NSA Cybersecurity Advisories & Guidance


NSA leverages its elite technical capability to develop advisories and mitigations on evolving cybersecurity threats.

Browse or search our repository of advisories, info sheets, tech reports, and operational risk notices listed below. Some resources have access requirements.

For a subset of cybersecurity products focused on telework and general network security for end users, view our Telework and Mobile Security Guidance page.

To read our complete series on protecting DoD microelectronics from adversary influence, view our DoD Microelectronics Guidance page.
 

ImageTitlePublication Date
CTR: DoD Microelectronics: Field Programmable Gate Array Level of Assurance Quick Start GuideCTR: DoD Microelectronics: Field Programmable Gate Array Level of Assurance Quick Start Guide10/6/2023
CTR: DoD Microelectronics: Field Programmable Gate Array Overall Assurance Process (May 2024 Update)CTR: DoD Microelectronics: Field Programmable Gate Array Overall Assurance Process (May 2024 Update)5/13/2024
CTR: DoD Microelectronics: Field Programmable Gate Array Security GuidanceCTR: DoD Microelectronics: Field Programmable Gate Array Security Guidance1/6/2025
CTR: DoD Microelectronics: Levels of Assurance Definitions and ApplicationsCTR: DoD Microelectronics: Levels of Assurance Definitions and Applications7/14/2022
CTR: DoD Microelectronics: NSA Evaluation of Commercially Available Embedded FPGAsCTR: DoD Microelectronics: NSA Evaluation of Commercially Available Embedded FPGAs12/4/2023
CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 1CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 112/8/2022
CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 2CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 22/27/2023
CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 3CTR: DoD Microelectronics: Third-Party IP Review Process for Level of Assurance 36/29/2023
CTR: Joint Guidance: Identifying and Mitigating Living Off the Land TechniquesCTR: Joint Guidance: Identifying and Mitigating Living Off the Land Techniques2/7/2024
CTR: Network Infrastructure Security Guide (October 2023 Update)CTR: Network Infrastructure Security Guide (October 2023 Update)6/15/2022
CTR: UEFI Secure Boot Customization (March 2023 Update)CTR: UEFI Secure Boot Customization (March 2023 Update)3/20/2023
AUTHENTICATION_MECHANISMS_CSA_EXEC_U_OO_198854_20.PDFCybersecurity Advisory: (Abridged) Detecting Abuse of Authentication Mechanisms (December 2020)12/17/2020
AUTHENTICATION_MECHANISMS_CSA_U_OO_198854_20.PDFCybersecurity Advisory: (Full) Detecting Abuse of Authentication Mechanisms (December 2020)12/17/2020
CSA_CHINESE_EXPLOIT_VULNERABILITIES_UOO179811.PDFCybersecurity Advisory: Chinese State-Sponsored Actors Exploit Publicly Known Vulnerabilities (October 2020)10/20/2020
ADVISORY FURTHER TTPS ASSOCIATED WITH SVR CYBER ACTORS.PDFCybersecurity Advisory: Further TTPs associated with SVR cyber actors5/7/2021
Page 10 of 16

Additional Documents

Some guidance is protected and requires use of a DoD Common Access Card (CAC) to access. Visit https://cyber.mil/nsa/cybersecurity-advisories-and-technical-guidance/ to access the following and other protected documents:

  • Avoid Dangers of Wildcard TLS Certificates and the ALPACA Technique (FOUO version)
  • Protecting VSAT Communications
  • Quantum Security of Symmetric Cryptography and Hash Functions: A Review
  • Securing AWS S3
  • Security Considerations for Office 365 Government Customers