Security+ Acronyms.txt

• Triple Digital Encryption Standard
• more secure than DES, but AES is preferred choice of govt

Acknowledge

Access Control List

Anomaly-Detection Intrusion Detection System

• Advanced Encryption Standard
• replaced DES, uses Rijndael algorithm, developed by Joan Daemen and Vincent Rijmen, used by US Govt, key sizes: 128 (default), 192 and 256 (qualifies for Top Secret)

Annual Loss Expectancy

Authentication Header

Access Point

Application Programming Interface

Annualized Rate of Occurrence

Address Resolution Protocol

Authentication Service

Business Continuity Plan

Border Gateway Protocol

Business Impact Analysis

Basic Input/Output System

produced by Counterpan Systems, 64-bit block cipher, very fast, Bruce Schneier author, also created Twofish with 128-bit blocks

Campus Area Network

• Certificate Authority
• oraganization responsible for issuing, revoking and distributing certificates

• Carlisle Adams Stafford Tavares
• symmetric block cipher, 40-bit 10 128-bit key, very fast and efficient

Common Criteria

Common Criteria Recognition Agreement

Common Gateway Interface

Challenge Handshake Authentication Protocol

Confidentiality, Integrity, Availability

Certificate Policy

• Certificate Practice Statement
• detailed statement the CA uses to issue certificates and implement its policies of the CA, how certificates are issues, what measures are taken to protect certificates and the rules the CA users must follow in order to maintain their certificate eligibility

Cyclical Redundancy Check

Certificate Revocation List

Computer Security Incident Response Team

Certificate Trust List

Discretionary Access Control

Distributed Denial of Service Attack

• Data Encryption Standard
• used since 1970s, replaced by AES, 56-bit key, broken in two days,

Dynamic Host Configuration Protocol

Dr W. Diffie and Dr M.E. Hellman created key exchange, considered founders of public/private key concept, used for transmission of keys in as secure manner

Directory Information Tree

Demilitarized Zone

Domain Name Service

Denial of Service Attack

Disaster Recovery Plan

Direct-Sequence

• Digital Signature Algorithm
• Based on El Gamal

Digital Subscriber Line

Direct-Sequence Spread Spectrum

Dynamic Signature Verification

Evaluation Assurance Levels

Extensible Authentication Protocol

Extensible Authentication Protocol-Transport Level Security

Advanced Encryption standard

• Elliptic Curve Cryptography
• similar function to RSA, used in small devices, points on a curve to define public and private key pair

Exposure Factor

Encrypted File System

Algorithm used for transmitting digital signatures and key exchanges, similar process to Diffie-Hellman key exchange, first published in 1985, DSA is based on this

Electromagnetic Interference

Encapsulating Security Payload

Frequency-Hopping Spread Spectrum

Federal Information Processing Standard

Fully Qualified Domain Name

File Transfer Protocol

Host-based Intrusion Detection System

Health Insurance Portability and Accountability Act

Host-based Intrusion Prevention System

Hypertext Markup Language

Hyertext Transfer Protocol

Hyertext Transfer Protocol (Secure)

Heating, Ventilation and Air Conditioning

Identification and Authentication

Internet Architecture Board

Internet Assigned Numbers Authority

Internet Control Message Protocol

• International Data Encryption Algorithm
• developed by Swiss consortium (ASCOM AG), uses 128-bit key, more secure than DES with same speed and capability, uses PGP

Intrusion Detection System

Institute of Electrical and Electronics Engineers

Internet Engineering Task Force

Internet Group Management Protocol

Internet Key Exchange

Instant Messaging

Internet Message Access Protocol

Internet Protocol

Internet Protocol Security

Internetwork Packet Exchange

Internetwork Packet Exchange/Sequenced Packet Exchange

Incident Response Plan

Incident Response Team

Internet Research Task Force

Internet Security Association Key Management Protocol

Integrated Services Digital Network

International Organization for Standardization

Internet Society

Internet Service Provider

International Telecommunications Union

Key Distribution Center

Key Exchange Algorithm

Keyed-Hash Message Authentication Code

Layer 2 Forwarding

Layer 2 Tunneling Protocol

Local Area Network

• LAN Manager
• replaced by NTLM with release of Windows NT, authentication protocol, used LM Hash and two DES keys

