NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Salt – A non-secret value that is used in a cryptographic process, usually to
ensure that the results of computations for one instance cannot be
reused by an attacker.
SOURCE: SP 800-63; CNSSI-4009
Sandboxing – A method of isolating application modules into distinct fault domains
enforced by software. The technique allows untrusted programs
written in an unsafe language, such as C, to be executed safely within
the single virtual address space of an application. Untrusted machine
interpretable code modules are transformed so that all memory
accesses are confined to code and data segments within their fault
domain. Access to system resources can also be controlled through a
unique identifier associated with each domain.
SOURCE: SP 800-19
Sanitization –
A restricted, controlled execution environment that prevents
potentially malicious software, such as mobile code, from accessing
any system resources except those for which the software is
authorized.
SOURCE: CNSSI-4009
Process to remove information from media such that information
recovery is not possible. It includes removing all labels, markings,
and activity logs.
SOURCE: FIPS 200
A general term referring to the actions taken to render data written on
media unrecoverable by both ordinary and, for some forms of
sanitization, extraordinary means.
SOURCE: SP 800-53; CNSSI-4009
SCADA – See Supervisory Control and Data Acquisition.
Scanning – Sending packets or requests to another system to gain information to
be used in a subsequent attack.
SOURCE: SP 800-61; CNSSI-4009
Scavenging – Searching through object residue to acquire data.
SOURCE: CNSSI-4009
Pg 164