Search - NIST IT Security

NIST Site Search

Search NIST.GOV

Custom Search

[Official NIST.GOV TIME]

Product Research

Advertise on this site

Search NIST IT Security

Results 1 - 1 of 1 in Content

NIST FIPS 140-2
...dules to Federal Information Processing Standard (FIPS) 140-2 and other cryptography based standards. Download the complete NIST FIPS 140-2. Plea...
Posted on Wednesday 15 November 2006 - 20:44:06 in Federal Information Processing Standards (FIPS)

bullet

NIST FIPS 197 - Advanced Encryption Standard (AES)
NIST announced the approval of FIPS 197 Advance Encryption Standard (AES) November 2001. AES specifies the Rijndael encryption algorithm as a FIPS-ap...
Posted on Saturday 21 January 2006 - 22:00:00 in Federal Information Processing Standards (FIPS)

bullet

NIST SP 800-73 Interfaces for Personal Identity Verification
...ors, Federal Information Processing Standard 201 (FIPS 201) was developed to establish standards for identity credentials. This document, Special Publ...
Posted on Monday 06 February 2006 - 22:00:00 in Special Publications - SP 800 series

bullet

NIST FIPS 201 Personal Identity Verification (PIV)
...t information systems. Download the complete NIST FIPS 201 Please use the NIST.org Forum to ask questions or discuss this document. The belo...
Posted on Monday 06 February 2006 - 22:00:00 in Federal Information Processing Standards (FIPS)

bullet

Federal Information Processing Standards (FIPS)
With the passage of the Federal Information Security Management Act (FISMA) of 2002 all Federal Information Processing Standards (FIPS) are now manda...
Posted on Sunday 22 January 2006 - 16:44:21 in NIST.gov Publications

bullet

Guide to NIST Computer Security Documents
In order to make NIST information security documents more accessible, especially to those just entering the security field or with limited needs for t...
Posted on Monday 30 April 2007 - 19:58:26 in NIST.gov Publications

bullet

Announcing the Release of Special Publication 800-78-3
...key exponents with FIPS 186-3 and 2) to permit the use of SHA-1 after 12/31/2010 when signing revocation information, under limited circumstances.
Posted on Saturday 03 December 2011 - 14:17:00 in NIST Computer Security Division News

bullet

NIST SP 800-48 Revision 1, Wireless Network Security for IEEE 802.11a/b/g and Bluetooth
...port for Federal Information Processing Standard (FIPS) validated cryptographic algorithms. Therefore, NIST recommends that organizations with existin...
Posted on Tuesday 07 August 2007 - 22:00:00 in Draft Special Publications (SP) 800 Documents

bullet

NIST SP 800-78 Cryptographic Algorithms and Key Sizes for Personal Identity Verification
...es for PIV systems and is a companion document to FIPS 201. Download the entire NIST SP 800-78 PDF You may use the NIST.org Forum to ask question...
Posted on Monday 06 February 2006 - 22:00:00 in Special Publications - SP 800 series

bullet

Important HSPD-12 Documents and Links
... how to implement it *OMB Memorandum M-05-24 *FIPS 140-2 *FIPS 201 NIST Special Publictions *NIST SP 800-73 *NIST SP 800-76 *NIST...
Posted on Sunday 05 February 2006 - 22:00:00 in HSPD-12

Results in Links

No matches found

Results 1 - 10 of 20 in News

GSA Awards Large Contracts for 10 Encryption Products
... “data at rest”. All 10 products use NIST.gov FIPS 140-2 validated encryption modules. You will be hearing much more about these products in the c...
Posted on Wednesday 20 June 2007 - 22:52:35

bullet

Evidence that Encrypting Data is the Easy Part
...a, classified, data, top, secret, key, truecrypt, fips, 140-2, fbi, keylogger, chi, mak, tai, security, china, aes, aes256, aes128, blowfish, CAST5, s...
Posted on Friday 25 May 2007 - 15:27:08

