Karen A. Scarfone

发表

Karen A. Scarfone, Daniel R. Benigni, Timothy Grance, 2009 .

Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft)

Karen A. Scarfone, Murugiah P. Souppaya, Kevin Stine, 2020 .

SP 800-124. Guidelines on Cell Phone and PDA Security

Karen A. Scarfone, Wayne Jansen, K. Scarfone, 2008 .

SP 800-126 Rev. 2. The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2

Karen A. Scarfone, David Waltermire, Stephen D. Quinn, 2011 .

An analysis of CVSS version 2 vulnerability scoring

Karen A. Scarfone, Peter Mell, 2009, ESEM 2009.

Guide to Industrial Control Systems (ICS) Security

Karen A. Scarfone, Joseph A. Falco, Keith A. Stouffer, 2015 .

[Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise (Draft)

Karen A. Scarfone, Murugiah P. Souppaya, Kevin Stine, 2018 .

Securing Radio Frequency Identification (RFID) Systems | NIST

Karen A. Scarfone, K. Scarfone, 2007 .

Guide to General Server Security | NIST

Karen A. Scarfone, Wayne Jansen, Miles C. Tracy, 2008 .

Application Container Security Guide (2nd Draft)

Karen A. Scarfone, Murugiah P. Souppaya, John Morello, 2017 .

Application Container Security Guide

Karen A. Scarfone, Murugiah P. Souppaya, John Morello, 2017 .

Cyber Security Metrics and Measures | NIST

Karen A. Scarfone, Murugiah P. Souppaya, Paul E. Black, 2009 .

Computer Security Incident Handling Guide

Karen A. Scarfone, Timothy Grance, Paul R. Cichonski, 2004 .

SP 800-117. Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.0

Karen A. Scarfone, Matthew P. Barrett, Stephen D. Quinn, 2010 .

Core Cybersecurity Features Baseline for Securable IoT Devices: A Starting Point for IoT Device Manufacturers

Karen A. Scarfone, Michael J. Fagan, Katerina Megas, 2019 .

Common Platform Enumeration: Naming Specification Version 2.3

Karen A. Scarfone, Brant Cheikes, David Waltermire, 2011 .

Guide for Cybersecurity Event Recovery

Karen A. Scarfone, Gregory A. Witte, Murugiah P. Souppaya, 2016 .

The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities

Karen A. Scarfone, Peter Mell, Elizabeth LeMay, 2012 .

ITL Bulletin: Securing Interactive and Automated Access Management Using Secure Shell (SSH) (January 2016)

Karen A. Scarfone, Larry Feldman, Murugiah P. Souppaya, 2016 .

SP 800-51 Rev. 1. Guide to Using Vulnerability Naming Schemes

Karen A. Scarfone, David Waltermire, 2011 .

Guide to Attribute Based Access Control (ABAC) Definition and Considerations [includes updates as of 02-25-2019]

Karen A. Scarfone, David R. Kuhn, David F. Ferraiolo, 2019 .

Guidelines on Electronic Mail Security

Karen A. Scarfone, Wayne Jansen, Miles C. Tracy, 2002 .

Guide to Securing Legacy IEEE 802.11 Wireless Networks

Karen A. Scarfone, Matthew Sexton, Derrick Dicoi, 2008 .

Managing Software Patches and Vulnerabilities

Karen A. Scarfone, Peter Mell, Murugiah P. Souppaya, 2015 .

SP 800-41 Rev. 1. Guidelines on Firewalls and Firewall Policy

Karen A. Scarfone, Paul Hoffman, 2009 .

SP 800-28 Version 2. Guidelines on Active Content and Mobile Code

Karen A. Scarfone, Wayne Jansen, Theodore Winograd, 2008 .

The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 [includes updates through 3-19-2012]

Karen A. Scarfone, David Waltermire, Stephen D. Quinn, 2011 .

Guide to using vulnerability naming schemes

Karen A. Scarfone, David Waltermire, 2011 .

Guide to Secure Web Services

Karen A. Scarfone, Anoop Singhal, Theodore Winograd, 2007 .

SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3

Karen A. Scarfone, David Waltermire, Stephen D. Quinn, 2018 .

