Murugiah Souppaya

发表

Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD)

Brian Weis, Parisa Grayeli, Blaine Mulugeta, 2021 .

Guidelines for Managing the Security of Mobile Devices in the Enterprise

K. Scarfone, Murugiah Souppaya, 2013 .

[Project Description] Validating the Integrity of Servers and Client Devices: Supply Chain Assurance (Draft)

W. Polk, Murugiah P. Souppaya, Andrew R. Regenscheid, 2019 .

Guideline on Network Security Testing

Murugiah P. Souppaya, John P. Wack, Miles C. Tracy, 2003 .

Guide to Enterprise Password Management

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2009 .

Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions

K. Scarfone, Murugiah Souppaya, Jeffrey E. Greene, 2020 .

Guide to Security for Full Virtualization Technologies

Karen A. Scarfone, Murugiah P. Souppaya, Paul Hoffman, 2011 .

ITL Bulletin: NIST Guidance on Application Container Security (October 2017)

Ramaswamy Chandramouli, Karen A. Scarfone, Murugiah P. Souppaya, 2017 .

Mitigating the Risk of Software Vulnerabilities by Adopting a Secure Software Development Framework (SSDF)

Karen A. Scarfone, Murugiah P. Souppaya, Donna Dodson, 2020 .

Guide to Computer Security Log Management: Recommendations of the National Institute of Standards and Technology [Draft April 2006]

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2006 .

Guide to Enterprise Patch Management Technologies

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2013 .

Guide to Computer Security Log Management

Karen Kent, Murugiah P. Souppaya, Murugiah Souppaya, 2006 .

NIST Guidance on Application Container Security | NIST

Ramaswamy Chandramouli, Karen A. Scarfone, Murugiah P. Souppaya, 2017 .

User's Guide to Securing External Devices for Telework and Remote Access

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2007 .

Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft)

Karen A. Scarfone, Murugiah P. Souppaya, Kevin Stine, 2020 .

Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology

Murugiah Souppaya, 2021 .

Guidance for securing Microsoft Windows XP for IT Professionals :: a NIST security configuration checklist : recommendations of the National Institute of Standards and Technology

Karen Kent, Murugia Souppaya, Paul M Johnson, 2005 .

Managing Software Patches and Vulnerabilities

Karen A. Scarfone, Peter Mell, Murugiah P. Souppaya, 2015 .

BIOS protection guidelines

David A. Cooper, Murugiah P. Souppaya, W. Polk, 2011 .

Security Considerations for Code Signing

Michael J. Boyle, Murugiah P. Souppaya, Andrew R. Regenscheid, 2018 .

Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management (Draft)

W. Polk, Murugiah P. Souppaya, Susan Symington, 2020 .

Security Considerations for Exchanging Files Over the Internet

Karen A. Scarfone, Murugiah P. Souppaya, Matthew Scholl, 2020 .

SMPTE Declarative Data Essence: Comparison to ATSC DASE

Murugiah P. Souppaya, John Barkley, Leonard E. Gebase, 2001 .

Methodology for Characterizing Network Behavior of Internet of Things Devices

Murugiah P. Souppaya, Paul T. Watrobski, Joshua Klosterman, 2020 .

Cyber Security Metrics and Measures | NIST

Karen A. Scarfone, Murugiah P. Souppaya, Paul E. Black, 2009 .

[Project Description] 5G Cybersecurity: Preparing a Secure Evolution to 5G (Draft)

Murugiah P. Souppaya, Jeffrey A. Cichonski, Michael J. Bartock, 2020 .

Application Container Security Guide (2nd Draft)

Karen A. Scarfone, Murugiah P. Souppaya, John Morello, 2017 .

Guide for Cybersecurity Incident Recovery | NIST

Larry Feldman, Gregory A. Witte, Murugiah P. Souppaya, 2017 .

Best Practices for Privileged User PIV Authentication

David A. Cooper, Hildegard Ferraiolo, Karen A. Scarfone, 2016 .

[Project Description] TLS Server Certificate Management

Russ Housley, Paul Turner, W. Polk, 2017 .

