NISTIR 7298 Revision 1, Glossary of Key Information Security Terms
NISTIR 7298 Revision 1, Glossary of Key Information Security Terms NISTIR 7298 Revision 1, Glossary of Key Information Security Terms
NIST IR 7298 Revision 1, Glossary of Key Information Security Terms Automated Security Monitoring – Use of automated procedures to ensure security controls are not circumvented or the use of these tools to track actions taken by subjects suspected of misusing the information system. SOURCE: CNSSI-4009 Automatic Remote Rekeying – Procedure to rekey a distant crypto-equipment electronically without specific actions by the receiving terminal operator. See manual remote rekeying. SOURCE: CNSSI-4009 Autonomous System (AS) – One or more routers under a single administration operating the same routing policy. Availability – SOURCE: SP 800-54 Ensuring timely and reliable access to and use of information. SOURCE: SP 800-53; SP 800-53A; SP 800-27; SP 800-60; SP 800- 37; FIPS 200; FIPS 199; 44 U.S.C., Sec. 3542 The property of being accessible and useable upon demand by an authorized entity. SOURCE: CNSSI-4009 Awareness (Information Security) – Activities which seek to focus an individual’s attention on an (information security) issue or set of issues. SOURCE: SP 800-50 Back Door – Typically unauthorized hidden software or hardware mechanism used to circumvent security controls. SOURCE: CNSSI-4009 Backdoor – An undocumented way of gaining access to a computer system. SOURCE: SP 800-82 Backup – A copy of files and programs made to facilitate recovery, if necessary. SOURCE: SP 800-34; CNSSI-4009 Banner – Display on an information system that sets parameters for system or data use. SOURCE: CNSSI-4009 Pg 18
NIST IR 7298 Revision 1, Glossary of Key Information Security Terms Banner Grabbing – The process of capturing banner information—such as application type and version—that is transmitted by a remote port when a connection is initiated. SOURCE: SP 800-115 Baseline – Hardware, software, databases, and relevant documentation for an information system at a given point in time. SOURCE: CNSSI-4009 Baseline Security – The minimum security controls required for safeguarding an IT system based on its identified needs for confidentiality, integrity, and/or availability protection. SOURCE: SP 800-16 Baselining – Monitoring resources to determine typical utilization patterns so that significant deviations can be detected. SOURCE: SP 800-61 Basic Testing – A test methodology that assumes no knowledge of the internal structure and implementation detail of the assessment object. Also known as black box testing. SOURCE: SP 800-53A Bastion Host – A special-purpose computer on a network specifically designed and configured to withstand attacks. SOURCE: CNSSI-4009 Behavioral Outcome – What an individual who has completed the specific training module is expected to be able to accomplish in terms of IT security-related job performance. SOURCE: SP 800-16 Benign – Condition of cryptographic data that cannot be compromised by human access. SOURCE: CNSSI-4009 Benign Environment – A non-hostile location protected from external hostile elements by physical, personnel, and procedural security countermeasures. SOURCE: CNSSI-4009 Binding – Process of associating two related elements of information. SOURCE: SP 800-32 Pg 19
- Page 2 and 3: NIST IR 7298 Revision 1 Glossary of
- Page 4 and 5: NIST IR 7298 Revision 1, Glossary o
- Page 6 and 7: NIST IR 7298 Revision 1, Glossary o
- Page 8 and 9: NIST IR 7298 Revision 1, Glossary o
