentication 2/08/2021 Status: Draft	Draft	2/08/2021
IR	8336	Background on Identity Federation Technologies for the Public Safety Community IR 8336 (Initial Public Draft) Background on Identity Federation Technologies for the Public Safety Community 6/09/2021 Status: Draft	Draft	6/09/2021
IR	8335	Identity as a Service for Public Safety Organizations IR 8335 (Initial Public Draft) Identity as a Service for Public Safety Organizations 6/16/2021 Status: Draft	Draft	6/16/2021
IR	8334	Using Mobile Device Biometrics for Authenticating First Responders IR 8334 (Initial Public Draft) Using Mobile Device Biometrics for Authenticating First Responders 6/02/2021 Status: Draft	Draft	6/02/2021
IR	8333	Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop IR 8333 (Final) Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop 3/29/2021 Status: Final	Final	3/29/2021
IR	8330	Research Report: User Perceptions of Smart Home Privacy and Security IR 8330 (Final) Research Report: User Perceptions of Smart Home Privacy and Security 11/17/2020 Status: Final	Final	11/17/2020
IR	8323 Rev. 1	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services IR 8323 Rev. 1 (Final) Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 1/31/2023 Status: Final	Final	1/31/2023
IR	8322	Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop IR 8322 (Final) Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop 1/07/2021 Status: Final	Final	1/07/2021
IR	8320D	Hardware-Enabled Security: Hardware-Based Confidential Computing IR 8320D (Initial Public Draft) Hardware-Enabled Security: Hardware-Based Confidential Computing 2/23/2023 Status: Draft	Draft	2/23/2023
IR	8320C	Hardware-Enabled Security: Machine Identity Management and Protection IR 8320C (Initial Public Draft) Hardware-Enabled Security: Machine Identity Management and Protection 4/20/2022 Status: Draft	Draft	4/20/2022
IR	8320B	Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms IR 8320B (Final) Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms 4/20/2022 Status: Final	Final	4/20/2022
IR	8320A	Hardware-Enabled Security: Container Platform Security Prototype IR 8320A (Final) Hardware-Enabled Security: Container Platform Security Prototype 6/17/2021 Status: Final	Final	6/17/2021
IR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases IR 8320 (Final) Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 5/04/2022 Status: Final	Final	5/04/2022
IR	8319	Review of the Advanced Encryption Standard IR 8319 (Final) Review of the Advanced Encryption Standard 7/23/2021 Status: Final	Final	7/23/2021
IR	8309	Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process IR 8309 (Final) Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process 7/22/2020 Status: Final	Final	7/22/2020
IR	8301	Blockchain Networks: Token Design and Management Overview IR 8301 (Final) Blockchain Networks: Token Design and Management Overview 2/09/2021 Status: Final	Final	2/09/2021
IR	8294	Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) IR 8294 (Final) Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) 4/29/2020 Status: Final	Final	4/29/2020
IR	8287	A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce IR 8287 (Final) A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce 2/20/2020 Status: Final	Final	2/20/2020
IR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response IR 8286D (Final) Using Business Impact Analysis to Inform Risk Prioritization and Response 11/17/2022 Status: Final	Final	11/17/2022
IR	8286C	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight IR 8286C (Final) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 3/06/2024 Status: Final	Final	3/06/2024
IR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management IR 8286B (Final) Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/10/2022 Status: Final	Final	2/10/2022
IR	8286A	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management IR 8286A (Final) Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 11/12/2021 Status: Final	Final	11/12/2021
IR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 (Final) Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final	Final	10/13/2020
IR	8278A Rev. 1	National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers IR 8278A Rev. 1 (Final) National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 2/26/2024 Status: Final	Final	2/26/2024
IR	8278 Rev. 1	National Online Informative References (OLIR) Program: Overview, Benefits, and Use IR 8278 Rev. 1 (Final) National Online Informative References (OLIR) Program: Overview, Benefits, and Use 2/26/2024 Status: Final	Final	2/26/2024
IR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry IR 8276 (Final) Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/11/2021 Status: Final	Final	2/11/2021
IR	8270	Introduction to Cybersecurity for Commercial Satellite Operations IR 8270 (Final) Introduction to Cybersecurity for Commercial Satellite Operations 7/25/2023 Status: Final	Final	7/25/2023
IR	8268	Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process IR 8268 (Final) Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process 10/07/2019 Status: Final	Final	10/07/2019
IR	8267	Security Review of Consumer Home Internet of Things (IoT) Products IR 8267 (Initial Public Draft) Security Review of Consumer Home Internet of Things (IoT) Products 10/01/2019 Status: Draft	Draft	10/01/2019
IR	8259C	Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline IR 8259C (Initial Public Draft) Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline 12/15/2020 Status: Draft	Draft	12/15/2020
IR	8259B	IoT Non-Technical Supporting Capability Core Baseline IR 8259B (Final) IoT Non-Technical Supporting Capability Core Baseline 8/25/2021 Status: Final	Final	8/25/2021
IR	8259A	IoT Device Cybersecurity Capability Core Baseline IR 8259A (Final) IoT Device Cybersecurity Capability Core Baseline 5/29/2020 Status: Final	Final	5/29/2020
IR	8259	Foundational Cybersecurity Activities for IoT Device Manufacturers IR 8259 (Final) Foundational Cybersecurity Activities for IoT Device Manufacturers 5/29/2020 Status: Final	Final	5/29/2020
IR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers IR 8246 (Final) Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final	Final	12/15/2020
