PREVIOUS

NEXT

advanced encryption standard
(AES)

A U.S. Government-approved cryptographic algorithm that can be used to protect electronic data. The AES algorithm is a symmetric block cipher that can encrypt (encipher) and decrypt (decipher) information.
Source: FIPS PUB 197 (adapted)

advanced key processor (AKP)

A cryptographic device that performs all cryptographic functions for a management client node and contains the interfaces to 1) exchange information with a client platform, 2) interact with fill devices, and 3) connect a client platform securely to the primary services node (PRSN).

advanced persistent threat (APT)

An adversary with sophisticated levels of expertise and significant resources, allowing it through the use of multiple different attack vectors (e.g., cyber, physical, and deception) to generate opportunities to achieve its objectives, which are typically to establish and extend footholds within the information technology infrastructure of organizations for purposes of continually exfiltrating information and/or to undermine or impede critical aspects of a mission, program, or organization, or place itself in a position to do so in the future; moreover, the advanced persistent threat pursues its objectives repeatedly over an extended period of time, adapting to a defender’s efforts to resist it, and with determination to maintain the level of interaction needed to execute its objectives.
Source: NIST SP 800-39

adversary

Individual, group, organization, or government that conducts or has the intent to conduct detrimental activities.
Source: NIST SP 800-30 Rev 1

advisory (C.F.D.)

Notification of significant new trends or developments regarding the threat to the information systems of an organization. This notification may include analytical insights into trends, intentions, technologies, or tactics of an adversary targeting information systems.
Rationale: General definition of a commonly understood term.

agency

Any executive department, military department, government corporation, government controlled corporation, or other establishment in the executive branch of the government (including the Executive Office of the President), or any independent regulatory agency, but does not include -
(i) the General Accounting Office;
(ii) Federal Election Commission;
(iii) the governments of the District of Columbia and of the territories and possessions of the United States, and their various subdivisions; or
(iv) Government-owned contractor-operated facilities, including laboratories engaged in national defense research and production activities.
See also executive agency.
Source: 44 U.S.C., Sec. 3502

air gap

An interface between two systems at which (a) they are not connected physically and (b) any logical connection is not automated (i.e., data is transferred through the interface only manually, under human control).
Source: IETF RFC 4949 Ver 2