bullet

NIST.gov releases RFID Security Publication and a NIST Security Table of Contents
..., sp, special, publication, table, contents, 800, fips@@@ NIST.gov has released NIST Special Publication (SP) 800-98, Guidelines for Securing Ra...
Posted on Tuesday 01 May 2007 - 05:56:20

bullet

U.S. Government Agencies Banning Microsoft Vista
...curity, moratorium, nist, gov, dot, faa, federal, fips, aviation, administration, office, 2007, google, apps, ocio@@@ In what turning out to be...
Posted on Tuesday 13 March 2007 - 21:56:36

bullet

NSA Posts Notice on ‘Suite B’ encryption
...ough the Federal Information Processing Standard (FIPS) 201 for identity cards makes no specific reference to it, said Brendan Ziolo, marketing direct...
Posted on Monday 12 December 2005 - 22:39:27

bullet

FISMA guidance nearly complete
...ct, guidance, guidelines, compliance, omb, a-130, fips, 200, standard, processing, requirement@@@ The publication, titled “Guide for Assessing...
Posted on Thursday 01 December 2005 - 04:25:48

bullet

NIST to set up Web site for products being FIPS-201-tested
NIST.GOV will be posting test results vendor smart cards and readers to see whether they conform to Federal Information Processing Standard-201 and NI...
Posted on Wednesday 30 November 2005 - 15:50:12

bullet

NIST.gov releases draft of Wireless Network Security for IEEE 802.11a/b/g and Bluetooth
...tute, standards, ieee, access point, adhoc, WPAN, fips, encryption, wpan, wlan, wman, wwan@@@ Draft SP 800-48 Revision 1 provides an overview of...
Posted on Wednesday 08 August 2007 - 06:17:10

bullet

News Release - LogLogic Announces FISMA Control and Compliance Suite Based On NIST For Government Organizations
...s - the Federal Information Processing Standards (FIPS), the National Institute of Standards and Technology (NIST) "Recommended Security Controls for ...
Posted on Sunday 13 May 2007 - 15:19:25

bullet

SANS.org SOHO Backups and Encryption article
...ould be mentioned, though TrueCrypt offers a NIST FIPS approved algorithm (AES) the application is not on the NIST.gov Advanced Encryption Standard Al...
Posted on Monday 11 September 2006 - 17:05:55

Go to page >>

Results 1 - 1 of 1 in Forum

As part of thread: Authorizing Oficial?

Forum -> NIST SP 800 Documents

...I am wrong but even though we have implemented all the security controls we are not FIPS 199 accredited since a government agency certified us.
Posted by Teddy on Wednesday 19 August 2009 - 09:48:07

Results in Comments

No matches found

Results in Other Pages

No matches found

Results in Bugtracker2

No matches found

Translate to:

Latest NIST.org news and comments

NIST Computer Security Division Released Special Publication 800-38E Posted on:01/25/10

DRAFT Special Publication 800-37 Revision 1 Available Posted on:11/17/09

News Blog: "Mass Panic! The iPhone Has a Vulnerability" Posted on:07/30/09

First ZeroDay Exploit Hits Firefox Posted on:07/20/09

"FBI Probes Hacker's $10 Million Ransom Demand for Stolen Virginia Medical Records" Posted on:05/06/09

Free Online Antivirus, Spyware, and Firewall Scanners Review Posted on:05/04/09

Conflicker Worm / Botnet Downloads Mystery Payload – April 9th update Posted on:04/09/09

Conflicker Worm - April Fools Day Likely To Make Fools Out Of Us Either Way Posted on:03/30/09

ESET NOD32 False Positive for Kryptik.JX Causing Problems Posted on:03/09/09

New Report Shows 92 Percent of Critical Microsoft Vulnerabilities are Mitigated by Eliminating Admin Rights Posted on:02/03/09

Federal Employees At Risk Again From Monster.com Compromise Posted on:01/25/09

Microsoft Windows Does Not Disable AutoRun Properly - Technical Cyber Security Alert TA09-020A Posted on:01/21/09