IR	8241	Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs IR 8241 (Final) Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs 12/17/2018 Status: Final	Final	12/17/2018
IR	8240	Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process IR 8240 (Final) Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process 1/31/2019 Status: Final	Final	1/31/2019
IR	8235	Security Guidance for First Responder Mobile and Wearable Devices IR 8235 (Final) Security Guidance for First Responder Mobile and Wearable Devices 7/20/2022 Status: Final	Final	7/20/2022
IR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks IR 8228 (Final) Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final	Final	6/25/2019
IR	8227	Manufacturing Profile Implementation Methodology for a Robotic Workcell IR 8227 (Final) Manufacturing Profile Implementation Methodology for a Robotic Workcell 5/22/2019 Status: Final	Final	5/22/2019
IR	8221	A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data IR 8221 (Final) A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data 6/05/2019 Status: Final	Final	6/05/2019
IR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection IR 8219 (Final) Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 7/16/2020 Status: Final	Final	7/16/2020
IR	8214C	NIST First Call for Multi-Party Threshold Schemes IR 8214C (Initial Public Draft) NIST First Call for Multi-Party Threshold Schemes 1/25/2023 Status: Draft	Draft	1/25/2023
IR	8214B	Notes on Threshold EdDSA/Schnorr Signatures IR 8214B (Initial Public Draft) Notes on Threshold EdDSA/Schnorr Signatures 8/12/2022 Status: Draft	Draft	8/12/2022
IR	8214A	NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives IR 8214A (Final) NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives 7/07/2020 Status: Final	Final	7/07/2020
IR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography IR 8214 (Final) Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 3/01/2019 Status: Final	Final	3/01/2019
IR	8213	A Reference for Randomness Beacons: Format and Protocol Version 2 IR 8213 (Initial Public Draft) A Reference for Randomness Beacons: Format and Protocol Version 2 5/06/2019 Status: Draft	Draft	5/06/2019
IR	8212	ISCMA: An Information Security Continuous Monitoring Program Assessment IR 8212 (Final) ISCMA: An Information Security Continuous Monitoring Program Assessment 3/31/2021 Status: Final	Final	3/31/2021
IR	8202	Blockchain Technology Overview IR 8202 (Final) Blockchain Technology Overview 10/03/2018 Status: Final	Final	10/03/2018
IR	8201	Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings IR 8201 (Final) Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings 12/22/2017 Status: Final	Final	12/22/2017
IR	8200	Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) IR 8200 (Final) Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) 11/29/2018 Status: Final	Final	11/29/2018
IR	8196	Security Analysis of First Responder Mobile and Wearable Devices IR 8196 (Final) Security Analysis of First Responder Mobile and Wearable Devices 5/11/2020 Status: Final	Final	5/11/2020
IR	8194	Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario IR 8194 (Final) Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario 10/10/2017 Status: Final	Final	10/10/2017
IR	8193	National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles IR 8193 (Initial Public Draft) National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles 11/08/2017 Status: Draft	Draft	11/08/2017
IR	8192	Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings IR 8192 (Final) Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings 9/18/2017 Status: Final	Final	9/18/2017
IR	8188	Key Performance Indicators for Process Control System Cybersecurity Performance Analysis IR 8188 (Final) Key Performance Indicators for Process Control System Cybersecurity Performance Analysis 8/03/2017 Status: Final	Final	8/03/2017
IR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case IR 8183A Vol. 3 (Final) Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 9/30/2019 Status: Final	Final	9/30/2019
IR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case IR 8183A Vol. 2 (Final) Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 9/30/2019 Status: Final	Final	9/30/2019
IR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance IR 8183A Vol. 1 (Final) Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance 9/30/2019 Status: Final	Final	9/30/2019
IR	8183 Rev. 1	Cybersecurity Framework Version 1.1 Manufacturing Profile IR 8183 Rev. 1 (Final) Cybersecurity Framework Version 1.1 Manufacturing Profile 10/07/2020 Status: Final	Final	10/07/2020
IR	8183	Cybersecurity Framework Manufacturing Profile IR 8183 (Final) Cybersecurity Framework Manufacturing Profile 5/20/2019 Status: Final	Final	5/20/2019
IR	8179	Criticality Analysis Process Model: Prioritizing Systems and Components IR 8179 (Final) Criticality Analysis Process Model: Prioritizing Systems and Components 4/09/2018 Status: Final	Final	4/09/2018
IR	8177	Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis IR 8177 (Final) Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis 5/21/2019 Status: Final	Final	5/21/2019
IR	8176	Security Assurance Requirements for Linux Application Container Deployments IR 8176 (Final) Security Assurance Requirements for Linux Application Container Deployments 10/11/2017 Status: Final	Final	10/11/2017
IR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework IR 8170 (Final) Approaches for Federal Agencies to Use the Cybersecurity Framework 8/17/2021 Status: Final	Final	8/17/2021
IR	8165	Impact of Code Complexity on Software Analysis IR 8165 (Final) Impact of Code Complexity on Software Analysis 2/09/2017 Status: Final	Final	2/09/2017
IR	8151	Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy IR 8151 (Final) Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy 11/30/2016 Status: Final	Final	11/30/2016
IR	8149	Developing Trust Frameworks to Support Identity Federations IR 8149 (Final) Developing Trust Frameworks to Support Identity Federations 1/12/2018 Status: Final	Final	1/12/2018
