Security — page 5 of 8

Security terms

401. Key Generation Material Random numbers, pseudo-random numbers, and cryptographic parameters used in generating cryptographic keys.
402. Key Loader A self-contained unit that is capable of storing at least one plaintext or encrypted cryptographic key or key component that can be transferred, upon…
403. Key Management The activities involving the handling of cryptographic keys and other related security parameters (e.g.
404. key pair A set of security credentials you use to prove your identity electronically. A key pair consists of a private key and a public key.
405. Key Transport The secure transport of cryptographic keys from one cryptographic module to another module.
406. Key Wrap A method of encrypting keys (along with associated integrity information) that provides both confidentiality and integrity protection using a symmetric…
407. Keyed-hash based message authentication code (HMAC) A message authentication code that uses a cryptographic key in conjunction with a hash function.
408. Keystroke Dynamics A biometric modality that uses the cadence of an individual's typing pattern for recognition.
409. Keystroke Monitoring A form of user surveillance in which the actual character-by-character traffic (that user's keystrokes) are monitored, analyzed, and/or logged for future…
410. label The FDA approved label is the official description of a drug product which includes indication (what the drug is used for); who should take it; adverse…
411. Latent Fingerprint A fingerprint "image" left on a surface that was touched by an individual. The transferred impression is left by the surface contact with the friction…
412. Least Privilege This principle requires that each subject in a system be granted the most restrictive set of privileges (or lowest clearance) needed for the performance…
413. Link Encryption Link encryption encrypts all of the data along a communications path (e.g., a satellite link, telephone circuit, or T1 line).
414. Live Capture Typically refers to a fingerprint capture device that electronically captures fingerprint images using a sensor (rather than scanning ink-based…
415. Liveness Detection A technique used to ensure that the biometric sample submitted is from an end user.
416. Local Registration Authority (LRA) A Registration Authority with responsibility for a local community.
417. loop A construct that performs something repeatedly, like a roller coaster.
418. Low Impact System An information system in which all three security objectives (i.e., confidentiality, integrity, and availability) are assigned a FIPS 199 potential impact…
419. Macro Virus A virus that attaches itself to documents and uses the macro programming capabilities of the documents application to execute and propagate.
420. Major Application An application that requires special attention to security due to the risk and magnitude of harm resulting from the loss, misuse, or unauthorized access…
421. Major Information System An information system that requires special management attention because of its importance to an agency mission; its high development, operating, or…
422. Malicious Code Software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an…
423. Malicious code (also malware) Any code that can be used to attack a computer by spreading viruses, crashing networks, gathering intelligence, corrupting data, distributing…
424. Malware A program that is inserted into a system, usually covertly, with the intent of compromising the confidentiality, integrity, or availability of the victims…
425. Man-in-the-middle Attack (MitM) An attack on the authentication protocol run in which the attacker positions himself in between the claimant and verifier so that he can intercept and…
426. Management Controls The security controls (i.e., safeguards or countermeasures) for an information system that focus on the management of risk and the management of…
427. Mandatory Access Control A means of restricting access to objects based on the sensitivity (as represented by a label) of the information contained in the objects and the formal…
428. Mandatory Topography The format and information required to be displayed on a PIV card. Also known as the Standard Topography.
429. Manual Key Transport A non-electronic means of transporting cryptographic keys by physically moving a device, document or person containing or possessing the key or a key…
430. Masquerading When an unauthorized agent claims the identity of another agent it is said to be masquerading.
431. Match Either an exact or approximate replication. If not an exact replication, the approximate replication shall be so designed as to achieve a suitable…
432. Match/matching The process of comparing biometric information against a previously stored template(s) and scoring the level of similarity.
433. Matching See "pattern matching".
434. Media Any organization in the business of informing the public with news or commentary.
435. Media Sanitization A general term referring to the actions taken to render data written on media unrecoverable by both ordinary and extraordinary means.
