NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
The analysis of patterns in communications for the purpose of
gaining intelligence about a system or its users. It does not require
examination of the content of the communications, which may or
may not be decipherable. For example, an adversary may be able to
detect a signal from a reader that could enable it to infer that a
particular activity is occurring (e.g., a shipment has arrived, someone
is entering a facility) without necessarily learning an identifier or
associated data.
SOURCE: SP 800-98
Gaining knowledge of information by inference from observable
characteristics of a data flow, even if the information is not directly
available (e.g., when the data is encrypted). These characteristics
include the identities and locations of the source(s) and destination(s)
of the flow, and the flow's presence, amount, frequency, and duration
of occurrence.
SOURCE: CNSSI-4009
Traffic Encryption Key (TEK) – Key used to encrypt plain text or to superencrypt previously
encrypted text and/or to decrypt cipher text.
SOURCE: CNSSI-4009
Traffic Padding – Generation of mock communications or data units to disguise the
amount of real data units being sent.
SOURCE: CNSSI-4009
Traffic-Flow Security (TFS) – Techniques to counter Traffic Analysis.
SOURCE: CNSSI-4009
Training (Information Security) – Training strives to produce relevant and needed (information)
security skills and competencies.
SOURCE: SP 800-50
Training Assessment – An evaluation of the training efforts.
SOURCE: SP 800-16
Training Effectiveness – A measurement of what a given student has learned from a specific
course or training event.
SOURCE: SP 800-16
Pg 194