Security — page 7 of 8

749 terms including subtopics (612 terms filed directly here)

Subtopics

Biometrics 148 terms
Identity Theft 6 terms

Security terms

Security Accreditation The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to…
Security Assertion Markup Language (SAML) A specification for encoding security assertions in the Extensible Markup Language (XML).
Security Attribute A security-related quality of an object. Security attributes may be represented as hierarchical levels, bits in a bit map, or numbers.
Security Authorization The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to…
Security Category The characterization of information or an information system based on an assessment of the potential impact that a loss of confidentiality, integrity, or…
Security Control Baseline The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system.
Security Control Enhancements Statements of security capability to: 1) build in additional, but related, functionality to a basic control; and/or 2) increase the strength of a basic…
Security Controls The management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the…
Security Domain A set of subjects, their information objects, and a common security policy.
Security Goals The five security goals are confidentiality, availability, integrity, accountability, and assurance.
Security Impact Analysis The analysis conducted by an agency official, often during the continuous monitoring phase of the security certification and accreditation process, to…
Security Label Explicit or implicit marking of a data structure or output media associated with an information system representing the FIPS 199 security category, or…
Security Level The combination of hierarchical classification and a set of non-hierarchical categories that represents the sensitivity of information.
Security Objective Confidentiality, integrity, or availability.
Security Perimeter SEE Accreditation Boundary.
Security Plan SEE System Security Plan.
Security Policy The set of laws, rules, and practices that regulate how an organization manages, protects, and distributes sensitive information.
Security Requirements Requirements levied on an information system that are derived from laws, executive orders, directives, policies, instructions, regulations, or…
Security Service A capability that supports one, or many, of the security goals. Examples of security services are key management, access control, and authentication.
Security Tag Information unit containing a representation of certain security-related information (e.g., a restrictive attribute bit map).
Segmentation A process by which path control divides basic information units into smaller units, called BIU segments, to accommodate smaller buffer sizes in adjacent…
Senior Agency Information Security Officer Official responsible for carrying out the Chief Information Officer responsibilities under the Federal Information Security Management Act (FISMA) and…
Sensitivity When referring to a medical test, sensitivity refers to the percentage of people who test positive for a specific disease among a group of people who have…
Sensitivity Levels A graduated system of marking (e.g., low, moderate, high) information and information processing systems based on threats and risks that result if a…
sensor A device that responds to a stimulus, such as heat, light, or pressure, and generates a signal that can be measured or interpreted.
Sensor Aging The gradual degradation in performance of a sensor over time.
Server Any computer on a network that contains data or applications shared by users of the network on their client PCs.
SHA-1 Secure Hash Algorithm, for computing a condensed representation of a message or a data file specified by FIPS PUB 180-1.
Shared Secret A secret used in authentication that is known to the claimant and the verifier.
Signature See Certificate.
Signature Certificate A public key certificate that contains a public key intended for verifying digital signatures rather than encrypting data or performing any other…
Signature Dynamics A behavioral biometric modality that analyzes dynamic characteristics of an individual's signature, such as shape of signature, speed of signing, pen…
Signature Generation Uses a digital signature algorithm and a private key to generate a digital signature on data.
Signature Verification Uses a digital signature algorithm and a public key to verify a digital signature.
Signed Data Data on which a digital signature is generated.
Similarity Score A value returned by a biometric algorithm that indicates the degree of similarity or correlation between a biometric sample and a reference.
Single-Hop Problem The security risks resulting from an mobile software agent moving from its home platform to another platform.
Skimming The act of obtaining data from an unknowing end user who is not willingly submitting the sample at that time.
Slap Fingerprint Fingerprints taken by simultaneously pressing the four fingers of one hand onto a scanner or a fingerprint card, as illustrated below.
Smart Card A credit card size device which contains a microprocessor, memory and a battery.
SMShing Exactly like Phishing, however instead of email being used, SMS (text) messages are sent to the victims cell phone, which lead them to the fake webpage.
Sniffer The name of the filter program used by the Infoseek search engine to prevent spamdexing.
Social Engineering An attempt to trick someone into revealing information (e.g., a password) that can be used to attack systems or networks.
Software-Based Fault Isolation A method of isolating application modules into distinct fault domains enforced by software.
Spam Unelicited emails in large quantities; rapidly repeated scrolling text.
Speaker Recognition A biometric modality that uses an individualÃ¯Â¿Â½s speech, a feature influenced by both the physical structure of an individual's vocal tract and…
Speaker Recognition Evaluations An ongoing series of evaluations of speaker recognition systems. For more information, visit www.nist.gov/speech/tests/spk/index.htm.
Spear Phishing Targeting phishing attacks. Perpetrators will only target a specific group of people, or a specific person, in a highly-customized attempt at obtaining…
Speech Recognition A technology that enables a machine to recognize spoken words. Speech recognition is not a biometric technology.
Split Knowledge A procedure whereby a cryptographic key is handled as multiple key components from the time that the key or the separate key components are generated…
Spoofing Some market analysts maintain that the increased volatility in stock markets may be the result of an illegal practice known as spoofing, or phantom bids.
