Security & Forensics

Training Opportunities

Current Threats

Publications

NIST announces the Release of Special Publication 800-70 Revision 3, National Checklist Program for IT Products--Guidelines for Checklist Users and Developers is now available.

Link to the full announcement of this document’s release can be found on the NIST CSRC News/Announcements page:

http://csrc.nist.gov/news_events/index.html#dec11-2

Link to Special Publication 800-70 Revision 3 document (PDF format) from the NIST Library website:

http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-70r3.pdf

Link to Special Publication 800-70 Revision 3 located on the CSRC Special Publications page:

http://csrc.nist.gov/publications/PubsSPs.html#800-70r3

NIST Released the following 2 Draft Special Publications (SP):

(1) Draft Special Publication (SP) 800-181, NICE Cybersecurity Workforce Framework (NCWF): National Initiative for Cybersecurity Education, and

(2) Draft Special Publication 1800-6, Domain Name Systems-Based Electronic Mail Security.

Both of these Draft SPs are available for public comment. See below for further details.

1. Draft SP 800-181, NICE Cybersecurity Workforce Framework (NCWF): National Initiative for Cybersecurity Education:

Information and links to Draft Special Publication 800-181 can be found on the NIST CSRC Draft publications page. There is also a comment template available to use to submit comments. Below is the link to this Draft:

<http://csrc.nist.gov/publications/PubsDrafts.html#800-181>

Deadline to submit comments: January 6, 2017

Email comments or questions about this draft document to: ncwf@nist.gov

2. Draft SP 1800-6, Domain Name Systems-Based Electronic Mail Security:

Provided below are 2 set of URLs which point to the same document – this draft document is from the NIST National Cybersecurity Center of Excellence (NCCoE) program, and this draft has been posted on the NCCoE’s website. Also, below, we provided links to this draft SP from the CSRC Draft Publications page.

Information and links to Draft Special Publication 1800-6 has also been provided on the NIST CSRC Draft publications page. There is also a comment template available to use to submit comments. Below is the link to this Draft:

<http://csrc.nist.gov/publications/PubsDrafts.html#1800-6>

-OR- Here is the link to the National Cybersecurity Center of Excellence (NCCoE) website that has details of this draft as well:

<https://nccoe.nist.gov/projects/building_blocks/secured_email>

NIST announces the Release of Special Publication 800-125B, Secure Virtual Network Configuration for Virtual Machine (VM) Protection.

Link to the full announcement of this document’s release can be found on the NIST CSRC News/Announcements page:

http://csrc.nist.gov/news_events/#mar7

Link to Special Publication 800-125B document (PDF format) from the NIST Library website:

http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-125B.pdf

Link to Special Publication 800-125B located on the CSRC Special Publications page:

http://csrc.nist.gov/publications/PubsSPs.html#800-125b

NIST Interagency Report (NISTIR) 7621 Revision 1, Small Business Information Security: The Fundamentals, has been approved as final & is now available from the NIST CSRC website.

Link to the NISTIR 7621 Rev. 1 document (PDF format) from the NIST Library website:

<http://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.7621r1.pdf>

Link to NISTIR 7621 Rev. 1 located on the CSRC NISTIR page:

<http://csrc.nist.gov/publications/PubsNISTIRs.html#NIST-IR-7621-Rev-1>

The announcement providing details about this NISTIR can be found on the CSRC News / Announcement page:

<http://csrc.nist.gov/news_events/#nov14>

NIST Public Affairs Office also issued a press release in regards to this NISTIR’s release:

<https://www.nist.gov/news-events/news/2016/11/new-nist-guide-helps-small-businesses-improve-cybersecurity>

NIST announce the release of 2 Special Publications (SP) 800-184 and SP 800-185:

(1) SP 800-184, Guide for Cybersecurity Event Recovery, and

(2) SP 800-185, SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash.

Both SPs have both been approved as final & now available from the NIST CSRC website – see below for details.

To view the full announcement of these 2 Special Publications release – please visit the CSRC News page:

(Note: The announcement for SP 800-185 will appear 1st, followed by announcement for SP 800-184 right under SP 800-185 announcement)

<http://csrc.nist.gov/news_events/#dec23>

(1) Link to Special Publication 800-184 (PDF format) from the NIST Library website:

<http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-184.pdf>

NIST Public Affairs Office issued a press release in regards to SP 800-184 release:

<https://www.nist.gov/news-events/news/2016/12/nist-guide-provides-way-tackle-cybersecurity-incidents-recovery-plan>

(2) Link to Special Publication 800-185 (PDF format) from the NIST Library website:

<http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-185.pdf>

These 2 Special Publications can be found on the CSRC Special Publications page:

SP 800-184: <http://csrc.nist.gov/publications/PubsSPs.html#SP-800-184>

SP 800-185: <http://csrc.nist.gov/publications/PubsSPs.html#SP-800-185>

NIST is Proud to Announce the Release of Special Publication 800-179, Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist. This Special Publication has been approved as final.

Link to the Announcement of this SP’s release (CSRC News page):

<http://csrc.nist.gov/news_events/#dec12>

Link to Special Publication 800-179 (PDF format) from the NIST Library website:

<http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-179.pdf>

This Special Publication can be found on the CSRC Special Publications page:

<http://csrc.nist.gov/publications/PubsSPs.html#800-179>

Security Software Tools

Web Resources