Guidelines on Firewalls and Firewall Policy | NIST

Karen A. Scarfone, Paul Hoffman, K. Scarfone, 2009 .

Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF)

Karen A. Scarfone, Murugiah P. Souppaya, Donna Dodson, 2020 .

Guide to Enterprise Patch Management Technologies

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2013 .

Guide to General Server Security

Karen A. Scarfone, Wayne Jansen, Miles C. Tracy, 2008 .

Guidelines on Active Content and Mobile Code: Version 2

Karen A. Scarfone, Wayne Jansen, Theodore Winograd, 2008 .

SP 800-61 Rev. 1. Computer Security Incident Handling Guide

Karen A. Scarfone, Timothy Grance, Kelly Masone, 2008 .

SP 800-48 Rev. 1. Guide to Securing Legacy IEEE 802.11 Wireless Networks

Karen A. Scarfone, Matthew Sexton, Derrick Dicoi, 2008 .

Evidence-Based, Good Enough, and Open | NIST

Karen A. Scarfone, K. Scarfone, 2008 .

Guide to Computer Security Log Management: Recommendations of the National Institute of Standards and Technology [Draft April 2006]

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2006 .

Computer Security Incident Handling Guide

Karen A. Scarfone, Timothy Grance, Paul R. Cichonski, 2004 .

Specification for the Open Checklist Interactive Language (OCIL) Version 2.0

Karen A. Scarfone, David Waltermire, Maria Casipe, 2011 .

CVSS-SIG Version 2 History | NIST

Karen A. Scarfone, Peter Mell, Gavin Reid, 2007 .

Guide to Using Vulnerability Naming Schemes | NIST

Karen A. Scarfone, David Waltermire, K. Scarfone, 2011 .

Common Platform Enumeration: Name Matching Specification Version 2.3

Karen A. Scarfone, David Waltermire, Harold Booth, 2011 .

Recommendations for IoT Device Manufacturers: Foundational Activities and Core Device Cybersecurity Capability Baseline (2nd Draft)

Karen A. Scarfone, Michael Fagan, Matthew Smith, 2020 .

Guide to Security for Full Virtualization Technologies

Karen A. Scarfone, Murugiah P. Souppaya, Paul Hoffman, 2011 .

The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems

Karen A. Scarfone, Peter Mell, Sasha Romanosky, 2007 .

Cyber Security Metrics and Measures

Karen A. Scarfone, Murugiah P. Souppaya, Paul E. Black, 2008 .

SP 800-125. Guide to Security for Full Virtualization Technologies

Karen A. Scarfone, Murugiah P. Souppaya, Paul Hoffman, 2011 .

Guide to Bluetooth Security

Karen A. Scarfone, John Padgette, K. Scarfone, 2008 .

SP 800-153. Guidelines for Securing Wireless Local Area Networks (WLANs)

Karen A. Scarfone, Murugiah P. Souppaya, 2012 .

Hardware-Enabled Security:

Karen A. Scarfone, Murugiah Souppaya, Jerry Wheeler, 2020 .

Stopping Malware and Unauthorized Software through Application Whitelisting | NIST

Karen A. Scarfone, Larry Feldman, Murugiah P. Souppaya, 2015 .

National Cybersecurity Online Informative References (OLIR) Program

Karen A. Scarfone, Matthew Smith, Stephen D. Quinn, 2020 .

NIST Guidance on Application Container Security | NIST

Ramaswamy Chandramouli, Karen A. Scarfone, Murugiah P. Souppaya, 2017 .

SP 800-127. Guide to Securing WiMAX Wireless Communications

Karen A. Scarfone, Matthew Sexton, Cyrus Tibbs, 2010 .

Guide to Intrusion Detection and Prevention Systems (IDPS)

Karen A. Scarfone, Peter Mell, P. Mell, 2007 .

SP 800-68 Rev. 1. Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist

Karen A. Scarfone, Murugiah P. Souppaya, Paul M. Johnson, 2008 .

Guide to Computer and Network Data Analysis: Applying Forensic Techniques to Incident Response

Karen A. Scarfone, Timothy Grance, Suzanne Chevalier, 2005 .

