Security terms starting with I

71 terms

  1. ICE (Iris Challenge Evaluation) A large-scale development and independent technology evaluation activity for iris recognition systems sponsored by the U.S. Government in 2005.
  2. Identification The process of verifying the identity of a user, process, or device, usually as a prerequisite for granting access to resources in an IT system.
  3. Identification Rate The rate at which an individual in a database is correctly identified.
  4. identifier A programmer-defined name for a variable, method, class or interface.
  5. Identity The topological overlay of a coverage (input) with a polygon coverage (identity).
  6. Identity Binding Binding of the vetted claimed identity to the individual (through biometrics) according to the issuing authority.
  7. Identity Governance The combination of policies and actions taken to ensure enterprise-wide consistency, privacy protection and appropriate interoperability between…
  8. Identity Management The ability to encrypt user credentials in a secure store.
  9. Identity Proofing The process by which a Credentials Service Provider (CSP) and a Registration Authority (RA) validate sufficient information to uniquely identify a person.
  10. Identity Registration The process of making a persons identity known to the Personal Identity Verification (PIV) system, associating a unique identifier with that identity, and…
  11. Identity Verification The process of affirming that a claimed identity is correct by comparing the offered claims of identity with previously proven information stored in the…
  12. Identity-Based Security Policy A security policy based on the identities and/or attributes of the object (system resource) being accessed and of the subject (user, group of users…
  13. IDS -- see Information Disclosure Statement
  14. IDS Host-Based IDSs which operate on information collected from within an individual computer system.
  15. IDS Network-Based IDSs which detect attacks by capturing and analyzing network packets. Listening on a network segment or switch, one network-based IDS can monitor the…
  16. Image To image a hard drive is to make an identical copy of the hard drive, including empty sectors.
  17. Impact The effect, influence, alteration, or imprint caused by an action.
  18. Impostor A person who submits a biometric sample in either an intentional or inadvertent attempt to claim the identity of another person to a biometric system.
  19. Inappropriate Usage A person who violates acceptable computing use policies.
  20. Incident A violation or imminent threat of violation of computer security policies, acceptable use policies, or standard computer security practices.
  21. Incident Handling The mitigation of violations of security policies and recommended practices.
  22. Incident management Executing a defensive response when a network’s security is threatened.
  23. Incident Response Plan The documentation of a predetermined set of instructions or procedures to detect, respond to, and limit consequences of a malicious cyber attacks against…
  24. INCITS (International Committee for Information Technology Standards) Organization that promotes the effective use of information and communication technology through standardization in a way that balances the interests of…
  25. Inculpatory Evidence Evidence which tends to show the defendant’s guilt.
  26. Indication In medicine, a sign, symptom, or medical condition that leads to the recommendation of a treatment, test, or procedure.
  27. Indifferent User An individual who knows his/her biometric sample is being collected and does not attempt to help or hinder the collection of the sample.
  28. Individual An object or instance of a class.
  29. Information Accusatory document, filed by a prosecutor, detailing misdemeanor charges against a party.
  30. Information Assurance Measures that protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and…
  31. Information Owner Official with statutory or operational authority for specified information and responsibility for establishing the controls for its generation…
  32. Information Resources Information and related resources, such as personnel, equipment, funds, and information technology.
  33. Information Security The protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to…
  34. Information Security Policy Aggregate of directives, regulations, rules, and practices that prescribes how an organization manages, protects, and distributes information.
  35. Information Sharing The requirements for information sharing by an IT system with one or more other IT systems or applications, for information sharing to support multiple…
  36. information system A system which provides input, storage, processing, communications, output, and control functions in relation to information and data.
  37. Information System Owner Official responsible for the overall procurement, development, integration, modification, or operation and maintenance of an information system.
  38. Information System Owner (or Program Manager) Official responsible for the overall procurement, development, integration, modification, or operation and maintenance of an information system.
  39. Information System Security Officer (ISSO) Individual assigned responsibility by the senior agency information security officer, authorizing official, management official, or information system…
  40. Information Technology Any equipment or interconnected system or subsystem of equipment that is used in the automatic acquisition, storage, manipulation, management, movement…
  41. Information Type A specific category of information (e.g., privacy, medical, proprietary, financial, investigative, contractor sensitive, security management), defined by…
  42. Infrared The range of invisible radiation wavelengths from about 700 nm, just longer than red in the visible spectrum, to 1 mm, on the border of the microwave…
  43. Ingress Filtering The process of blocking incoming packets that use obviously false IP addresses, such as reserved source addresses.
  44. Initialization Vector (IV) A vector used in defining the starting point of an encryption process within a cryptographic algorithm.
  45. Initiator The entity that initiates an authentication exchange.
  46. Inside Threat An entity with authorized access that has the potential to harm an information system through destruction, disclosure, modification of data, and/or denial…
  47. Integrated Automated Fingerprint Identification System (IAFIS) The FBI's large-scale ten fingerprint (open-set) identification system that is used for criminal history background checks and identification of latent…
  48. Integrity Guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity.
  49. Intellectual Property Creations of the mind - creative works or ideas embodied in a form that can be shared or can enable others to recreate, emulate, or manufacture them.
  50. Interconnection Security Agreement (ISA) An agreement established between the organizations that own and operate connected IT systems to document the technical requirements of the interconnection.
  51. Interconnection, System SEE System Interconnection
  52. Intermediate Certification Authority (CA) A Certification Authority that is subordinate to another CA, and has a CA subordinate to itself.
  53. Interoperability The ability of systems, units, or forces to provide services to or accept services from other systems, units, or forces and to use the services so…
  54. Intrusion Detection System (IDS) Software that looks for suspicious activity and alerts administrators.
  55. Intrusion Prevention Systems Systems which can detect an intrusive activity and can also attempt to stop the activity, ideally before it reaches its targets.
  56. Inverse Cipher Series of transformations that converts ciphertext to plaintext using the Cipher Key.
  57. IP Address A string of four numbers separated by periods used to represent a computer on the Internet.
  58. IP Security (IPsec) An Institute of Electrical and Electronic Engineers (IEEE) standard, Request For Comments (RFC) 2411, protocol that provides security capabilities at the…
  59. Iris Recognition A biometric modality that uses an image of the physical structure of an individual's iris for recognition purposes, as illustrated below.
  60. IrisCode© A biometric feature format used in the Daugman iris recognition system.
  61. ISO (International Organization for Standardization) A non-governmental network of the national standards institutes from 151 countries.
  62. IT Security Architecture A description of security principles and an overall approach for complying with the principles that drive the system design; i.e.
  63. IT Security Awareness The purpose of awareness presentations is simply to focus attention on security.
  64. IT Security Awareness and Training Program Explains proper rules of behavior for the use of agency IT systems and information.
  65. IT Security Education IT Security Education seeks to integrate all of the security skills and competencies of the various functional specialties into a common body of…
  66. IT Security Goal The five security goals are confidentiality, availability, integrity, accountability, and assurance.
  67. IT Security Investment An IT application or system that is solely devoted to security. For instance, intrusion detection systems (IDS) and public key infrastructure (PKI) are…
  68. IT Security Metrics Metrics based on IT security performance goals and objectives.
  69. IT Security Policy The documentation of IT security decisions in an organization. NIST SP 800-12 categorizes IT Security Policy into three basic types: 1) Program…
  70. IT Security Training IT Security Training strives to produce relevant and needed security skills and competencies by practitioners of functional specialties other than IT…
  71. IT-Related Risk The net mission/business impact considering 1) the likelihood that a particular threat source will exploit, or trigger, a particular information system…