IR	8144	Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue IR 8144 (Initial Public Draft) Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue 9/12/2016 Status: Draft	Draft	9/12/2016
IR	8139	Identifying Uniformity with Entropy and Divergence IR 8139 (Initial Public Draft) Identifying Uniformity with Entropy and Divergence 2/02/2017 Status: Draft	Draft	2/02/2017
IR	8136	An Overview of Mobile Application Vetting Services for Public Safety IR 8136 (Final) An Overview of Mobile Application Vetting Services for Public Safety 1/27/2017 Status: Final	Final	1/27/2017
IR	8135	Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report IR 8135 (Final) Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report 6/01/2016 Status: Final	Final	6/01/2016
IR	8114	Report on Lightweight Cryptography IR 8114 (Final) Report on Lightweight Cryptography 3/28/2017 Status: Final	Final	3/28/2017
IR	8112	Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes IR 8112 (Final) Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes 1/12/2018 Status: Final	Final	1/12/2018
IR	8105	Report on Post-Quantum Cryptography IR 8105 (Final) Report on Post-Quantum Cryptography 4/28/2016 Status: Final	Final	4/28/2016
IR	8103	Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps IR 8103 (Final) Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps 9/19/2016 Status: Final	Final	9/19/2016
IR	8089	An Industrial Control System Cybersecurity Performance Testbed IR 8089 (Final) An Industrial Control System Cybersecurity Performance Testbed 12/10/2015 Status: Final	Final	12/10/2015
IR	8085	Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags IR 8085 (Initial Public Draft) Forming Common Platform Enumeration (CPE) Names from Software Identification (SWID) Tags 12/17/2015 Status: Draft	Draft	12/17/2015
IR	8080	Usability and Security Considerations for Public Safety Mobile Authentication IR 8080 (Final) Usability and Security Considerations for Public Safety Mobile Authentication 7/27/2016 Status: Final	Final	7/27/2016
IR	8074 Vol. 2	Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity IR 8074 Vol. 2 (Final) Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final	Final	12/23/2015
IR	8074 Vol. 1	Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity IR 8074 Vol. 1 (Final) Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final	Final	12/23/2015
IR	8062	An Introduction to Privacy Engineering and Risk Management in Federal Systems IR 8062 (Final) An Introduction to Privacy Engineering and Risk Management in Federal Systems 1/04/2017 Status: Final	Final	1/04/2017
IR	8060	Guidelines for the Creation of Interoperable Software Identification (SWID) Tags IR 8060 (Final) Guidelines for the Creation of Interoperable Software Identification (SWID) Tags 4/22/2016 Status: Final	Final	4/22/2016
IR	8058	Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content IR 8058 (Initial Public Draft) Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content 5/01/2015 Status: Draft	Draft	5/01/2015
IR	8055	Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research IR 8055 (Final) Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research 1/20/2016 Status: Final	Final	1/20/2016
IR	8054	NSTIC Pilots: Catalyzing the Identity Ecosystem IR 8054 (Final) NSTIC Pilots: Catalyzing the Identity Ecosystem 3/15/2016 Status: Final	Final	3/15/2016
IR	8053	De-Identification of Personal Information IR 8053 (Final) De-Identification of Personal Information 10/22/2015 Status: Final	Final	10/22/2015
IR	8041	Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium IR 8041 (Final) Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium 4/10/2015 Status: Final	Final	4/10/2015
IR	8040	Measuring the Usability and Security of Permuted Passwords on Mobile Platforms IR 8040 (Final) Measuring the Usability and Security of Permuted Passwords on Mobile Platforms 4/25/2016 Status: Final	Final	4/25/2016
IR	8023	Risk Management for Replication Devices IR 8023 (Final) Risk Management for Replication Devices 2/23/2015 Status: Final	Final	2/23/2015
IR	8018	Public Safety Mobile Application Security Requirements Workshop Summary IR 8018 (Final) Public Safety Mobile Application Security Requirements Workshop Summary 1/22/2015 Status: Final	Final	1/22/2015
IR	8014	Considerations for Identity Management in Public Safety Mobile Networks IR 8014 (Final) Considerations for Identity Management in Public Safety Mobile Networks 3/30/2015 Status: Final	Final	3/30/2015
IR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management IR 8011 Vol. 4 (Final) Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final	Final	4/28/2020
IR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management IR 8011 Vol. 3 (Final) Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Final	Final	12/06/2018
IR	8011 Vol. 2	Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management IR 8011 Vol. 2 (Final) Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management 6/06/2017 Status: Final	Final	6/06/2017
IR	8011 Vol. 1	Automation Support for Security Control Assessments: Volume 1: Overview IR 8011 Vol. 1 (Final) Automation Support for Security Control Assessments: Volume 1: Overview 6/06/2017 Status: Final	Final	6/06/2017
IR	8006	NIST Cloud Computing Forensic Science Challenges IR 8006 (Final) NIST Cloud Computing Forensic Science Challenges 8/25/2020 Status: Final	Final	8/25/2020
IR	7991	United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study IR 7991 (Final) United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study 4/08/2014 Status: Final	Final	4/08/2014
IR	7987 Rev. 1	Policy Machine: Features, Architecture, and Specification IR 7987 Rev. 1 (Final) Policy Machine: Features, Architecture, and Specification 10/27/2015 Status: Final	Final	10/27/2015
IR	7983	Report: Authentication Diary Study IR 7983 (Final) Report: Authentication Diary Study 2/04/2014 Status: Final	Final	2/04/2014
IR	7977	NIST Cryptographic Standards and Guidelines Development Process IR 7977 (Final) NIST Cryptographic Standards and Guidelines Development Process 3/31/2016 Status: Final	Final	3/31/2016
IR	7970	Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language IR 7970 (Final) Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language 12/09/2013 Status: Final	Final	12/09/2013