436. Memorandum of Understanding/Agreement (MOU/A) A document established between two or more parties to define their respective responsibilities in accomplishing a particular goal or mission.
437. Message Authentication Code (MAC) A cryptographic checksum on data that uses a symmetric key to detect both accidental and intentional modifications of the data.
438. Message Digest A cryptographic checksum, typically generated for a file that can be used to detect changes to the file; Secure Hash Algorithm-1 (SHA-1) is an example of…
439. Metrics Tools designed to facilitate decision-making and improve performance and accountability through collection, analysis, and reporting of relevant…
440. MIME Multipurpose Internet Mail Extension.
441. Mimic The presentation of a live biometric measure in an attempt to fraudulently impersonate someone other than the submitter.
442. Min-Entropy A measure of the difficulty that an attacker has to guess the most commonly chosen password used in a system.
443. Minor Application An application, other than a major application, that requires attention to security due to the risk and magnitude of harm resulting from the loss, misuse…
444. Minutia(e) Point Friction ridge characteristics that are used to individualize a fingerprint image, see illustration below.
445. Misnamed Files A technique used to disguise a files content by changing the files name to something innocuous or altering its extension to a different type of file…
446. Mission Critical Any telecommunications or information system that is defined as a national security system (Federal Information Security Management Act of 2002 - FISMA)…
447. Mobile Code Software programs or parts of programs obtained from remote information systems, transmitted across a network, and executed on a local information system…
448. Mobile Code Technologies Software technologies that provide the mechanisms for the production and use of mobile code (e.g., Java, JavaScript, ActiveX, VBScript).
449. Mobile Site A self-contained, transportable shell custom-fitted with the specific IT equipment and telecommunications necessary to provide full recovery capabilities…
450. Mobile Software Agent Programs that are goal-directed and capable of suspending their execution on one platform and moving to another platform where they resume execution.
451. Modality A method of treatment. For example, surgery and chemotherapy are treatment modalities.
452. Mode of Operation An algorithm for the cryptographic transformation of data that features a symmetric key block cipher algorithm.
453. model See Exhibit.
454. Moderate Impact System An information system in which at least one security objective (i.e., confidentiality, integrity, or availability) is assigned a FIPS 199 potential impact…
455. Multi-Hop Problem The security risks resulting from a mobile software agent visiting several platforms.
456. Multimodal Biometric System A biometric system in which two or more of the modality components (biometric characteristic, sensor type or feature extraction algorithm) occurs in…
457. Multiple Component Incident A single incident that encompasses two or more incidents.
458. Multipurpose Internet Mail Extensions (MIME) An extensible mechanism for email. A variety of MIME types exist for sending content such as audio using the Simple Mail Transfer Protocol (SMTP) protocol.
459. Mutual Authentication An authentication mechanism employed by two parties for the purpose of proving each other's identity to one another.
460. Naming Authority An organizational entity responsible for assigning distinguished names (DNs) and for assuring that each DN is meaningful and unique within its domain.
461. National Information Assurance Partnership (NIAP) A U.S. Government initiative originated to meet the security testing needs of both information technology (IT) consumers and producers.
462. National Security Emergency Preparedness Telecommunications Services Telecommunications services that are used to maintain a state of readiness or to respond to and manage any event or crisis (local, national, or…
463. Needs Assessment (IT Security Awareness and Training) A process that can be used to determine an organizations awareness and training needs.
464. Neural Net/Neural Network A type of algorithm that learns from past experience to make decisions. See also algorithm.
465. NIST (National Institute of Standards and Technology) A non-regulatory federal agency within the U.S. Department of Commerce that develops and promotes measurement, standards, and technology to enhance…
466. Noise Any unwanted sound that interferes with speech and hearing, causes damage to hearing, or annoys a person.
467. Non-cooperative User An individual who is not aware that his/her biometric sample is being collected.
468. Non-repudiation Assurance that the sender of information is provided with proof of delivery and the recipient is provided with proof of the senders identity, so neither…
469. Nonce A value used in security protocols that is never repeated with the same key. For example, challenges used in challenge-response authentication protocols…
470. object An entity such as a file, folder, shared folder, printer, or Active Directory object, described by a distinct, named set of attributes.
