|
@
Symbol used within email addresses that divides the user part from the host part of the address.
ACCESS (to a system, to data, to a software process)
in general, the right to enter or make use of. In a computer context, entry granted to a software path that establishes the right to use a system and its resources; to read, write, modify, or delete data; and/or to use software processes with various capabilities, (v.) to achieve the status of having access.
ACCESS CONTROL
the granting or denying to a subject of certain permissions to access a resource (e.g., to view a certain file, to run a certain programme).
ADSL (Asymmetrical Data Subscriber Line)
Asymmetric Digital Subscriber Line (also known as xDSL) a technology that allows the use of a copper line to send a large quantity of data (e.g. a television picture) in one direction and a small quantity (e.g. a control channel and a telephone call) in the other.
ALGORITHM AND KEY LENGTH
the combination of cryptographic algorithm and its key length(s) often used to establish the strength of an encryption process.
APE (application package for the enterprise)
a group of applications designed to functionacross the enterprise
ARCHITECTURE
In information technology, architecture is a term applied to the process and the outcome of planning and specifying the overall structure, logical components, and logical interrelationships of a computer, its operating system, a network, or other conception. An architecture can be a reference model, such as the Open Systems Interconnection (OSI) reference model, intended as a model for specific product architectures, or it can be a specific product architecture, such as that for an Intel Pentium microprocessor or for IBM's OS/390 operating system. Computer architecture can be divided into five fundamental components: input/output, storage, communication, control, and processing. In practice, each of these components (also called subsystems) is sometimes said to have an architecture.
ASSURANCE
confidence that a system design meets its requirements, or that its implementation meets its specification, or that some specific property is satisfied.
ASYMMETRIC CRYPTOGRAPHY
(also public-key cryptography) - cryptography based on algorithms that enable the use of one key (a public key) to encrypt a message and a second, different, but mathematically related, key (a private key) to decrypt a message. Asymmetric cryptography can also be used to perform digital signatures and key exchange.
AUDIT TRAIL
the results of monitoring each operation of subjects on objects; for example, an audit trail might be a record of all actions taken on a particularly sensitive file or a records of all users who viewed that file.
AUDITING
the process of making and keeping the records necessary to support accountability. See audit trail.
AUTHENTICATION (OF IDENTITY)
an adjunct step to identification that confirms an asserted identity with a specified, or understood, level of confidence. Authentication can be used to provide high assurance that the purported identity is, in fact, the correct identity associated with the entity that provides it. The authentication mechanism can be based on something that the entity knows, has, or is (e.g., a password, smart card that uses some encryption or random number for a challenge-response scheme, or a fingerprint).
AUTHENTICATION (OF A MESSAGE)
the process of adding one or more additional data elements to communications traffic (or files) to ensure the integrity of the traffic (or files). Such additional elements are often called 'message authenticator(s)' and would be an example of an integrity lock.
AUTHENTICITY
a security service that provides a user with a means of verifying the identity of the sender of a message, a file, a computer system, a software process, or even a database or individual software component.
AUTHORISATION
determining whether a subject (a user or system) is trusted to act for a given purpose, for example, allowed to read a particular file.
AVAILABILITY
the property that a given resource will be useable during a given time period, for example, that an encrypted file can be decrypted when necessary. |
Print
