Ekim 2018 – Ferhat Çiçek

National Institute of Standards and Technology (NIST) Computer Security Resource Center (CSRC) Book

Series	Title	Status	Release Date
Book Section	The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form Download: Book Section (DOI); Preprint	Final	6/27/2018
Book	Attribute Based Access Control Download: Attribute Based Access Control	Final	10/01/2017
Book Section	Managing Risk in the Cloud Download: Book Section (DOI); Preprint	Final	9/09/2016
Book Section	Cloud Computing Security Essentials and Architecture Download: Book Section (DOI); Preprint	Final	9/09/2016
Book Section	Combinatorial Testing: Theory and Practice Download: Book Section (DOI); Preprint	Final	7/29/2015
Encyclopedia Entry	Conformance Testing Methodologies for Biometric Data Interchange Formats, Standardization of Download: Encyclopedia Entry (DOI); Preprint	Final	7/03/2015
Encyclopedia Entry	Common Biometric Exchange Formats Framework Standardization Download: Encyclopedia Entry (DOI); Preprint	Final	7/03/2015
Book Section	Metrics of Security Download: Book Section (DOI); Preprint	Final	10/03/2014
Book	Introduction to Combinatorial Testing Download: Book (CRC Press); Preface; Appendix A: Mathematics Review; and Appendix B: Empirical Data on Software Failures (Preprint); Chapter 1: Combinatorial Methods in Testing (Preprint); Chapter 2: Combinatorial Testing Applied (Preprint); Chapter 7: Measuring Combinatorial Coverage (Preprint); Chapter 14: Evolution from Design of Experiments (Preprint)	Final	6/20/2013
Book	Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP (1st) Download: None available	Final	7/24/2012
Encyclopedia Entry	Combinatorial Testing Download: Encyclopedia Entry; Preprint	Final	6/25/2012
Encyclopedia Entry	Biometric Technologies and Security – International Biometric Standards Development Activities Download: Encyclopedia Entry (DOI)	Final	1/01/2011
Book Section	Intrusion Detection and Prevention Systems Download: Book Section (DOI); Chapter 9 (preprint)	Final	10/22/2010
Book Section	Attacking Paper-Based E2E Voting Systems Download: Book Section (DOI); Chapter (preprint)	Final	2/01/2010
Book Section	Security and Privacy Issues in Agent-Based Location-Aware Mobile Commerce Download: Book Section (DOI)	Final	8/12/2009
Book Section	Cyber Security Standards Download: Handbook (Wiley); Cyber Security Standards (Preprint)	Final	6/15/2009
Encyclopedia Entry	Common Biometric Exchange Formats Framework Standardization Download: Encyclopedia Entry (DOI)	Final	2/13/2009
Book Section	Assurance for Identity Enabled Authorization Policies Download: Chapter 13 (Preprint)	Final	12/19/2008
Book Section	Identity Enabled Privacy Policies Download: Chapter 8 (Preprint)	Final	12/19/2008
Encyclopedia Entry	Electronic Voting Download: Encyclopedia Entry	Final	10/07/2008
Book	Role-Based Access Control (2nd ed.) Download: Role-Based Access Control, 2nd ed.	Final	1/31/2007
Book	Role-Based Access Control (1st ed.) Download: Book Review from “Linux Journal” (Oct. 24, 2003); Book Review from “Cipher” (June 5, 2003)	Final	1/01/2003
Book Section	A Framework for Computer Security Risk Management Download: None available	Final	1/01/1991

National Institute of Standards and Technology (NIST) Computer Security Resource Center (CSRC) White Paper

