1. The formal authorization by the Departmental Security Officer for an individual to have access to classified information, following appropriate vetting [CESG].
2. An attribute of a subject that specifies the security classes of objects for which access rights may be granted [CESG] See also: Lattice

1. An area of responsibility for the security of a system as defined in a System Security policy.
Note: The terms Global Security Environment (GSE), Local Security Environment (LSE) and Electronic Security Environment (ESE) are used to categorize security domains [CESG].
2. A bounded group of security objects and security subjects to which applies a single security policy executed by… (Read More →)

That which directly contributes to satisfying the security objectives of the Target of Evaluation [ITSEC].

An individual or process allowed to specify and manage the events which may generate a security message and to establish the action(s) to be taken for each security message type [10181-7]

The mechanism for conveying, or the conveyance of, security-related information between two entities. [After X9.41]

A set of logically associated security functions as used in the security framework [ECMATR46].

The invocation of a function a security facility by another security facility [ECMATR46].

[An] Assessment, usually performed on information system (IS) hardware, to determine the security properties of a device when hardware fault is encountered. [INFOSEC-99]

Report prepared by a CLEF and initially distributed to the Certification Body (CB). It describes situations whereby the Security policy of the Target of Evaluation (TOE) may be violated [CESG]. See also: Evaluation Observation Repor

1. In communications security, the hardware, firmware, or software used to prevent access to specified data by unauthorized persons or systems, such as by preventing transmission, preventing forwarding messages over unprotected lines or circuits, or requiring special codes for access to read-only files. [From Weik '89]
2. [An] Information-system (IS) -trusted subsystem that enforces security policy on the data that… (Read More →)