RateIt - National Book Network

National Book Network

product_img5

National Institute of Standards and Technology

Automation Support for Security Control Assessments Vol 1: NISTIR 8011 Volume 1: Overview

NISTIR 8011 Volume 1 - Overview Released JUNE 2017 This volume introduces concepts to support automated assessment of most of the security controls in NIST Special Publication (SP) 800-53. Referencing SP 800-53A, the controls are divided into more granular parts (determination statements) to be a...

product_img5

National Institute of Standards and Technology

NIST Cloud Computing Forensic Science Challenges: NISTIR 8006 Draft

NISTIR 8006 Draft June 2014 This document summarizes the research performed by the members of the NIST Cloud Computing Forensic Science Working Group, and aggregates, categorizes and discusses the forensics challenges faced by experts when responding to incidents that have occurred in a cloud-comp...

product_img5

National Institute of Standards and Technology

Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: NiST Special Publication 800-178

NIST SP 800-178 October 2016 Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) are very different attribute based access control (ABAC) standards with similar goals and objectives. An objective of both is to provide a standardized way for expressing and en...

product_img5

National Institute of Standards and Technology

Fog Computing Conceptual Model: NiST SP 500-325 & 500-291

Printed in COLOR Contains NIST SP 500-325 and NIST SP 500-291 Managing the data generated by Internet of Things (IoT) sensors and actuators is one of the biggest challenges faced when deploying an IoT system. Traditional cloud-based IoT systems are challenged by the large scale, heterogeneity, ...

product_img5

National Institute of Standards and Technology

NIST SP 800-163 Vetting the Security of Mobile Applications: NiST SP 800-163

NIST SP 800-163 Revision 1, April 2019 The purpose of this document is to help organizations (1) understand the process for vetting the security of mobile applications, (2) plan for the implementation of an app vetting process, (3) develop app security requirements, (4) understand the types of app ...

product_img5

National Institute of Standards and Technology

NIST SP 800-146 Cloud Computing Synopsis and Recommendations: NiST SP 800-146

NIST SP 800-146 May 2012 Printed in COLOR This document reprises the NIST-established definition of cloud computing, describes cloud computing benefits and open issues, presents an overview of major classes of cloud technology, and provides guidelines and recommendations on how organizations sh...

product_img5

National Institute of Standards and Technology

NIST SP 800-156 Representation of PIV Chain-of-Trust for Import and Export: Nist sp 800-156

NIST SP 800-156 Printed in COLOR This document provides a common XML-based data representation of a chain-of-trust record to facilitate the exchange of Personal Identity Verification (PIV) Card enrollment data. The exchanged record is the basis to personalize a PIV Card for a transferred employ...

product_img5

National Institute of Standards and Technology

Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities: NiST SP 800-84

NIST SP 800-84 September 2006 This document provides guidance on designing, developing, conducting, and evaluating TT&E events so that organizations can improve their ability to prepare for, respond to, manage, and recover from adverse events that may affect their missions. The scope of this docum...

product_img5

National Institute of Standards and Technology

NIST SP 800-83 R1 - Guide to Malware Incident Prevention and Handling for Deskto: Nist SP 800-83 R1

NIST SP 800-83 July 2013 Malware, also known as malicious code, refers to a program that is covertly inserted into another program with the intent to destroy data, run destructive or intrusive programs, or otherwise compromise the confidentiality, integrity, or availability of the victim’s data,...

product_img5

National Institute of Standards and Technology

NIST SP 800-35 Guide to Information Technology Security Services: NiST SP 800-35

NIST SP 800-35 October 2003 Printed in COLOR The Guide to Information Technology Security Services, Special Publication 800-35, provides assistance with the selection, implementation, and management of IT security services by guiding organizations through the various phases of the IT security se...

product_img5

National Institute of Standards and Technology

Implementation Guidance for FIPS 140-2: Cryptographic Module Validation Program (CMVP)

Last Update: September 11, 2017; Initial Release: March 28, 2003 The Cryptographic Module Validation Program (CMVP) validates the test results of National Voluntary Laboratory Accreditation Program (NVLAP) accredited Cryptographic and Security Testing (CST) Laboratories which test cryptographic mo...

product_img5

National Institute of Standards

NIST SP 800-95 Guide to Secure Web Services: August 2007

NIST SP 800-95 Printed in COLOR Web services based on the eXtensible Markup Language (XML), SOAP, and related open standards, and deployed in Service Oriented Architectures (SOA) allow data and applications to interact without human intervention through dynamic and ad hoc connections. Web servi...

product_img5

National Institute of Standards and Technology

NIST SP 800-123 Guide to General Server Security: NiST SP 800-123

NIST SP 800-123 July 2008 An organization’s servers provide a wide variety of services to internal and external users, and many servers also store or process sensitive information for the organization. Some of the most common types of servers are Web, email, database, infrastructure management, ...

product_img5

National Institute of Standards and Technology

Security Content Automation Protocol (SCAP) V 1.3 Validation Program: NiSTIR 7511 R5

NISTIR 7511 Rev 5 released May 2018 This report defines the requirements and associated test procedures necessary for products or modules to achieve one or more Security Content Automation Protocol (SCAP) validations. Validation is awarded based on a defined set of SCAP capabilities by independent...

product_img5

National Institute of Standards and Technology

Guidelines for Derived Personal Identity Verification (PIV) Credentials: NiST SP 800-157

NIST SP 800-157 December 2014 Printed in COLOR This recommendation provides technical guidelines for the implementation of standards-based, secure, reliable, interoperable public key infrastructure (PKI) based identity credentials that are issued by Federal departments and agencies to individua...

product_img5

National Institute of Standards and Technology

NIST SP 800-128 Guide for Security-Focused Configuration Management of Informati: Recomendations

NIST SP 800-128 August 2011 An information system is typically in a constant state of change in response to new, enhanced, corrected, or updated hardware and software capabilities, patches for correcting software flaws and other errors to existing components, new security threats, changing busines...

product_img5

National Institute of Standards and Technology

NIST SP 800-76-2 Biometric Specifications for Personal Identity Verification: NiST SP 800-76-2

NIST SP 800-76-2 This document, Special Publication 800-76 (SP 800-76), is a companion document to FIPS 201. It describes technical acquisition and formatting specifications for the PIV system, including the PIV Card itself. It also establishes minimum accuracy specifications for deployed biometr...

product_img5

National Institute of Standards and Technology

NIST SP 800-130 Framework for Designing Cryptographic Key Management Systems: NIST SP 800-130 Aug 2013

This Framework for Designing Cryptographic Key Management Systems (CKMS) contains topics that should be considered by a CKMS designer when developing a CKMS design specification. For each topic, there are one or more documentation requirements that need to be addressed by the design specification. T...

product_img5

National Institute of Standards and Technology

NIST SP 800-90C Recommendation for Random Bit Generator (RBG) Constructions: 2nd Draft

NIST SP 800-90C April 2016 2nd Draft Printed in COLOR This Recommendation specifies constructions for the implementation of random bit generators (RBGs). An RBG may be a deterministic random bit generator (DRBG) or a non-deterministic random bit generator (NRBG). The constructed RBGs consist o...

product_img5

National Institute of Standards and Technology

Challenging Security Requirements for US Government Cloud Computing Adoption: NIST Cloud Computing Program

November 2012 The NIST Cloud Computing Security Working group was created to achieve broad collaboration between federal and private stakeholders in efforts to review the security-related issues expressed by federal managers. Through its research, the working group identified a list of challenging...

21
22