NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
IA-Enabled Information Technology
Product –
Product or technology whose primary role is not security, but which
provides security services as an associated feature of its intended
operating capabilities. Examples include such products as securityenabled
Web browsers, screening routers, trusted operating systems,
and security-enabled messaging systems.
SOURCE: CNSSI-4009
IA-Enabled Product – Product whose primary role is not security, but provides security
services as an associated feature of its intended operating
capabilities.
Note: Examples include such products as security-enabled Web
browsers, screening routers, trusted operating systems, and security
enabling messaging systems.
SOURCE: CNSSI-4009
Identification – The process of verifying the identity of a user, process, or device,
usually as a prerequisite for granting access to resources in an IT
system.
SOURCE: SP 800-47
Identification – The process of discovering the true identity (i.e., origin, initial
history) of a person or item from the entire collection of similar
persons or items.
SOURCE: FIPS 201
An act or process that presents an identifier to a system so that the
system can recognize a system entity (e.g., user, process, or device)
and distinguish that entity from all others.
SOURCE: CNSSI-4009
Identifier – Unique data used to represent a person’s identity and associated
attributes. A name or a card number are examples of identifiers.
SOURCE: FIPS 201
A data object - often, a printable, non-blank character string - that
definitively represents a specific identity of a system entity,
distinguishing that identity from all others.
SOURCE: CNSSI-4009
Identity – A unique name of an individual person. Since the legal names of
persons are not necessarily unique, the identity of a person must
include sufficient additional information to make the complete name
unique.
SOURCE: SP 800-63
Pg 86