IR	7966	Security of Interactive and Automated Access Management Using Secure Shell (SSH) IR 7966 (Final) Security of Interactive and Automated Access Management Using Secure Shell (SSH) 10/15/2015 Status: Final	Final	10/15/2015
IR	7957	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions IR 7957 (Final) Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions 9/18/2013 Status: Final	Final	9/18/2013
IR	7956	Cryptographic Key Management Issues & Challenges in Cloud Services IR 7956 (Final) Cryptographic Key Management Issues & Challenges in Cloud Services 9/18/2013 Status: Final	Final	9/18/2013
IR	7946	CVSS Implementation Guidance IR 7946 (Final) CVSS Implementation Guidance 4/28/2014 Status: Final	Final	4/28/2014
IR	7933	Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record IR 7933 (Final) Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record 6/21/2013 Status: Final	Final	6/21/2013
IR	7916	Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 IR 7916 (Final) Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 2/15/2013 Status: Final	Final	2/15/2013
IR	7904	Trusted Geolocation in the Cloud: Proof of Concept Implementation IR 7904 (Final) Trusted Geolocation in the Cloud: Proof of Concept Implementation 12/10/2015 Status: Final	Final	12/10/2015
IR	7896	Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition IR 7896 (Final) Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition 11/15/2012 Status: Final	Final	11/15/2012
IR	7878	Combinatorial Coverage Measurement IR 7878 (Final) Combinatorial Coverage Measurement 10/26/2012 Status: Final	Final	10/26/2012
IR	7877	BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records IR 7877 (Final) BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records 9/14/2012 Status: Final	Final	9/14/2012
IR	7874	Guidelines for Access Control System Evaluation Metrics IR 7874 (Final) Guidelines for Access Control System Evaluation Metrics 9/14/2012 Status: Final	Final	9/14/2012
IR	7870	NIST Test Personal Identity Verification (PIV) Cards IR 7870 (Final) NIST Test Personal Identity Verification (PIV) Cards 7/12/2012 Status: Final	Final	7/12/2012
IR	7867 E2012	Usability of PIV Smartcards for Logical Access IR 7867 E2012 (Final) Usability of PIV Smartcards for Logical Access 8/01/2012 Status: Final	Final	8/01/2012
IR	7864	The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities IR 7864 (Final) The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities 7/10/2012 Status: Final	Final	7/10/2012
IR	7863	Cardholder Authentication for the PIV Digital Signature Key IR 7863 (Final) Cardholder Authentication for the PIV Digital Signature Key 6/18/2015 Status: Final	Final	6/18/2015
IR	7849	A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification IR 7849 (Final) A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification 3/05/2014 Status: Final	Final	3/05/2014
IR	7848	Specification for the Asset Summary Reporting Format 1.0 IR 7848 (Initial Public Draft) Specification for the Asset Summary Reporting Format 1.0 5/07/2012 Status: Draft	Draft	5/07/2012
IR	7823	Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework IR 7823 (Final) Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework 3/02/2015 Status: Final	Final	3/02/2015
IR	7817	A Credential Reliability and Revocation Model for Federated Identities IR 7817 (Final) A Credential Reliability and Revocation Model for Federated Identities 11/29/2012 Status: Final	Final	11/29/2012
IR	7816	Computer Security Division 2011 Annual Report IR 7816 (Final) Computer Security Division 2011 Annual Report 5/08/2012 Status: Final	Final	5/08/2012
IR	7815	Access Control for SAR Systems IR 7815 (Final) Access Control for SAR Systems 7/01/2011 Status: Final	Final	7/01/2011
IR	7806	ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions IR 7806 (Final) ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions 9/16/2011 Status: Final	Final	9/16/2011
IR	7802	Trust Model for Security Automation Data 1.0 (TMSAD) IR 7802 (Final) Trust Model for Security Automation Data 1.0 (TMSAD) 9/20/2011 Status: Final	Final	9/20/2011
IR	7791	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 IR 7791 (Final) Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 6/22/2011 Status: Final	Final	6/22/2011
IR	7788	Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs IR 7788 (Final) Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs 8/01/2011 Status: Final	Final	8/01/2011
IR	7773	An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events IR 7773 (Final) An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events 11/01/2010 Status: Final	Final	11/01/2010
IR	7771	Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 IR 7771 (Final) Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 2/28/2011 Status: Final	Final	2/28/2011
IR	7770	Security Considerations for Remote Electronic UOCAVA Voting IR 7770 (Final) Security Considerations for Remote Electronic UOCAVA Voting 2/21/2011 Status: Final	Final	2/21/2011
IR	7764	Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition IR 7764 (Final) Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition 2/23/2011 Status: Final	Final	2/23/2011
IR	7751	Computer Security Division 2010 Annual Report IR 7751 (Final) Computer Security Division 2010 Annual Report 5/31/2011 Status: Final	Final	5/31/2011
IR	7711	Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters IR 7711 (Final) Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters 9/15/2011 Status: Final	Final	9/15/2011
IR	7698	Common Platform Enumeration: Applicability Language Specification Version 2.3 IR 7698 (Final) Common Platform Enumeration: Applicability Language Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7697	Common Platform Enumeration: Dictionary Specification Version 2.3 IR 7697 (Final) Common Platform Enumeration: Dictionary Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7696	Common Platform Enumeration: Name Matching Specification Version 2.3 IR 7696 (Final) Common Platform Enumeration: Name Matching Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7695	Common Platform Enumeration: Naming Specification Version 2.3 IR 7695 (Final) Common Platform Enumeration: Naming Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7694	Specification for Asset Reporting Format 1.1 IR 7694 (Final) Specification for Asset Reporting Format 1.1 6/21/2011 Status: Final	Final	6/21/2011
