Skip to main content    

An official website of the United States government

Here’s how you know

**Official websites use .gov**              A **.gov** website belongs to an official government organization in the United States.            

**Secure .gov websites use HTTPS**              A **lock** (  LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.            

https://www.nist.gov/itl/csd/secure-systems-and-applications

            -  Topics  -  All Topics 
-  Advanced communications 
-  Artificial intelligence 
-  Bioscience 
-  Buildings and construction 
-  Chemistry 
-  Climate 
-  Cybersecurity 
-  Electronics 
-  Energy 
-  Environment 
-  Fire 
-  Forensic science 
-  Health 
-  Information technology 
-  Infrastructure 
-  Manufacturing 
-  Materials 
-  Mathematics and statistics 
-  Metrology 
-  Nanotechnology 
-  Neutron research 
-  Performance excellence 
-  Physics 
-  Public safety 
-  Resilience 
-  Standards 
-  Transportation 
 
            -  Publications 
            -  Labs & Major Programs  -  Laboratories    -  Communications Technology Laboratory 
  -  Engineering Laboratory 
  -  Information Technology Laboratory 
  -  Material Measurement Laboratory 
  -  Physical Measurement Laboratory 
-  User Facilities    -  NIST Center for Neutron Research 
  -  CNST NanoFab 
-  Research Test Beds 
-  Research Projects 
-  Tools & Instruments 
-  Major Programs    -  Baldrige Performance Excellence Program 
  -  CHIPS for America Initiative 
  -  Manufacturing Extension Partnership (MEP) 
  -  Office of Advanced Manufacturing 
  -  Special Programs Office 
  -  Technology Partnerships Office 
 
            -  Services & Resources  -  Standards and Measurements    -  Calibration Services 
  -  Laboratory Accreditation (NVLAP) 
  -  Quality System 
  -  Standard Reference Materials (SRMs) 
  -  Standards.gov 
  -  Time Services 
  -  Office of Weights and Measures 
-  Software 
-  Data    -  Chemistry WebBook 
  -  National Vulnerability Database 
  -  Physical Reference Data 
  -  Standard Reference Data (SRD) 
-  Storefront 
-  License & Patents 
-  Computer Security Resource Center (CSRC) 
-  NIST Research Library 
 
            -  News & Events  -  News 
-  Events 
-  Blogs 
-  Feature Stories 
-  Awards 
-  Video Gallery 
-  Image Gallery 
-  Media Contacts 
 
            -  About NIST  -  About Us    -  Leadership 
  -  Organization Structure 
  -  Budget & Planning 
-  Contact Us 
-  Visit 
-  Careers    -  Student programs 
-  Work with NIST 
-  History    -  NIST Digital Archives 
  -  NIST Museum 
  -  NIST and the Nobel 
-  Educational Resources 
 

Information Technology LaboratoryComputer Security Division

# Secure Systems and Applications

We research, develop and produce guidelines, recommendations and best practices for foundational security mechanisms, protocols and services.

## Overview

The Secure Systems and Applications (SSA) Group’s security research focuses on identifying emerging and high-priority technologies, and on developing security solutions that will have a high impact on the U.S. critical information infrastructure. The group conducts research and development on behalf of government and industry from the earliest stages of technology development through proof-of-concept, reference and prototype implementations, and demonstrations. SSA works to transfer new technologies to industry, produce new standards and guidance for federal agencies and industry, and develop tests, test methodologies, and assurance methods.

For more information regarding the Secure Systems and Applications Group, visit the CSRC website.

## Projects / Programs 

                    - Access Control Policy and Implementation Guides
                    - Access Control Policy Testing
                    - AppVet
                    - Attribute Based Access Control
                    - Cloud Computing
                    - Mobile Security and Forensics
                    - Multi-Cloud Security Public Working Group
                    - NIST Personal Identity Verification Program
                    - Open Security Controls Assessment Language
                    - Personal Identity Verification
                    - Policy Machine
                    - Role Based Access Control

## Publications

### Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines

February 12, 2024

Ramaswamy  Chandramouli

### Overview and Considerations of Access Control Based on Attribute Encryption

December 20, 2023

Vincent C.  Hu

### Information and Communications Technology (ICT) Risk Outcomes

November 17, 2023

Stephen  QuinnNahla  Ivy

### A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments

September 13, 2023

Ramaswamy  Chandramouli

View All Publications

## Awards

### 2019 - Gold Medal Award---Ramaswamy Chandramouli

View All Awards

## Contacts

### Group Manager:

                -  David Ferraiolo  david.ferraiolo@nist.gov      (301) 975-3046   

### HEADQUARTERS

301-975-2000

Webmaster | Contact Us | Our Other Offices

TwitterFacebookLinkedInInstagramYouTubeGiphyRSS FeedMailing List

Feedback

            -  Site Privacy 
            -  Accessibility 
            -  Privacy Program 
            -  Copyrights 
            -  Vulnerability Disclosure 
            -  No Fear Act Policy 
            -  FOIA 
            -  Environmental Policy 
            -  Scientific Integrity 
            -  Information Quality Standards 
            -  Commerce.gov 
            -  Science.gov 
            -  USA.gov 
            -  Vote.gov