Cryptosystem analysis Process of establishing the exploitability of a cryptosystem, normally by reviewing transmitted traffic protected or secured by the system under study. Cryptosystem evaluation Process of determining vulnerabilities of a cryptosystem. Cryptosystem review Examination of a cryptosystem by the controlling authority ensuring its adequacy of design and content, continued need, and proper distribution. Cryptosystem survey Management technique in actual holders of a cryptosystem express opinions on the system’s suitability and provide usage information for technical evaluations. Cyclic redundancy check checking mechanism that checks data integrity by computing a polynomial algorithm based checksum. D Data aggregation Compilation of unclassified individual data systems and data elements that could result in the totality of the information being classified or of beneficial use to an adversary. Data Encryption Standard (DES) Cryptographic algorithm, designed for the protection of unclassified data and published by the National Institute of Standards and Technology (NIST) in Federal Information Processing Standard (FIPS) Publication 46. (FIPS 46-3 withdrawn 19 May 2005) (See Triple DES) and CNSS Advisory IA/02-04 Revised March 2005) Data flow control Synonymous with information flow control. Data integrity Condition existing when data is unchanged from its source and has not been accidentally or maliciously modified, altered, or destroyed. Data origin authentication Corroborating the source of data is as claimed. Data security Protection of data from unauthorized (accidental or intentional) modification, destruction, or disclosure. Data transfer device (DTD) Fill device designed to securely store, transport, and transfer electronically both COMSEC and TRANSEC key, designed to be backward compatible with the previous
Key production key (KPK) Key used to initialize a keystream generator for the production of electronically generated key. Key recovery Mechanisms and processes that allow authorized parties to retrieve the cryptographic key used for data confidentiality. Key stream Sequence of symbols (or electrical or mechanical equivalents) produced in a machine or auto-manual cryptosystem to combine with plain text to produce cipher text, control transmission security processes, or produce key. Key tag Identification information associated with certain of electronic key. Key tape Punched or magnetic tape containing key. Printed key in tape form is referred to as a key list. Key updating Irreversible cryptographic process for modifying key. Keying material Key, code, or authentication information in physical or magnetic form. L See security label. Labeled security protections Elementary-level mandatory access control protection features and intermediate-level discretionary access control features in a TCB that uses sensitivity labels to make access control decisions. Laboratory attack Use of sophisticated signal recovery equipment in a laboratory environment to recover information from data storage media. Least privilege Principle requiring that each subject be granted the most restrictive set of privileges needed for the performance of authorized tasks. Application of this principle limits the damage that can result from accident, error, or unauthorized use of an information system. Level of concern Rating assigned to an information system indicating the extent to protection measures, techniques, and procedures must be applied. High, Medium, and Basic are
Manual remote rekeying Procedure by which a distant crypto-equipment is rekeyed electrically, with specific actions required by the receiving terminal operator. Synonymous with cooperative remote rekeying. (Also see automatic remote keying.) masquerading See spoofing. Master crypto-ignition key Key device with electronic logic and circuits providing the capability for adding more operational CIKs to a keyset. Memory scavenging The collection of residual information from data storage. Message authentication code Data associated with an authenticated message allowing a receiver to verify the integrity of the message. Message externals Information outside of the message text, such as the header, trailer, etc. message indicator Sequence of bits transmitted over a communications system for synchronizing Some off-line cryptosystems, such as the KL-51 and one-time pad systems, employ message indicators to establish decryption starting points. Mimicking See spoofing. Mobile code Software modules obtained from remote systems, transferred across a network, and then downloaded and executed on local systems without explicit installation or execution by the recipient. Mode of operation Description of the conditions under which an information system operates based on the sensitivity of information processed and the clearance levels, formal access approvals, and need-to-know of its users. Four modes of operation are authorized for processing or transmitting information: dedicated mode, system-high mode, compartmented/partitioned mode, and multilevel mode. Multilevel device Equipment trusted to properly maintain and separate data of different security categories. Multilevel mode INFOSEC mode of operation wherein all the following statements are satisfied concerning the users who have direct or indirect access to the system, its peripherals, remote terminals, or remote hosts: a. some users do not have a valid security clearance for all the information processed in the information system; b. all users have the proper security clearance and appropriate formal access approval for that information to which they have access; and c. all users have a valid need-to-know only for information to which they have access. equipment.
