About the Standards Blog
New Image Compression Standard JPEG XS Focuses On VR And ARNikholai Koolonavich
–April 24, 2018 - One of the main causes of users feeling nauseous when using virtual reality (VR) is the latency in the image being displayed on the headset unable to keep up with the movement of the users head. The Joint Photographic Experts Groupd (JPEG) have now revealed a new image compression standard that could resolve this problem and allow for better image compression for VR, drones and self-driving cars...the new format is titled JPEG XS. This new format will see the image-compression process using less energy, with higher-quality images being sent with low latency over broadband networks like 5G. The applications for JPEG XS are within the VR, augmented reality (AR) sector along with space imagery, self-driving cars and professional movie editing... Full Story
NIST Releases Version 1.1 of Its Cybersecurity Framework
–April 20, 2018 - The U.S. Commerce Department\'s National Institute of Standards and Technology (NIST) has released version 1.1 of its popular Framework for Improving Critical Infrastructure Cybersecurity, which can assist organizations in addressing cybersecurity as it affects the privacy of its customers, employees, and other parties...Framework for Improving Critical Infrastructure Cybersecurity Version 1.1 includes updates on:
- authentication and identity
- self-assessing cybersecurity risk
- managing cybersecurity within the supply chain
- vulnerability disclosure
ANSI encourages relevant stakeholders to register for NIST\'s free public Webcast, to explore Version 1.1 in detail, on April 27, 2018, at 1 p.m. Eastern time... Full Story
Telecom standards group puts new technology on hold in wake of U.S. probeDiane Bartz
–April 23, 2018 - A telecommunications standards organization - GSMA - said on Saturday it is delaying implementation of a new cellphone technology due to a U.S. government probe of alleged coordination between the group, AT&T Inc (T.N) and Verizon Communications Inc (VZ.N) to hinder consumers from easily switching wireless carriers...
At issue is a technology that could make carriersâ€™ business more volatile... Full Story
ANSI Awarded Contract to Implement Phase V of USTDAâ€™s U.S.-China Standards and Conformity Assessment Cooperation Program
ANSI.org –April 16, 2018 - The American National Standards Institute (ANSI) was recently awarded a contract by the U.S. Trade and Development Agency (USTDA) to implement Phase V of the U.S.-China Standards and Conformity Assessment Cooperation Program (SCCP). USTDA helps companies create U.S. jobs through the export of U.S. goods and services for priority development projects in emerging economies.
ANSI was previously chosen by USTDA to implement Phase III and IV of the SCCP, and the award for Phase V comes as ANSI prepares to conclude the final two workshops under Phase IV, which will cover cold chain logistics and energy performance contracting. As has been the case in past phases, ANSI will organize 20 seminars and workshops mostly in China over the next three years, covering a wide range of sectoral topics related to standards and conformity assessment that impact U.S. and Chinese industry... Full Story
TRANSCOM chief calls on Congress for national cybersecurity standardScott Maucione
–April 13, 2018 - A year ago, U.S. Transportation Command chief Gen. Darren McDew warned Congress that the government needed to bridge the cybersecurity gap with the civilian world.
This year he doubled down on that message, advocating for a national cybersecurity standard to set a â€œlow water markâ€ for what the nation will endure.
A cybersecurity standard would set minimum guidelines, best practices and standards companies must follow to work with the government or to do business in general. The Defense Department follows the National Institute of Standards and Technologyâ€™s cyber framework as its standard... Full Story
Built-In Security For Auto ChipsJeff Dorsch
The email the CEO of General Motors\' fears most, per Jeff Dorsch, writing about automotive chip security –April 12, 2018 - The road to autonomous vehicles depends upon components that are secured against hacking and other outside interference. The cybersecurity precautions necessary for self-driving cars must be embedded in chips and systems from the beginning of the supply chain.
Automotive manufacturers and their Tier 1 suppliers are counting on their electronics vendors to provide products that can withstand the known exploits of cyberattacks. Those elements of the connected car also must have the capability to receive over-the-air software updates to defend against the latest in bots and malware.
But cybersecurity in 2018 has become a cat-and-mouse game between cybercriminals and security professionals, who wage battle with cyberattacks on a daily basis... Full Story
Standards Milestone Could Mark Beginning of End for PasswordsJohn P. Mello Jr.
–April 11, 2018 - A Web standards milestone announced Tuesday could point to the end of the road for pesky passwords.
The new standard, WebAuthn, has won near-final approval from the World Wide Web Consortium, which establishes Web standards.
WebAuthn defines a standard Application Program Interface that can be incorporated into browsers and Web infrastructure. It opens the door for new ways for users to authenticate themselves on the Internet that are more secure and convenient than passwords...The new standard seems to be poised for rapid growth. Google, Microsoft and Mozilla already have committed to supporting WebAuthn in their browsers. Developers have begun to implement the standard for Windows, Mac, Linux, Chrome OS and Android... Full Story
White House Lags Far Behind on Email Security BenchmarkJoseph Marks
–April 10, 2018 - More than 95 percent of White House email domains lack a security feature [ed: the DMARC standard] that prevents them from being used in massive phishing attacks, according to a Wednesday report from a cybersecurity industry group.
The Homeland Security Department mandated those email protections across government in October with a January deadline, but about 40 percent of agency email domains still hadnâ€™t installed the tool as of February 13...In addition to Whitehouse.gov emails, the White House also manages email domains for the Office of Management and Budget, the U.S. Trade Representative and the Office of Science and Technology Policy among others.
DMARC essentially pings a senderâ€™s email domainâ€”irs.gov, for exampleâ€”and asks if the senderâ€”say, firstname.lastname@example.orgâ€”is legitimate. If the domain says the sender is illegitimate, DMARC can send the email to the recipientâ€™s spam folder or decline to deliver it entirely...More than 80 percent of commercial email inboxes are protected by DMARC because itâ€™s standard among major providers including Google, Yahoo and Microsoft... Full Story
CIP4 Announces Availability of XJDF, an Iteration of JDF StandardPress Release
–April 9, 2018 - The CIP4 Organization, a not-for-profit standards association fostering the adoption of process automation in the printing industry, is pleased to announce the availability of XJDF, an iteration of the JDF standard designed to simplify workflow automation by making it both easier to implement and far easier to validate using standard XML tools. CIP4 developed XJDF to build on learnings with the JDF standard over the past nearly two decades. The new standard will coexist with JDF 1.6, which is being released simultaneously. The parallel development of both versions offers options to industry stakeholders wishing to incorporate JDF, XJDF or both into their product offerings and/or production environments... Full Story
Security, Standards, and IoT: Will Connected Devices Flourish Under Prescriptive Regimes?Megan L. Brown, Michael L. Diakiwski
–April 6, 2018 - Security for Internet-connected devices, the "Internet of Things" (IoT), is critically important. Now, more than ever, it is top of mind for device manufacturers, network operators, consumer advocates, lawmakers, and government regulators â€” domestically and internationally. In the face of recent attacks, government authorities and consumer advocates have proposed legislation, frameworks, certifications, and labeling schemes...Domestically and internationally, efforts are underway to establish minimum standards, certifications, or labeling schemes related to IoT security. Privacy and consumer advocates are developing proposals to reshape the certification and labeling of consumer devices.
In March 2017, Consumer Reports announced its \"Digital Standard,\"...It is far from perfect, however. It has prescriptive security requirements and seeks to alter private industry security designs, without first getting industry feedback in the Standard\'s development...
And the rest of the world is not sitting idly by... Full Story