Security definitions beginning with O

Object - permalink - collapse

All > Technology > Security

A passive entity that contains or receives information.
NIST - Cite This Source - This Definition
Browse Related Terms: Distinguishing Identifier, Entity, Initiator, Non-repudiation, Protocol Entity, Responder

Also listed in

All > Technology > E-mail > Microsoft Email > Microsoft Exchange > Microsoft Exchange 2003
All > Technology > E-mail > Microsoft Email > Microsoft Exchange > Microsoft Exchange 5.5
All > Technology > Knowledge Management > Semantic Web
All > Technology > Operating System > Microsoft Windows > Microsoft Windows Server > Microsoft Active Directory
All > Technology > Parallel Computing > Cloud Computing > Amazon Web Services > Amazon S3
All > Technology > Programming > Java
All > Technology > Programming > Perl
All > Technology > Telecommunications

Object Identifier - permalink - collapse

All > Technology > Security

A specialized formatted number that is registered with an internationally recognized standards organization. The unique alphanumeric/numeric identifier registered under the ISO registration standard to reference a specific object or object class. In the federal government PKI they are used to uniquely identify each of the four policies and cryptographic algorithms supported.
NIST - Cite This Source - This Definition
Browse Related Terms: Attribute Authority, Federal Bridge Certification Authority (FBCA), Federal Bridge Certification Authority Membrane, Federal Bridge Certification Authority Operational Authority, Federal Public Key Infrastructure Policy Authority (FPKI PA), FIPS PUB, Policy Management Authority (PMA), Policy Mapping, Public Key Infrastructure, Public Key Infrastructure (PKI)

Off-Card - permalink - collapse

All > Technology > Security

Refers to data that is not stored within the PIV card or computation that is not done by the Integrated Circuit Chip (ICC) of the PIV card.
NIST - Cite This Source - This Definition
Browse Related Terms: Mandatory Topography, Media, On-Card, Optional Topography, Smart Card, Standard, Standard Topography, Topology

Off-line Attack - permalink - collapse

All > Technology > Security

An attack where the attacker obtains some data (typically by eavesdropping on an authentication protocol run, or by penetrating a system and stealing security files) that he/she is able to analyze in a system of his/her own choosing.
NIST - Cite This Source - This Definition
Browse Related Terms: Blended Attack, Cyclical Redundancy Check (CRC), Man-in-the-middle Attack (MitM), On-line Attack, Passive Attack, Precursor, Purge, Verifier Impersonation Attack, Victim

On-Card - permalink - collapse

All > Technology > Security

Refers to data that is stored within the PIV card or computation that is done by the ICC of the PIV card.
NIST - Cite This Source - This Definition
Browse Related Terms: Mandatory Topography, Media, Off-Card, Optional Topography, Smart Card, Standard, Standard Topography, Topology

One-to-many - permalink - collapse

All > Technology > Security > Biometrics

A phrase used in the biometrics community to describe a system that compares one reference to many enrolled references to make a decision. The phrase typically refers to the identification or watchlist tasks.
NSTC Subcommittee on Biometrics - Cite This Source - This Definition
Browse Related Terms: Benchmarking, Binning, Biometric Data, Biometric System, Comparison, Enrollment, Extraction, Identification, One-to-one, Probe, Radio Frequency Identification (RFID), Reference

One-to-one - permalink - collapse

All > Technology > Security > Biometrics

A phrase used in the biometrics community to describe a system that compares one reference to one enrolled reference to make a decision. The phrase typically refers to the verification task (though not all verification tasks are truly one-to-one) and the identification task can be accomplished by a series of one-to-one comparisons.
NSTC Subcommittee on Biometrics - Cite This Source - This Definition
Browse Related Terms: Benchmarking, Binning, Biometric Data, Biometric System, Comparison, Enrollment, Extraction, Identification, One-to-many, Probe, Radio Frequency Identification (RFID), Reference

One-Way Hash Algorithm - permalink - collapse

All > Technology > Security

Hash algorithms which map arbitrarily long inputs into a fixed-size output such that it is very difficult (computationally infeasible) to find two different hash inputs that produce the same output. Such algorithms are an essential part of the process of producing fixed-size digital signatures that can both authenticate the signer and provide for data integrity checking (detection of input modification after signature).
NIST - Cite This Source - This Definition
Browse Related Terms: Collision, Cryptographic Hash Function, Hash Function, Hashing

