[A] Subsystem containing its own implementation of the reference monitor concept for those resources it controls. Secure subsystem must depend on other controls and the base operating system for the control of subjects and the more primitive system objects. [INFOSEC-99]

See STU.

1. In transmission security, see secure communications.
2. In spread-spectrum systems, the transmission of binary coded sequences that represent information that can be recovered only by persons or systems that have the proper key for the spread-spectrum code-sequence generator, i.e., have a synchronized generator that is identical to that used for transmission. [From Weik '89]

See SECORD.

1. A condition that results from the establishment and maintenance of protective measures that ensure a state of inviolability from hostile acts or influences.
2. With respect to classified matter, the condition that prevents unauthorized persons from having access to official information that is safeguarded in the interests of national security.
3. Measures taken by a military unit, an activity… (Read More →)

A human authority which establishes a security policy and identifies the entities to which the policy applies [ECMA138].

1. An authority (a person or group of people) responsible for implementing the security policy for a security domain [ECMATR46].
2. An authority (a person or a group of people) responsible for implementing the security policy for a security domain [POSIX.6].

A security-related event that has been identified by a security policy as a potential breach of security. [T1.233-1993]

A high level description of the structure of a system, with security functions assigned to components within this structure [CESG].

1. Information, other than cryptographic keys, that is needed to establish and describe the protection mechanisms that secure the communications between two entities. [After X9.41]
2. A security attribute is a piece of security information which is associated with an entity in a distributed system [ECMA138].
3. Attributes associated with processes and files and used to determine access rights of… (Read More →)