NIST Computer Security Publications – NIST Special Publications (SPs)


 Herman Rensink Datacenter - / Cloud Architect /CISSP (Associate Member ISC2)

The National Institute of Standards and Technology (NIST) is a measurement standards laboratory, and a non-regulatory agency of the United States Department of Commerce. Its mission is to promote innovation and industrial competitiveness. It is ONE of the many sources on the Internet. NIST’s activities are organised into laboratory programs that include many areas of science and technology. A perfect source to drill down into are the security related topics. Of course you find all the publications on the NIST website (source):  NIST Computer Security Publications – NIST Special Publications (SPs).

ckasteel
Cloud security

I copied the titles of the “NIST’s SP 800 series of computer security publications to this website because  I arranged the publications in a way that you can quickly find the security topic you are interested in.

Number Date Title
SP 800-188 1-8-2016

Identifying Government Datasets

SP 800-185 1-8-2016 DRAFT SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash
SP 800-184 June 2016 DRAFT Guide for Cybersecurity Event Recovery
SP 800-183 July 2016 Networks of ‘Things’
SP 800-182 July 2016 Computer Security Division 2015 Annual Report
SP 800-180 February 2016 DRAFT NIST Definition of Microservices, Application Containers and System Virtual Machines
SP 800-179 June 2016 DRAFT Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist
SP 800-178 1-12-2015 DRAFT A Comparison of Attribute Based Access Control (ABAC) Standards for Data Services: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC)
SP 800-177 March 2016 DRAFT Trustworthy Email
SP 800-176 1-8-2015 Computer Security Division 2014 Annual Report
SP 800-175A 1-8-2016 Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies
SP 800-175B 1-8-2016 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms
SP 800-171 Rev. 1 1-8-2016 DRAFT Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations
SP 800-171 June 2015 (Updated 1/14/2016) Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations
SP 800-170 June 2014 Computer Security Division 2013 Annual Report
SP 800-168 May 2014 Approximate Matching: Definition and Terminology
SP 800-167 October 2015 Guide to Application Whitelisting
SP 800-166 June 2016 Derived PIV Application and Data Model Test Guidelines
SP 800-165 July 2013 Computer Security Division 2012 Annual Report
SP 800-164 October 2012 DRAFT Guidelines on Hardware-Rooted Security in Mobile Devices
SP 800-163 January 2015 Vetting the Security of Mobile Applications
SP 800-162 January 2014 Guide to Attribute Based Access Control (ABAC) Definition and Considerations
SP 800-161 1-4-2015 Supply Chain Risk Management Practices for Federal Information Systems and Organizations
SP 800-160 May 2016 DRAFT Systems Security Engineering Guideline: An Integrated Approach to Building Trustworthy Resilient Systems
SP 800-157 1-12-2014 Guidelines for Derived Personal Identity Verification (PIV) Credentials
SP 800-156 May 2016 Representation of PIV Chain-of-Trust for Import and Export
SP 800-155 1-12-2011 DRAFT BIOS Integrity Measurement Guidelines
SP 800-154 March 2016 DRAFT Guide to Data-Centric System Threat Modeling
SP 800-153 February 2012 Guidelines for Securing Wireless Local Area Networks (WLANs)
SP 800-152 October 2015 A Profile for U. S. Federal Cryptographic Key Management Systems (CKMS)
SP 800-150 1-4-2016 DRAFT Guide to Cyber Threat Information Sharing
SP 800-147B 1-8-2014 BIOS Protection Guidelines for Servers
SP 800-147 1-4-2011 BIOS Protection Guidelines
SP 800-146 May 2012 Cloud Computing Synopsis and Recommendations
SP 800-145 1-9-2011 The NIST Definition of Cloud Computing
SP 800-144 1-12-2011 Guidelines on Security and Privacy in Public Cloud Computing
SP 800-142 October 2010 Practical Combinatorial Testing
SP 800-137 1-9-2011 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations
SP 800-135 Rev. 1 1-12-2011 Recommendation for Existing Application-Specific Key Derivation Functions
