Technology terms starting with S

2,256 terms

secure state [The] condition in which no subject can access any object in an unauthorized manner. [INFOSEC-99]
secure subsystem [A] Subsystem containing its own implementation of the reference monitor concept for those resources it controls.
secure telephone unit See STU.
secure transmission In transmission security, see secure communications. 2. In spread-spectrum systems, the transmission of binary coded sequences that represent information…
secure voice cord board See SECORD.
Secure/MIME (S/MIME) A secure version of the MIME protocol that allows users to send encrypted and electronically signed mail messages, even if users have different mail…
Secure/Multipurpose Internet Mail Extensions (S/MIME) A set of specifications for securing electronic mail. S/MIME is based upon the widely used MIME standard [MIME] and describes a protocol for adding…
SecureAdmin A security product that enables you to administer a NetApp appliance in a nontrusted environment by creating a secure exchange between a client and the…
SecureShare A suite of products that enable UNIX and Windows-based applications to concurrently access and update shared files, with the integrity and cache coherency…
Security The term "security" covers a broad variety of financial instruments, including stock, promissory notes, bonds, debentures, limited partnership interests…
Security Accreditation The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to…
security administration left
security administrator 1. An authority (a person or group of people) responsible for implementing the security policy for a security domain [ECMATR46]. 2.
security alarm A security-related event that has been identified by a security policy as a potential breach of security. [T1.233-1993]
Security Architecture The portion of the baseline SDS architecture that is responsible for preserving the confidentiality, integrity, and assured service of any of the…
Security Assertion Markup Language (SAML) A specification for encoding security assertions in the Extensible Markup Language (XML).
security association A combination of identifiers, which together define Internet Protocol security (IPsec), that protects communication between sender and receiver.
Security Attribute A security-related quality of an object. Security attributes may be represented as hierarchical levels, bits in a bit map, or numbers.
security attributes A set of properties associated with a principal. Security attributes can be associated with a principal by an authentication protocol or by a J2EE product…
security audit 1. Of data processing operations, an independent review and examination of system records and activities to (a) determine the adequacy of system controls…
security audit message left
security audit record left
security audit trail left
security auditor left
Security Authorization The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to…
Security Category The characterization of information or an information system based on an assessment of the potential impact that a loss of confidentiality, integrity, or…
security certificate A set of security relevant data which is protected by integrity and data origin authentication from an issuing security authority, and includes an…
security class The combination of classification, categories and caveats associated with an object [CESG].
security classification A classification placed on records limiting their accessibility to those having specific authority to retrieve or use them See also restricted access.
security clearance 1. The formal authorization by the Departmental Security Officer for an individual to have access to classified information, following appropriate vetting…
security constraint A declarative way to annotate the intended protection of Web content. A security constraint consists of a Web resource collection, an authorization…
security context The security attributes or rules that are currently in effect. For example, the rules that govern what a user can do to a protected object are determined…
Security Control Baseline The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system.
Security Control Enhancements Statements of security capability to: 1) build in additional, but related, functionality to a basic control; and/or 2) increase the strength of a basic…
Security Controls The management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the…
security copy A copy made in order to preserve the information in case the original is lost, damaged, or destroyed See also backup and vital record.
Security Criteria The set of requirements that should be met so the security system can provide a maximum degree of effective deterrence at the lowest cost.
Security descriptor A data structure that contains security information associated with a protected object.
security descriptor (SD) The NTFS security information associated with a file. The SD contains the owner SID; owning group SID, which is not used; the Discretionary ACL, which is…
Security Domain A set of subjects, their information objects, and a common security policy.
security enforcing justify
security event manager left
security exchange The mechanism for conveying, or the conveyance of, security-related information between two entities. [After X9.41]
Security Exchange Commission Rule 17a-4 (SEC Rule 17 A-4) A U.S. Security and Exchange Commission rule that provides rules regarding the retention of electronic correspondence and records. [Exchange 2007]
security facility A set of logically associated security functions as used in the security framework [ECMATR46].
security facility interaction The invocation of a function a security facility by another security facility [ECMATR46].
security fault analysis [An] Assessment, usually performed on information system (IS) hardware, to determine the security properties of a device when hardware fault is…
security fault notification Report prepared by a CLEF and initially distributed to the Certification Body (CB).
security filter In communications security, the hardware, firmware, or software used to prevent access to specified data by unauthorized persons or systems, such as by…
security flaw [An] Error of commission or omission in an information system (IS) that may allow protection mechanisms to be bypassed. [INFOSEC-99]
security function A discrete aspect of the performance of a system by which it enforces security automatically on behalf of the System Manager and /or system users [CESG].
Security Goals The five security goals are confidentiality, availability, integrity, accountability, and assurance.
security group A named set of allowed inbound network connections for an instance. (Security groups in Amazon VPC also include support for outbound connections.
