Security terms starting with P

59 terms

Packet Sniffer Software that observes and records network traffic.
Palm Print Recognition A biometric modality that uses the physical structure of an individual's palm print for recognition purposes, as illustrated below.
Parent Organization The organization that is applying for the Personal Identity Verification card on behalf of an applicant.
Passive Attack An attack against an authentication protocol where the attacker intercepts data traveling along the network between the claimant and verifier, but does…
Password A secret code utilized, usually along with a user ID, in order to log on or gain access to a PC, network or other secure system, site or application.
Password Protected The ability to protect a file using a password access control, protecting the data contents from being viewed with the appropriate viewer unless the…
Path Histories Maintaining an authenticatable record of the prior platforms visited by a mobile software agent, so that a newly visited platform can determine whether to…
Payload The input data to the CCM generation-encryption process that is both authenticated and encrypted.
Performance Those operational and support characteristics of the system that allow it to effectively and efficiently perform its assigned mission over time.
Personal Identification Number (PIN) Generally a four-character number or word, the PIN is the secret code given to credit or debit cardholders enabling them to access their accounts.
Personal Identity Verification Authorizing Official An individual who can act on behalf of an agency to authorize the issuance of a credential to an applicant.
Personal Identity Verification Card (PIV Card) Physical artifact (e.g., identity card, smart card) issued to an individual that contains stored identity credentials (e.g.
Personal Identity Verification Issuance Authority An authorized identity card creator that procures FIPS approved blank identity cards, initializes them with appropriate software and data elements for the…
Personal Identity Verification Registration Authority An entity that establishes and vouches for the identity of an applicant to a PIV Issuing Authority.
Personal Identity Verification Requesting Official An individual who can act on behalf of an agency to request a credential for an applicant.
Pharming A method of capturing sensitive information (such as Social Security numbers and passwords) by fooling a user into entering such information on a fake Web…
Phishing When internet fraudsters impersonate a business in an attempt to trick you into giving out your personal information, such as usernames, passwords, and…
Physically Isolated Network A network that is not connected to entities or systems outside a physically controlled space.
PIN (Personal Identification Number) A security method used to show "what you know." Depending on the system, a PIN could be used to either claim or verify a claimed identity.
pixel Picture Element.
Pixels Per Inch (PPI) A measure of the resolution of a digital image. The higher the PPI, the more information is included in the image, and the larger the file size.
Plaintext The least formatted and therefore most portable form of text for computerized documents.
Plaintext Key An unencrypted cryptographic key.
Plan of Action and Milestones (POA&M) A document that identifies tasks needing to be accomplished. It details resources required to accomplish the elements of the plan, any milestones in…
Policy The contract form issued by the company to explain the coverage provided. It is a legal document.
Policy Management Authority (PMA) Body established to oversee the creation and update of Certificate Policies, review Certification Practice Statements, review the results of CA audits for…
Policy Mapping Recognizing that, when a CA in one domain certifies a CA in another domain, a particular certificate policy in the second domain may be considered by the…
Population the totality of items or units of material under consideration.
Port An implanted device through which blood may be withdrawn and drugs may be infused without repeated needle sticks. Also called port-a-cath.
Port Scanning Using a program to remotely determine which ports on a system are open (e.g., whether systems allow connections through those ports).
Potential Impact The loss of confidentiality, integrity, or availability could be expected to have: a limited adverse effect (FIPS 199 low); a serious adverse effect (FIPS…
Practice Statement A formal statement of the practices followed by an authentication entity (e.g., RA, CSP, or verifier); typically the specific steps taken to register and…
Precursor A sign that an attacker may be preparing to cause an incident.
Principal Face value of an obligation, such as a bond or a loan, that must be repaid at maturity.
Principal Certification Authority (CA) The Principal Certification Authority is a CA designated by an Agency to interoperate with the FBCA.
Privacy In genetics, the right of people to restrict access to their genetic information.
Privacy Impact Assessment An analysis of how information is handled: 1) to ensure handling conforms to applicable legal, regulatory, and policy requirements regarding privacy; 2)…
private key In secure communication, an algorithmic pattern used to encrypt messages that only the corresponding public key can decrypt.
Privileged Accounts Individuals who have access to set access rights for users on a given system. Sometimes referred to as system or network administrative accounts.
Probe A sequence of DNA or RNA, labeled or marked with a radioactive isotope, used to detect the presence of complementary nucleotide sequences. See Nucleotide.
Profiling Measuring the characteristics of expected activity so that changes to it can be more easily identified.
Proof of Possession Protocol (PoP Protocol) A protocol where a claimant proves to a verifier that he/she possesses and controls a token (e.g., a key or password).
Protective Distribution System Wire line or fiber optic system that includes adequate safeguards and/or countermeasures (e.g.
Protocol Data Unit A unit of data specified in a protocol and consisting of protocol information and, possibly, user data.
Protocol Entity Entity that follows a set of rules and formats (semantic and syntactic) that determines the communication behavior of other entities.
Protocol Run An instance of the exchange of messages between a claimant and a verifier in a defined authentication protocol that results in the authentication (or…
Proxy If you own common stock in a US corporation, you have the right to vote on certain company policies and elect the board of directors by casting a proxy…
Proxy Agent A proxy agent is a software application running on a firewall or on a dedicated proxy server that is capable of filtering a protocol and routing it to…
proxy server A server that receives requests intended for another server and that acts on the client's behalf (as the client's proxy) to obtain the requested service.
Pseudonym A subscriber name that has been chosen by the subscriber that is not verified as meaningful by identity proofing.
Pseudorandom number generator (PRNG) An algorithm that produces a sequence of bits that are uniquely determined from an initial value called a seed.
Public (Asymmetric) Key Encryption Public key cryptography uses key pairs, a public key and a mathematically related private key.
public key An encryption key associated with a Notes ID that is used to verify an electronic signature, encrypt a message, or identify an authenticating user.
Public Key (Asymmetric) Cryptographic Algorithm A cryptographic algorithm that uses two related keys, a public key and a private key.
public key certificate A unique electronic stamp stored in a Notes or Domino ID file that associates a name with a public key.
Public Key Infrastructure An architecture which is used to bind public keys to entities, enable other entities to verify public key bindings, revoke such bindings, and provide…
Public Key Infrastructure (PKI) A set of policies, processes, server platforms, software and workstations used for the purpose of administering certificates and public-private key pairs…
Public Seed A starting value for a pseudorandom number generator. The value produced by the random number generator may be made public.
Purge To remove information that has no further value from a file, usually according to a records retention schedule