NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Data Asset – 1. Any entity that is comprised of data. For example, a database is
a data asset that is comprised of data records. A data asset may be a
system or application output file, database, document, or Web page.
A data asset also includes a service that may be provided to access
data from an application. For example, a service that returns
individual records from a database would be a data asset. Similarly,
a Web site that returns data in response to specific queries (e.g.,
www.weather.com) would be a data asset.
2. An information-based resource.
SOURCE: CNSSI-4009
Data Element – A basic unit of information that has a unique meaning and
subcategories (data items) of distinct value. Examples of data
elements include gender, race, and geographic location.
Data Encryption Algorithm (DEA) –
Data Encryption Standard (DES) –
SOURCE: SP 800-47; CNSSI-4009
The cryptographic engine that is used by the Triple Data Encryption
Algorithm (TDEA).
SOURCE: SP 800-67
Cryptographic algorithm designed for the protection of unclassified
data and published by the National Institute of Standards and
Technology (NIST) in Federal Information Processing Standard
(FIPS) Publication 46. (FIPS 46-3 withdrawn 19 May 2005) See
Triple DES.
SOURCE: CNSSI-4009
Data Flow Control – Synonymous with information flow control.
SOURCE: CNSSI-4009
Data Integrity – The property that data has not been altered in an unauthorized
manner. Data integrity covers data in storage, during processing, and
while in transit.
SOURCE: SP 800-27
The property that data has not been changed, destroyed, or lost in an
unauthorized or accidental manner.
SOURCE: CNSSI-4009
Data Origin Authentication – The process of verifying that the source of the data is as claimed and
that the data has not been modified.
SOURCE: CNSSI-4009
Pg 58