NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Spoofing – Involves—
1) the ability to receive a message by masquerading as the legitimate
receiving destination, or
2) masquerading as the sending machine and sending a message to a
destination.
SOURCE: FIPS 191
1. Faking the sending address of a transmission to gain illegal entry
into a secure system. Impersonating, masquerading, piggybacking,
and mimicking are forms of spoofing.
2. The deliberate inducement of a user or resource to take incorrect
action.
SOURCE: CNSSI-4009
Spread Spectrum – Telecommunications techniques in which a signal is transmitted in a
bandwidth considerably greater than the frequency content of the
original information. Frequency hopping, direct sequence spreading,
time scrambling, and combinations of these techniques are forms of
spread spectrum.
SOURCE: CNSSI-4009
Spyware – Software that is secretly or surreptitiously installed into an
information system to gather information on individuals or
organizations without their knowledge; a type of malicious code.
SOURCE: SP 800-53; CNSSI-4009
SSL – See Secure Sockets Layer.
Standard – A published statement on a topic specifying characteristics, usually
measurable, that must be satisfied or achieved in order to comply
with the standard.
SOURCE: FIPS 201
Start-Up KEK Key-encryption-key held in common by a group of potential
communicating entities and used to establish ad hoc tactical
networks.
SOURCE: CNSSI-4009
State – Intermediate Cipher result that can be pictured as a rectangular array
of bytes.
SOURCE: FIPS 197
Static Key – A key that is intended for use for a relatively long period of time and
is typically intended for use in many instances of a cryptographic key
establish scheme
SOURCE: SP 800-57
Pg 182