That which directly contributes to satisfying the security objectives of the Target of Evaluation [ITSEC].

An individual or process allowed to specify and manage the events which may generate a security message and to establish the action(s) to be taken for each security message type [10181-7]

The mechanism for conveying, or the conveyance of, security-related information between two entities. [After X9.41]

A set of logically associated security functions as used in the security framework [ECMATR46].

The invocation of a function a security facility by another security facility [ECMATR46].

[An] Assessment, usually performed on information system (IS) hardware, to determine the security properties of a device when hardware fault is encountered. [INFOSEC-99]

Report prepared by a CLEF and initially distributed to the Certification Body (CB). It describes situations whereby the Security policy of the Target of Evaluation (TOE) may be violated [CESG]. See also: Evaluation Observation Repor

1. In communications security, the hardware, firmware, or software used to prevent access to specified data by unauthorized persons or systems, such as by preventing transmission, preventing forwarding messages over unprotected lines or circuits, or requiring special codes for access to read-only files. [From Weik '89]
2. [An] Information-system (IS) -trusted subsystem that enforces security policy on the data that… (Read More →)

[An] Error of commission or omission in an information system (IS) that may allow protection mechanisms to be bypassed. [INFOSEC-99]

A discrete aspect of the performance of a system by which it enforces security automatically on behalf of the System Manager and /or system users [CESG].
Note: [1] Access control, authentication, accounting and audit are defined as major security functions which can be broken down into "functional elements". [2] The term is normally used at the requirements stage of a… (Read More →)