Terms starting with “S”

A communication protocol that provides the appropriate confidentiality, authentication, and content-integrity protection. Source: NIST SP 800-57 Part 1 Rev 3

Telecommunications deriving security through use of National Security Agency (NSA)- approved products and/or protected distribution systems (PDSs).

National Security Agency (NSA) certified secure voice and data encryption devices that provide interoperability with both national and foreign wired and wireless products.

Configuring and operating DNS servers so that the security goals of data integrity and source authentication are achieved and maintained. (SP 800-81) (NISTIR)

An overwrite technology using firmware-based process to overwrite a hard drive. Is a drive command defined in the ANSI ATA and SCSI disk drive interface specifications, which runs...

A hash algorithm with the property that it is computationally infeasible 1) to find a message that corresponds to a given message digest, or 2) to find two different messages that...

The standard specifying hash algorithms that can be used to generate digests of messages. The digests are used to detect whether messages have been changed since the digests were g...

An object used to store and safeguard election material.

A protocol used for protecting private information during transmission via the Internet. Note: SSL works by using the service public key to encrypt a secret key that is used to enc...

A protocol for exchanging information securely over a network using public-key encryption to transmit a symmetric key so that subsequent data can be encrypted and decrypted quickly...

Condition in which no subject can access any object in an unauthorized manner.

Those "locations provided for the storage of all material connected with the absentee ballot process, including ballots, and shall be under the direct control of the county auditor...

Subsystem containing its own implementation of the reference monitor concept for those resources it controls. Secure subsystem must depend on other controls and the base operating...

A set of specifications for securing electronic mail. S/MIME is based upon the widely used MIME standard and describes a protocol for adding cryptographic security services through...

"A shall not be considered 'secured' unless it is stored in a room or other BALLOT CONTAINER facility access to which is limited only to the clerk of the election district or to ot...

A NICE Framework category consisting of specialty areas concerned with conceptualizing, designing, and building secure IT systems, with responsibility for some aspect of the system...

A condition that results from the establishment and maintenance of protective measures that enable an enterprise to perform its mission or critical functions despite risks posed by...

An "inquiry into the potential existence of security flaws in a voting system. Includes an analysis of the system's software, firmware, and hardware, as well as the procedures asso...

A document in the to "provide an architecture level description of how the security TDP requirements are met, and shall include the various authentication, access control, audit, c...

A protocol consisting of XML-based request and response message formats for exchanging security information, expressed in the form of assertions about subjects, between on-line bus...

Provides a disciplined and structured approach for documenting the findings of the assessor and the recommendations for correcting any identified vulnerabilities in the security co...

A relationship established between two or more entities to enable them to protect data they exchange.

An abstraction representing the basic properties or characteristics of an entity with respect to safeguarding information; typically associated with internal data structures (e.g.,...

A trusted role that is responsible for auditing the security of certification authority systems (CASs) and registration authorities (RAs), including reviewing, maintaining, and arc...