The National Institute of Standards and Technology is seeking public comment on two proposed research projects for protecting data confidentiality, which can often indicate a system breach.

The NIST National Cybersecurity Center of Excellence (NCCoE) is seeking industry feedback on their new project description discussing successful continuous monitoring capabilities able to automatically and efficiently detect when a malicious actor gains access to an organization’s IT infrastructure.

The National Institute of Standards and Technology (NIST) and the National Cybersecurity Center of Excellence (NCCoE) have produced a guide that includes several recommendations and best practices for securing PACS architectures.

A NIST practice guide contains suggestions for how to prevent the use of stolen credit card data in online shopping. The guide, currently in draft format and expected to post in final form in June, is designed to help prevent credential stuffing and account takeovers, as well as remedy vulnerabilities such as failure to lock out users who enter multiple incorrect passwords. The guidelines work with existing technologies, NCCoE says; the agency worked with RSA and Splunk, among others, to test the ideas. The guide does not study how security would work for customers who prefer to shop as a guest or who shop on mobile devices.