Security - News

• Draft Special Publication (SP) 800-28 version 2, Guidelines on Active Content and Mobile Code
  It provides an overview of active content and mobile code technologies in use today and offers insights for making informed IT security decisions on their application and treatment. Active content refers to electronic documents that contain embedded software components, including mobile code; examples of mobile code are JavaScript, VBScript, Java applets, and ActiveX controls. The publication gives details about the active content and mobile code threats, technology risks, and safeguards for end user systems.
• NIST Interagency Report (NIST IR) 7435, The Common Vulnerability Scoring System (CVSS) and Its Applicability to Federal Agency Systems
  CVSS provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. This publication defines and describes the CVSS standard, provides advice on performing scoring, and discusses how Federal agencies can incorporate Federal Information Processing Standards (FIPS) 199 impact ratings into their CVSS scores to generate scores that are specifically tailored to particular Federal agency environments.

Heuristické vyhledání souvisejících článků v archívu NEWS

• NIST vydal: Draft Federal Information Processing Standard (FIPS) 201-2, Personal Identity Verification of Federal Employees and Contractors
• NIST vydal: Draft NIST Interagency Report (IR) 7622, Piloting Supply Chain Risk Management Practices for Federal Information Systems
• NIST vydal: Draft of Special Publication (SP) 800-53, Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations
• NIST vydal Special Publication 800-53, Revision 1 (Final Public Draft), Recommended Security Controls for Federal Information Systems
• NIST vydal Special Publication 800-53. Recommended Security Controls for Federal Information Systems
• NIST - Draft Special Publication 800-53, Revision 1: Recommended Security Controls for Federal Information Systems