NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
A device or program that controls the flow of network traffic between
networks or hosts that employ differing security postures.
SOURCE: SP 800-41
Firewall Control Proxy – The component that controls a firewall’s handling of a call. The
firewall control proxy can instruct the firewall to open specific ports
that are needed by a call, and direct the firewall to close these ports at
call termination.
SOURCE: SP 800-58
Firmware – The programs and data components of a cryptographic module that
are stored in hardware within the cryptographic boundary and cannot
be dynamically written or modified during execution.
SOURCE: FIPS 140-2
Computer programs and data stored in hardware - typically in readonly
memory (ROM) or programmable read-only memory (PROM) -
such that the programs and data cannot be dynamically written or
modified during execution of the programs.
SOURCE: CNSSI-4009
FISMA – See Federal Information Security Management Act.
Fixed COMSEC Facility – COMSEC facility located in an immobile structure or aboard a ship.
SOURCE: CNSSI-4009
Flaw – Error of commission, omission, or oversight in an information system
that may allow protection mechanisms to be bypassed.
SOURCE: CNSSI-4009
Flaw Hypothesis Methodology – System analysis and penetration technique in which the specification
and documentation for an information system are analyzed to
produce a list of hypothetical flaws. This list is prioritized on the
basis of the estimated probability that a flaw exists, on the ease of
exploiting it, and on the extent of control or compromise it would
provide. The prioritized list is used to perform penetration testing of
a system.
SOURCE: CNSSI-4009
Flooding – An attack that attempts to cause a failure in a system by providing
more input than the system can process properly.
SOURCE: CNSSI-4009
Pg 78