threats, analysis of vulnerabilities, assessment of risks, and application of appropriate countermeasures. Optional modification NSA-approved modification not required for universal implementation by all holders of a COMSEC end-item. This of modification requires all of the engineering/doctrinal control of mandatory modification but is usually not related to security, safety, TEMPEST, or reliability. (See mandatory modification.) Organizational maintenance Limited maintenance performed by a user organization. Organizational registration Entity within the PKI that authenticates the authority (ORA) identity and the organizational affiliation of the users. Over-the-air key distribution Providing electronic key via over-the-air rekeying, over-the-air key transfer, or cooperative key generation. Over-the-air key transfer Electronically distributing key without changing traffic encryption key used on the secured communications path over the transfer is accomplished. Over-the-air rekeying (OTAR) Changing traffic encryption key or transmission security key in remote by sending new key directly to the remote crypto-equipment over the communications path it secures. Overt channel Communications path within a computer system or network designed for the authorized transfer of data. (See covert channel.) Overwrite procedure Process of writing patterns of data on top of the data stored on a magnetic medium. P Parity Bit(s) used to determine whether a block of data has been altered. Partitioned security mode information system security mode of operation wherein all personnel have the clearance, but not necessarily formal access approval and need-to-know, for all information handled by an information system. Password Protected/private string of letters, numbers, and special characters used to authenticate an identity or to authorize access to data.
Repair actions are limited to minor electrical and/or mechanical improvements to enhance operation, maintenance, or reliability. They do not require an identification label, marking, or control but must be fully documented by changes to the maintenance manual. Reserve keying material Key held to satisfy unplanned needs. (See contingency key.) Residual risk Portion of risk remaining after security measures have been applied. Residue Data left in storage after information processing operations are complete, but before degaussing or overwriting has taken place. Resource encapsulation Method by which the reference monitor mediates accesses to an information system resource. Resource is protected and not directly accessible by a subject. Satisfies requirement for accurate auditing of resource usage. Risk Possibility that a particular threat will adversely impact an information system by exploiting a particular vulnerability. Risk analysis Examination of information to identify the risk to an information system. Risk assessment Process of analyzing threats to and vulnerabilities of an information system, and the potential impact resulting from the loss of information or capabilities of a system. This analysis is used as a basis for identifying appropriate and cost-effective security countermeasures. Risk index Difference between the minimum clearance or authorization of information system and the maximum sensitivity (e.g.; classification and categories) of data processed by the system. Risk management Process of managing risks to agency operations (including mission, functions, image, or reputation), agency assets, or individuals resulting from the operation of an information system. It includes risk assessment; cost-benefit analysis; the selection, implementation, and assessment of security controls; and the formal authorization to operate the system. The process considers effectiveness, efficiency, and constraints due to laws, directives, policies, or regulations. (NIST Special Pub 800-53) S Safeguard 1. Protection included to counteract a known or expected condition.
Vulnerability assessment Formal description and evaluation of vulnerabilities of an information system. W Warm site A backup site that contains the IT infrastructure (hardware-wise, sometimes application), but not the data. Web risk assessment Process for ensuring websites are in compliance with applicable policies. Wireless technology Permits the active or passive transfer of information between separated points without physical connection. Active information transfer may entail a transmit and/or receive emanation of energy, whereas passive information transfer entails a receive-only capability. Currently wireless technologies use IR, acoustic, RF, and optical but, as technology evolves, wireless could include other methods of transmission. Work factor Estimate of the effort or time needed by a potential perpetrator, with specified expertise and resources, to overcome a protective measure. Worm See malicious code. Write Fundamental operation in an information system that results only in the flow of information from a subject to an object. (See access type.) Write access Permission to write to an object in an information system. Z Zero fill To fill unused storage locations in an information system with the representation of the character denoting “0.” Zeroize To remove or eliminate the key from a cryptoequipmentor fill device.
SECTION II: COMMONLY USED ABBREVIATIONS AND ACRONYMS ACK Acknowledgement. A packet message used in the Transmission Control Protocol (TCP) to acknowledge receipt of a packet ACL Access Control List ADSL Asynchronous Digital Subscriber Line AES Advanced Encryption Standard AKD/RCU A Automatic Key Distribution/Rekeying Control Unit ANSI American National Standards Institute APC Adaptive Predictive Coding APU Auxiliary Power Unit ARP / Reverse ARP Address Resolution Protocol ASCII American Standard Code for Information Interchange ASSIST Program Automated Information System Security Incident Support Team Program ATM Asynchronous Transfer Mode AUTODIN Automatic Digital Network AVP Authorized Vendor Program C2 Command and Control C3 Command, Control, and Communications