2017
NIST/ITL Cybersecurity Program: Annual Report (NIST Special Publication 800-203)
Title III of the E-Government Act of 2002, entitled the
Federal Information Security Management Act (FISMA) of 2002, requires NIST to
prepare an annual public report on activities undertaken in the previous year,
and planned for the coming year, to carry out responsibilities under this law.
The primary goal of the NIST s Information Technology Laboratory (ITL)
Cybersecurity Program, is to provide standards and technology that protects
information systems against threats to the confidentiality, integrity, and
availability of information and services. During Fiscal Year 2017 (FY2017), ITL
Cybersecurity Program successfully responded to numerous challenges and
opportunities in fulfilling that mission. Through ITL's diverse research agenda
and engagement in many national priority initiatives, high-quality,
cost-effective security and privacy mechanisms were developed and applied that
improved information security across the Federal Government and the greater
information security community. This annual report highlights the research
agenda and activities in which ITL Cybersecurity Program was engaged during FY
2017.
Blockchain Technology Overview (NISTIR
8202)
Blockchains are tamper evident and tamper resistant
digital ledgers implemented in a distributed fashion (i.e., without a central
repository) and usually without a central authority (i.e., a bank, company, or
government). At their basic level, they enable a community of users to record
transactions in a shared ledger within that community, such that under normal
operation of the blockchain network no transaction can be changed once
published. This document provides a high-level technical overview of blockchain
technology. It discusses its application to cryptocurrency in depth, but also
shows its broader applications. The purpose is to help readers understand how
blockchain technology works, so that they can be applied to technology
problems.
Iris
Camera Selection Guidance (NIST Technical Note 2018)
This paper is a summary of our current recommendations
for iris camera selection. NIST is developing these recommendations in
collaboration with the FBI, other US Government entities with interests in the
use of iris recognition technology, and the larger iris recognition community.
It is intended to give brief, practical guidance to persons planning to purchase
iris recognition cameras, particularly for use in law enforcement activities.
It is also intended as a basis for an ongoing discussion on camera selection
that began at the Iris Expert Group meeting in June 2018. The primary focus of
these recommendations is compliance with standards and processes that enable
interchange of data between government entities, as permitted by regulation and
policy, and that enable cost effective improvements as technology advances.
IT
Asset Management (NIST Special Publication 1800-5)
While a physical asset management system can tell you the
location of a computer, it cannot answer questions like, “What operating
systems are our laptops running?” and “Which devices are vulnerable to the
latest threat?” An effective IT asset management (ITAM) solution can tie
together physical and virtual assets and provide management with a complete
picture of what, where, and how assets are being used. ITAM enhances visibility
for security analysts, which leads to better asset utilization and security.
|
