Security terms starting with S

92 terms

S-box Non-linear substitution table used in several byte substitution transformations and in the Key Expansion routine to perform a one for one substitution of…
S/MIME A set of specifications for securing electronic mail. Secure/ Multipurpose Internet Mail Extensions (S/MIME) is based upon the widely used MIME standard…
Safeguards Protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for an information system.
SALT Strategic Arms Limitation Talks.
Sandboxing A method of isolating application modules into distinct fault domains enforced by software.
Sanitization Process to remove information from media such that information recovery is not possible. It includes removing all labels, markings, and activity logs.
Scanning Scanning is the process of converting a hard copy paper document into a digital image for use in a computer system.
Scenario Evaluation One of the three types of performance evaluations. The primary goal of a scenario evaluation is to measure performance of a biometric system operating in…
Scoping Guidance Provides organizations with specific technology-related, infrastructure-related, public access-related, scalability-related, common security…
Script kiddie A "cracker" who is not a "hacker", but knows just enough to run canned scripts. A cargo-cult programmer.
Secret (Symmetric) Key Encryption This is the traditional method used for encryption. The same key is used for both encryption and decryption.
Secret Key A cryptographic key that is used with a secret key (symmetric) cryptographic algorithm, that is uniquely associated with one or more entities and is not…
Secret Key (symmetric) Cryptographic Algorithm A cryptographic algorithm that uses a single secret key for both encryption and decryption.
Secret Seed A secret value that used to initialize a pseudorandom number generator. The resulting value from the random number generator remains secret or private.
Secure Communication Protocol A communication protocol that provides the appropriate confidentiality, authentication and content integrity protection.
Secure Hash Algorithm (SHA-1) The Secure Hash Algorithm defined in Federal Information Processing Standard 180-1.
Secure Socket Layer and Transport Layer Security (SSL and TSL) Secure Sockets Layer is a protocol developed by Netscape for transmitting private documents via the Internet.
Secure/Multipurpose Internet Mail Extensions (S/MIME) A set of specifications for securing electronic mail. S/MIME is based upon the widely used MIME standard [MIME] and describes a protocol for adding…
Security Accreditation The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to…
Security Assertion Markup Language (SAML) A specification for encoding security assertions in the Extensible Markup Language (XML).
Security Attribute A security-related quality of an object. Security attributes may be represented as hierarchical levels, bits in a bit map, or numbers.
Security Authorization The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to…
Security Category The characterization of information or an information system based on an assessment of the potential impact that a loss of confidentiality, integrity, or…
Security Control Baseline The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system.
Security Control Enhancements Statements of security capability to: 1) build in additional, but related, functionality to a basic control; and/or 2) increase the strength of a basic…
Security Controls The management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the…
Security Domain A set of subjects, their information objects, and a common security policy.
Security Goals The five security goals are confidentiality, availability, integrity, accountability, and assurance.
Security Impact Analysis The analysis conducted by an agency official, often during the continuous monitoring phase of the security certification and accreditation process, to…
Security Label Explicit or implicit marking of a data structure or output media associated with an information system representing the FIPS 199 security category, or…
Security Level The combination of hierarchical classification and a set of non-hierarchical categories that represents the sensitivity of information.
Security Objective Confidentiality, integrity, or availability.
Security Perimeter SEE Accreditation Boundary.
Security Plan SEE System Security Plan.
Security Policy The set of laws, rules, and practices that regulate how an organization manages, protects, and distributes sensitive information.
Security Requirements Requirements levied on an information system that are derived from laws, executive orders, directives, policies, instructions, regulations, or…
Security Service A capability that supports one, or many, of the security goals. Examples of security services are key management, access control, and authentication.
Security Tag Information unit containing a representation of certain security-related information (e.g., a restrictive attribute bit map).
Segmentation A process by which path control divides basic information units into smaller units, called BIU segments, to accommodate smaller buffer sizes in adjacent…
Senior Agency Information Security Officer Official responsible for carrying out the Chief Information Officer responsibilities under the Federal Information Security Management Act (FISMA) and…
Sensitivity When referring to a medical test, sensitivity refers to the percentage of people who test positive for a specific disease among a group of people who have…
Sensitivity Levels A graduated system of marking (e.g., low, moderate, high) information and information processing systems based on threats and risks that result if a…
sensor A device that responds to a stimulus, such as heat, light, or pressure, and generates a signal that can be measured or interpreted.
Sensor Aging The gradual degradation in performance of a sensor over time.
Server Any computer on a network that contains data or applications shared by users of the network on their client PCs.
SHA-1 Secure Hash Algorithm, for computing a condensed representation of a message or a data file specified by FIPS PUB 180-1.