Internet Explorer XML Exploit Allows Remote Code Execution Posted on:12/14/08

Microsoft Has Released An Extremely Urgent Out of Band Windows Update Posted on:10/23/08

If You Haven't Patched Your DNS Server Yet You're Simply Negligent Posted on:08/06/08

Google Ads

Headlines

NIST.GOV

»	Experts to Discuss Botnet Challenges, Steps for Prevention at May 30 Workshop
»	A User-Centered Approach to Designing Electronic Health Records
»	Comments Requested on Strategies to Mitigate Risk in the Federal ICT Supply Chain
»	No Strings Attached: NIST Protocol Helps Communicate Biometrics from Anywhere
»	Cloud Computing Forum amp Workshop V Meets June 5-7 at the Department of Commerce
»	Creating Usable Electronic Health Records (EHRs): A User-Centered Design Best Practices Workshop
»	Iris Recognition Report Evaluates Needle in Haystack Search Capability
»	Fifth Annual Health Information Security Conference Runs June 6-7
»	NIST Proposes Update to Digital Signature Standard
»	April Workshop Focuses on Cybersecurity for Cyber-Physical Systems and Industrial Controls
»	New Industry Commitments to Give 15 Million Households Tools to Shrink Their Energy Bills
»	NIST Releases Technical Guidance for Evaluating Electronic Health Records
»	NIST Announces Funding to Form Steering Group to Support Trusted Identities in Cyberspace
»	NSTIC Steering Group FFO Proposers' Webinar
»	Guidance on Wireless Local Area Network Security is Close at Hand

Date published: not known
Details

US-CERT Current Activity

»	Apple Releases QuickTime 7.7.2
»	Google Releases Google Chrome 19
»	Apple Releases Flashback Malware Security Updates
»	Apple Releases Multiple Security Updates
»	Adobe Releases Security Bulletins for Multiple Products
»	Apple Releases iOS 5.1.1
»	Microsoft Releases May Security Bulletin
»	Microsoft Releases Advanced Notification for May Security Bulletin
»	Adobe Releases Security Advisory for Adobe Flash Player
»	Google Releases Chrome 18.0.1025.168
»	RuggedCom Rugged Operating System Vulnerability
»	DNSChanger Malware
»	Oracle Releases Critical Patch Update for April 2012
»	HP ProCurve 5400 zl Switches Security Bulletin
»	Samba Releases Updates for 3.0.x - 3.6.3
»	Microsoft Releases April Security Bulletin
»	Adobe Releases Security Bulletin for Adobe Reader and Acrobat
»	Google Releases Google Chrome 18.0.1025.151
»	Cisco Releases Security Advisory for WebEx Player
»	Apple Update for Java for OS X Lion and Mac OS X
»	Google Releases Google Chrome 18.0.1025.142
»	Cisco Releases Multiple Security Advisories
»	Adobe Releases Security Advisory for Adobe Flash Player
»	Google Releases Google Chrome 17.0.963.83
»	Cisco Releases Multiple Security Advisories
»	Mozilla Releases Multiple Updates
»	Microsoft Releases March Security Bulletin
»	Apple Releases Safari 5.1.4
»	Google Releases Chrome 17.0.963.79
»	Apple Releases Multiple Security Updates

