NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
A means of restricting access to objects (e.g., files, data entities)
based on the identity and need-to-know of subjects (e.g., users,
processes) and/or groups to which the object belongs. The controls
are discretionary in the sense that a subject with a certain access
permission is capable of passing that permission (perhaps indirectly)
on to any other subject (unless restrained by mandatory access
control).
SOURCE: CNSSI-4009
Disk Imaging – Generating a bit-for-bit copy of the original media, including free
space and slack space.
SOURCE: SP 800-86
Disruption – An unplanned event that causes the general system or major
application to be inoperable for an unacceptable length of time (e.g.,
minor or extended power outage, extended unavailable network, or
equipment or facility damage or destruction).
SOURCE: CNSSI-4009
An unplanned event that causes an information system to be
inoperable for a length of time (e.g., minor or extended power outage,
extended unavailable network, or equipment or facility damage or
destruction).
SOURCE: SP 800-34
Distinguished Name (DN) – A unique name or character string that unambiguously identifies an
entity according to the hierarchical naming conventions of X.500
directory service.
SOURCE: CNSSI-4009
Distinguishing Identifier – Information which unambiguously distinguishes an entity in the
authentication process.
SOURCE: FIPS 196; CNSSI-4009
Distributed Denial of Service –
(DDoS)
DMZ – See Demilitarized Zone.
A Denial of Service technique that uses numerous hosts to perform
the attack.
SOURCE: SP 800-61; CNSSI-4009
Domain – A set of subjects, their information objects, and a common security
policy.
SOURCE: SP 800-27
Pg 64