CSRC – Ferhat Çiçek

Series	Title	Status	Release Date
Book Section	The Evolution of Expressing and Exchanging Cyber-investigation Information in a Standardized Form Download: Book Section (DOI); Preprint	Final	6/27/2018
Book	Attribute Based Access Control Download: Attribute Based Access Control	Final	10/01/2017
Book Section	Managing Risk in the Cloud Download: Book Section (DOI); Preprint	Final	9/09/2016
Book Section	Cloud Computing Security Essentials and Architecture Download: Book Section (DOI); Preprint	Final	9/09/2016
Book Section	Combinatorial Testing: Theory and Practice Download: Book Section (DOI); Preprint	Final	7/29/2015
Encyclopedia Entry	Conformance Testing Methodologies for Biometric Data Interchange Formats, Standardization of Download: Encyclopedia Entry (DOI); Preprint	Final	7/03/2015
Encyclopedia Entry	Common Biometric Exchange Formats Framework Standardization Download: Encyclopedia Entry (DOI); Preprint	Final	7/03/2015
Book Section	Metrics of Security Download: Book Section (DOI); Preprint	Final	10/03/2014
Book	Introduction to Combinatorial Testing Download: Book (CRC Press); Preface; Appendix A: Mathematics Review; and Appendix B: Empirical Data on Software Failures (Preprint); Chapter 1: Combinatorial Methods in Testing (Preprint); Chapter 2: Combinatorial Testing Applied (Preprint); Chapter 7: Measuring Combinatorial Coverage (Preprint); Chapter 14: Evolution from Design of Experiments (Preprint)	Final	6/20/2013
Book	Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP (1st) Download: None available	Final	7/24/2012
Encyclopedia Entry	Combinatorial Testing Download: Encyclopedia Entry; Preprint	Final	6/25/2012
Encyclopedia Entry	Biometric Technologies and Security – International Biometric Standards Development Activities Download: Encyclopedia Entry (DOI)	Final	1/01/2011
Book Section	Intrusion Detection and Prevention Systems Download: Book Section (DOI); Chapter 9 (preprint)	Final	10/22/2010
Book Section	Attacking Paper-Based E2E Voting Systems Download: Book Section (DOI); Chapter (preprint)	Final	2/01/2010
Book Section	Security and Privacy Issues in Agent-Based Location-Aware Mobile Commerce Download: Book Section (DOI)	Final	8/12/2009
Book Section	Cyber Security Standards Download: Handbook (Wiley); Cyber Security Standards (Preprint)	Final	6/15/2009
Encyclopedia Entry	Common Biometric Exchange Formats Framework Standardization Download: Encyclopedia Entry (DOI)	Final	2/13/2009
Book Section	Assurance for Identity Enabled Authorization Policies Download: Chapter 13 (Preprint)	Final	12/19/2008
Book Section	Identity Enabled Privacy Policies Download: Chapter 8 (Preprint)	Final	12/19/2008
Encyclopedia Entry	Electronic Voting Download: Encyclopedia Entry	Final	10/07/2008
Book	Role-Based Access Control (2nd ed.) Download: Role-Based Access Control, 2nd ed.	Final	1/31/2007
Book	Role-Based Access Control (1st ed.) Download: Book Review from “Linux Journal” (Oct. 24, 2003); Book Review from “Cipher” (June 5, 2003)	Final	1/01/2003
Book Section	A Framework for Computer Security Risk Management Download: None available	Final	1/01/1991

National Institute of Standards and Technology (NIST) Computer Security Resource Center (CSRC) White Paper

