[An] Error of commission or omission in an information system (IS) that may allow protection mechanisms to be bypassed. [INFOSEC-99]

A discrete aspect of the performance of a system by which it enforces security automatically on behalf of the System Manager and /or system users [CESG].
Note: [1] Access control, authentication, accounting and audit are defined as major security functions which can be broken down into "functional elements". [2] The term is normally used at the requirements stage of a… (Read More →)

Common aspects of security policies necessary in order for interactions to take place between domains [10181-1]. .

1. In computer and communications security , the central part of a computer or communications system hardware, firmware, and software that implements the basic security procedures for controlling access to system resources.
2. A self-contained usually small collection of key security-related statements that (a) works as apart of an operating system to prevent unauthorized access to, or use of, the… (Read More →)

1. Information representing the sensitivity of a subject or object, such as its hierarchical classification ("confidential," "secret," "top secret") together with any applicable nonhierarchical security categories (e.g., sensitive compartmented information, critical nuclear weapon design information). [INFOSEC-99] Synonym security classification.
2. The marking bound to a resource (which may be a data unit) that names or designates the security attributes of… (Read More →)

1. The combination of a hierarchical security classification and a set of security categories that represents the sensitivity of an object or the security clearance of a subject. [2382-pt.8]
2. The combination of hierarchical classification and a set of non- hierarchical categories that represent the sensitivity of information [TCSEC].

The time over which cryptographically protected data or other security processes have value. [After X9.67]

In network management, the set of functions (a) that protects telecommunications networks and systems from unauthorized access by persons, acts, or influences and (b) that includes many subfunctions, such as creating, deleting, and controlling security services and mechanisms; distributing security-relevant information; reporting security-relevant events; controlling the distribution of cryptographic keying material; and authorizing subscriber access, rights, and privileges.

A means by which a System Security Policy is enforced [CESG].
Note: A general term, covering technical, procedural and management aspects of security.

The logic or algorithm that implements a particular security enforcing or security relevant function in hardware and software [ITSEC].