NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Security Functions – The hardware, software, and/or firmware of the information system
responsible for enforcing the system security policy and supporting
the isolation of code and data on which the protection is based.
SOURCE: SP 800-53
Security Goals – The five security goals are confidentiality, availability, integrity,
accountability, and assurance.
SOURCE: SP 800-27
Security Impact Analysis – The analysis conducted by an organizational official to determine the
extent to which changes to the information system have affected the
security state of the system.
SOURCE: SP 800-53; SP 800-53A; SP 800-37; CNSSI-4009
Security Incident – See Incident.
Security Inspection – Examination of an information system to determine compliance with
security policy, procedures, and practices.
SOURCE: CNSSI-4009
Security Kernel – Hardware, firmware, and software elements of a trusted computing
base implementing the reference monitor concept. Security kernel
must mediate all accesses, be protected from modification, and be
verifiable as correct.
SOURCE: CNSSI-4009
Security Label – The means used to associate a set of security attributes with a specific
information object as part of the data structure for that object.
SOURCE: SP 800-53
Security Label – A marking bound to a resource (which may be a data unit) that names
or designates the security attributes of that resource.
SOURCE: FIPS 188
Information that represents or designates the value of one or more
security relevant-attributes (e.g., classification) of a system resource.
SOURCE: CNSSI-4009
Security Level – A hierarchical indicator of the degree of sensitivity to a certain threat.
It implies, according to the security policy being enforced, a specific
level of protection.
SOURCE: FIPS 188
Pg 172