471. Object Identifier A specialized formatted number that is registered with an internationally recognized standards organization.
472. Off-Card Refers to data that is not stored within the PIV card or computation that is not done by the Integrated Circuit Chip (ICC) of the PIV card.
473. Off-line Attack An attack where the attacker obtains some data (typically by eavesdropping on an authentication protocol run, or by penetrating a system and stealing…
474. On-Card Refers to data that is stored within the PIV card or computation that is done by the ICC of the PIV card.
475. On-line Attack An attack against an authentication protocol where the attacker either assumes the role of a claimant with a genuine verifier or actively alters the…
476. On-Line Certificate Status Protocol (OCSP) An on-line protocol used to determine the status of a public key certificate.
477. One-to-many A relate in which one record in a table is related to many records in another table.
478. One-to-one A phrase used in the biometrics community to describe a system that compares one reference to one enrolled reference to make a decision.
479. One-Way Hash Algorithm Hash algorithms which map arbitrarily long inputs into a fixed-size output such that it is very difficult (computationally infeasible) to find two…
480. Online Certification Status Protocol (OCSP) An on-line protocol used to determine the status of a public key certificate.
481. Open-set Identification Biometric task that more closely follows operational biometric system conditions to 1) determine if someone is in a database and 2) find the record of the…
482. Operational Controls The security controls (i.e., safeguards or countermeasures) for an information system that primarily are implemented and executed by people (as opposed to…
483. Operational Evaluation The test and analysis of a specific end item or system, insofar as practicable under Service operating conditions, in order to determine if quantity…
484. Optional Topography A Personal Identity Verification (PIV) card having both the Standard Topography (Mandatory Topography) features and the Optional features as defined in…
485. Outside Threat An unauthorized entity from outside the domain perimeter that has the potential to harm an Information System through destruction, disclosure…
486. Overt Biometric sample collection where end users know they are being collected and at what location.
487. Packet Sniffer Software that observes and records network traffic.
488. Palm Print Recognition A biometric modality that uses the physical structure of an individual's palm print for recognition purposes, as illustrated below.
489. Parent Organization The organization that is applying for the Personal Identity Verification card on behalf of an applicant.
490. Passive Attack An attack against an authentication protocol where the attacker intercepts data traveling along the network between the claimant and verifier, but does…
491. Password A secret code utilized, usually along with a user ID, in order to log on or gain access to a PC, network or other secure system, site or application.
492. Password Protected The ability to protect a file using a password access control, protecting the data contents from being viewed with the appropriate viewer unless the…
493. Path Histories Maintaining an authenticatable record of the prior platforms visited by a mobile software agent, so that a newly visited platform can determine whether to…
494. Payload The input data to the CCM generation-encryption process that is both authenticated and encrypted.
495. Performance Those operational and support characteristics of the system that allow it to effectively and efficiently perform its assigned mission over time.
496. Personal Identification Number (PIN) (PIN) Generally a four-character number or word, the PIN is the secret code given to credit or debit cardholders enabling them to access their accounts.
497. Personal Identity Verification Authorizing Official An individual who can act on behalf of an agency to authorize the issuance of a credential to an applicant.
498. Personal Identity Verification Card (PIV Card) Physical artifact (e.g., identity card, smart card) issued to an individual that contains stored identity credentials (e.g.
499. Personal Identity Verification Issuance Authority An authorized identity card creator that procures FIPS approved blank identity cards, initializes them with appropriate software and data elements for the…
500. Personal Identity Verification Registration Authority An entity that establishes and vouches for the identity of an applicant to a PIV Issuing Authority.