NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Single Point Keying – Means of distributing key to multiple, local crypto equipment or
devices from a single fill point.
SOURCE: CNSSI-4009
Single-Hop Problem – The security risks resulting from a mobile software agent moving
from its home platform to another platform.
SOURCE: SP 800-19
Situational Awareness – Within a volume of time and space, the perception of an enterprise’s
security posture and its threat environment; the
comprehension/meaning of both taken together (risk); and the
projection of their status into the near future.
SOURCE: CNSSI-4009
Skimming – The unauthorized use of a reader to read tags without the
authorization or knowledge of the tag’s owner or the individual in
possession of the tag.
SOURCE: SP 800-98
Smart Card – A credit card-sized card with embedded integrated circuits that can
store, process, and communicate information.
SOURCE: CNSSI-4009
Sniffer – See Packet Sniffer or Passive Wiretapping.
Social Engineering – An attempt to trick someone into revealing information (e.g., a
password) that can be used to attack systems or networks.
SOURCE: SP 800-61
A general term for attackers trying to trick people into revealing
sensitive information or performing certain actions, such as
downloading and executing files that appear to be benign but are
actually malicious.
SOURCE: SP 800-114
The process of attempting to trick someone into revealing
information (e.g., a password).
SOURCE: SP 800-115
An attempt to trick someone into revealing information (e.g., a
password) that can be used to attack an enterprise.
SOURCE: CNSSI-4009
Software – Computer programs and associated data that may be dynamically
written or modified during execution.
SOURCE: CNSSI-4009
Pg 179