Appendix C. NIST Security Guidelines
Information in this Chapter:
• National Institute of Standards and Technology, Special Publications 800 Series
The National Institute of Standards and Technology (NIST), Special Publications (SP) 800 series present security best practices and guidelines resulting from the Information Technology Lab's research. NIST provides over 100 specialized documents, providing specific information security guidance for a wide range of industries and use cases.
National Institute of Standards and Technology, Special Publications 800 Series
Several of NIST SP 800 documents, listed below, address concepts of information and system security that are highly relevant to industrial network security. The full index of SP 800 documents, including those mentioned here, can be found online at http://csrc.nist.gov/publications/PubsSPs.html.
• SP 800-12, An Introduction to Computer Security: The NIST Handbook, October 1995.
• SP 800-30, Risk Management Guide for Information Technology Systems, July 2002.
• SP 800-40, Version 2, Creating a Patch and Vulnerability Management Program, November 2005.
• SP 800-41 (Draft), Guidelines on Firewalls and Firewall Policy, July 2008.
• SP 800-53, Guide for Assessing the Security Controls in Federal Information Systems: Building Effective Security Assessment Plans, July 2008.
• SP 800-60, Revision 1, Guide for Mapping Types of Information and Information Systems to Security Categories, August 2008.
• SP 800-82 (Final Public Draft), Guide to Industrial Control Systems (ICS) Security, September 2008.
• SP 800-92, Guide to Computer Security Log Management, September 2006.
• SP 800-94, Guide to Intrusion Detection and Prevention Systems (IDPS), February 2007.
• SP 800-113, Guide to SSL VPNs, July 2008.
• SP 800-118 (Draft), Guide to Enterprise Password Management, April 2009.
• SP 800-128 (Draft), Guide for Security Configuration Management of Information Systems, August 2009.
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.