Glossary

Dialogue between two information systems for synchronizing, identifying, and authenticating themselves to one another.

SOURCE: CNSSI-4009

Value computed on data to detect error or manipulation.  See Checksum.

SOURCE: CNSSI-4009

A message authentication code that uses a cryptographic key in conjunction with a hash function.

SOURCE:  FIPS 201; CNSSI-4009

A message authentication code that utilizes a keyed hash.

SOURCE:  FIPS 140-2

An enclave boundary protection device that controls access between a local area network that an enterprise system has a requirement to protect, and an external network that is outside the control of the enterprise system, with a high degree of assurance.

SOURCE:  SP 800-32

A guard that has two basic functional capabilities: a Message Guard and a Directory Guard.  The Message Guard provides filter service for message traffic traversing the Guard between adjacent security domains.  The Directory Guard provides filter service for directory access and updates traversing the Guard between adjacent security domains.

SOURCE: CNSSI-4009

The loss of confidentiality, integrity, or availability that could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other organizations, or the national security interests of the United States; (i.e., 1) causes a severe degradation in mission capability to an extent and duration that the organization is able to perform its primary functions, but the effectiveness of the functions is significantly reduced; 2) results in major damage to organizational assets; 3) results in major financial loss; or 4) results in severe or catastrophic harm to individuals involving loss of life or serious life threatening injuries).

SOURCE:  FIPS 199; CNSSI-400

The Health Insurance Portability and Accountability Act of 1996 (HIPAA; Pub.L. 104–191, 110 Stat. 1936, enacted August 21, 1996) was enacted by the United States Congress and signed by President Bill Clinton in 1996. It has been known as the Kennedy–Kassebaum Act or Kassebaum-Kennedy Act after two of its leading sponsors. Title I of HIPAA protects health insurance coverage for workers and their families when they change or lose their jobs. Title II of HIPAA, known as the Administrative Simplification (AS) provisions, requires the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers.

SOURCE: WIKIPEDIA

A system (e.g., a Web server) or system resource (e.g., a file on a server) that is designed to be attractive to potential crackers and intruders and has no authorized users other than its administrators.

SOURCE: CNSSI-4009

A fully operational offsite data processing facility equipped with hardware and software, to be used in the event of an information system disruption.

SOURCE:  SP 800-34

Backup site that includes phone systems with the phone lines already connected. Networks will also be in place, with any necessary routers and switches plugged in and turned on.  Desks will have desktop PCs installed and waiting, and server areas will be replete with the necessary hardware to support business-critical functions. Within a few hours, a hot site can become a fully functioning element of an organization.

SOURCE: CNSSI-4009

The standard markup language used to create web pages.

SOURCE: WIKIPEDIA

Secure HTTP that provides authentication and encrypted communication on the World Wide Web designed for security-sensitive communication such as web-based logins.

SOURCE: PCI GLOSSARY