IR	7693	Specification for Asset Identification 1.1 IR 7693 (Final) Specification for Asset Identification 1.1 6/17/2011 Status: Final	Final	6/17/2011
IR	7692	Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 IR 7692 (Final) Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 4/07/2011 Status: Final	Final	4/07/2011
IR	7682	Information System Security Best Practices for UOCAVA-Supporting Systems IR 7682 (Final) Information System Security Best Practices for UOCAVA-Supporting Systems 9/15/2011 Status: Final	Final	9/15/2011
IR	7676	Maintaining and Using Key History on Personal Identity Verification (PIV) Cards IR 7676 (Final) Maintaining and Using Key History on Personal Identity Verification (PIV) Cards 6/18/2010 Status: Final	Final	6/18/2010
IR	7665	Proceedings of the Privilege Management Workshop, September 1-3, 2009 IR 7665 (Final) Proceedings of the Privilege Management Workshop, September 1-3, 2009 1/01/2010 Status: Final	Final	1/01/2010
IR	7658	Guide to SIMfill Use and Development IR 7658 (Final) Guide to SIMfill Use and Development 2/24/2010 Status: Final	Final	2/24/2010
IR	7657	A Report on the Privilege (Access) Management Workshop IR 7657 (Final) A Report on the Privilege (Access) Management Workshop 3/30/2010 Status: Final	Final	3/30/2010
IR	7653	Computer Security Division 2009 Annual Report IR 7653 (Final) Computer Security Division 2009 Annual Report 3/23/2010 Status: Final	Final	3/23/2010
IR	7628 Rev. 1	Guidelines for Smart Grid Cybersecurity IR 7628 Rev. 1 (Final) Guidelines for Smart Grid Cybersecurity 9/25/2014 Status: Final	Final	9/25/2014
IR	7622	Notional Supply Chain Risk Management Practices for Federal Information Systems IR 7622 (Final) Notional Supply Chain Risk Management Practices for Federal Information Systems 10/16/2012 Status: Final	Final	10/16/2012
IR	7621 Rev. 2	PRE-DRAFT Call for Comments \| Small Business Information Security: The Fundamentals IR 7621 Rev. 2 (Initial Preliminary Draft) PRE-DRAFT Call for Comments \| Small Business Information Security: The Fundamentals 3/18/2024 Status: Draft	Draft	3/18/2024
IR	7621 Rev. 1	Small Business Information Security: The Fundamentals IR 7621 Rev. 1 (Final) Small Business Information Security: The Fundamentals 11/03/2016 Status: Final	Final	11/03/2016
IR	7620	Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition IR 7620 (Final) Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition 9/23/2009 Status: Final	Final	9/23/2009
IR	7617	Mobile Forensic Reference Materials: a Methodology and Reification IR 7617 (Final) Mobile Forensic Reference Materials: a Methodology and Reification 10/14/2009 Status: Final	Final	10/14/2009
IR	7611	Use of ISO/IEC 24727 IR 7611 (Final) Use of ISO/IEC 24727 8/14/2009 Status: Final	Final	8/14/2009
IR	7609	Cryptographic Key Management Workshop Summary -- June 8-9, 2009 IR 7609 (Final) Cryptographic Key Management Workshop Summary -- June 8-9, 2009 1/08/2010 Status: Final	Final	1/08/2010
IR	7601	Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure IR 7601 (Final) Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure 8/31/2010 Status: Final	Final	8/31/2010
IR	7581	System and Network Security Acronyms and Abbreviations IR 7581 (Final) System and Network Security Acronyms and Abbreviations 9/30/2009 Status: Final	Final	9/30/2009
IR	7564	Directions in Security Metrics Research IR 7564 (Final) Directions in Security Metrics Research 4/30/2009 Status: Final	Final	4/30/2009
IR	7559	Forensics Web Services (FWS) IR 7559 (Final) Forensics Web Services (FWS) 6/30/2010 Status: Final	Final	6/30/2010
IR	7551	A Threat Analysis on UOCAVA Voting Systems IR 7551 (Final) A Threat Analysis on UOCAVA Voting Systems 12/19/2008 Status: Final	Final	12/19/2008
IR	7539	Symmetric Key Injection onto Smart Cards IR 7539 (Final) Symmetric Key Injection onto Smart Cards 12/22/2008 Status: Final	Final	12/22/2008
IR	7536	Computer Security Division 2008 Annual Report IR 7536 (Final) Computer Security Division 2008 Annual Report 3/16/2009 Status: Final	Final	3/16/2009
IR	7516	Forensic Filtering of Cell Phone Protocols IR 7516 (Final) Forensic Filtering of Cell Phone Protocols 8/27/2008 Status: Final	Final	8/27/2008
IR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements IR 7511 Rev. 5 (Final) Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Final	Final	4/20/2018
IR	7511 Rev. 4	Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements IR 7511 Rev. 4 (Final) Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 1/28/2016 Status: Final	Final	1/28/2016
IR	7502	The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities IR 7502 (Final) The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities 12/27/2010 Status: Final	Final	12/27/2010
IR	7497	Security Architecture Design Process for Health Information Exchanges (HIEs) IR 7497 (Final) Security Architecture Design Process for Health Information Exchanges (HIEs) 9/30/2010 Status: Final	Final	9/30/2010
IR	7452	Secure Biometric Match-on-Card Feasibility Report IR 7452 (Final) Secure Biometric Match-on-Card Feasibility Report 11/30/2007 Status: Final	Final	11/30/2007
IR	7442	Computer Security Division 2007 Annual Report IR 7442 (Final) Computer Security Division 2007 Annual Report 4/01/2008 Status: Final	Final	4/01/2008
IR	7435	The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems IR 7435 (Final) The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems 8/30/2007 Status: Final	Final	8/30/2007
IR	7427	6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings IR 7427 (Final) 6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings 9/13/2007 Status: Final	Final	9/13/2007
IR	7399	Computer Security Division 2006 Annual Report IR 7399 (Final) Computer Security Division 2006 Annual Report 3/21/2007 Status: Final	Final	3/21/2007
IR	7387	Cell Phone Forensic Tools: an Overview and Analysis Update IR 7387 (Final) Cell Phone Forensic Tools: an Overview and Analysis Update 3/21/2007 Status: Final	Final	3/21/2007