ITL Bulletin: Securing Interactive and Automated Access Management Using Secure Shell (SSH) (January 2016)

Karen A. Scarfone, Larry Feldman, Murugiah P. Souppaya, 2016 .

[Project Description] TLS Server Certificate Management (Draft)

Russ Housley, Paul Turner, Murugiah P. Souppaya, 2017 .

Guidance for Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist | NIST

Karen Kent, Murugiah P. Souppaya, Paul M. Johnson, 2005 .

Guideline on Network Security Testing: Recommendations of the National Institute of Standards and Technology

Murugiah P. Souppaya, John P. Wack, Miles C. Tracy, 2003 .

Guide for Cybersecurity Incident Recovery

Larry Feldman, Gregory A. Witte, Murugiah P. Souppaya, 2017 .

Systems Administration Guidance for Securing Microsoft Windows 2000 Professional System | NIST

Murugiah P. Souppaya, Mark McLarnon, Anthony B. Harris, 2002 .

[Project Description] Critical Cybersecurity Hygiene: Patching the Enterprise (Draft)

Karen A. Scarfone, Murugiah P. Souppaya, Kevin Stine, 2018 .

ITL Bulletin: Stopping Malware and Unauthorized Software Through Application Whitelisting (December 2015)

Karen A. Scarfone, Larry Feldman, Murugiah P. Souppaya, 2015 .

Derived Personal Identity Verification (PIV) Credentials (2nd Draft)

Hildegard Ferraiolo, William Newhouse, Murugiah P. Souppaya, 2018 .

Getting Ready for Post-Quantum Cryptography:

W. Polk, Murugiah P. Souppaya, William Barker, 2020 .

ITL Bulletin: Guide for Cybersecurity Incident Recovery (February 2017)

Larry Feldman, Gregory A. Witte, Murugiah P. Souppaya, 2017 .

Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms

Michael J. Bartock, Murugiah Souppaya, A. Youssef, 2021 .

Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities

Karen Scarfone, Murugiah Souppaya, Donna Dodson, 2021 .

Hardware-Enabled Security:

Karen A. Scarfone, Murugiah Souppaya, Jerry Wheeler, 2020 .

Migration to Post Quantum Cryptography

W. Barker, Murugiah Souppaya, 2021 .

Securing web transactions TLS server certificate management

Paul Turner, Murugiah P. Souppaya, William Haag, 2019 .

Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases

Karen A. Scarfone, Mourad Cherfaoui, Murugiah Souppaya, 2021 .

Guide to Malware Incident Prevention and Handling for Desktops and Laptops

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2013 .

Application Container Security Guide

Karen A. Scarfone, Murugiah P. Souppaya, John Morello, 2017 .

Guide to Application Whitelisting

Karen A. Scarfone, Murugiah P. Souppaya, Adam Sedgewick, 2015 .

Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic Algorithms

William T. Polk, William C. Barker, Murugiah Souppaya, 2021 .

Technical Guide to Information Security Testing and Assessment

Karen A. Scarfone, Murugiah P. Souppaya, Angela Orebaugh, 2008 .

SP 800-70 Rev. 2. National Checklist Program for IT Products: Guidelines for Checklist Users and Developers

Karen A. Scarfone, Murugiah P. Souppaya, Stephen D. Quinn, 2009 .

Cyber Security Metrics and Measures

Karen A. Scarfone, Murugiah P. Souppaya, Paul E. Black, 2008 .

Guide for Cybersecurity Event Recovery

Karen A. Scarfone, Gregory A. Witte, Murugiah P. Souppaya, 2016 .

Guide to Data-Centric System Threat Modeling

Karen A. Scarfone, Murugiah P. Souppaya, K. Scarfone, 2016 .

Derived Personal Identity Verification (PIV) credentials:

Hildegard Ferraiolo, William Newhouse, Murugiah P. Souppaya, 2019 .

SP 800-111. Guide to Storage Encryption Technologies for End User Devices

Karen A. Scarfone, Murugiah P. Souppaya, Matthew Sexton, 2007 .