On-line Attack - permalink - collapse

All > Technology > Security

An attack against an authentication protocol where the attacker either assumes the role of a claimant with a genuine verifier or actively alters the authentication channel. The goal of the attack may be to gain authenticated access or learn authentication secrets.
NIST - Cite This Source - This Definition
Browse Related Terms: Blended Attack, Cyclical Redundancy Check (CRC), Man-in-the-middle Attack (MitM), Off-line Attack, Passive Attack, Precursor, Purge, Verifier Impersonation Attack, Victim

Biometric task that more closely follows operational biometric system conditions to 1) determine if someone is in a database and 2) find the record of the individual in the database. This is sometimes referred to as the "watchlist" task to differentiate it from the more commonly referenced closed-set identification. See also closed-set identification, identification.
NSTC Subcommittee on Biometrics - Cite This Source - This Definition
Browse Related Terms: Attempt, Authentication, Claim of identity, Closed-set Identification, Cumulative Match Characteristic (CMC), Impostor, PIN (Personal Identification Number), Verification, Watchlist

Operational Controls - permalink - collapse

All > Technology > Security

The security controls (i.e., safeguards or countermeasures) for an information system that primarily are implemented and executed by people (as opposed to systems).
NIST - Cite This Source - This Definition
Browse Related Terms: Baseline Security, Compensating Controls, Compensating Security Controls, Countermeasures, Management Controls, Protective Distribution System, Safeguards, Security Controls, Technical Controls

Operational Evaluation - permalink - collapse

All > Technology > Security > Biometrics

One of the three types of performance evaluations. The primary goal of an operational evaluation is to determine the workflow impact seen by the addition of a biometric system. See also technology evaluation, scenario evaluation.
NSTC Subcommittee on Biometrics - Cite This Source - This Definition
Browse Related Terms: Gallery, Neural Net/Neural Network, Scenario Evaluation, Technology Evaluation

Also listed in

All > Technology > Defense

Optional Topography - permalink - collapse

All > Technology > Security

A Personal Identity Verification (PIV) card having both the Standard Topography (Mandatory Topography) features and the Optional features as defined in FIPS 201 sections 4.1.4.3 and 4.1.4.4.
NIST - Cite This Source - This Definition
Browse Related Terms: Mandatory Topography, Media, Off-Card, On-Card, Smart Card, Standard, Standard Topography, Topology

Outside Threat - permalink - collapse

All > Technology > Security

An unauthorized entity from outside the domain perimeter that has the potential to harm an Information System through destruction, disclosure, modification of data, and/or denial of service.
NIST - Cite This Source - This Definition
Browse Related Terms: Adequate Security, Classified Information, Compromise, Criticality Level, Impact, Infrared, Inside Threat, Major Application, Minor Application

Overt - permalink - collapse

All > Technology > Security > Biometrics

Biometric sample collection where end users know they are being collected and at what location. An example of an overt environment is the US-VISIT program where non-U.S. citizens entering the United States submit their fingerprint data. See also covert.
NSTC Subcommittee on Biometrics - Cite This Source - This Definition
Browse Related Terms: Cooperative User, Covert, End User, Indifferent User, Non-cooperative User, Uncooperative User, User

ExpertGlossary

Object - permalink - collapse

Object Identifier - permalink - collapse

Off-Card - permalink - collapse

Off-line Attack - permalink - collapse

On-Card - permalink - collapse

One-to-many - permalink - collapse

One-to-one - permalink - collapse

One-Way Hash Algorithm - permalink - collapse

On-line Attack - permalink - collapse

On-Line Certificate Status Protocol (OCSP) - permalink - collapse

Online Certification Status Protocol (OCSP) - permalink - collapse

Open-set Identification - permalink - collapse

Operational Controls - permalink - collapse

Operational Evaluation - permalink - collapse

Optional Topography - permalink - collapse

Outside Threat - permalink - collapse

Overt - permalink - collapse

Security Expert Links