Series	Title	Status	Release Date
White Paper	Internet of Things (IoT) Trust Concerns Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
White Paper	Transitioning to the Security Content Automation Protocol (SCAP) Version 2 Download: White Paper (DOI); Transitioning to SCAP v2	Final	9/10/2018
White Paper	The Economic Impacts of the Advanced Encryption Standard, 1996-2017 Download: White Paper (DOI); Final Report; Press Release (09-07-2018)	Final	9/07/2018
White Paper	A Data Structure for Integrity Protection with Erasure Capability Download: Block Matrix Draft	Draft	5/31/2018
White Paper	A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats Download: Final Report on Enhancing Resilience Against Botnets; NIST News Release	Final	5/30/2018
White Paper	A Report to the President on Supporting the Growth and Sustainment of the Nation’s Cybersecurity Workforce: Building the Foundation for a More Secure American Future Download: Final Report on Supporting the Nation’s Cybersecurity Workforce; NIST News Release; Workshop on Cybersecurity Workforce Development (Aug. 2017)	Final	5/30/2018
White Paper	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 Download: White Paper (DOI); Cybersecurity Framework v1.1; Press Release (04-16-2018); Cybersecurity Framework homepage	Final	4/16/2018
White Paper	[Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events Download: Project Description; Project homepage	Final	2/07/2018
White Paper	[Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events Download: Project Description; Project homepage	Final	2/07/2018
White Paper	Security Considerations for Code Signing Download: White Paper (DOI); Local Download	Final	1/26/2018
White Paper	[Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector Download: Project Description; Project Homepage	Final	1/23/2018
White Paper	[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry Download: Project Description; Submit Comments; Project homepage	Draft	1/16/2018
White Paper	[Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) Download: Project Description; Project Homepage	Final	12/14/2017
White Paper	[Project Description] TLS Server Certificate Management Download: Project Description; Project Homepage	Final	11/09/2017
White Paper	NSRL Kaspersky dataset documentation Download: Documentation; NSRL Curated Kaspersky Hash Set 2017; Related DHS Statement; NSRL	Final	10/23/2017
White Paper	[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector Download: Draft Project Description; Submit Comments; Project Homepage	Draft	10/12/2017
White Paper	[Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector Download: Project Description; Project Homepage	Final	9/13/2017
White Paper	[Project Description] Secure Inter-Domain Routing–Part 1: Route Hijacks Download: Project Description; Project Homepage	Final	7/06/2017
White Paper	Tightly Secure Short Signatures from Weak PRFs Download: Paper	Final	6/27/2017
White Paper	Graphical Methods in Device-Independent Quantum Cryptography Download: Paper	Final	5/25/2017
White Paper	Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization’s cybersecurity performance Download: Baldrige Cybersecurity Excellence Builder v1.0; BCEB Categories 1″“7 Questions and Notes Only; BCEB Self-Analysis Worksheet; Baldrige Cybersecurity Initiative Homepage (and FAQs)	Final	4/02/2017
White Paper	[Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems Download: Project Description; Project Homepage	Final	3/09/2017
White Paper	[Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders Download: Project Description (Final); Project Homepage	Final	11/28/2016
White Paper	[Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector Download: Project Description (Final); Project Homepage	Final	9/20/2016
White Paper	[Project Description] Authentication for Law Enforcement Vehicle Systems Download: Draft Project Description; Submit Comments; Project Homepage	Draft	9/13/2016
White Paper	[Concept Paper] Identity and Access Management for Smart Home Devices Download: Draft Concept Paper; Submit Comments; Project Homepage	Draft	6/06/2016
White Paper	User’s Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite Download: Paper; GitHub site	Final	5/12/2016
White Paper	[Project Description] Data Integrity: Recovering from a destructive malware attack Download: Project Description; Data Integrity homepage	Final	5/09/2016
White Paper	[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector Download: Draft Project Description; Submit Comments; Project Homepage	Draft	5/09/2016
White Paper	Best Practices for Privileged User PIV Authentication Download: White Paper (DOI); Local Download	Final	4/21/2016
White Paper	The Number of Boolean Functions with Multiplicative Complexity 2 Download: Paper	Final	10/27/2015
White Paper	Multiplicative Complexity of Vector Value Boolean Functions Download: Paper	Final	9/21/2015
White Paper	Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool Download: Report	Final	6/10/2015
White Paper	Analysis of VAES3 (FF2) Download: Paper	Final	4/02/2015
White Paper	User’s Guide to Running the Draft NIST SP 800-90B Section 9 Entropy Estimation Tests Download: None available	Final	3/10/2015
White Paper	Supplemental Guidance on Ongoing Authorization: Transitioning to Near Real-Time Risk Management Download: White Paper (DOI); Local Download	Final	6/03/2014
White Paper	NISTIR 7628 User’s Guide Download: None available	Final	2/26/2014
White Paper	Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations Download: White Paper (DOI); Local Download	Final	2/19/2014
White Paper	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 Download: White Paper (DOI); Local Download	Final	2/12/2014
White Paper	Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management, National Institute of Standards and Technology, October 15-16, 2012 Download: None available	Final	7/10/2013
White Paper	Summary of the Workshop on Cryptographic Key Management Systems (CKMS), National Institute of Standards and Technology, September 10-11, 2012 Download: None available	Final	1/10/2013
White Paper	Proof of Concept for an ICT SCRM Enterprise Assessment Package Download: Report	Final	12/01/2012
White Paper	Challenging Security Requirements for US Government Cloud Computing Adoption Download: Paper	Final	11/19/2012
White Paper	The Role of the National Institute of Standards and Technology in Mobile Security Download: The Role of NIST in Mobile Security	Final	8/23/2012
White Paper	Adaptive Preimage Resistance Analysis Revisited: Requirements, Subtleties and Implications Download: None available	Final	4/16/2012
White Paper	The ICT SCRM Community Framework Development Project: Final Report Download: Report	Final	12/01/2011
White Paper	A depth-16 circuit for the AES S-box Download: Paper	Final	6/17/2011
White Paper	Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice Download: Report	Final	4/01/2011
White Paper	Economic Analysis of Role-Based Access Control: Final Report Download: Final Report	Final	12/19/2010
White Paper	The Economic Impact of Role-Based Access Control Download: Report	Final	3/01/2002
White Paper	Report on the Second Modes of Operation Workshop Download: Report	Final	10/01/2001
White Paper	The Economic Impacts of NIST’s Data Encryption Standard (DES) Program Download: Report	Final	10/01/2001
White Paper	Report on the Symmetric Key Block Cipher Modes of Operation Workshop Download: Report	Final	12/01/2000
White Paper	Federal Information Technology Security Assessment Framework Download: Report	Final	11/28/2000
White Paper	Report of the Workshop on Key Management Using Public Key Cryptography Download: Report	Final	2/28/2000
White Paper	DoD Rainbow Series Download: None available	Final	12/26/1985

