NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Unauthorized Access – A person gains logical or physical access without permission to a
network, system, application, data, or other IT resource.
SOURCE: SP 800-61
Unauthorized Access – Occurs when a user, legitimate or unauthorized, accesses a resource
that the user is not permitted to use.
SOURCE: FIPS 191
Any access that violates the stated security policy.
SOURCE: CNSSI-4009
Unauthorized Disclosure – An event involving the exposure of information to entities not
authorized access to the information.
SOURCE: SP 800-57; CNSSI-4009
Unsigned data – Data included in an authentication token, in addition to a digital
signature.
SOURCE: FIPS 196
Unclassified – Information that has not been determined pursuant to E.O. 12958, as
amended, or any predecessor order, to require protection against
unauthorized disclosure and that is not designated as classified.
SOURCE: CNSSI-4009
Untrusted Process – Process that has not been evaluated or examined for correctness and
adherence to the security policy. It may include incorrect or
malicious code that attempts to circumvent the security mechanisms.
SOURCE: CNSSI-4009
Update (a Certificate) – The act or process by which data items bound in an existing public
key certificate, especially authorizations granted to the subject, are
changed by issuing a new certificate.
SOURCE: SP 800-32; CNSSI-4009
Update (key) – Automatic or manual cryptographic process that irreversibly modifies
the state of a COMSEC key.
SOURCE: CNSSI-4009
US-CERT – A partnership between the Department of Homeland Security and the
public and private sectors, established to protect the nation's Internet
infrastructure. US-CERT coordinates defense against and responses
to cyber attacks across the nation.
SOURCE: CNSSI-4009
Pg 202