NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Common Carrier – In a telecommunications context, a telecommunications company that
holds itself out to the public for hire to provide communications
transmission services. Note: In the United States, such companies
are usually subject to regulation by federal and state regulatory
commissions.
SOURCE: SP 800-53
Common Control – A security control that is inherited by one or more organizational
information systems. See Security Control Inheritance.
SOURCE: SP 800-53; SP 800-53A; SP 800-37; CNSSI-4009
Common Control Provider – An organizational official responsible for the development,
implementation, assessment, and monitoring of common controls
(i.e., security controls inherited by information systems).
SOURCE: SP 800-37; SP 800-53A
Common Criteria – Governing document that provides a comprehensive, rigorous
method for specifying security function and assurance requirements
for products and systems.
SOURCE: CNSSI-4009
Common Fill Device – One of a family of devices developed to read-in, transfer, or store
key.
SOURCE: CNSSI-4009
Common Vulnerabilities and
Exposures (CVE) –
A dictionary of common names for publicly known information
system vulnerabilities.
SOURCE: SP 800-51; CNSSI-4009
Communications Cover – Concealing or altering of characteristic communications patterns to
hide information that could be of value to an adversary.
SOURCE: CNSSI-4009
Communications Deception – Deliberate transmission, retransmission, or alteration of
communications to mislead an adversary's interpretation of the
communications.
SOURCE: CNSSI-4009
Communications Profile – Analytic model of communications associated with an organization
or activity. The model is prepared from a systematic examination of
communications content and patterns, the functions they reflect, and
the communications security measures applied.
SOURCE: CNSSI-4009
Pg 37