Spyware Software programs which spy on web users, often used to collect consumer research and to behaviorally targeted ads.
SSL See definition for: Secure Sockets Layer (SSL)
Standard a statement that describes an acceptable level of performance, excellence, or attainment in that particular activity.
Standard Topography The format and information required to be displayed on a PIV card. Also known as the Mandatory Topography.
State State means one of the 50 States, the District of Columbia, Guam, Puerto Rico, Commonwealth of the Northern Mariana Islands, and the U.S. Virgin Islands.
Static Keys Static keys are relatively long-lived and are common to a number of executions of a given algorithm.
Steganography The hiding of information within a more obvious kind of communication. Although not widely used, digital steganography involves the hiding of data inside…
Subject The Subject of an email message should be a short summary of its contents. Email clients usually display it in a mailbox display together with the sender.
Submission any single delivery of evidence in a specific investigation.
Subordinate Certification Authority (CA) In a hierarchical PKI, a Certification Authority whose certificate signature key is certified by another CA, and whose activities are constrained by that…
Subscriber A party who receives a credential or token from a CSP and becomes a claimant in an authentication protocol.
Subsystem A functional grouping of components that combine to perform a major function within an element, such as attitude control and propulsion.
Superior Certification Authority (CA) In a hierarchical PKI, a Certification Authority who has certified the certificate signature key of another CA, and who constrains the activities of that…
Symmetric Encryption Algorithm Encryption algorithms using the same secret key for encryption and decryption.
Symmetric Key A cryptographic key that is used to perform both the cryptographic operation and its inverse, for example to encrypt and decrypt, or create a message…
System Physically connected generation, transmission, and distribution facilities operated as an integrated unit under one central management, or operating…
system administrator The person responsible for configuring and administering the enterprise's computers, networks, and software systems.
System Development Life Cycle (SDLC) The scope of activities associated with a system, encompassing the systems initiation, development and acquisition, implementation, operation and…
System Integrity The quality that a system has when it performs its intended function in an unimpaired manner, free from unauthorized manipulation of the system, whether…
System Interconnection The direct connection of two or more IT systems for the purpose of sharing data and other information resources.
System Security Plan Formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned…
System Software The special software within the cryptographic boundary (e.g., operating system, compilers or utility programs) designed for a specific computer system or…
System-specific Security Control A security control for an information system that has not been designated as a common security control.
Technical Controls The security controls (i.e., safeguards or countermeasures) for an information system that are primarily implemented and executed by the information…
Technical non-repudiation The contribution of public key mechanisms to the provision of technical evidence supporting a non-repudiation security service.
Technology Evaluation One of the three types of performance evaluations. The primary goal of a technology evaluation is to measure performance of biometric systems, typically…
TEMPEST TEMPEST is an unclassified short name referring to investigation and studies of compromising emanations.
Template a standard shape that the race car must comply to be within the NASCAR rules. The template closely resembles the shape of the factory car.
Threat Related to Aggro. This is what a character "gives off" to generate or draw monster aggro.
Threat Agent/Source Either: 1) intent and method targeted at the intentional exploitation of a vulnerability; or 2) a situation and method that may accidentally trigger a…
Threat Analysis The examination of threat sources against system vulnerabilities to determine the threats for a particular system in a particular operational environment.
Threat Assessment Formal description and evaluation of threat to an information system.
Threat Source The intent and method targeted at the intentional exploitation of a vulnerability or a situation and method that may accidentally trigger a vulnerability.
Threshold the point a system must cross to enter a new state or condition.
Throughput Rate The number of biometric transactions that a biometric system processes within a stated time interval.
Token See definition for: access token
topology The geometric arrangement of a computer system. Common topologies include a bus (network topology in which nodes are connected to a single cable with…
Total Risk The potential for the occurrence of an adverse event if no mitigating action is taken (i.e.
Tracking Cookie A cookie placed on a users computer to track the users activity on different Web sites, creating a detailed profile of the users behavior.
Traffic Analysis A form of passive attack in which an intruder observes information about calls (although not necessarily the contents of the messages) and makes…
Training (Information Security) Training strives to produce relevant and needed (information) security skills and competencies.
Training Assessment An evaluation of the training efforts.
Training Effectiveness A measurement of what a given student has learned from a specific course or training event.
Training Effectiveness Evaluation Information collected to assist employees and their supervisors in assessing individual students subsequent on-the-job performance, to provide trend data…
Transport Layer Security (TLS) (TLS) A cryptographic protocol that provides security for communication over the Internet. Its predecessor is Secure Sockets Layer (SSL).
Triple DES An implementation of the Data Encryption Standard (DES) algorithm that uses three passes of the DES algorithm instead of one as used in ordinary DES…
Trojan horse A computer program with an apparently or actually useful function that contains additional (hidden) functions that surreptitiously exploit the legitimate…
True Accept Rate A statistic used to measure biometric performance when operating in the verification task.
True Reject Rate A statistic used to measure biometric performance when operating in the verification task.

Sources

IIP Digital Glossary of Key Cybersecurity Terms 27 definitions
Glossary of Key Information Security Terms 593 definitions