Sixth Annual PKI R&D Workshop: 'Applications-Driven PKI' Proceedings

摘要

In 2006, the Computer Security Division (CSD) of NISTs Information Technology Laboratory engaged in a number of initiatives for improving information system security in the Federal government. Both automated tool development and increased outreach activities were initiated to communicate information technology risks, vulnerabilities, and protection requirementsparticularly for new and emerging technologies. The CSD continued to research and publicize IT vulnerabilities. Emphasis was placed on development of techniques for affordable security and privacy mechanisms for Federal information systems. We continued to develop standards, metrics, tests, and validation programs to promote, measure, and validate security in systems and services. We also developed guidance to increase secure IT planning, implementation, management, and operation. Affected customer organizations include federal, state, and local governments, the healthcare community, colleges and universities, small businesses, the private sector, and the international community. This year also brought additional security challenges along with the ever advancing improvements in technology, improvements in citizens access to government systems and information, faster communications, reduced paperwork, and streamlined processes. Our work this year met those security challenges with a breadth and depth of security areas intended to allow our customers to accomplish their missions while providing for confidentiality of their information, maintaining the availability of their resources and ensuring the integrity of their data. High priority was given to initiating a competitive program for replacement of current secure hashing algorithms employed in data source and content integrity protection mechanisms.