Shared Secret A secret used in authentication that is known to the claimant and the verifier.
Signature See Certificate.
Signature Certificate A public key certificate that contains a public key intended for verifying digital signatures rather than encrypting data or performing any other…
Signature Dynamics A behavioral biometric modality that analyzes dynamic characteristics of an individual's signature, such as shape of signature, speed of signing, pen…
Signature Generation Uses a digital signature algorithm and a private key to generate a digital signature on data.
Signature Verification Uses a digital signature algorithm and a public key to verify a digital signature.
Signed Data Data on which a digital signature is generated.
Similarity Score A value returned by a biometric algorithm that indicates the degree of similarity or correlation between a biometric sample and a reference.
Single-Hop Problem The security risks resulting from an mobile software agent moving from its home platform to another platform.
Skimming The act of obtaining data from an unknowing end user who is not willingly submitting the sample at that time.
Slap Fingerprint Fingerprints taken by simultaneously pressing the four fingers of one hand onto a scanner or a fingerprint card, as illustrated below.
Smart Card A credit card size device which contains a microprocessor, memory and a battery.
SMShing Exactly like Phishing, however instead of email being used, SMS (text) messages are sent to the victims cell phone, which lead them to the fake webpage.
Sniffer The name of the filter program used by the Infoseek search engine to prevent spamdexing.
Social Engineering An attempt to trick someone into revealing information (e.g., a password) that can be used to attack systems or networks.
Software-Based Fault Isolation A method of isolating application modules into distinct fault domains enforced by software.
Spam Unelicited emails in large quantities; rapidly repeated scrolling text.
Speaker Recognition A biometric modality that uses an individualÃ¯Â¿Â½s speech, a feature influenced by both the physical structure of an individual's vocal tract and…
Speaker Recognition Evaluations An ongoing series of evaluations of speaker recognition systems. For more information, visit www.nist.gov/speech/tests/spk/index.htm.
Spear Phishing Targeting phishing attacks. Perpetrators will only target a specific group of people, or a specific person, in a highly-customized attempt at obtaining…
Speech Recognition A technology that enables a machine to recognize spoken words. Speech recognition is not a biometric technology.
Split Knowledge A procedure whereby a cryptographic key is handled as multiple key components from the time that the key or the separate key components are generated…
Spoofing Some market analysts maintain that the increased volatility in stock markets may be the result of an illegal practice known as spoofing, or phantom bids.
Spyware Software programs which spy on web users, often used to collect consumer research and to behaviorally targeted ads.
SSL See definition for: Secure Sockets Layer (SSL)
Standard a statement that describes an acceptable level of performance, excellence, or attainment in that particular activity.
Standard Topography The format and information required to be displayed on a PIV card. Also known as the Mandatory Topography.
State State means one of the 50 States, the District of Columbia, Guam, Puerto Rico, Commonwealth of the Northern Mariana Islands, and the U.S. Virgin Islands.
Static Keys Static keys are relatively long-lived and are common to a number of executions of a given algorithm.
Steganography The hiding of information within a more obvious kind of communication. Although not widely used, digital steganography involves the hiding of data inside…
Subject The Subject of an email message should be a short summary of its contents. Email clients usually display it in a mailbox display together with the sender.
Submission any single delivery of evidence in a specific investigation.
Subordinate Certification Authority (CA) In a hierarchical PKI, a Certification Authority whose certificate signature key is certified by another CA, and whose activities are constrained by that…
Subscriber A party who receives a credential or token from a CSP and becomes a claimant in an authentication protocol.
Subsystem A functional grouping of components that combine to perform a major function within an element, such as attitude control and propulsion.
Superior Certification Authority (CA) In a hierarchical PKI, a Certification Authority who has certified the certificate signature key of another CA, and who constrains the activities of that…
Symmetric Encryption Algorithm Encryption algorithms using the same secret key for encryption and decryption.
Symmetric Key A cryptographic key that is used to perform both the cryptographic operation and its inverse, for example to encrypt and decrypt, or create a message…
System Physically connected generation, transmission, and distribution facilities operated as an integrated unit under one central management, or operating…
system administrator The person responsible for configuring and administering the enterprise's computers, networks, and software systems.
System Development Life Cycle (SDLC) The scope of activities associated with a system, encompassing the systems initiation, development and acquisition, implementation, operation and…
System Integrity The quality that a system has when it performs its intended function in an unimpaired manner, free from unauthorized manipulation of the system, whether…
System Interconnection The direct connection of two or more IT systems for the purpose of sharing data and other information resources.
System Security Plan Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned…
System Software The special software within the cryptographic boundary (e.g., operating system, compilers or utility programs) designed for a specific computer system or…
System-specific Security Control A security control for an information system that has not been designated as a common security control.