ICE (Iris Challenge Evaluation)A large-scale development and independent technology evaluation activity for iris recognition systems sponsored by the U.S. Government in 2005.
IdentificationThe process of verifying the identity of a user, process, or device, usually as a prerequisite for granting access to resources in an IT system.
Identification RateThe rate at which an individual in a database is correctly identified.
identifierA programmer-defined name for a variable, method, class or interface.
IdentityThe topological overlay of a coverage (input) with a polygon coverage (identity).
Identity BindingBinding of the vetted claimed identity to the individual (through biometrics) according to the issuing authority.
Identity GovernanceThe combination of policies and actions taken to ensure enterprise-wide consistency, privacy protection and appropriate interoperability between…
Identity ManagementThe ability to encrypt user credentials in a secure store.
Identity ProofingThe process by which a Credentials Service Provider (CSP) and a Registration Authority (RA) validate sufficient information to uniquely identify a person.
Identity RegistrationThe process of making a persons identity known to the Personal Identity Verification (PIV) system, associating a unique identifier with that identity, and…
Identity VerificationThe process of affirming that a claimed identity is correct by comparing the offered claims of identity with previously proven information stored in the…
Identity-Based Security PolicyA security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users…
IDS Host-BasedIDSs which operate on information collected from within an individual computer system.
IDS Network-BasedIDSs which detect attacks by capturing and analyzing network packets. Listening on a network segment or switch, one network-based IDS can monitor the…
ImageTo image a hard drive is to make an identical copy of the hard drive, including empty sectors.
ImpactThe effect, influence, alteration, or imprint caused by an action.
ImpostorA person who submits a biometric sample in either an intentional or inadvertent attempt to claim the identity of another person to a biometric system.
IncidentA violation or imminent threat of violation of computer security policies, acceptable use policies, or standard computer security practices.
Incident HandlingThe mitigation of violations of security policies and recommended practices.
Incident managementExecuting a defensive response when a network’s security is threatened.
Incident Response PlanThe documentation of a predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyber attacks against…
IndicationIn medicine, a sign, symptom, or medical condition that leads to the recommendation of a treatment, test, or procedure.
Indifferent UserAn individual who knows his/her biometric sample is being collected and does not attempt to help or hinder the collection of the sample.
InformationAccusatory document, filed by a prosecutor, detailing misdemeanor charges against a party.
Information AssuranceMeasures that protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and…
Information OwnerOfficial with statutory or operational authority for specified information and responsibility for establishing the controls for its generation…
Information ResourcesInformation and related resources, such as personnel, equipment, funds, and information technology.
Information SecurityThe protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to…
Information Security PolicyAggregate of directives, regulations, rules, and practices that prescribes how an organization manages, protects, and distributes information.
Information SharingThe requirements for information sharing by an IT system with one or more other IT systems or applications, for information sharing to support multiple…
information systemA system which provides input, storage, processing, communications, output, and control functions in relation to information and data.
Information System OwnerOfficial responsible for the overall procurement, development, integration, modification, or operation and maintenance of an information system.
Information System Owner (or Program Manager)Official responsible for the overall procurement, development, integration, modification, or operation and maintenance of an information system.
Information System Security Officer (ISSO)Individual assigned responsibility by the senior agency information security officer, authorizing official, management official, or information system…
Information TechnologyAny equipment or interconnected system or subsystem of equipment that is used in the automatic acquisition, storage, manipulation, management, movement…
Information TypeA specific category of information (e.g., privacy, medical, proprietary, financial, investigative, contractor sensitive, security management), defined by…
InfraredThe range of invisible radiation wavelengths from about 700 nm, just longer than red in the visible spectrum, to 1 mm, on the border of the microwave…
Ingress FilteringThe process of blocking incoming packets that use obviously false IP addresses, such as reserved source addresses.
Initialization Vector (IV)A vector used in defining the starting point of an encryption process within a cryptographic algorithm.
InitiatorThe entity that initiates an authentication exchange.
Inside ThreatAn entity with authorized access that has the potential to harm an information system through destruction, disclosure, modification of data, and/or denial…
IntegrityGuarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity.
Intellectual PropertyCreations of the mind - creative works or ideas embodied in a form that can be shared or can enable others to recreate, emulate, or manufacture them.
Interconnection Security Agreement (ISA)An agreement established between the organizations that own and operate connected IT systems to document the technical requirements of the interconnection.
InteroperabilityThe ability of systems, units, or forces to provide services to or accept services from other systems, units, or forces and to use the services so…
Intrusion Prevention SystemsSystems which can detect an intrusive activity and can also attempt to stop the activity, ideally before it reaches its targets.
Inverse CipherSeries of transformations that converts ciphertext to plaintext using the Cipher Key.
IP AddressA string of four numbers separated by periods used to represent a computer on the Internet.
IP Security (IPsec)An Institute of Electrical and Electronic Engineers (IEEE) standard, Request For Comments (RFC) 2411, protocol that provides security capabilities at the…
Iris RecognitionA biometric modality that uses an image of the physical structure of an individual's iris for recognition purposes, as illustrated below.
IT Security ArchitectureA description of security principles and an overall approach for complying with the principles that drive the system design; i.e.
IT Security AwarenessThe purpose of awareness presentations is simply to focus attention on security.
IT Security EducationIT Security Education seeks to integrate all of the security skills and competencies of the various functional specialties into a common body of…
IT Security GoalThe five security goals are confidentiality, availability, integrity, accountability, and assurance.
IT Security InvestmentAn IT application or system that is solely devoted to security. For instance, intrusion detection systems (IDS) and public key infrastructure (PKI) are…
IT Security MetricsMetrics based on IT security performance goals and objectives.
IT Security PolicyThe documentation of IT security decisions in an organization. NIST SP 800-12 categorizes IT Security Policy into three basic types: 1) Program…
IT Security TrainingIT Security Training strives to produce relevant and needed security skills and competencies by practitioners of functional specialties other than IT…
IT-Related RiskThe net mission/business impact considering 1) the likelihood that a particular threat source will exploit, or trigger, a particular information system…