Guide to Industrial Control Systems (ICS) Security (final draft) | NIST

Karen A. Scarfone, Joseph A. Falco, Keith A. Stouffer, 2008 .

Guide to Data-Centric System Threat Modeling

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2016 .

Security Considerations for Exchanging Files Over the Internet

Karen A. Scarfone, Murugiah P. Souppaya, Matthew Scholl, 2020 .

Security of Interactive and Automated Access Management Using Secure Shell (SSH)

Karen A. Scarfone, Paul Turner, Tatu Ylonen, 2015 .

Guidelines on Electronic Mail Security | NIST

Karen A. Scarfone, Wayne Jansen, Miles C. Tracy, 2002 .

SP 800-95. Guide to Secure Web Services

Karen A. Scarfone, Anoop Singhal, Theodore Winograd, 2007 .

National Cybersecurity Online Informative References (OLIR) Program: Program Overview and OLIR Uses (2nd Draft)

Karen A. Scarfone, Matthew Smith, Stephen D. Quinn, 2020 .

SP 800-123. Guide to General Server Security

Karen A. Scarfone, Wayne Jansen, Miles C. Tracy, 2008 .

SP 800-111. Guide to Storage Encryption Technologies for End User Devices

Karen A. Scarfone, Murugiah P. Souppaya, Matthew Sexton, 2007 .

Guide to Bluetooth Security: Recommendations of the National Institute of Standards and Technology (Special Publication 800-121 Revision 1)

Karen A. Scarfone, Lily Chen, John Padgette, 2012 .

Vulnerability Data Model

Karen A. Scarfone, Harold Booth, 2013 .

ITL Bulletin: NIST Guidance on Application Container Security (October 2017)

Ramaswamy Chandramouli, Karen A. Scarfone, Murugiah P. Souppaya, 2017 .

Guidelines on Firewalls and Firewall Policy

Karen A. Scarfone, Paul Hoffman, Paul Hoffman, 2009 .

Guidelines on Cell Phone and PDA Security | NIST

Karen A. Scarfone, Wayne Jansen, K. Scarfone, 2008 .

SP 800-121. Guide to Bluetooth Security

Karen A. Scarfone, John Padgette, 2008 .

Common Platform Enumeration: Applicability Language Specification Version 2.3

Karen A. Scarfone, Paul R. Cichonski, David Waltermire, 2011 .

Vetting the Security of Mobile Applications

Karen A. Scarfone, Christoph C. Michael, Jeffrey Voas, 2015 .

SP 800-70 Rev. 2. National Checklist Program for IT Products: Guidelines for Checklist Users and Developers

Karen A. Scarfone, Murugiah P. Souppaya, Stephen D. Quinn, 2009 .

SP 800-115. Technical Guide to Information Security Testing and Assessment

Karen A. Scarfone, Murugiah P. Souppaya, Angela Orebaugh, 2008 .

A trust domain management schema for multiple grid environments

Karen A. Scarfone, David F. Ferraiolo, Vincent C. Hu, 2007 .

System and Network Security Acronyms and Abbreviations

Karen A. Scarfone, Victoria Thompson, 2009 .

Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.0

Karen A. Scarfone, Matthew P. Barrett, Stephen D. Quinn, 2010 .

Technical Guide to Information Security Testing and Assessment

Karen A. Scarfone, Murugiah P. Souppaya, Angela Orebaugh, 2008 .

The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities

Karen A. Scarfone, Peter Mell, 2010 .

Trusted Geolocation in the Cloud: Proof of Concept Implementation

Karen A. Scarfone, Hemma Prafullchandra, Murugiah P. Souppaya, 2015 .

Blockchain Technology Overview pdf

Karen A. Scarfone, Peter Mell, Dylan J. Yaga, 2018, ArXiv.

Guidelines on Cell Phone and PDA Security

Karen A. Scarfone, Wayne Jansen, Wayne Jansen, 2008 .

Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist

Karen A. Scarfone, Murugiah P. Souppaya, Dylan J. Yaga, 2016 .

Guidelines on Securing Public Web Servers

Karen A. Scarfone, Wayne Jansen, Miles C. Tracy, 2002 .

