NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Subject Security Level – Sensitivity label(s) of the objects to which the subject has both read
and write access. Security level of a subject must always be
dominated by the clearance level of the user associated with the
subject.
SOURCE: CNSSI-4009
Subordinate Certification
Authority –
In a hierarchical PKI, a Certification Authority whose certificate
signature key is certified by another CA, and whose activities are
constrained by that other CA.
SOURCE: SP 800-32; CNSSI-4009
Subscriber – A party who receives a credential or token from a CSP (Credentials
Service Provider) and becomes a claimant in an authentication
protocol.
SOURCE: SP 800-63; CNSSI-4009
Subsystem – A major subdivision or component of an information system
consisting of information, information technology, and personnel that
perform one or more specific functions.
SOURCE: SP 800-53; SP 800-53A; SP 800-37
Suite A – A specific set of classified cryptographic algorithms used for the
protection of some categories of restricted mission-critical
information.
SOURCE: CNSSI-4009
Suite B – A specific set of cryptographic algorithms suitable for protecting
national security systems and information throughout the U.S.
government and to support interoperability with allies and coalition
partners.
SOURCE: CNSSI-4009, as modified
Superencryption – Process of encrypting encrypted information. Occurs when a
message, encrypted off-line, is transmitted over a secured, online
circuit, or when information encrypted by the originator is
multiplexed onto a communications trunk, which is then bulk
encrypted.
SOURCE: CNSSI-4009
Superior Certification Authority – In a hierarchical PKI, a Certification Authority who has certified the
certificate signature key of another CA, and who constrains the
activities of that CA.
SOURCE: SP 800-32; CNSSI-4009
Pg 184