Experiments with MATLAB

alışveriş sitelerinde indirim yalanları

özel indirimler sunduğunu ileri süren siteler artık ömürlerini doldurdu. hala buralardan alışveriş yapanlar varmıdır ? Türkiye’nin ön popüler sitelerinden biri olan trendyolda arzuma ait bir ürün iki farklı kategori’de listeleniyor. bu ürün listelerde farklı fiyatlara satılıyor ve satış fiyatında 32 TL lik fark mevcut. bu nasıl bir saçmalık anlam vermeye uğraşmayıp %21 link indirim olduğuna inarak sipariş verirseniz çok daha indirim oranlarını kaçırabilirsiniz.

aynı ürün hepsiburadada %47 indirimle trendyoldan 13TL daha ucuza satılıyor. beyin zorlayan bu indirim yalanları farklı sitelerde de devam ediyor.

sonuç olarak internetten bir ürün alacaksan en az 10 yere bakmakta fayda var.

linuxde klasör altındaki en büyük boyutlu dosyaları bulmak

find . -printf ‘%s %p\n’| sort -nr | head -10

ile en büyük 10 dosya aranmış olur.

root@cicekpc:/boot# find . -printf '%s %p\n'| sort -nr | head -10
59562456 ./initrd.img-4.13.0-46-generic
59549708 ./initrd.img-4.13.0-45-generic
43531219 ./initrd.img-4.10.0-32-generic
7870224 ./vmlinuz-4.13.0-46-generic
7870224 ./vmlinuz-4.13.0-45-generic
7579408 ./vmlinuz-4.10.0-32-generic
3884611 ./System.map-4.13.0-46-generic
3884611 ./System.map-4.13.0-45-generic
3719197 ./System.map-4.10.0-32-generic
2397909 ./grub/unicode.pf2

linuxde dizin altındaki dosya sayıları

du -a | cut -d/ -f2 | sort | uniq -c | sort -nr

fcicek@cicekpc:/media/fcicek/DOKUMAN$ du -a | cut -d/ -f2 | sort | uniq -c | sort -nr
   1255 site
    605 mcu cpu
    338 turkce