Encryption
The reversible transformation of data from the original (the plaintext) to a difficult-to-interpret format (the ciphertext) as a mechanism for protecting its confidentiality, integrity and sometimes its authenticity. Encryption uses an encryption algorithm and one or more encryption keys.

FERC
The Federal Energy Regulatory Commission (FERC) is an independent agency that regulates interstate transmission of natural gas, oil, and electricity. FERC is composed of up to five commissioners who are appointed by the President of the United States with the advice and consent of the Senate.

Firewall
A system or combination of systems that enforces a boundary between two or more networks, i.e., an electronic gate that limits access between networks in accordance with local security policy. A method for implementing security policies designed to keep a network secure from intruders. It can be a single router that filters out unwanted packets or may comprise a combination of routers and servers each performing some type of firewall processing. In practice, many firewalls have default settings that provide little or no security unless specific policies are implemented by trained personnel. While much effort has been made excluding unwanted input to the internal network, less attention has been paid to monitoring what goes out.



Hacker
1. A person who enjoys exploring the details of programmable systems and how to stretch his capabilities.
2. One who programs enthusiastically.
3. A person who is good at programming quickly.
4. An expert at a particular program, as in 'a Unix hacker'.
5. [deprecated] A malicious meddler who tries to discover sensitive information by poking around. The correct term for this sense is "cracker."

Hash (see Cryptographic Algorithm)
An algorithm that employs the science of cryptography, including encryption algorithms, cryptographic hash algorithms, digital signature algorithms, and key agreement algorithms.

Hash Function
A mathematical function that maps values from a large domain into a smaller range, and that reduces a potentially long message into a "message digest" or "hash value" or that is sufficiently compact to be input into a digital signature algorithm. Note: A "good" hash function is one that results from applying the function to a large set of values that are evenly and randomly distributed over the range.

Hash Value
In cryptography, the result of applying a cryptologic hash function to a message.

Honey pot
Programs simulating one or more network services that you designate on your computer's ports. An attacker assumes you're running vulnerable services that can be used to break into the machine. A honey pot can be used to log access attempts to those ports including the attacker's keystrokes. This could give you advanced warning of a more concerted attack.

HTTPS
When used in the first part of a URL (the part that precedes the colon and specifies an access scheme or protocol), this term specifies the use of HTTP enhanced by a security mechanism, which is usually SSL.



IDS (Intrusion Detection System)
Software that detects illegal entrance to a computer system. A NIDS (Network IDS) is designed to support multiple hosts, whereas a HIDS (Host IDS) is set up to detect illegal actions within the host. Most IDSs typically use signatures of known cracker attempts to signal an alert. Other IDSs look for deviations of the normal routine as indications of an attack.

IEEE
The Institute of Electrical and Electronic Engineers.

Integrity
Integrity is the need to ensure that information has not been changed accidentally or deliberately, and that it is accurate and complete.

Intranet
A computer network, especially one based on Internet technology, that an organization uses for its own internal, and usually private, purposes and that is closed to outsiders.

Intrusion Detection System (IDS)
A security management system for computers and networks. An IDS gathers and analyzes information from various areas within a computer or a network to identify possible security breaches, which include both intrusions (attacks from outside the organization) and misuse (attacks from within the organization).

Intrusion Prevention System (IPS)
One of a variety of loosely-defined systems used to actively drop packets of data or disconnect connections that contain unauthorized data. An intrusion prevention system can identify unauthorized network traffic based on either signature matches or protocol anomaly detection. It can terminate or degrade the quality of service based on bad matches, alert administration on matched traffic and provide forensic data on its detection of anomalous packets.

Back to Top

FAQs



Glossary

A to B

C to D

E to I

J to P

Q to S

T to Z