IR	7359	Information Security Guide for Government Executives IR 7359 (Final) Information Security Guide for Government Executives 1/01/2007 Status: Final	Final	1/01/2007
IR	7358	Program Review for Information Security Management Assistance (PRISMA) IR 7358 (Final) Program Review for Information Security Management Assistance (PRISMA) 1/01/2007 Status: Final	Final	1/01/2007
IR	7337	Personal Identity Verification Demonstration Summary IR 7337 (Final) Personal Identity Verification Demonstration Summary 8/31/2006 Status: Final	Final	8/31/2006
IR	7316	Assessment of Access Control Systems IR 7316 (Final) Assessment of Access Control Systems 9/29/2006 Status: Final	Final	9/29/2006
IR	7313	5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings IR 7313 (Final) 5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings 7/18/2006 Status: Final	Final	7/18/2006
IR	7308	An Algorithm for Generating Very Large Covering Arrays IR 7308 (Final) An Algorithm for Generating Very Large Covering Arrays 3/20/2006 Status: Final	Final	3/20/2006
IR	7298 Rev. 3	Glossary of Key Information Security Terms IR 7298 Rev. 3 (Final) Glossary of Key Information Security Terms 7/03/2019 Status: Final	Final	7/03/2019
IR	7290	Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation IR 7290 (Final) Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation 3/01/2006 Status: Final	Final	3/01/2006
IR	7285	Computer Security Division 2005 Annual Report IR 7285 (Final) Computer Security Division 2005 Annual Report 2/01/2006 Status: Final	Final	2/01/2006
IR	7284	Personal Identity Verification Card Management Report IR 7284 (Final) Personal Identity Verification Card Management Report 1/06/2006 Status: Final	Final	1/06/2006
IR	7275 Rev. 4	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 IR 7275 Rev. 4 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 3/01/2012 Status: Final	Final	3/01/2012
IR	7275 Rev. 3	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 IR 7275 Rev. 3 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 1/01/2008 Status: Final	Final	1/01/2008
IR	7275 Rev. 2	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 IR 7275 Rev. 2 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 4/30/2007 Status: Final	Final	4/30/2007
IR	7275	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 IR 7275 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 11/01/2006 Status: Final	Final	11/01/2006
IR	7250	Cell Phone Forensic Tools: an Overview and Analysis IR 7250 (Final) Cell Phone Forensic Tools: an Overview and Analysis 10/19/2005 Status: Final	Final	10/19/2005
IR	7224	4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings IR 7224 (Final) 4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings 8/01/2005 Status: Final	Final	8/01/2005
IR	7219	Computer Security Division 2004 Annual Report IR 7219 (Final) Computer Security Division 2004 Annual Report 8/01/2005 Status: Final	Final	8/01/2005
IR	7206	Smart Cards and Mobile Device Authentication: an Overview and Implementation IR 7206 (Final) Smart Cards and Mobile Device Authentication: an Overview and Implementation 7/01/2005 Status: Final	Final	7/01/2005
IR	7200	Proximity Beacons and Mobile Device Authentication: an Overview and Implementation IR 7200 (Final) Proximity Beacons and Mobile Device Authentication: an Overview and Implementation 6/01/2005 Status: Final	Final	6/01/2005
IR	7188	Specification for the Extensible Configuration Checklist Description Format (XCCDF) IR 7188 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) 1/01/2005 Status: Final	Final	1/01/2005
IR	7122	3rd Annual PKI Research Workshop Proceedings IR 7122 (Final) 3rd Annual PKI Research Workshop Proceedings 9/08/2004 Status: Final	Final	9/08/2004
IR	7111	Computer Security Division 2003 Annual Report IR 7111 (Final) Computer Security Division 2003 Annual Report 4/30/2004 Status: Final	Final	4/30/2004
IR	7100	PDA Forensic Tools: an Overview and Analysis IR 7100 (Final) PDA Forensic Tools: an Overview and Analysis 8/01/2004 Status: Final	Final	8/01/2004
IR	7085	2nd Annual PKI Research Workshop Proceedings IR 7085 (Final) 2nd Annual PKI Research Workshop Proceedings 4/01/2004 Status: Final	Final	4/01/2004
IR	7059	1st Annual PKI Research Workshop Proceedings IR 7059 (Final) 1st Annual PKI Research Workshop Proceedings 11/12/2003 Status: Final	Final	11/12/2003
IR	7056	Card Technology Developments and Gap Analysis Interagency Report IR 7056 (Final) Card Technology Developments and Gap Analysis Interagency Report 3/01/2004 Status: Final	Final	3/01/2004
IR	7046	A Framework for Multi-mode Authentication: Overview and Implementation Guide IR 7046 (Final) A Framework for Multi-mode Authentication: Overview and Implementation Guide 8/01/2003 Status: Final	Final	8/01/2003
IR	7030	Picture Password: A Visual Login Technique for Mobile Devices IR 7030 (Final) Picture Password: A Visual Login Technique for Mobile Devices 7/01/2003 Status: Final	Final	7/01/2003
IR	7007	An Overview of Issues in Testing Intrusion Detection Systems IR 7007 (Final) An Overview of Issues in Testing Intrusion Detection Systems 7/11/2003 Status: Final	Final	7/11/2003
IR	6985	COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 IR 6985 (Final) COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 4/01/2003 Status: Final	Final	4/01/2003
IR	6981	Policy Expression and Enforcement for Handheld Devices IR 6981 (Final) Policy Expression and Enforcement for Handheld Devices 4/01/2003 Status: Final	Final	4/01/2003
IR	6977	Vulnerabilities in Quantum Key Distribution Protocols IR 6977 (Final) Vulnerabilities in Quantum Key Distribution Protocols 5/01/2003 Status: Final	Final	5/01/2003
IR	6887 E2003	Government Smart Card Interoperability Specification, Version 2.1 IR 6887 E2003 (Final) Government Smart Card Interoperability Specification, Version 2.1 7/16/2003 Status: Final	Final	7/16/2003
IR	6859	IT Security for Industrial Control Systems IR 6859 (Final) IT Security for Industrial Control Systems 2/28/2002 Status: Final	Final	2/28/2002
IR	6529A	Common Biometric Exchange Formats Framework (CBEFF) IR 6529A (Final) Common Biometric Exchange Formats Framework (CBEFF) 4/05/2004 Status: Final	Final	4/05/2004