Series	Title	Status	Release Date
White Paper	Internet of Things (IoT) Trust Concerns Download: IoT Trust Concerns (DRAFT)	Draft	10/17/2018
White Paper	Transitioning to the Security Content Automation Protocol (SCAP) Version 2 Download: White Paper (DOI); Transitioning to SCAP v2	Final	9/10/2018
White Paper	The Economic Impacts of the Advanced Encryption Standard, 1996-2017 Download: White Paper (DOI); Final Report; Press Release (09-07-2018)	Final	9/07/2018
White Paper	A Data Structure for Integrity Protection with Erasure Capability Download: Block Matrix Draft	Draft	5/31/2018
White Paper	A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats Download: Final Report on Enhancing Resilience Against Botnets; NIST News Release	Final	5/30/2018
White Paper	A Report to the President on Supporting the Growth and Sustainment of the Nation’s Cybersecurity Workforce: Building the Foundation for a More Secure American Future Download: Final Report on Supporting the Nation’s Cybersecurity Workforce; NIST News Release; Workshop on Cybersecurity Workforce Development (Aug. 2017)	Final	5/30/2018
White Paper	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 Download: White Paper (DOI); Cybersecurity Framework v1.1; Press Release (04-16-2018); Cybersecurity Framework homepage	Final	4/16/2018
White Paper	[Project Description] Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events Download: Project Description; Project homepage	Final	2/07/2018
White Paper	[Project Description] Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events Download: Project Description; Project homepage	Final	2/07/2018
White Paper	Security Considerations for Code Signing Download: White Paper (DOI); Local Download	Final	1/26/2018
White Paper	[Project Description] Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector Download: Project Description; Project Homepage	Final	1/23/2018
White Paper	[Project Description] Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry Download: Project Description; Submit Comments; Project homepage	Draft	1/16/2018
White Paper	[Project Description] Mitigating IoT-based Distributed Denial of Service (DDOS) Download: Project Description; Project Homepage	Final	12/14/2017
White Paper	[Project Description] TLS Server Certificate Management Download: Project Description; Project Homepage	Final	11/09/2017
White Paper	NSRL Kaspersky dataset documentation Download: Documentation; NSRL Curated Kaspersky Hash Set 2017; Related DHS Statement; NSRL	Final	10/23/2017
White Paper	[Project Description] Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector Download: Draft Project Description; Submit Comments; Project Homepage	Draft	10/12/2017
White Paper	[Project Description] Securing Property Management Systems: Cybersecurity for the Hospitality Sector Download: Project Description; Project Homepage	Final	9/13/2017
White Paper	[Project Description] Secure Inter-Domain Routing–Part 1: Route Hijacks Download: Project Description; Project Homepage	Final	7/06/2017
White Paper	Tightly Secure Short Signatures from Weak PRFs Download: Paper	Final	6/27/2017
White Paper	Graphical Methods in Device-Independent Quantum Cryptography Download: Paper	Final	5/25/2017
White Paper	Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization’s cybersecurity performance Download: Baldrige Cybersecurity Excellence Builder v1.0; BCEB Categories 1″“7 Questions and Notes Only; BCEB Self-Analysis Worksheet; Baldrige Cybersecurity Initiative Homepage (and FAQs)	Final	4/02/2017
White Paper	[Project Description] Capabilities Assessment for Securing Manufacturing Industrial Control Systems Download: Project Description; Project Homepage	Final	3/09/2017
White Paper	[Project Description] Mobile Application Single Sign-On: for Public Safety and First Responders Download: Project Description (Final); Project Homepage	Final	11/28/2016
White Paper	[Project Description] Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector Download: Project Description (Final); Project Homepage	Final	9/20/2016
White Paper	[Project Description] Authentication for Law Enforcement Vehicle Systems Download: Draft Project Description; Submit Comments; Project Homepage	Draft	9/13/2016
White Paper	[Concept Paper] Identity and Access Management for Smart Home Devices Download: Draft Concept Paper; Submit Comments; Project Homepage	Draft	6/06/2016
White Paper	User’s Guide to Running the Draft NIST SP 800-90B Entropy Estimation Suite Download: Paper; GitHub site	Final	5/12/2016
White Paper	[Project Description] Data Integrity: Recovering from a destructive malware attack Download: Project Description; Data Integrity homepage	Final	5/09/2016
White Paper	[Project Description] Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector Download: Draft Project Description; Submit Comments; Project Homepage	Draft	5/09/2016
White Paper	Best Practices for Privileged User PIV Authentication Download: White Paper (DOI); Local Download	Final	4/21/2016
White Paper	The Number of Boolean Functions with Multiplicative Complexity 2 Download: Paper	Final	10/27/2015
White Paper	Multiplicative Complexity of Vector Value Boolean Functions Download: Paper	Final	9/21/2015
White Paper	Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool Download: Report	Final	6/10/2015
White Paper	Analysis of VAES3 (FF2) Download: Paper	Final	4/02/2015
White Paper	User’s Guide to Running the Draft NIST SP 800-90B Section 9 Entropy Estimation Tests Download: None available	Final	3/10/2015
White Paper	Supplemental Guidance on Ongoing Authorization: Transitioning to Near Real-Time Risk Management Download: White Paper (DOI); Local Download	Final	6/03/2014
White Paper	NISTIR 7628 User’s Guide Download: None available	Final	2/26/2014
White Paper	Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations Download: White Paper (DOI); Local Download	Final	2/19/2014
White Paper	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 Download: White Paper (DOI); Local Download	Final	2/12/2014
White Paper	Summary of the Workshop on Information and Communication Technologies Supply Chain Risk Management, National Institute of Standards and Technology, October 15-16, 2012 Download: None available	Final	7/10/2013
White Paper	Summary of the Workshop on Cryptographic Key Management Systems (CKMS), National Institute of Standards and Technology, September 10-11, 2012 Download: None available	Final	1/10/2013
White Paper	Proof of Concept for an ICT SCRM Enterprise Assessment Package Download: Report	Final	12/01/2012
White Paper	Challenging Security Requirements for US Government Cloud Computing Adoption Download: Paper	Final	11/19/2012
White Paper	The Role of the National Institute of Standards and Technology in Mobile Security Download: The Role of NIST in Mobile Security	Final	8/23/2012
White Paper	Adaptive Preimage Resistance Analysis Revisited: Requirements, Subtleties and Implications Download: None available	Final	4/16/2012
White Paper	The ICT SCRM Community Framework Development Project: Final Report Download: Report	Final	12/01/2011
White Paper	A depth-16 circuit for the AES S-box Download: Paper	Final	6/17/2011
White Paper	Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice Download: Report	Final	4/01/2011
White Paper	Economic Analysis of Role-Based Access Control: Final Report Download: Final Report	Final	12/19/2010
White Paper	The Economic Impact of Role-Based Access Control Download: Report	Final	3/01/2002
White Paper	Report on the Second Modes of Operation Workshop Download: Report	Final	10/01/2001
White Paper	The Economic Impacts of NIST’s Data Encryption Standard (DES) Program Download: Report	Final	10/01/2001
White Paper	Report on the Symmetric Key Block Cipher Modes of Operation Workshop Download: Report	Final	12/01/2000
White Paper	Federal Information Technology Security Assessment Framework Download: Report	Final	11/28/2000
White Paper	Report of the Workshop on Key Management Using Public Key Cryptography Download: Report	Final	2/28/2000
White Paper	DoD Rainbow Series Download: None available	Final	12/26/1985