SP 800-133 1-12-2012 Recommendation for Cryptographic Key Generation
SP 800-132 1-12-2010 Recommendation for Password-Based Key Derivation: Part 1: Storage Applications
SP 800-131A Rev. 1 1-11-2015 Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths
SP 800-130 1-8-2013 A Framework for Designing Cryptographic Key Management Systems
SP 800-128 1-8-2011 Guide for Security-Focused Configuration Management of Information Systems
SP 800-127 1-9-2010 Guide to Securing WiMAX Wireless Communications
SP 800-126A July 2016 DRAFT SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3
SP 800-126 Rev. 3 July 2016 DRAFT The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3
SP 800-126 Rev. 2 September 2011 (Updated 3/19/2012) The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2
SP 800-126 Rev. 1 February 2011 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1
SP 800-126 1-11-2009 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.0
SP 800-125A October 20, 2014 DRAFT Security Recommendations for Hypervisor Deployment
SP 800-125B March 2016 Secure Virtual Network Configuration for Virtual Machine (VM) Protection
SP 800-125 January 2011 Guide to Security for Full Virtualization Technologies
SP 800-124 Rev. 1 June 2013 Guidelines for Managing the Security of Mobile Devices in the Enterprise
SP 800-123 July 2008 Guide to General Server Security
SP 800-122 1-4-2010 Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)
SP 800-121 Rev. 1 June 2012 Guide to Bluetooth Security
SP 800-120 1-9-2009 Recommendation for EAP Methods Used in Wireless Network Access Authentication
SP 800-119 1-12-2010 Guidelines for the Secure Deployment of IPv6
SP 800-117 Rev. 1 January 2012 DRAFT Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2
SP 800-117 July 2010 Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.0
SP 800-116 Rev. 1 1-12-2015 DRAFT A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS)
SP 800-116 1-11-2008 A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS)
SP 800-115 1-9-2008 Technical Guide to Information Security Testing and Assessment
SP 800-114 Rev. 1 July 2016 User’s Guide to Telework and Bring Your Own Device (BYOD) Security
SP 800-113 July 2008 Guide to SSL VPNs
SP 800-111 1-11-2007 Guide to Storage Encryption Technologies for End User Devices
SP 800-108 October 2009 Recommendation for Key Derivation Using Pseudorandom Functions (Revised)
SP 800-107 Rev. 1 1-8-2012 Recommendation for Applications Using Approved Hash Algorithms
SP 800-106 February 2009 Randomized Hashing for Digital Signatures
SP 800-102 1-9-2009 Recommendation for Digital Signature Timeliness
SP 800-101 Rev. 1 May 2014 Guidelines on Mobile Device Forensics
SP 800-100 October 2006 (Updated 3/7/2007) Information Security Handbook: A Guide for Managers
SP 800-98 1-4-2007 Guidelines for Securing Radio Frequency Identification (RFID) Systems
SP 800-97 February 2007 Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i
SP 800-96 1-9-2006 PIV Card to Reader Interoperability Guidelines
SP 800-95 1-8-2007 Guide to Secure Web Services
SP 800-94 Rev. 1 July 2012 DRAFT Guide to Intrusion Detection and Prevention Systems (IDPS)
SP 800-94 February 2007 Guide to Intrusion Detection and Prevention Systems (IDPS)
SP 800-92 1-9-2006 Guide to Computer Security Log Management
SP 800-90A Rev. 1 June 2015 Recommendation for Random Number Generation Using Deterministic Random Bit Generators
SP 800-90B January 2016 DRAFT Recommendation for the Entropy Sources Used for Random Bit Generation
SP 800-90C 1-4-2016 DRAFT Recommendation for Random Bit Generator (RBG) Constructions
SP 800-89 1-11-2006 Recommendation for Obtaining Assurances for Digital Signature Applications
SP 800-88 Rev. 1 1-12-2014 Guidelines for Media Sanitization
SP 800-87 Rev. 1 1-4-2008 Codes for Identification of Federal and Federally-Assisted Organizations
SP 800-86 1-8-2006 Guide to Integrating Forensic Techniques into Incident Response
SP 800-85A-4 1-4-2016 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance)