IR	6483	Randomness Testing of the Advanced Encryption Standard Finalist Candidates IR 6483 (Final) Randomness Testing of the Advanced Encryption Standard Finalist Candidates 4/01/2000 Status: Final	Final	4/01/2000
IR	6462	CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 IR 6462 (Final) CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 12/01/1999 Status: Final	Final	12/01/1999
IR	6416	Applying Mobile Agents to Intrusion Detection and Response IR 6416 (Final) Applying Mobile Agents to Intrusion Detection and Response 10/01/1999 Status: Final	Final	10/01/1999
IR	6390	Randomness Testing of the Advanced Encryption Standard Candidate Algorithms IR 6390 (Final) Randomness Testing of the Advanced Encryption Standard Candidate Algorithms 9/01/1999 Status: Final	Final	9/01/1999
IR	6192	A Revised Model for Role Based Access Control IR 6192 (Final) A Revised Model for Role Based Access Control 7/09/1998 Status: Final	Final	7/09/1998
IR	6068	Report on the TMACH Experiment IR 6068 (Final) Report on the TMACH Experiment 7/01/1997 Status: Final	Final	7/01/1997
IR	5820	Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications IR 5820 (Final) Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications 4/01/1996 Status: Final	Final	4/01/1996
IR	5810	The TMACH Experiment Phase 1 - Preliminary Developmental Evaluation IR 5810 (Final) The TMACH Experiment Phase 1 - Preliminary Developmental Evaluation 6/01/1996 Status: Final	Final	6/01/1996
IR	5788	Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia IR 5788 (Final) Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia 11/01/1995 Status: Final	Final	11/01/1995
IR	5731	Validated Products List 1995 no. 4: Programming Languages, Database Language SQL, Graphics, POSIX, Computer Security, Product Data - IGES, OSI IR 5731 (Final) Validated Products List 1995 no. 4: Programming Languages, Database Language SQL, Graphics, POSIX, Computer Security, Product Data - IGES, OSI 10/01/1995 Status: Final	Final	10/01/1995
IR	5590	Proceedings Report of the International Invitation Workshop on Developmental Assurance IR 5590 (Final) Proceedings Report of the International Invitation Workshop on Developmental Assurance 6/01/1994 Status: Final	Final	6/01/1994
IR	5570	An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use IR 5570 (Final) An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use 11/01/1994 Status: Final	Final	11/01/1994
IR	5540	Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example IR 5540 (Final) Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example 12/01/1994 Status: Final	Final	12/01/1994
IR	5495	Computer Security Training & Awareness Course Compendium IR 5495 (Final) Computer Security Training & Awareness Course Compendium 9/01/1994 Status: Final	Final	9/01/1994
IR	5472	A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 IR 5472 (Final) A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 8/01/1994 Status: Final	Final	8/01/1994
IR	5468	Report of the NIST Workshop on Key Escrow Encryption IR 5468 (Final) Report of the NIST Workshop on Key Escrow Encryption 6/01/1994 Status: Final	Final	6/01/1994
IR	5424	A Study of Federal Agency Needs for Information Technology Security IR 5424 (Final) A Study of Federal Agency Needs for Information Technology Security 5/01/1994 Status: Final	Final	5/01/1994
IR	5395	Preliminary Functional Specifications of a Prototype Electronic Research Notebook for NIST IR 5395 (Final) Preliminary Functional Specifications of a Prototype Electronic Research Notebook for NIST 4/01/1994 Status: Final	Final	4/01/1994
IR	5386	Proceedings of the Workshop of the Federal Criteria for Information Technology Security IR 5386 (Final) Proceedings of the Workshop of the Federal Criteria for Information Technology Security 3/01/1994 Status: Final	Final	3/01/1994
IR	5325	Conformance Assessment of Transport Layer Security Implementations IR 5325 (Final) Conformance Assessment of Transport Layer Security Implementations 12/01/1993 Status: Final	Final	12/01/1993
IR	5308	General Procedures for Registering Computer Security Objects IR 5308 (Final) General Procedures for Registering Computer Security Objects 12/01/1993 Status: Final	Final	12/01/1993
IR	5283	Security of SQL-Based Implementations of Product Data Exchange Using STEP IR 5283 (Final) Security of SQL-Based Implementations of Product Data Exchange Using STEP 10/01/1993 Status: Final	Final	10/01/1993
IR	5247	Workshop on Security Procedures for the Interchange of Electronic Documents: Selected Papers and Results IR 5247 (Final) Workshop on Security Procedures for the Interchange of Electronic Documents: Selected Papers and Results 8/01/1993 Status: Final	Final	8/01/1993
IR	5234	Report of the NIST Workshop on Digital Signature Certificate Management, December 10-11, 1992 IR 5234 (Final) Report of the NIST Workshop on Digital Signature Certificate Management, December 10-11, 1992 10/01/1993 Status: Final	Final	10/01/1993
IR	5232	Report of the NSF/NIST Workshop on NSFNET/NREN Security, July 6-7, 1992 IR 5232 (Final) Report of the NSF/NIST Workshop on NSFNET/NREN Security, July 6-7, 1992 5/01/1993 Status: Final	Final	5/01/1993
IR	5153	Minimum Security Requirements for Multi-User Operating Systems IR 5153 (Final) Minimum Security Requirements for Multi-User Operating Systems 3/01/1993 Status: Final	Final	3/01/1993
IR	4983	A Study of OSI Key Management IR 4983 (Final) A Study of OSI Key Management 11/01/1992 Status: Final	Final	11/01/1992
IR	4976	Assessing Federal and Commercial Information Security Needs IR 4976 (Final) Assessing Federal and Commercial Information Security Needs 11/01/1992 Status: Final	Final	11/01/1992
IR	4939	Threat Assessment of Malicious Code and External Attacks IR 4939 (Final) Threat Assessment of Malicious Code and External Attacks 10/01/1992 Status: Final	Final	10/01/1992
IR	4934	Protocol Implementation Conformance Statement (PICS) Proforma for the SDNS Security Protocol at Layer 4 (SP4) IR 4934 (Final) Protocol Implementation Conformance Statement (PICS) Proforma for the SDNS Security Protocol at Layer 4 (SP4) 10/01/1992 Status: Final	Final	10/01/1992
IR	4933	Computer Security Bulletin Board System: User's Guide IR 4933 (Final) Computer Security Bulletin Board System: User's Guide 9/01/1992 Status: Final	Final	9/01/1992
