Security — page 8 of 8

Security terms

701. Trust Anchor A public key and the name of a certification authority that is used to validate the first certificate in a sequence of certificates.
702. Trust List The collection of trusted certificates used by Relying Parties to authenticate other certificates.
703. Trusted Agent Entity authorized to act as a representative of an Agency in confirming Subscriber identification during the registration process.
704. Trusted Certificate A certificate that is trusted by the Relying Party on the basis of secure and authenticated delivery.
705. Trusted Path A mechanism by which a person at a terminal can communicate directly with the Trusted Computing Base.
706. Trusted Timestamp A digitally signed assertion by a trusted authority that a specific digital object existed at a particular time.
707. Trustworthiness The attribute of a person or organization that provides confidence to others of the qualifications, capabilities, and reliability of that entity to…
708. Trustworthy System Computer hardware, software and procedures that 1) are reasonably secure from intrusion and misuse; 2) provide a reasonable level of availability…
709. Tunneled Password Protocol A protocol where a password is sent through a protected channel. For example, the TLS protocol is often used with a verifiers public key certificate to…
710. Type I Error An error that occurs in a statistical test when a true claim is (incorrectly) rejected.
711. Type II Error An error that occurs in a statistical test when a false claim is (incorrectly) not rejected.
712. Unauthorized Access A person gains logical or physical access without permission to a network, system, application, data, or other resource.
713. Unauthorized Disclosure An event involving the exposure of information to entities not authorized access to the information.
714. Uncooperative User An individual who actively tries to deny the capture of his/her biometric data.
715. Unsigned data Data included in an authentication token, in addition to a digital signature.
716. Update (a Certificate) The act or process by which data items bound in an existing public key certificate, especially authorizations granted to the subject, are changed by…
717. US-VISIT (U.S. Visitor and Immigrant Status Indicator Technology) A continuum of security measures that begins overseas, at the Department of State's visa issuing posts, and continues through arrival and departure from…
718. User A client with an email account.
719. User Initialization A stage in the lifecycle of keying material; the process whereby a user initializes its cryptographic application (e.g.
720. User Registration A stage in the lifecycle of keying material; a process whereby an entity becomes a member of a security domain.
721. Valid Data Element A payload, an associated data string, or a nonce that satisfies the restrictions of the formatting function.
722. Validation is the process of performing a set of experiments that establish the efficacy and reliability of a technique or procedure or modification thereof.
723. Verification To confirm the truth or correctness of something. Vitreous humor – The ocular fluid (from within the eye) that is often used as a sample for testing in…
724. Verification Rate A statistic used to measure biometric performance when operating in the verification task. The rate at which legitimate end-users are correctly verified.
725. Verified Name A subscriber name that has been verified by identity proofing.
726. Verifier An entity that verifies the claimants identity by verifying the claimants possession of a token using an authentication protocol.
727. Verifier Impersonation Attack An attack where the attacker impersonates the verifier in an authentication protocol, usually to learn a password.
728. Victim A person who is the object of the crime.
729. Virtual Private Network (VPN) A virtual private network is a logical network that is established, at the application layer of the Open Systems Interconnection (OSI) model, over an…
730. Virus (VY-rus) In medicine, a very simple microorganism that infects cells and may cause disease.
731. Virus Hoax An urgent warning message about a nonexistent virus.
732. Vishing Exactly like Phishing and SMShing, however instead of email or SMS messages, the victim is called on the phone and instructed to give up their personal…
733. Voice Recognition See speaker recognition.
734. Vulnerability Weakness in an information system, system security procedures, internal controls, or implementation that could be exploited or triggered by a threat…
735. Vulnerability Assessment Formal description and evaluation of the vulnerabilities in an information system.
736. Warez A term widely used by hackers to denote illegally copied and distributed commercial software from which all copy protection has been removed.
737. Warm Site An alternative facility that has the equipment and resources available to recover business functions in the event of a disaster See also cold site and hot…
738. Watchlist A term sometimes referred to as open-set identification that describes one of the three tasks that biometric systems perform.
739. Wavelet Scalar Quantization (WSQ) An FBI-specified compression standard algorithm that is used for the exchange of fingerprints within the criminal justice community.
740. Web Bug Tiny images, invisible to a user, placed on web sites in such a way that they allow third parties to track use of web servers and collect information…
741. Whorl A fingerprint pattern in which the ridges are circular or nearly circular.... The pattern will contain 2 or more detals.
742. Wired Equivalent Privacy (WEP) Wired Equivalent Privacy, a security protocol for wireless local area networks (WLANs) defined in the 802.11b standard.
743. Wireless Application Protocol (WAP) A standard for providing cellular telephones, pagers, and other handheld devices with secure access to e-mail and text-based Web pages
744. WORM See write once read many (WORM).
745. Write-Blocker A device that allows investigators to examine media while preventing data writes from occurring on the subject media.
746. X.509 Certificate The International Organization for Standardization/International Telecommunication Union Standardization Department (ISO/ITU-T) X.
747. X.509 Public Key Certificate The public key for a user (or device) and a name for the user (or device), together with some other information, rendered unforgeable by the digital…
748. Zeroization A method of erasing electronically stored data, cryptographic keys, and CSPs by altering or deleting the contents of the data storage to prevent recovery…
749. Zombie The classic version is a mindless, frequently violent, product of supernatural magic or pharmacology while the modern incarnation is a reanimated human…