Guide to Application Whitelisting

Karen A. Scarfone, Murugiah P. Souppaya, Adam Sedgewick, 2015 .

ITL Bulletin: Stopping Malware and Unauthorized Software Through Application Whitelisting (December 2015)

Karen A. Scarfone, Larry Feldman, Murugiah P. Souppaya, 2015 .

Cyber Security Standards

Karen A. Scarfone, Timothy Grance, Dan Benigni, 2009 .

Implementing Trusted Geolocation Services in the Cloud | NIST

Karen A. Scarfone, Larry Feldman, Michael J. Bartock, 2016 .

Guide to Secure Web Services | NIST

Karen A. Scarfone, Anoop Singhal, Theodore Winograd, 2007 .

SP 800-44 Version 2. Guidelines on Securing Public Web Servers

Karen A. Scarfone, Wayne Jansen, Miles C. Tracy, 2007 .

A Complete Guide to the Common Vulnerability Scoring System Version 2.0 | NIST

Karen A. Scarfone, Peter Mell, Sasha Romanosky, 2007 .

Guide to Securing WiMAX Wireless Communications

Karen A. Scarfone, Matthew Sexton, Cyrus Tibbs, 2010 .

The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2

Karen A. Scarfone, David Waltermire, Stephen D. Quinn, 2009 .

Security Content Automation Protocol (SCAP) Version 1.2 Content Style Guide: Best Practices for Creating and Maintaining SCAP 1.2 Content

Karen A. Scarfone, David Waltermire, Stephen D. Quinn, 2015 .

Securing Interactive and Automated Access Management Using Secure Shell (SSH) | NIST

Karen A. Scarfone, Larry Feldman, Murugiah P. Souppaya, 2016 .

Common Platform Enumeration: Dictionary Specification Version 2.3

Karen A. Scarfone, David Waltermire, Paul R. Cichonski, 2011 .

Hardware-Enabled Security for Server Platforms:

Karen A. Scarfone, Murugiah P. Souppaya, Mourad Cherfaoui, 2020 .

Guide to Malware Incident Prevention and Handling

Karen A. Scarfone, Peter Mell, Joseph Nusbaum, 2005 .

Access Control Policy Composition for Resource Federation Networks Using Semantic Web and Resource Description Framework (RDF) | NIST

Karen A. Scarfone, Stephen Quirolgico, Chung Tong Hu, 2008 .

Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2: Recommendations of the National Institute of Standards and Technology

Karen A. Scarfone, David Waltermire, Stephen D. Quinn, 2011 .

Guide to Enterprise Password Management

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2009 .

Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research

Karen A. Scarfone, Murugiah P. Souppaya, Mike Miller, 2016 .

Guide to Bluetooth Security

Karen A. Scarfone, Lidong Chen, John Padgette, 2008 .

Best Practices for Privileged User PIV Authentication

David A. Cooper, Hildegard Ferraiolo, Karen A. Scarfone, 2016 .

Guide to Malware Incident Prevention and Handling for Desktops and Laptops

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2013 .

Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments

Karen A. Scarfone, Hemma Prafullchandra, Murugiah P. Souppaya, 2018 .

SP 800-82. Guide to Industrial Control Systems (ICS) Security: Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and other control system configurations such as Programmable Logic Controllers (PLC)

Karen A. Scarfone, Joseph A. Falco, Keith A. Stouffer, 2011 .

Guide to Bluetooth Security [Revision 2]

Karen A. Scarfone, John Padgette, Lily Chen, 2017 .

Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases

Karen A. Scarfone, Mourad Cherfaoui, Murugiah Souppaya, 2021 .

Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security

Karen A. Scarfone, Murugiah P. Souppaya, 2016 .

User's Guide to Securing External Devices for Telework and Remote Access

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2007 .

Guidelines for Access Control System Evaluation Metrics

Karen A. Scarfone, Vincent C. Hu, K. Scarfone, 2012 .

SP 800-46 Rev. 1. Guide to Enterprise Telework and Remote Access Security

Karen A. Scarfone, Murugiah Souppaya, Paul Hoffman, 2009 .