NIST
The National Institute of Standards and Technology (NIST) is a federal agency within the United States Department of Commerce, founded in 1901. Its core functions include developing industrial and measurement standards as well as technical guidelines and frameworks for fields such as cybersecurity and artificial intelligence, with the aim of promoting technological innovation and enhancing industrial competitiveness. NIST standards and frameworks are widely adopted by government agencies, industry, and academic research institutions.
Core Facts
The EU Artificial Intelligence Act (AI Act) explicitly requires that high-risk AI systems must have human oversight and intervention capabilities.
NIST发布了AI风险管理框架（AI RMF）
The practical framework for zero-trust architecture is defined by the NIST SP 800-207 standard, with core components including the Policy Engine, Policy Administrator, and Policy Enforcement Point.
Timeline (last 90 days)
The NIST Cybersecurity Framework (CSF) is a cybersecurity risk management guide published by the U.S. National Institute of Standards and Technology; CSF 2.0 was released in February 2024 and added a governance function for the first time, expanding the core functions from five to six.
NIST's AI Risk Management Framework borrows ISO/IEC's definition of reliability: the ability of an item to perform as required without failure under given conditions for a given time interval.
CRYSTALS-Kyber (key encapsulation) and CRYSTALS-Dilithium (signatures), selected by NIST post-quantum standardization, are both built on the Module-LWE variant.
The post-quantum cryptographic algorithms already standardized by NIST include CRYSTALS-Kyber (key encapsulation) and CRYSTALS-Dilithium (digital signatures).
The update cycle of cryptographic standards is usually measured in years, and from the discovery of a vulnerability to industry-wide deployment often takes five to ten years or even longer.
NIST standards have already been published, post-quantum migration will take years, and the cost of waiting for the standards to fully mature is a prolonged data exposure window.
This English adaptation cites Anthropic's Building Effective Agents, NIST's AI Risk Management Framework, and IBM's introductory guide to building AI agents.
The AI Risk Management Framework (AI RMF) published by the U.S. NIST emphasizes independent measurement and evaluation.
A large-scale facial recognition algorithm evaluation report published by the National Institute of Standards and Technology (NIST) in 2019 showed that several mainstream algorithms had significantly higher misidentification rates for Black and Asian female groups than for white male groups, with differences of up to tens to hundreds of times.
The U.S. NIST has released the AI Risk Management Framework (AI RMF), and the EU AI Act requires mandatory testing for high-risk systems.
25 more timeline events
All Facts (20)
The EU Artificial Intelligence Act (AI Act) explicitly requires that high-risk AI systems must have human oversight and intervention capabilities.
90%VerifiedNIST发布了AI风险管理框架（AI RMF）
90%VerifiedThe practical framework for zero-trust architecture is defined by the NIST SP 800-207 standard, with core components including the Policy Engine, Policy Administrator, and Policy Enforcement Point.
80%VerifiedThe AI Risk Management Framework published by the U.S. NIST lists transparency as a core element
80%VerifiedAfter a vulnerability enters the NVD (National Vulnerability Database), it is assigned a CVSS score (0–10), where the Critical level corresponds to 9.0–10.0.
75%VerifiedNIST SP 800-207 provides a standard reference for zero trust architecture for federal agencies.
75%VerifiedThe NIST AI RMF was officially released in January 2023, providing a four-dimensional assessment structure of Govern–Map–Measure–Manage.
75%VerifiedThe RBAC permission model was formally proposed by the National Institute of Standards and Technology (NIST) in 1992.
75%VerifiedThe NIST SP 800-207 standard defines in detail the reference model for Zero Trust Architecture
65%VerifiedSHA-256 is a cryptographic hash function in the SHA-2 family with an output length of 256 bits, possessing collision resistance and preimage resistance.
65%VerifiedGoogle's BeyondCorp and the NIST SP 800-207 Zero Trust Architecture standard provide reference frameworks, but zero trust practices for non-human identities (NHI) are still in early stages of exploration.
65%VerifiedThe LWE-based cryptographic scheme Kyber/ML-KEM has been selected by NIST as the post-quantum key encapsulation standard.
65%VerifiedNIST officially released the post-quantum cryptography standards CRYSTALS-Kyber and CRYSTALS-Dilithium algorithms in 2024.
65%VerifiedThe NIST post-quantum standard suite includes ML-DSA (FIPS 204, derived from CRYSTALS-Dilithium) and SLH-DSA (FIPS 205, derived from SPHINCS+) for digital signatures.
65%VerifiedNIST's post-quantum cryptography standardization project, launched in 2016, officially published its first set of standards in 2024: ML-KEM, ML-DSA, and SLH-DSA.
70%VerifiedNIST formally published three post-quantum cryptography Federal Information Processing Standards (FIPS) in August 2024.
65%UnverifiedRBAC（Role-Based Access Control）是NIST于1992年正式提出的访问控制模型
90%Unverified美国NIST发布了IoT设备网络安全指南（NISTIR 8259），但目前仍以自愿遵守为主
85%UnverifiedNIST正在推进IoT设备安全基线标准NISTIR 8259，但目前仍以自愿遵守为主
80%UnverifiedThe Secure by Default principle has since been widely adopted by mainstream security frameworks such as OWASP and NIST.
60%