1. A set of operations designed to support some aspect of security in a distributed system [ECMA138].
2. A service, provided by a layer of communicating open systems, which ensures adequate security of the systems or of data transfers [7498-2].

Detailed description of the safeguards required to protect an information system (IS). [INFOSEC-99]

1. A proper subset of a security domain's entities which are subject to a security policy which possesses the following properties:
1. it includes all of the rules of the super-domain's policy where they apply;
2. additional rules are defined for the sub-domain policy action types where permitted by the policy of the super- domain;
3. it is administered by… (Read More →)

An entity in an active role to which a security policy applies [ECMATR46].

1. A set of security functional and assurance requirements and specifications to be used as the basis for evaluation of an identified product or system.
2. A specification of the security required of a Target of Evaluation, used as a baseline for evaluation. The security target will specify the security enforcing functions of the Target of Evaluation. It will also… (Read More →)

Examination and analysis of the safeguards required to protect an information system (IS), as they have been applied in an operational environment, to determine the security posture of that system. [INFOSEC-99]

1. [The] process to determine that an information system (IS) protects data and maintains functionality as intended. [INFOSEC-99]
2. A process used to determine that the security features of a system are implemented as designed and that they are adequate for a proposed application environment. This process includes hands- on functional testing, penetration testing, and verification [TCSEC]. See also: Functional… (Read More →)

A set of security relevant data which is protected by integrity and data origin authentication from a source which is not considered a security authority [10181-1].

Acronym for self-electro-optic effect device. An optically bistable device used for photonic switching.
Note: A self-electro-optic device consists of multiple elements, biased by an external voltage which creates an external field that shifts the wavelength of the onset of absorption, thus varying the intensity of the transmitted light.

A random value, either from a random-number generator or a pseudorandom number generator, used as an input to a hash function, whose output is then used as an input parameter into a key-generation algorithm. [After X9.31]