Security Groups Groups that can be used to organize users and domain objects, thus simplifying administration.
security ID (SID) The unique identifier that is used to identify Windows NT security objects (users and groups).
Security Identifier (SID) In Windows-based systems, a unique value that identifies a user, group, or computer account within an enterprise.
Security Impact Analysis The analysis conducted by an agency official, often during the continuous monitoring phase of the security certification and accreditation process, to…
security interaction policy Common aspects of security policies necessary in order for interactions to take place between domains [10181-1]..
security kernel 1. In computer and communications security , the central part of a computer or communications system hardware, firmware, and software that implements the…
Security Label Explicit or implicit marking of a data structure or output media associated with an information system representing the FIPS 199 security category, or…
Security Level The combination of hierarchical classification and a set of non-hierarchical categories that represents the sensitivity of information.
security life The time over which cryptographically protected data or other security processes have value. [After X9.67]
security management In network management, the set of functions (a) that protects telecommunications networks and systems from unauthorized access by persons, acts, or…
security measure A means by which a System Security Policy is enforced [CESG]. Note: A general term, covering technical, procedural and management aspects of security.
security mechanism The logic or algorithm that implements a particular security enforcing or security relevant function in hardware and software [ITSEC].
security model A mathematical or conceptual representation for specifying and proving system security [CESG].
security object An entity in a passive role to which a security policy applies [ECMATR46].
Security Objective Confidentiality, integrity, or availability.
security operating procedures (SyOPs) Documentation specifying the procedures that are to be carried out by system users (including the System Administrator and operators) to uphold all…
Security package The software implementation of a security protocol. Security packages are contained in security support provider dynamic-link libraries (DLLs) or in…
Security Perimeter SEE Accreditation Boundary.
security permission A mechanism defined by J2SE, and used by the J2EE platform to express the programming restrictions imposed on application component developers.
security permission set The minimum set of security permissions that a J2EE product provider must provide for the execution of each component type.
Security Plan SEE System Security Plan.
Security policies Global domain security rules.
Security Policy The set of laws, rules, and practices that regulate how an organization manages, protects, and distributes sensitive information.
security policy domain A scope over which security policies are defined and enforced by a security administrator.
Security Policy Model An informal presentation of a formal security policy model.
security policy model (SPM) 1. An informal presentation of a formal security policy model [POSIX.6]. 2. An informal presentation of a formal security policy model [TCSEC]. 3.
Security principal In Windows-based systems, a user, group, or computer that is automatically assigned a security identifier (SID) to control access to resources.
Security Program The implementation of formal security policies and procedures established by DoD and other departmental publications to secure vital components of weapon…
Security protocol A specification that defines security-related data objects and rules about how the objects are used to maintain security on a computer system.
security range [The] highest and lowest security levels that are permitted in or on an information system (IS), system component, subsystem, or network. [INFOSEC-99]
security relevant That which is not security enforcing, but must function correctly for the Target of Evaluation to enforce security [ITSEC].
Security Relevant Event Any event that attempts to change the security state of the system. Also, any event that attempts to violate the security policy of the system.
security requirement The statement by the Departmental Security Officer (DSO) of the minimum standards to be met by a specific system and particular threats which are to be…
Security Requirements Requirements levied on an information system that are derived from laws, executive orders, directives, policies, instructions, regulations, or…
security role See role (security).
security safeguards Protective measures and controls prescribed to meet the security requirements specified for an information system (IS).
Security Service A capability that supports one, or many, of the security goals. Examples of security services are key management, access control, and authentication.
security specification Detailed description of the safeguards required to protect an information system (IS). [INFOSEC-99]
security style The security scheme in effect for a given file or directory. This may be UNIX-style, NTFS-style, or mixed.
security sub-domain A proper subset of a security domain's entities which are subject to a security policy which possesses the following properties: 1.
security subject An entity in an active role to which a security policy applies [ECMATR46].
Security Subsystem That part of a weapon or defense system, which is added specifically for the performance of security, functions and not categorized as components of other…
Security Support Provider (SSP) A dynamic-link library (DLL) that implements the Security Support Provider Interface (SSPI) by making one or more security packages available to…
Security Support Provider Interface (SSPI) A common interface between transport-level applications, such as Microsoft Remote Procedure Call (RPC), and security support providers (SSPs), such as…
Security System The aggregate of all mechanical and electronic equipment countermeasures in a system which contributes to its security from intelligence gathering and…
Security Tag Information unit containing a representation of certain security-related information (e.g., a restrictive attribute bit map).
security target (ST) 1. A set of security functional and assurance requirements and specifications to be used as the basis for evaluation of an identified product or system. 2.