Procedure by which a distant crypto-equipment is rekeyed electrically, with specific Manual remote rekeying actions required by the receiving terminal operator. Synonymous with cooperative remote rekeying. (Also see automatic remote keying.) masquerading See spoofing. Key device with electronic logic and circuits providing the capability for adding more Master crypto-ignition key operational CIKs to a keyset. Memory scavenging The collection of residual information from data storage. Data associated with an authenticated message allowing a receiver to verify the Message authentication code integrity of the message. Message externals Information outside of the message text, such as the header, trailer, etc. Sequence of bits transmitted over a communications system for synchronizing message indicator equipment. Some off-line cryptosystems, such as the KL-51 and one-time pad systems, employ message indicators to establish decryption starting points. Mimicking See spoofing. Software modules obtained from remote systems, transferred across a network, and Mobile code then downloaded and executed on local systems without explicit installation or execution by the recipient. Description of the conditions under which an information system operates based on the sensitivity of information processed and the clearance levels, formal access Mode of operation approvals, and need-to-know of its users. Four modes of operation are authorized for processing or transmitting information: dedicated mode, system-high mode, compartmented/partitioned mode, and multilevel mode. Equipment trusted to properly maintain and separate data of different security Multilevel device categories. INFOSEC mode of operation wherein all the following statements are satisfied concerning the users who have direct or indirect access to the system, its peripherals, remote terminals, or remote hosts: a. some users do not have a valid security Multilevel mode clearance for all the information processed in the information system; b. all users have the proper security clearance and appropriate formal access approval for that information to which they have access; and c. all users have a valid need-to-know only for information to which they have access.
Manual remote rekeying Procedure by which a distant crypto-equipment is rekeyed electrically, with specific actions required by the receiving terminal operator. Synonymous with cooperative remote rekeying. (Also see automatic remote keying.) masquerading See spoofing. Master crypto-ignition key Key device with electronic logic and circuits providing the capability for adding more operational CIKs to a keyset. Memory scavenging The collection of residual information from data storage. Message authentication code Data associated with an authenticated message allowing a receiver to verify the integrity of the message. Message externals Information outside of the message text, such as the header, trailer, etc. message indicator Sequence of bits transmitted over a communications system for synchronizing Some off-line cryptosystems, such as the KL-51 and one-time pad systems, employ message indicators to establish decryption starting points. Mimicking See spoofing. Mobile code Software modules obtained from remote systems, transferred across a network, and then downloaded and executed on local systems without explicit installation or execution by the recipient. Mode of operation Description of the conditions under which an information system operates based on the sensitivity of information processed and the clearance levels, formal access approvals, and need-to-know of its users. Four modes of operation are authorized for processing or transmitting information: dedicated mode, system-high mode, compartmented/partitioned mode, and multilevel mode. Multilevel device Equipment trusted to properly maintain and separate data of different security categories. Multilevel mode INFOSEC mode of operation wherein all the following statements are satisfied concerning the users who have direct or indirect access to the system, its peripherals, remote terminals, or remote hosts: a. some users do not have a valid security clearance for all the information processed in the information system; b. all users have the proper security clearance and appropriate formal access approval for that information to which they have access; and c. all users have a valid need-to-know only for information to which they have access. equipment.
CISSP_Glossary_v1.1.docx