Link Control Protocol

Lightweight Directory Access Protocol

LDAP Data Interchange Format

• Local Registration Authority
• used to identify or establish the identity of a user for certificate issuance, involves the physical identification of the person requesting the certificate

Mandatory Access Control or Media Access Control

Message Authentication Code

Metropolitan Area Network

Multistation Access Unit

Master Boot Record

• Message Digest Algorithm
• one-way hash, helps maintain integrity, common versions newest MD5 (faster than SHA), MD4, MD2

Misuse-Detection Intrusion Detection System

Mutual Recognition Agreement

Microsoft Challegene Handshake Authentication Protocol

Mean Time Between Failures

Mean Time to Repair

Network Access Control

Network Address Translation

National Bureau of Standards

Network Control Protocol OR Netware Core Protocol

National Computing Security Center

Novell Distributed Print Services

Novell Directory Services OR NetWare Directory Services

NetBIOS Extended User Interface

Network Basic Input Output System

Network File System

Network Interface Card

Network-based Intrusion Detection System

Network-based Intrusion Prevention System

National Institute of Standards and Technology

NetWare Loadable Module

NetWare Link State Protocol

Network News Transfer Protocol

Network Operations Center

Network Operating System

National Security Agency

NT Directory Service

New Technology LAN Manager, replaced LANMAN with release of Windows NT, uses MD4/MD5 hashing algorithms. primary purpose is authentication.

• Online Certificate Status Protocol
• Used for certification revocation

Orthogonal Frequency-Division Multiplexing

Open Systems Interconnection

Open Shortest Path First

• Open Vunerability and Assessment Language
• A standard written in XML that provide and publicly available security content

Personal Area Network

Password Authentication Protocol

Port Address Translation

Private Branch Exchange

Payment Card Industry OR Peripheral Component Interconnect

Personally Identifiable Information

• Pretty Good Privacy
• Public Domain encryption used for email

• Public Key Cryptography
• Two-key systems

• Public Key Infrastructure
• framework, Two-key, asymmetric, Four parts: CA, RA, RSA and digital certificates

Public Key Infastructure X.509

Post Office Protocol

Post Office Protocol Version 3

Plain Old Telephone Service

Point-to-Point Protocol

Point-to-Point Tunneling Protocol

Public Switched Telephone Network

• Registration Authority
• Middleman between CA and user, distributes keys, accepts registrations for the CA and validates identities, does not issue certificates

Rapid Application Development

Remote Authentication Dial-In User Service

Redundant Array of Independent (OR Inexpensive) Disks

Remote Access Server

Role-Based Access Control & Rule-Based Access control

• Rivest Cipher or Ron's Code
• produced by RSA labs, Ron Rivest author, RC5 uses up to 2,048-bit key

Radio Frequency

Request for Comments

Radio Frequency Interference

Routing Information Protocol

• Rivest, Shamir and Adleman, founders of the company
• asymmetric encryption, public key, uses very lasrge integers, de facto standard, used for encryption and digitals signatures, used in SSL

Rule Set-Based Access Control

Security Account Manager

Secure Electronic Transcation

• Secure Hash Algorithm
• one-way hash, ensure integrity, 160-bit has value, new standard SHA-1

Secure Hypertext Transfer Protocol

Service Level Agreement

Single Loss Expectancy

Serial Line Internet Protocol

Secure Multi Purpose Internet Mail Extension

Simple Mail Transfer Protocol

Simple Network Management Protocol

Sequenced Packet Exhange

Secure Shell

Secure Sockets Layer

Single Sign-On

Shielded Twisted Pair

Secure WLAN Protocol

Terminal Access Controller Access control System

Tranmission Control Protocol

Transmission Control Protocol/Internet Protocol

Trusted Computer System Evaluation Criteria

Trivial File Transfer Protocol

Ticket-Granting Ticket

Temporal Key Interchange/Integrity Protocol

Transport Layer Security

Trusted Network Interpretation Environmental Guideline

Trusted Platform Module

Time to Live

Trusted Third Party

User Datagram Protocol

Uninterruptible Power Supply

Uniform Resource Locator

Unshielded twisted pair

Virtual LAN

Virtual Private Network

World Wide Web Consortium

Wide Area Network

Wireless Application Protocol

Wired Equivalency Protocol

Wireless Fidelity

Windows Internet Naming Service

Wi-Fi Protected Access

Wireless Personal Area Network

Wireless Transport Layer Security

standard certificate format supported by ITU and many other standards organizations