SP 800-85B-4 1-8-2014 DRAFT PIV Data Model Test Guidelines
SP 800-85B July 2006 PIV Data Model Test Guidelines
SP 800-84 1-9-2006 Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities
SP 800-83 Rev. 1 July 2013 Guide to Malware Incident Prevention and Handling for Desktops and Laptops
SP 800-82 Rev. 2 May 2015 Guide to Industrial Control Systems (ICS) Security
SP 800-81-2 1-9-2013 Secure Domain Name System (DNS) Deployment Guide
SP 800-79-2 July 2015 Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI)
SP 800-78-4 May 2015 Cryptographic Algorithms and Key Sizes for Personal Identity Verification
SP 800-77 1-12-2005 Guide to IPsec VPNs
SP 800-76-2 July 2013 Biometric Specifications for Personal Identity Verification
SP 800-73-4 May 2015 (Updated 2/8/2016) Interfaces for Personal Identity Verification
SP 800-72 1-11-2004 Guidelines on PDA Forensics
SP 800-70 Rev. 3 1-12-2015 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers
SP 800-69 1-9-2006 Guidance for Securing Microsoft Windows XP Home Edition: A NIST Security Configuration Checklist
SP 800-68 Rev. 1 October 2008 Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist
SP 800-67 Rev. 1 January 2012 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher
SP 800-66 Rev. 1 October 2008 An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule
SP 800-65 January 2005 Integrating IT Security into the Capital Planning and Investment Control Process
SP 800-64 Rev. 2 October 2008 Security Considerations in the System Development Life Cycle
SP 800-63-3 May 8, 2016 DRAFT PRE-DRAFT: Digital Authentication Guideline (Public Preview)
SP 800-63-2 1-8-2013 Electronic Authentication Guideline
SP 800-61 Rev. 2 1-8-2012 Computer Security Incident Handling Guide
SP 800-60 Vol. 2 Rev. 1 1-8-2008 Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices
SP 800-60 Vol. 1 Rev. 1 1-8-2008 Guide for Mapping Types of Information and Information Systems to Security Categories
SP 800-59 1-8-2003 Guideline for Identifying an Information System as a National Security System
SP 800-58 January 2005 Security Considerations for Voice Over IP Systems
SP 800-57 Part 1 Rev. 4 January 2016 Recommendation for Key Management, Part 1: General
SP 800-57 Part 2 1-8-2005 Recommendation for Key Management, Part 2: Best Practices for Key Management Organization
SP 800-57 Part 3 Rev. 1 January 2015 Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance
SP 800-56A Rev. 2 May 2013 Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography
SP 800-56B Rev. 1 1-9-2014 Recommendation for Pair-Wise Key-Establishment Schemes Using Integer Factorization Cryptography
SP 800-56C 1-11-2011 Recommendation for Key Derivation through Extraction-then-Expansion
SP 800-55 Rev. 1 July 2008 Performance Measurement Guide for Information Security
SP 800-54 July 2007 Border Gateway Protocol Security
SP 800-53A Rev. 4 December 2014 (Updated 12/18/2014) Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans
SP 800-53 Rev. 5 February 23, 2016 DRAFT PRE-DRAFT Call for Comments: Security and Privacy Controls for Federal Information Systems and Organizations
SP 800-53 Rev. 4 April 2013 (Updated 1/22/2015) Security and Privacy Controls for Federal Information Systems and Organizations
SP 800-52 Rev. 1 1-4-2014 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations
SP 800-51 Rev. 1 February 2011 Guide to Using Vulnerability Naming Schemes
SP 800-50 October 2003 Building an Information Technology Security Awareness and Training Program
SP 800-49 1-11-2002 Federal S/MIME V3 Client Profile
SP 800-48 Rev. 1 July 2008 Guide to Securing Legacy IEEE 802.11 Wireless Networks
SP 800-47 1-8-2002 Security Guide for Interconnecting Information Technology Systems
SP 800-46 Rev. 2 July 2016 Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security
SP 800-45 Version 2 February 2007 Guidelines on Electronic Mail Security
SP 800-44 Version 2 1-9-2007 Guidelines on Securing Public Web Servers
SP 800-43 1-11-2002 Systems Administration Guidance for Securing Windows 2000 Professional System
