20,531 terms including subtopics (0 terms filed directly here)
Technology terms
security fault notificationReport prepared by a CLEF and initially distributed to the Certification Body (CB).
security filterIn communications security, the hardware, firmware, or software used to prevent access to specified data by unauthorized persons or systems, such as by…
security flaw[An] Error of commission or omission in an information system (IS) that may allow protection mechanisms to be bypassed. [INFOSEC-99]
security functionA discrete aspect of the performance of a system by which it enforces security automatically on behalf of the System Manager and /or system users [CESG].
Security GoalsThe five security goals are confidentiality, availability, integrity, accountability, and assurance.
security groupA named set of allowed inbound network connections for an instance. (Security groups in Amazon VPC also include support for outbound connections.
Security GroupsGroups that can be used to organize users and domain objects, thus simplifying administration.
security ID (SID)The unique identifier that is used to identify Windows NT security objects (users and groups).
Security Identifier (SID)In Windows-based systems, a unique value that identifies a user, group, or computer account within an enterprise.
Security Impact AnalysisThe analysis conducted by an agency official, often during the continuous monitoring phase of the security certification and accreditation process, to…
security interaction policyCommon aspects of security policies necessary in order for interactions to take place between domains [10181-1]..
security kernel1. In computer and communications security , the central part of a computer or communications system hardware, firmware, and software that implements the…
Security LabelExplicit or implicit marking of a data structure or output media associated with an information system representing the FIPS 199 security category, or…
Security LevelThe combination of hierarchical classification and a set of non-hierarchical categories that represents the sensitivity of information.
security lifeThe time over which cryptographically protected data or other security processes have value. [After X9.67]
security managementIn network management, the set of functions (a) that protects telecommunications networks and systems from unauthorized access by persons, acts, or…
security measureA means by which a System Security Policy is enforced [CESG]. Note: A general term, covering technical, procedural and management aspects of security.
security mechanismThe logic or algorithm that implements a particular security enforcing or security relevant function in hardware and software [ITSEC].
security modelA mathematical or conceptual representation for specifying and proving system security [CESG].
security objectAn entity in a passive role to which a security policy applies [ECMATR46].
security operating procedures (SyOPs)Documentation specifying the procedures that are to be carried out by system users (including the System Administrator and operators) to uphold all…
Security packageThe software implementation of a security protocol. Security packages are contained in security support provider dynamic-link libraries (DLLs) or in…
security permissionA mechanism defined by J2SE, and used by the J2EE platform to express the programming restrictions imposed on application component developers.
security permission setThe minimum set of security permissions that a J2EE product provider must provide for the execution of each component type.
security policy model (SPM)1. An informal presentation of a formal security policy model [POSIX.6]. 2. An informal presentation of a formal security policy model [TCSEC]. 3.
Security principalIn Windows-based systems, a user, group, or computer that is automatically assigned a security identifier (SID) to control access to resources.
Security ProgramThe implementation of formal security policies and procedures established by DoD and other departmental publications to secure vital components of weapon…
Security protocolA specification that defines security-related data objects and rules about how the objects are used to maintain security on a computer system.
security range[The] highest and lowest security levels that are permitted in or on an information system (IS), system component, subsystem, or network. [INFOSEC-99]
security relevantThat which is not security enforcing, but must function correctly for the Target of Evaluation to enforce security [ITSEC].
Security Relevant EventAny event that attempts to change the security state of the system. Also, any event that attempts to violate the security policy of the system.
security requirementThe statement by the Departmental Security Officer (DSO) of the minimum standards to be met by a specific system and particular threats which are to be…
Security RequirementsRequirements levied on an information system that are derived from laws, executive orders, directives, policies, instructions, regulations, or…
security safeguardsProtective measures and controls prescribed to meet the security requirements specified for an information system (IS).
Security ServiceA capability that supports one, or many, of the security goals. Examples of security services are key management, access control, and authentication.
security specificationDetailed description of the safeguards required to protect an information system (IS). [INFOSEC-99]
security styleThe security scheme in effect for a given file or directory. This may be UNIX-style, NTFS-style, or mixed.
security sub-domainA proper subset of a security domain's entities which are subject to a security policy which possesses the following properties: 1.
security subjectAn entity in an active role to which a security policy applies [ECMATR46].
Security SubsystemThat part of a weapon or defense system, which is added specifically for the performance of security, functions and not categorized as components of other…
Security Support Provider (SSP)A dynamic-link library (DLL) that implements the Security Support Provider Interface (SSPI) by making one or more security packages available to…
Security Support Provider Interface (SSPI)A common interface between transport-level applications, such as Microsoft Remote Procedure Call (RPC), and security support providers (SSPs), such as…
Security SystemThe aggregate of all mechanical and electronic equipment countermeasures in a system which contributes to its security from intelligence gathering and…
Security TagInformation unit containing a representation of certain security-related information (e.g., a restrictive attribute bit map).
security target (ST)1. A set of security functional and assurance requirements and specifications to be used as the basis for evaluation of an identified product or system. 2.
security technology domainA scope over which the same security mechanism is used to enforce a security policy.
Security TemplateA physical file representation of a security configuration that can be applied to a local computer or imported to a Group Policy object in Active…
security test and evaluationExamination and analysis of the safeguards required to protect an information system (IS), as they have been applied in an operational environment, to…
Security TestingA process used to determine that the security features of a system are implemented as designed and that they are adequate for a proposed application…
security tokenA cryptographically signed data unit that expresses one or more claims.
security token serviceA Web service that issues security tokens. A security token service makes assertions based on evidence that it trusts to whoever trusts it.
security viewThe set of security roles defined by the application assembler.
SegmentA grouping of elements that are closely related and often physically interface. It consists of CIs produced by several contractors and integrated by one.
SegmentationA process by which path control divides basic information units into smaller units, called BIU segments, to accommodate smaller buffer sizes in adjacent…
segmented encoding lawAn encoding law in which an approximation to a curve defined by a smooth encoding law is obtained by a number of linear segments.
segregationFor genes, the separation of allele pairs from one another and their resulting assortment into different cells at meiosis.
seizingThe temporary dedication of various parts of a communications system to a specific use, usually in response to a user request for service.
seizure signalIn telephone systems, a signal used by the calling end of a trunk or line to indicate a request for service.
selcallAcronym for selective calling. Calling from one station in which call identification is sent to signal automatically one or more remote stations and to…
Selected Acquisition Reports (SAR)Standard, comprehensive, summary status reports on major defense acquisition programs (ACAT I) required for periodic submission to Congress.
selected networkFor a particular message path, any intermediate network between a branch point and a subsequent branch point or convergence point is a selected network.
selection coverageA coverage whose area overlaps that of a map library. It identifies the area to extract data from, or insert data into, a map library.
Selective Availability (S/A)(S/A)A U.S. Department of Defense program to limit the accuracy of autonomous position fixes computed by civilian receivers.
Selective KillAssigns interceptors to targets on the basis of missile type, launch area, impact area, time of launch/arrival, or predicted threat utility (e.g.
selective ringingIn a party line, ringing only the desired user instrument. Note: Without selective ringing, all the instruments on the party line will ring at the same…
Selective, Adaptive DefenseSelective, adaptive defense assigns interceptors to RVs based upon defended asset values, the number of arriving RVs and time to impact.
SelectivityRefers to choosing a subset of targets either for attack or defense. (See Preferential Defense and Preferential Offense.)