Terms starting with “E”

(or exploit) A program, a script or a line of code with which vulnerabilities in a computer system can be used to advantage.

Channel that allows the violation of the security policy governing an information system and is usable or detectable by subjects external to the trusted computing base. See covert...

The act of extracting and gathering intelligence data, often from a cyber attack or cyber espionage.

In the NICE Framework, cybersecurity work where a person: Analyzes collected information to identify vulnerabilities and potential for exploitation.

Indicates that a malicious actor has conducted additional activities on a compromised system, such as collecting data, deploying more malware, or establishing persistent access. So...

The condition of being unprotected, thereby allowing access to information or access to capabilities that an attacker can use to enter a system or network.

The process of revealing vote totals to the public at the close of voting at a POLLING LOCATION. Ark. Code §7-5-527.

Source: NIST SP 800-126 Rev 2

When a person of authority extends by formal action the required number of hours that voters are able to vote, usually in response to a situation that delayed or restricted voting.

A language for authoring security checklists/benchmarks and for reporting results of evaluating them.

SCAP language for specifying checklists and reporting checklist results. (SP 800-128) (NISTIR)

A markup language in which semantic content is conveyed by surrounding test with named tags in pointed brackets, as in <entry>Here is some text</entry>. It is referred to as "exten...

An additional function, feature, and/or capability included in a voting system but not defined in the VVSG. VVSG.

"That part of a from the street or parking area to the point of entry to the CIRCULATION ROUTE polling place building." Mont. Admin. Rules §44.3.103(1)(e).

An information system or component of an information system that is outside of the authorization boundary established by the organization and for which the organization typically h...

An information system or component of an information system that is outside of the authorization boundary established by the organization and for which the organization typically h...

An information system service that is implemented outside of the authorization boundary of the organizational information system (i.e., a service that is used by, but not a part of...

A provider of external information system services to an organization through a variety of consumer-producer relationships, including but not limited to: joint ventures; business p...

A network not controlled by the organization. Source: NIST SP 800-53 Rev 4

A role intended to be performed by a manager who is typically a member of a key management infrastructure (KMI) customer organization. Source: CNSSI No. 4005 (COMSEC)

Security testing conducted from outside the organization's security perimeter. (SP 800-115) (NISTIR)

A mechanism by which voters who are permanently or temporarily absent from a country are enabled to cast a vote, also called out-of-country voting .

Used in request and response messages. BallotStyle , Election , Party and ReportingUnit optionally include this class for associating a jurisdiction’s codes, i.e., identifiers, wit...

Capability of crypto-equipment or secure telecommunications equipment to resist efforts to extract key. (CNSSI-4009) (NISTIR)