- Page 10 and 11: NIST IR 7298 Revision 1, Glossary o
- Page 12 and 13: NIST IR 7298 Revision 1, Glossary o
- Page 14 and 15: NIST IR 7298 Revision 1, Glossary o
- Page 16 and 17: NIST IR 7298 Revision 1, Glossary o
- Page 20 and 21: NIST IR 7298 Revision 1, Glossary o
- Page 22 and 23: NIST IR 7298 Revision 1, Glossary o
- Page 24 and 25: NIST IR 7298 Revision 1, Glossary o
- Page 26 and 27: NIST IR 7298 Revision 1, Glossary o
- Page 28 and 29: NIST IR 7298 Revision 1, Glossary o
- Page 30 and 31: NIST IR 7298 Revision 1, Glossary o
- Page 32 and 33: NIST IR 7298 Revision 1, Glossary o
- Page 34 and 35: NIST IR 7298 Revision 1, Glossary o
- Page 36 and 37: NIST IR 7298 Revision 1, Glossary o
- Page 38 and 39: NIST IR 7298 Revision 1, Glossary o
- Page 40 and 41: NIST IR 7298 Revision 1, Glossary o
- Page 42 and 43: NIST IR 7298 Revision 1, Glossary o
- Page 44 and 45: NIST IR 7298 Revision 1, Glossary o
- Page 46 and 47: NIST IR 7298 Revision 1, Glossary o
- Page 48 and 49: NIST IR 7298 Revision 1, Glossary o
- Page 50 and 51: NIST IR 7298 Revision 1, Glossary o
- Page 52 and 53: NIST IR 7298 Revision 1, Glossary o
- Page 54 and 55: NIST IR 7298 Revision 1, Glossary o
- Page 56 and 57: NIST IR 7298 Revision 1, Glossary o
- Page 58 and 59: NIST IR 7298 Revision 1, Glossary o
- Page 60 and 61: NIST IR 7298 Revision 1, Glossary o
- Page 62 and 63: NIST IR 7298 Revision 1, Glossary o
- Page 64 and 65: NIST IR 7298 Revision 1, Glossary o
- Page 66 and 67: NIST IR 7298 Revision 1, Glossary o
NIST IR <strong>7298</strong> <strong>Revision</strong> 1, <strong>Glossary</strong> <strong>of</strong> <strong>Key</strong> <strong>Information</strong> <strong>Security</strong> <strong>Terms</strong><br />
Automated <strong>Security</strong> Monitoring – Use <strong>of</strong> automated procedures to ensure security controls are not<br />
circumvented or the use <strong>of</strong> these tools to track actions taken by<br />
subjects suspected <strong>of</strong> misusing the information system.<br />
SOURCE: CNSSI-4009<br />
Automatic Remote Rekeying – Procedure to rekey a distant crypto-equipment electronically without<br />
specific actions by the receiving terminal operator. See manual<br />
remote rekeying.<br />
SOURCE: CNSSI-4009<br />
Autonomous System (AS) – One or more routers under a single administration operating the same<br />
routing policy.<br />
Availability –<br />
SOURCE: SP 800-54<br />
Ensuring timely and reliable access to and use <strong>of</strong> information.<br />
SOURCE: SP 800-53; SP 800-53A; SP 800-27; SP 800-60; SP 800-<br />
37; FIPS 200; FIPS 199; 44 U.S.C., Sec. 3542<br />
The property <strong>of</strong> being accessible and useable upon demand by an<br />
authorized entity.<br />
SOURCE: CNSSI-4009<br />
Awareness (<strong>Information</strong> <strong>Security</strong>) – Activities which seek to focus an individual’s attention on an<br />
(information security) issue or set <strong>of</strong> issues.<br />
SOURCE: SP 800-50<br />
Back Door – Typically unauthorized hidden s<strong>of</strong>tware or hardware mechanism used<br />
to circumvent security controls.<br />
SOURCE: CNSSI-4009<br />
Backdoor – An undocumented way <strong>of</strong> gaining access to a computer system.<br />
SOURCE: SP 800-82<br />
Backup – A copy <strong>of</strong> files and programs made to facilitate recovery, if<br />
necessary.<br />
SOURCE: SP 800-34; CNSSI-4009<br />
Banner – Display on an information system that sets parameters for system or<br />
data use.<br />
SOURCE: CNSSI-4009<br />
Pg 18