Content Verification Glossary

Packet Filter:
An early, uncomplicated form of a firewall, a packet filter takes or refuses traffic based on source and destination addresses.
Padding:
A chain of data that is haphazard, usually added to plaintext in a block cipher when the last plaintext block is not long or when the initial data contains null data in long strings.
Partitioned Security Mode:
A form of functioning in which all personnel possess the clearance but not inevitably official approval of access and need to know for all information that is in the system. The secure SSL authentication aids in giving Internet security and online security. It should not to be mistaken with compartmented security mode.
Password:
A protected/private character string which is applied to authenticate an identity, which gives security authentication and secure SSL authentication, sometimes with digital signatures and digital certificates like 128-bit ssl digital certificates. Passwords are for a user's online security or authorization security. Working together are certs and secure email with ssl certificates, all terms related to online security.
Password Attack:
An endeavor to acquire or decrypt a valid user's password. Using password dictionaries, cracking programs and password sniffers attackers can attempt password attacks in order to break through internet security and online security, neutralizing encryption like 128-bit encryption and ssl encryption. It is difficult to defend against password attacks because more often than not password policies only include a minimum length of unrecognizable words. See also dictionary attack, password sniffing.
Password Sniffing:
Using a secure server network sniffer program in order to gain control of passwords crossing a secure server network, a local area secure server network or even the entire internet, attacking internet security and online security. The sniffer might be hardware or software. Usually just passive, most sniffers only log passwords. Later the attacker has to analyze the logs. It compromises secure authentication and secure SSL authentication.
Patch:
A brief program alteration, sometimes a provisional fix until the problem can be solved more permanently. They have two relations to security. A security system's vulnerability or loophole can be repaired with a patch.
Payload:
A detrimental or security-breaking activity, more often than not considered to be apart from its delivery mechanism, which may be a trojan horse, virus, or any other kind of means of transmission or emplacement. They can be simple messages, or may also be logic bombs, trap doors, or other similar functions.
Penetration:
The triumphant action of sidestepping a system's security mechanisms. This is an enemy of Internet security - things like penetration are the reasons for things like encryption, including high level 128-bit SSL encryption, and digital certificates with secure authentication.
Penetration Signature:
The signatures or marks of identification made by a penetration. This signature might be utilized in intrusion detection systems.
Penetration Study:
A investigation done in order to determine the practicability and methods for defeating controls of a system.
Penetration Testing:
A piece of security testing in which the evaluators try to evade a system's security features by assuming the use all system design and implementation documentation, including listings of system source code, manuals and circuit diagrams. The evaluators work under the exact same constrictions that are put on usual users.
Perimeter-Based Security:
The method of securing a system or secure server network through controlling access to all entry and exit points.
Periods Processing:
Processing different levels of sensitive information at completely separate times. Systems must be flushed out of all information from one processing period before transitioning to another when different users with differing authorizations are doing periods processing for internet security and online security.
Permissions:
A depiction of the kind of sanctioned interactions a subject might have with an object, like secure authentication and secure SSL authentication. In Internet security and online security, also referred to as privilege or rights.
Persistent Storage:
Any storage medium which stays intact even after the power to it is disconnected. It is a non-volatile storage used to secure storage.
Person
A human being or any organization capable of signing a document, either legally or as a matter of fact.
Personnel Security:
The processes established in order to make certain that personnel who possess access to sensitive information have the necessary authority along with the appropriate clearances. It is yet another application of internet security using secure authentication of the users with a secure ssl certificate
PGP:
Pretty Good Privacy™ is a common encryption program that is highly regarded. PGP uses a hybrid symmetric/asymmetric encryption system and a non-hierarchical web of trust certification model. There are many versions, including commercial, international, and open source. PGP creates encrypted and ciphered text and is sometimes used in SSL encryption.
Physical Security:
Applying physical barriers and control procedures as precautionary and preventative measures or countermeasures versus any kind of threats to sensitive information or resources on a secure server.
Piggyback:
Obtaining unauthorized access into a system through another user's valid connection; it is a danger to internet security because of the lack of secure authentication on ssl secure servers. Thus, things like digital certificates, encryption and other security measures are necessary.
Ping Sweep:
An attack sending icmp echo demands, "pings", to a range of ip addresses, with the intent of finding hosts with security vulnerabilities.
