Comment on Draft NIST Publications

While reading the blog of Keith Jones I learned of a variety of new draft NIST pubs that are open for comment from the general public. You may want to review one or more to provide feedback. I found the following drafts interesting (all are .pdf):

• 800-40 Version 2, Creating a Patch and Vulnerability Management Program


• 800-86, Guide to Computer and Network Data Analysis: Applying Forensic Techniques to Incident Response (which mentions my first book -- thanks)


• 800-83, Guide to Malware Incident Prevention and Handling


• 800-81, Secure Domain Name System (DNS) Deployment Guide

Check their Web site for comment deadlines.