NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Cryptography – Is categorized as either secret key or public key. Secret key
cryptography is based on the use of a single cryptographic key shared
between two parties. The same key is used to encrypt and decrypt
data. This key is kept secret by the two parties. Public key
cryptography is a form of cryptography which makes use of two
keys: a public key and a private key. The two keys are related but
have the property that, given the public key, it is computationally
infeasible to derive the private key [FIPS 140-1]. In a public key
cryptosystem, each party has its own public/private key pair. The
public key can be known by anyone; the private key is kept secret.
SOURCE: FIPS 191
Art or science concerning the principles, means, and methods for
rendering plain information unintelligible and for restoring encrypted
information to intelligible form.
SOURCE: CNSSI-4009
Cryptology – The science that deals with hidden, disguised, or encrypted
communications. It includes communications security and
communications intelligence.
SOURCE: SP 800-60
The mathematical science that deals with cryptanalysis and
cryptography.
SOURCE: CNSSI-4009
CVE – See Common Vulnerabilities and Exposures.
Cyber Attack – An attack, via cyberspace, targeting an enterprise’s use of cyberspace
for the purpose of disrupting, disabling, destroying, or maliciously
controlling a computing environment/infrastructure; or destroying the
integrity of the data or stealing controlled information.
SOURCE: CNSSI-4009
Cyber Incident – Actions taken through the use of computer networks that result in an
actual or potentially adverse effect on an information system and/or
the information residing therein. See incident.
SOURCE: CNSSI-4009
Pg 56