PKI (Public Key Infrastructure):
Public Key Infrastructure, or is a framework developed in order to manage repeal public key certificates that accommodate a wide variety of security technologies. Public Key Infrastructure (PKI) is critical to administrators who manage secure systems based on Public-Key technology. A public-key certificate binds a public-key to validation data that identifies the entity (person, organization, or account) who is the authentic owner of the corresponding private key (the "subject" of the digital certificate). An ssl certificate is used by a "certificate user" who needs to verify the accuracy and validity of the public key distributed by that digital certificate. A certificate user is the entity that is validating a digital signature with the entity sending encrypted data via digital certificate to the subject. The degree of trust in an SSL certificate depends on the certification authority (CA) who authenticates the subject with security controls in the private key.
Plain Text:
The original, or extracted, message, prior to the process of encryption or following decryption. Aka cleartext. But plaintext can also be ciphertext which was the output of a previous stage in multiple stage encryption, 128-bit encryption and ssl digital encryption, yet cleartext is assumed to be inclusively intelligible.
Policy:
Organizational-level laws or rules administering the acceptable use of computing resources, security practices and guiding the creation of operational and functioning processes in order to deliver network security (LAN) and online security (WAN).
Pretty Good Privacy:
See PGP Encryption
Privacy:
Secure server privacy is a concept that is very hard to pin down. Technically, it means the state of being isolated or secret. Most people are mostly concerned about personal information. Some definitions are:
  • The entitlement of a body, acting in its own behalf, to determine the degree to which it will intermingle with its surrounding environment, including how much the entity or person is willing to share information about itself with others.
  • A person's entitlement to control or influence what information related to them may be gathered and keep and by whom and to whom such information may be released.
Not a synonym for confidentiality, a concept that is different. Privacy is a cause for security instead of a type of security. A secure system storing personal data, for instance, must protect the data in order to prevent harm to any body who's private data is stored on that server and to protect the privacy of that person. Therefore, the system might require the provision of a data confidentiality service. This is done for internet security with SSL secure authentication and secure ssl validation. Verifying identity with a "Digital ID" has become very important.
Private Key
The key of a key pair used to create a digital signature.
Private key trust services
A service rendered by a CA or CA delegate made responsible for maintenance of a subscriber's private key under terms and conditions of strict security and confidentiality.
Privileged Instructions:
A series of instructions given to control features which are by and large executable only at the time when the automated system is functioning in the executive state.
Probe:
A program or tool utilized for gathering information concerning a system or its users.
Procedural Security:
Means the same thing as administrative security.
Process:
A program in operation, such a secure sockets layer for SSL security.
Proprietary:
Refers to information owned by an individual or institution and is also used for that which means that which is restricted by that entity.
Protection Philosophy:
An unofficial explanation of the overall design of a system delineating each and every one of the protection mechanisms that are being used. A combination, proper to the evaluation class, of both formal and informal methods used in order to show that the mechanisms are capable of enforcing the security policy in order to deliver internet security.
Protection Ring:
A hierarchy of favored modes of a system which provides particular access entitlements to user programs and procedures certified to function in a given mode. Now regularly applied to operating modes of the intel pentium processor and the windows nt, xp, 2000, and ms enterprise server 2003 operating systems.
Protection-Critical Portions Of The TCB:
Parts of the TCB functioning in order to deal with the control of access amid subjects and objects. Their working is vital to the protection of the server system's secure data.
Protocol:
Similar to "protocol" in human communication which involves a previously agreed upon set of rules for communicating in diplomatic settings. On the Internet, a protocol is an agreed upon method for sending and receiving information.
Proxy Server:
A computer affixed to two or more server networks that supplies service to more than one customer or server as if only to one machine. Most routinely used in order to link multiple machines on a local area secure server network to a public secure server network. Recurrently used as a kind of firewall because the proxy server can be hardened. Attacks will then be brought against the proxy server instead of against the servers behind it. See application level gateway and also compare with packet filter.
Pseudo Code:
Often called a honeypot or entrapment, a "Pseudo Flaw" is a consciously implanted loophole that appears in an operating system program as a snare for intruders.
Pseudo Random:
Creating random numbers, which is vital to functions related to cryptography. If keys, for instance, are not chosen at random, key choice may be determinable, possibly allowing the cryptographic system to be compromised. It is not possible, though, to make truly random numbers with a program. So, widespread attempts are put into making operations which randomize input, and include as input event data, like system clock times, time sequences amid keystrokes, and even electronic noise. Pseudo random is done in order to access data which is as random as is possible to be used in cryptographic systems in Internet security.