Date published: not known
Details

JC3-CIRC Updates

»	U-170: Apple QuickTime Multiple Flaws Let Remote Users Execute Arbitrary Code Apple QuickTime Multiple Flaws Let Remote Users Execute Arbitrary Code
»	U-169: Sympa Multiple Security Bypass Vulnerabilities Sympa Multiple Security Bypass Vulnerabilities
»	U-168: EMC Documentum Information Rights Management Server Bugs Let Remote Authenticated Users Deny Service EMC Documentum Information Rights Management Server Bugs Let Remote Authenticated Users Deny Service
»	U-167: OpenSSL Invalid TLS/DTLS Record Processing Lets Remote Users Deny Service OpenSSL Invalid TLS/DTLS Record Processing Lets Remote Users Deny Service
»	U-166: Adobe Shockwave Player Memory Corruption Flaws Let Remote Users Execute Arbitrary Code Adobe Shockwave Player Memory Corruption Flaws Let Remote Users Execute Arbitrary Code
»	U-165: Apple iOS Bugs Let Remote Users Execute Arbitrary Code and Spoof Address Bar URLs Apple iOS Bugs Let Remote Users Execute Arbitrary Code and Spoof Address Bar URLs
»	U-164: Microsoft Security Bulletin Advance Notification for May 2012 Microsoft Security Bulletin Advance Notification for May 2012
»	U-163: PHP Command Parameter Bug Lets Remote Users Obtain Potentially Sensitive Information and Execute Arbitrary Code PHP Command Parameter Bug Lets Remote Users Obtain Potentially Sensitive Information and Execute Arb ...
»	U-162: Drupal Multiple Vulnerabilities Drupal Multiple Vulnerabilities
»	U-161: Citrix Provisioning Services Unspecified Flaw Lets Remote Users Execute Arbitrary Code Citrix Provisioning Services Unspecified Flaw Lets Remote Users Execute Arbitrary Code
»	U-160: Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code
»	U-159: Red Hat Enterprise MRG Messaging Qpid Bug Lets Certain Remote Users Bypass Authentication Red Hat Enterprise MRG Messaging Qpid Bug Lets Certain Remote Users Bypass Authentication
»	U-158: HP NonStop Server Java Multiple Vulnerabilities HP NonStop Server Java Multiple Vulnerabilities
»	U-157: Ruby Mail Gem Directory Traversal and Shell Command Injection Vulnerabilities Ruby Mail Gem Directory Traversal and Shell Command Injection Vulnerabilities
»	U-156: Red Hat update for JBoss Enterprise Portal Platform Red Hat update for JBoss Enterprise Portal Platform

Date published: not known
Details

Virus Bulletin news

»	FBI warns against malware installed via hotel networks Malware poses as fake update of popular software.
»	May issue of VB published The May issue of Virus Bulletin is now available for subscribers to download.
»	Android malware served via compromised websites Malware downloaded automatically, but requires user permission to be installed.
»	PayPal spam leads to exploit kit Clicking on links leads to Blackhole rather than phishing site.
»	Significant rise in malicious spam and phishing Over one quarter of malicious emails contain eight-year-old malware.
»	Researchers find many popular sites serving drive-by downloads 10 million people exposed to malware served by 25,000 most visited sites alone.
»	Android malware hides inside JPG image New LeNa variant no longer depends on rooted devices.
»	April issue of VB published The April issue of Virus Bulletin is now available for subscribers to download.
»	Microsoft Word for Mac exploit used in targeted attacks Tibetan NGOs targeted.

Date published: not known
Details

Dark Reading - All Stories

»	SCADA/Smart-Grid Vendor Adopts Microsoft's Secure Software Development Program Meanwhile, utilities lag when it comes to cyberattack preparedness and risk management at the execut ...
»	Delete Data To Delete Risk Smart data-retention policies allow an organization to rid itself of risky data when there's no need ...
»	New Fraud Campaign Targets Facebook, Gmail, Hotmail, Yahoo Users What the attacks share in common, besides being scams, is their use of a specific variant of Zeus
»	Time To Deploy The FUD Weapon? When suffering from compliance fatigue, you may have only one option to getting the funding you need ...
»	5 Ways To Lose A Malicious Insider Lawsuit Making the case against an insider takes preparation and proactive work with HR and legal
»	What A DDoS Can Cost Around 65 percent of IT pros say a DDoS costs their organizations $240,000 in lost revenue per day o ...
»	Cyberspies Target Victims Via 'Strategic' Drive-by Website Attacks Cyberespionage attackers more and more are injecting specific, legitimate websites with malware in h ...
»	Number Of Software Pirates On The Rise Fifty-seven percent of respondents said they've pirated software, according to Business Software All ...
»	Network Security Technology Evolving Rapidly, Forrester Says Review of 17 product categories shows next-generation firewalls on the rise, stand-alone NAC on the ...