SP 800-41 Rev. 1 1-9-2009 Guidelines on Firewalls and Firewall Policy
SP 800-40 Rev. 3 July 2013 Guide to Enterprise Patch Management Technologies
SP 800-39 March 2011 Managing Information Security Risk: Organization, Mission, and Information System View
SP 800-38A Addendum October 2010 Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode
SP 800-38A 1-12-2001 Recommendation for Block Cipher Modes of Operation: Methods and Techniques
SP 800-38B May 2005 Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication
SP 800-38C May 2004 (Updated 7/20/2007) Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality
SP 800-38D 1-11-2007 Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC
SP 800-38E January 2010 Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices
SP 800-38F 1-12-2012 Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping
SP 800-38G March 2016 Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption
SP 800-37 Rev. 1 February 2010 (Updated 6/5/2014) Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach
SP 800-36 October 2003 Guide to Selecting Information Technology Security Products
SP 800-35 October 2003 Guide to Information Technology Security Services
SP 800-34 Rev. 1 May 2010 (Updated 11/11/2010) Contingency Planning Guide for Federal Information Systems
SP 800-33 1-12-2001 Underlying Technical Models for Information Technology Security
SP 800-32 February 26, 2001 Introduction to Public Key Technology and the Federal PKI Infrastructure
SP 800-30 Rev. 1 1-9-2012 Guide for Conducting Risk Assessments
SP 800-29 June 2001 A Comparison of the Security Requirements for Cryptographic Modules in FIPS 140-1 and FIPS 140-2
SP 800-28 Version 2 March 2008 Guidelines on Active Content and Mobile Code
SP 800-27 Rev. A June 2004 Engineering Principles for Information Technology Security (A Baseline for Achieving Security), Revision A
SP 800-25 October 2000 Federal Agency Use of Public Key Technology for Digital Signatures and Authentication
SP 800-24 1-4-2001 PBX Vulnerability Analysis: Finding Holes in Your PBX Before Someone Else Does
SP 800-23 1-8-2000 Guidelines to Federal Organizations on Security Assurance and Acquisition/Use of Tested/Evaluated Products
SP 800-22 Rev. 1a 1-4-2010 A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications
SP 800-20 October 1999 (Updated 3/1/2012) Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures
SP 800-19 October 1999 Mobile Agent Security
SP 800-18 Rev. 1 February 2006 Guide for Developing Security Plans for Federal Information Systems
SP 800-17 February 1998 Modes of Operation Validation System (MOVS): Requirements and Procedures
SP 800-16 Rev. 1 March 2014 DRAFT A Role-Based Model for Federal Information Technology/Cybersecurity Training
SP 800-16 1-4-1998 Information Technology Security Training Requirements: a Role- and Performance-Based Model
SP 800-15 January 1998 MISPC Minimum Interoperability Specification for PKI Components, Version 1
SP 800-14 1-9-1996 Generally Accepted Principles and Practices for Securing Information Technology Systems
SP 800-13 October 1995 Telecommunications Security Guidelines for Telecommunications Management Network
SP 800-12 October 1995 An Introduction to Computer Security: the NIST Handbook
SP 800-1 1-12-1990 Bibliography of Selected Computer Security Publications, January 1980 – October 1989
SP 1800s – NIST Cybersecurity Practice Guides
SP 1800-5 October 2015 DRAFT IT Asset Management: Financial Services
SP 1800-4 1-11-2015 DRAFT Mobile Device Security: Cloud and Hybrid Builds
SP 1800-3 1-9-2015 DRAFT Attribute Based Access Control
SP 1800-2 1-8-2015 DRAFT Identity and Access Management for Electric Utilities
SP 1800-1 July 2015 DRAFT Securing Electronic Health Records on Mobile Devices
SP 500s – Computer Systems Technology
SP 500-304 June 2015 Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information
SP 500-299 May 2013 DRAFT NIST Cloud Computing Security Reference Architecture

 

 

Advertisements

One thought on “NIST Computer Security Publications – NIST Special Publications (SPs)

Comments are closed.