Public Domain:
A legal term carrying the exact same meaning in regard to software that it does in the literature field. Software in the public domain may be employed by anyone, for any purpose, in any way, all without limits or restriction. Public domain is recurrently used carelessly as meaning freeware, and shareware. With freeware which does not require payment, however, the author keeps copyright and control. With shareware there is payment required for continued use after initially being offered free of charge.
Public Key
The key of a key pair used to verify a digital signature.
Public Key For Secrecy:
Public Law 100-235 (P.L. 100-235) The Computer Security Act is United States regulation that generates a way for developing minimum satisfactory security practices for enhancing the security and privacy of sensitive information in systems of federal computers. This law gives responsibility to the National Institute of Standards and Technology making standards and guidelines for federal computer systems processing data that is unclassified. The law also commands development of plans of security by all operators of federal computer systems containing information that is sensitive in order to heighten Secure Server SSL Certificate security.
Public Key Infrastructure (PKI)
An infrastructure that is the combination of products, services, facilities, policies, procedures, agreements and people that provide for and sustain secure interactions on open networks such as the Internet utilizing asymmetrical encryption.
Publish
Means (within the context of digital transactions) to record or file in a repository.
Purge:
The elimination of sensitive data from a SSL secured system, system storage apparatus or peripheral apparatus with capacity for storage at the completion of a processing period. The performance of this action assures proportionality to the sensitivity of the data so that the data may not be reconstructed in any way. A system has to be disconnected from any external secure server network before a purge can take place. Following a purge, the medium can be declassified by watching the review processes of the particular agency.
Qualified right to payment
An award of damages against a licensed certification authority by a court having jurisdiction over the certification authority in a civil action for violation of this chapter.
Rabbit:
A virus which makes and creates multiple duplicates of itself without affixing to other programs. By and large, this kind of attack shows itself as a denial of service that is based upon undue use of disk or memory space or CPU cycles.
RAT (Remote Access Trojan):
A program made to supply access to, and control over, a computer that is attached to a secure server network from a remote computer, providing a backdoor. RATs are recurrently described as "Remote Administration Tools" in an attempt to offer them as valid utility software for Internet security and online security.
Rainbow Series:
AKA the Rainbow Books, a compilation of more than 30 technical and policy documents with covers that are colored. It is distributed by the US government's NCSC and discusses in detail the TCSEC and gives guidance for meeting and utilizing the criteria for Internet security and SSL network security.
Random:
In mathematics, random denotes "unpredictable". A sequence of values is said to be random if each and every successive value is acquired just by chance and never relies on the preceding values of the sequence. A chosen individual value is said to be random if each and every one of the values in the total population of possibilities has completely equal probability of being chosen. In cryptography and other security applications like encryption for Internet security and online security, random not only means unpredictable, but it also means "unguessable". When choosing data values to employ for cryptographic keys, it is necessary for data to be chosen to have an adversary that has a very low probability of guessing or determining in order to protect secure authentication with SSL secure server certificates which utilize digital certification of the SSL secure socker layer certificates.
Realm:
A unique name given to each protected area on a server, whether it be a single document or an entire server.
Recipient
A person who receives or has a digital signature and is in a position to rely on it.
Redundancy:
Copies of server components, like hard drives, uninterruptible power sources, processors and data (like backup copies of software) for increasing the reliability or availability of service and/or the decrease of the risk of losing information from the secure server.
Reference Monitor:
An access control idea referring to an abstract machine mediating all accesses to objects by subjects.
Reference Validation Mechanism:
An execution of the reference monitor idea, it is a security kernel that is a kind of reference confirmation mechanism in order to protect with secure SSL authentication with SSL certificates (certs).
Reliability:
The likelihood that a secure system will perform its mission sufficiently for a certain amount of time under the expected functioning conditions. Reliability is by and large thought of as availability with the addition of the expectation of successful outcomes from processing, (eg; a validated online payment system to accept credit cards securely).
Relying party
A person who has received a certificate and a digital signature verifiable with reference to a public key listed in the certificate and is in a position to rely on them.
Remap:
To generate a software or configuration data adjustment redirecting system associations. Remapping can vary very widely. Ansi bombs are able to remap the keyboard, invoking a payload command with a single keystroke. Other remapping may be changing secure server network routing tables redirecting a user from a site that is trusted to an site which is unknown. The classic man-in-the-middle attack, in a way, is a type of remapping.
Remediation:
Purposeful precautionary measures taken in order to enhance the reliability, availability and survivability of critical assets and/or infrastructures, especially explicitly known vulnerabilities and threats to online payment gateways. Remediation is a part of risk management and is also closely allied to the notion of a safeguard or countermeasure.
Remote Authentication Dial-In User Service (RADIUS):
A standard for authenticating the identity of remote dial-in users.
Reply Attack:
An attack in which a legitimate data transmission is maliciously, deceptively, illegally or fraudulently repeated. A replay attack can be done by either the originator or by an adversary intercepting and retransmitting the data, possibly as part of a masquerade attack. For internet security, 128-bit encryption with SSL would help protect against breaches like replay attacks. Digital ssl certificates with 128-bit authentication force the user to enter a password before he can access the secure server.
Replicate:
Duplicating or reproduction. In virus research, the term replicate, or sometimes reproduction, is used recurrently to refer t distinguish the clandestine copying action done by a virus from the standard and conscious duplication done by the user.
Repository
A system for storing and retrieving certificates and other information relevant to digital signatures.
Repository Manager
A functional role associated with USERVault...
Repository Practices Statement (RPS)
A declaration of the practices, which a certification authority employs in reposing digital certificates and documents within a repository.
Repudiation:
Denial by a system body involved in an association, specifically an association transferring information, and actively participating in the relationship. See accountability, non-repudiation.
Resident:
A program which stays in the computer's memory as other programs are running, waiting for a explicit trigger event. Accessory software is mostly this kind, as is activity monitoring and resident or on-access virus scanning software. Viral programs recurrently try to "go resident," and so this is one of the operations an activity monitor might inspect. Aka "memory resident". The microsoft windows correspondent is a vxd, while the novell netware type is nlm, netware loadable module.
Rights:
The privileges a user or role has on a system.
Rightfully hold a private key
To be able to utilize a private key: (a) which the holder or the holder's agents have not disclosed to any person in violation of Subsection 46-3-305(1); and (b) which the holder has not obtained through theft, deceit, eavesdropping, or other unlawful means.
Roles:
A working description of a user. Roles are assigned rights.
Root Certificate:
A self signed certificate issued from a genuine Certificate Authority (CA).
RSA Encryption (Rivest-Shamir-Adelman):
A popular encryption and authentication standard that uses asymmetric keys and was developed by Rivest, Shamir, and Adelman. Based on a public key system, every user has 2 digital keys, one to encrypt information, and the other to decrypt. Authentication of both sender and recipient is achieved with this method.
Secondary sub-CA
Any entity appointed by USERTrust Inc., with the approval of the UTN PKI, to serve as a subordinate certification authority governed by this CPS under the Policy Approval Authority of Cybercitizens First, the licensure(s) of USERFirst, and the supervision of USERTrust Inc. A sub-CA may be authorized to perform the additional function of sub-IA, RA, AA, DA, VA, SA, and contracting agent. [UTN PKI CPS]
Secondary sub-IA
Any entity appointed by USERTrust Inc., with the approval of the UTN PKI, to serve as a subordinate issuing authority governed by this CPS under the Policy Approval Authority of Cybercitizens First, the licensure(s) of USERFirst, and the supervision of USERTrust Inc. A sub-IA may be authorized to perform the additional function of sub- RA, AA, DA, VA, SA, and contracting agent. [UTN PKI CPS]
Secondary sub-RA
Any entity appointed by USERTrust Inc., with the approval of the UTN PKI, to serve as a subordinate registration authority governed by this CPS under the Policy Approval Authority of Cybercitizens First, the licensure(s) of USERFirst, and the supervision of USERTrust Inc. A sub-RA may be authorized to perform the additional function of sub-IA, AA, DA, VA, SA, and contracting agent. [UTN PKI CPS]
Secure Server:
A Web server that utilizes security protocols like SSL to encrypt and decrypt data, messages, and online payment gateways to accept credit cards, to protect them against fraud, false identification, or third party tampering. Purchasing from a secure Web server ensures that a user's credit card information, or personal information can be encrypted with a secret code that is difficult to break. Popular security protocols include SSL, SHTTP, SSH2, SFTP, PCT, and IPSec.
Secure Socket Layer (SSL):
an Internet protocol which uses encryption and SSL in order to supply data confidentially for service and data integrity amid a client and a server transaction with Internet security and privacy. SSL can also, as an option, provide peer entity authentication amid the client and the server with secure SSL validation of digital certificates. SSL is layered below HTTP and above a transport protocol (TCP). SSL is independent of the application it summarizes and any other higher level protocol can layer on top of SSL transparently. SSL has two layers: (a) SSL's lower layer, the SSL Record Protocol, is coated on top of the transport protocol and encapsulates higher level protocols. (b) SSL's upper layer supplies asymmetric cryptography for server authentication, which is verifying the secure server's digital identity to the client with digital ID signatures or certs with client authentication (the process of verifying the client's identity to the server). It also allows them to negotiate a symmetric encryption algorithm and secret session key, used for data confidentiality, prior to the transmission or receiving of data by the application protocol. A keyed hash offers data integrity service for data that is encapsulated.
Secure State:
A state in which no subject can get access into any object in a manner that is illicit. SSL Certificates provide a Secure State.
Security Association:
(a) A relationship established among two or more entities to allow them to guard data they swap. The relationship negotiates characteristics of defense mechanisms but does not involve the mechanisms. (b) Used in ipsec as a simplex (uni-directional) logical connection generated for purposes of security and put in with either ah or esp, but never both. The security association offers security services that depend on the protocol chosen, the ipsec mode transport or VPN tunnel, the endpoints and the choice of optional services in the SSL protocol. A security association is recognized by (a) a destination ip address, (b) a protocol identifier or (c) a security parameter index.
Security Audit:
A self-assessing review and investigation of a system's policy, records, and actions to determine the capability of system controls, guarantee compliance with conventional security policy and processes, discover breach in security services, and recommend any alterations which imply a need for countermeasures. The objective of the basic audit is to establish accountability for systems which initiate or participate in security-relevant occurrences and actions. Means are needed to create and record security audit information and are also need in order to review and analyze the audit trail in order to detect and exam attacks and compromises of security.
Security by Obscurity:
A term used, more often than not negatively, in reference to the procedure of attempting to secure a system for Internet security and online security by failing to publish any information about it. This is done in the hope that no one will figure out how it works.
Security Critical Mechanism:
The security mechanisms where proper functioning is required in order to make sure that the security policy is actually enforced.
Security Evaluation:
An evaluation that is done in order to assess the level of trust or assurance which can be placed in systems for the secure management of information that is sensitive. One sort, a product evaluation, is an assessment done on the hardware and software features and promises of a computer product from a standpoint which leaves out the application atmosphere. A different kind, a system evaluation, is performed to gauge a system's security safeguards with respect to a explicit operational mission and is an important step in the certification and accreditation process for secure authentication and secure SSL authentication that supplies Internet security and online security with digital certificates or "SSL certs".
Security Fault Analysis:
A security analysis, more often than not performed on hardware at the gate level, to determine the security properties of an apparatus when a hardware fault is come upon.
Security Features:
The security-relevant operations, mechanisms, and features of system hardware and software. Security features are a compartment of system security safeguards used for online security (digital ssl certificates are one example)
Security Features:
A dependable subsystem enforcing a security policy on the data that passes through it.
Security Flow:
An error of commission or omission in a system which may falsely permit security mechanisms or safeguards to be bypassed, weakening internet security.
Security Kernel:
The hardware, firmware, and software components of a tcb which use the concept of reference monitor. Security kernels have to mediate each and every access, be guarded from modification, and be provable to be effective.
Security Level:
The Amalgamation Of A Hierarchical Classification And A Group Of Nonhierarchical Categories Representing Information's Sensitivity.
Security Measures:
Constituents of software, firmware, hardware or processes which are included in a system for the approval of security exploitations or security policy. They are used for Internet security to prevent unauthorized intrusion with 128-bit digital certificates with secure SSL authentication.
Service authority service
A service rendered by a CA delegate made responsible for providing Internet services (including without limitations various forms of messaging, bonding, transactional, and commercial services) to subscribers, as distinct from a certification authority, repository, issuing authority, registration authority, or authentication authority.
Secure Key Pair
In an asymmetrical cryptosystem, two mathematically related keys, referred to as a private key and public key, having the properties that (1) one key (the private key) can encrypt a message that only the other key (the public key) can decrypt, and (2) even knowing one key (the public key), it is computationally unfeasible to discover the other key (the private key).
Service Authority (SA) service
A service rendered by a CA delegate made responsible for providing Internet services (including without limitations various forms of messaging, bonding, transactional, and commercial services) to subscribers, as distinct from a certification authority, repository, issuing authority, registration authority, or two factor authentication authority. 
Signature:
A unique and distinct pattern that is used to detect a virus infection or system penetration (see intrusion detection system), or as a "Digital ID" for SSL secure systems. The digital signature can be a permanently set string of bytes, or it can also be more complex and algorithmically based, as with a secure socket layer. ID Signatures for secure server system penetration are by and large much more complex and can even include the comparison of many different types of data in a security audit with logging.
Signer
Within the context of digital signatures means person who creates a digital signature for a message.
Single Sign-on:
A system, process or procedure in which a user is authenticated on one occasion, giving them access to a lot of disparate systems from that time on. It is like secure authentication or secure ssl authentication that only has to be done a single time. Super-User a user with full, unlimited and unrestricted access to each and every portion and resource of the system, such as the PKI Manager who administers and manages SSL Certificate duties on a large network.
Subscriber
A person who: (a) is the subject listed in a certificate; (b) accepts the certificate; and (c) holds a private key, which corresponds to a public key listed in that certificate.
Suitable guaranty/bond
Either a surety bond executed by a surety authorized by the Utah Insurance Department to do business in this state, or an irrevocable letter of credit issued by a financial institution authorized to do business in this state by the Utah Department of Financial Institutions, which, in either event, satisfies all of the following requirements, that it: (i) is issued payable to the division for the benefit of persons holding qualified rights of payment against the licensed certification authority named as the principal of the bond or customer of the letter of credit; (ii) is in an amount specified by rule of the division pursuant to Section 46-3-104; (iii) states that it is issued for filing pursuant to this chapter; (iv) specifies a term of effectiveness extending at least as long as the term of the license to be issued to the certification authority; and (v) is in a form prescribed by rule of the division. (b) A suitable guaranty may also provide that the total annual liability on the guaranty to all persons making claims based on it may not exceed the face amount of the guaranty. (c) A financial institution acting as a certification authority may satisfy the requirements of this subsection from its assets or capital, to the extent of its lending limit as provided in Title 7, Financial Institutions Act.
Symmetric Key Encryption:
Private key encryption, or "symmetric key encryption" uses the exact same, private key for both encryption and decryption. The key is shored amid the both parties as the factor for the communication. Symmetric key systems do not have to have a public key infrastructure (PKI) the way that asymmetric key encryption has to, but it does have to have a key to exchange through a channel that is secure, unlike other kinds of 128 bit encryption with SSL.
System Integrity:
The condition an SSL secure server is in when it executes its intended operation in an unimpaired manner, free from advertent or inadvertent unauthorized manipulation of the system.
Time-stamp
Either: (a) to append or attach to a message, digital signature, or certificate a digitally signed notation indicating at least the date and time the notation was appended or attached, and the identity of the person appending or attaching the notation; or (b) the notation thus appended or attached.
Token:
An authentication tool, an apparatus utilized for holding key or authentication values, or to calculate, and possibly even to send and receive replies to challenges during the user authentication procedure. Secure authentication with SSL validation is needed. Tokens can be small, hand-held hardware apparatus very much like pocket calculators or credit cards.
Transactional certificate
A valid certificate incorporating by reference one or more digital signatures.
Trusted Computer System:
A system using ample hardware and software assurance measures to permits its use for simultaneous processing of a span of sensitive or classified information.
Trusted Computing Base:
The sum of defense mechanisms in a secured computer system, including hardware, firmware and software, the combination of which is supposed to enforce an SSL security policy. A tcb is made up of one or more elements which together enforce a unified security policy. The ability of a tcb to enforce aptly a unified security policy depends completely on the mechanisms in the tcb and on the proper input by system administrative personnel of parameters that are related to the security policy.
Trusted Process:
A Procedure Whose False Or Malevolent Performance Is Able To Violate A System's Security Policy.
Trustworthy system
A computer hardware and software which: (a) are reasonably secure from intrusion and misuse; (b) provide a reasonable level of availability, reliability, and correct operation; and (c) are reasonably suited to performing their intended functions.
Tunneling:
Practices tracing of the disruption of a system in the final programming. Utilized by both viral and antiviral programs to discover and/or disable rival programs.
Tunneling Router:
a router or system able to rout traffic by ciphering or encrypting it and summarizing it for transmission via an untrusted secure server network, which later puts it through de-encapsulation and decryption. Encryption such as 128-bit encryption and SSL encryption help ensure Internet security and online security.
Two-Factor Authentication:
Authentication founded on at least two of the Multifactor Authentication: something a user knows, is or has. To gain access into a system the user must be able to exhibit both factors.