IR	4846	Computer Security Training & Awareness Course Compendium IR 4846 (Final) Computer Security Training & Awareness Course Compendium 5/01/1992 Status: Final	Final	5/01/1992
IR	4816	PBX Administrator’s Security Standards IR 4816 (Final) PBX Administrator’s Security Standards 4/01/1992 Status: Final	Final	4/01/1992
IR	4792	A Formal Description of the SDNS Security Protocol at Layer 4 (SP4) IR 4792 (Final) A Formal Description of the SDNS Security Protocol at Layer 4 (SP4) 3/01/1992 Status: Final	Final	3/01/1992
IR	4781	Privacy Protection in the United States: A 1991 Survey of Laws and Regulations Affecting Privacy in the Public and Private Sector Including a List of All Relevant Officials IR 4781 (Final) Privacy Protection in the United States: A 1991 Survey of Laws and Regulations Affecting Privacy in the Public and Private Sector Including a List of All Relevant Officials 2/01/1992 Status: Final	Final	2/01/1992
IR	4774	A Review of U.S. and European Security Evaluation Criteria IR 4774 (Final) A Review of U.S. and European Security Evaluation Criteria 3/01/1992 Status: Final	Final	3/01/1992
IR	4749	Sample Statement of Work for Federal Computer Security Services: For use In-House or Contracting Out IR 4749 (Final) Sample Statement of Work for Federal Computer Security Services: For use In-House or Contracting Out 12/01/1991 Status: Final	Final	12/01/1991
IR	4734	Foundations of a Security Policy for Use of the National Research and Educational Network IR 4734 (Final) Foundations of a Security Policy for Use of the National Research and Educational Network 2/01/1992 Status: Final	Final	2/01/1992
IR	4659	Glossary of Computer Security Terminology IR 4659 (Final) Glossary of Computer Security Terminology 9/01/1991 Status: Final	Final	9/01/1991
IR	4614	Standard Security Label for GOSIP: an Invitational Workshop IR 4614 (Final) Standard Security Label for GOSIP: an Invitational Workshop 6/01/1991 Status: Final	Final	6/01/1991
IR	4545	Computer Security: Selected Articles IR 4545 (Final) Computer Security: Selected Articles 4/01/1991 Status: Final	Final	4/01/1991
IR	4518	National Aeronautics and Space Administration's (NASA) Automated Information Security Handbook IR 4518 (Final) National Aeronautics and Space Administration's (NASA) Automated Information Security Handbook 3/01/1991 Status: Final	Final	3/01/1991
IR	4453	SRI International: Improving the Security of Your UNIX System IR 4453 (Final) SRI International: Improving the Security of Your UNIX System 11/01/1990 Status: Final	Final	11/01/1990
IR	4451	U.S. Department of Commerce: Methodology for Certifying Sensitive Computer Applications IR 4451 (Final) U.S. Department of Commerce: Methodology for Certifying Sensitive Computer Applications 11/01/1990 Status: Final	Final	11/01/1990
IR	4409	1989 Computer Security and Privacy Plans (CSPP) Review Project: A First-Year Federal Response to the Computer Security Act of 1987 (Final Report) IR 4409 (Final) 1989 Computer Security and Privacy Plans (CSPP) Review Project: A First-Year Federal Response to the Computer Security Act of 1987 (Final Report) 9/01/1990 Status: Final	Final	9/01/1990
IR	4387	U.S. Department of Justice Simplified Risk Analysis Guidelines IR 4387 (Final) U.S. Department of Justice Simplified Risk Analysis Guidelines 8/01/1990 Status: Final	Final	8/01/1990
IR	4378	Automated Information System Security Accreditation Guidelines IR 4378 (Final) Automated Information System Security Accreditation Guidelines 8/01/1990 Status: Final	Final	8/01/1990
IR	4362	Security Labels for Open Systems: an Invitational Workshop IR 4362 (Final) Security Labels for Open Systems: an Invitational Workshop 6/01/1990 Status: Final	Final	6/01/1990
IR	4359	Domestic Disaster Recovery Plan for PCs, OIS, and Small VS systems IR 4359 (Final) Domestic Disaster Recovery Plan for PCs, OIS, and Small VS systems 8/01/1990 Status: Final	Final	8/01/1990
IR	4325	U.S. Department of Energy Risk Assessment Methodology IR 4325 (Final) U.S. Department of Energy Risk Assessment Methodology 5/01/1990 Status: Final	Final	5/01/1990
IR	4267	A Conformance Test for FDDI Medium Access Control (MAC) IR 4267 (Final) A Conformance Test for FDDI Medium Access Control (MAC) 7/01/1990 Status: Final	Final	7/01/1990
IR	4262	Secure Data Network Systems (SDNS) Key Management Documents IR 4262 (Final) Secure Data Network Systems (SDNS) Key Management Documents 2/01/1990 Status: Final	Final	2/01/1990
IR	4259	Secure Data Network Systems (SDNS) Access Control Documents IR 4259 (Final) Secure Data Network Systems (SDNS) Access Control Documents 2/01/1990 Status: Final	Final	2/01/1990
IR	4250	Secure Data Network Systems (SDNS) Network, Transport, and Message Security Protocols IR 4250 (Final) Secure Data Network Systems (SDNS) Network, Transport, and Message Security Protocols 2/01/1990 Status: Final	Final	2/01/1990
IR	4228	Prototyping SP4: a Secure Data Network System Transport Protocol Interoperability Demonstration Project IR 4228 (Final) Prototyping SP4: a Secure Data Network System Transport Protocol Interoperability Demonstration Project 1/01/1990 Status: Final	Final	1/01/1990
IR	1291	Report of the Workshop on Cryptography in Support of Computer Security IR 1291 (Final) Report of the Workshop on Cryptography in Support of Computer Security 9/01/1977 Status: Final	Final	9/01/1977
IR	1189	Report of the Workshop on Estimation of Significant Advances in Computer Technology IR 1189 (Final) Report of the Workshop on Estimation of Significant Advances in Computer Technology 12/01/1976 Status: Final	Final	12/01/1976
IR	985	A Computer Model to Determine Low Cost Techniques to Comply with the Privacy Act of 1974 IR 985 (Final) A Computer Model to Determine Low Cost Techniques to Comply with the Privacy Act of 1974 2/01/1976 Status: Final	Final	2/01/1976
IR	909	Index of Automated System Design Requirements as Derived from the OMB Privacy Act Implementation Guidelines IR 909 (Final) Index of Automated System Design Requirements as Derived from the OMB Privacy Act Implementation Guidelines 10/01/1975 Status: Final	Final	10/01/1975

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs