Terms starting with “M”

Hardware, firmware, or software that is intentionally included or inserted in a system for a harmful purpose. Source: IETF RFC 4949 Ver 2

Information based on fact, but used out of context to mislead, harm, or manipulate

a malicious attack that involves injecting harmful code into legitimate online advertising networks

Software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of a system. For example, a virus,...

Software, such as "antivirus software, antispyware software, and rootkit detection," which "can identify common known malware that attempts to infect an DEVICE, as well as ELECTRON...

Comes from the terms "malicious" and" software". Generic term for software which carries out harmful functions on a computer. This comprises amongst others viruses, worms, Trojan h...

(MitM) An attack on the authentication protocol run in which the Attacker positions himself in between the Claimant and Verifier so that he can intercept and alter data traveling b...

A form of active wiretapping attack in which the attacker intercepts and selectively modifies communicated data to masquerade as one or more of the entities involved in a communica...

An interface within an information system that provides boundary protection capability using automated mechanisms or devices. Source: NIST SP 800-53 Rev 4

A configuration of a client node that enables a key management infrastructure (KMI) external operational manager to manage KMI products and services by either 1) accessing a PRSN o...

The security controls (i.e., safeguards or countermeasures) for an information system that focus on the management of risk and the management of information system security. (SP 80...

The security controls (i.e., safeguards or countermeasures) for an information system that focus on the management of risk and the management of information system security. Source...

The security controls (i.e., safeguards or countermeasures) for an information system that focus on the management of risk and the management of information systems security. (CNSS...

The security controls (i.e., safeguards or countermeasures) for an information system that focus on the management of risk and the management of information systems security. Ratio...

The "chief manager and the assistant managers required to conduct primaries and elections in any precinct." Ga. Code Ann. §21-2-2(11).

In South Carolina, one of three appointed to conduct voting at a ELECTION OFFICIALS POLLING PLACE. S.C. Code §7-13-72.

An official or authoritative command, usually by legislative statute or executive order.

An access control policy that is uniformly enforced across all subjects and objects within the boundary of an information system. A subject that has been granted access to informat...

Change to a COMSEC end-item that NSA requires to be completed and reported by a specified date. See Optional Modification. SOURCE: CNSSI-4009

A change to a COMSEC end-item, which the National Security Agency (NSA) requires to be completed and reported by a specified date. See optional modification. Source: NSA/CSS Manual...

A that must be conducted if certain conditions are satisfied. For example, in North Dakota, a recount must be conducted for any office in a general election in which the top two ca...

Alteration or simulation of friendly telecommunications for the purpose of deception. See Communications Deception and Imitative Communications Deception. (CNSSI-4009) (NISTIR)

Alteration or simulation of friendly telecommunications for the purpose of deception. See communications deception and imitative communications deception. Rationale: Listed for del...

requires that a voting system used in an election for Federal office "produce a permanent HAVA paper record with a manual audit capacity for such system."