Cybersecurity terminology · MLC-0102

Cybersecurity terms: B (149)

• b1. The block size, in bits.
• backdoor patternA transformation or insertion applied to a data sample that triggers an adversary-specified behaviour in a...
• backdoor poisoning attackA poisoning attack that causes a model to perform an adversary-selected behaviour in response to inputs that...
• Backscatter ChannelThe type of back channel used by passive tags. Since passive tags do not have a local power source, they...
• Backtracking ResistanceAn RBG provides backtracking resistance relative to time T if it provides assurance that an adversary that...
• Backup facilityA redundant system or service that is kept available for use in case of a failure of a primary facility.
• Backup (key and/or metadata)To copy a key and/or metadata to a medium that is separate from that used for operational storage and from...
• Backup (system)The process of copying information or processing status to a redundant system, service, device or medium that...
• BADA mechanism providing a multifaceted approach to detecting cybersecurity attacks.
• bannerDisplay on an information system that sets parameters for system or data use.
• Banner GrabbingThe process of capturing banner information - such as application type and version - that is transmitted by a...
• base assessmentThe ISCMAx assessment file from which a merge is initiated.
• Base layerThe underlying layer of an image upon which all other components are added.
• base pointA fixed elliptic curve point that generates the group used for elliptic curve cryptography.
• Base Standardsdefine fundamentals and generalized procedures. They provide an infrastructure that can be used by a variety...
• baseline1. Hardware, software, databases, and relevant documentation for an information system at a given point in...
• baseline configuration1. A documented set of specifications for a system or a configuration item within a system that has been...
• basic assessmentAn assessment that includes only critical elements.
• Basic Input/Output System (BIOS)1. In this publication, refers collectively to boot firmware based on the conventional BIOS, Extensible...
• basic testing1. A test methodology that assumes no knowledge of the internal structure and implementation detail of the...
• Basis vectorA vector consisting of a - 1‖ in the ithposition and - 0‖ in all of the other positions.
• bastion hostA special purpose computer on a network specifically designed and configured to withstand attacks.
• Bayesian methodologyStatistical approach to data analysis based on Bayes’ theorem where uncertainty is quantified by combining...
• BDA Blu-ray Disc(BD) hasthe same shape and size as a CD or DVD,but has a higher density and gives the option...
• beaconInitial signal by satellite conducted when first put into mission operation in order to establish...
• Becton, Dickinson and CompanyA Blu-ray Disc(BD) hasthe same shape and size as a CD or DVD,but has a higher density and gives the option...
• behavior1. The way that an entity functions as an action, reaction, or interaction.
• behavior analysisThe act of examining malware interactions within its operating environment including file systems, the...
• Behavior Management1. See Capability, Behavior Management.
• Behavioral Anomaly DetectionA mechanism providing a multifaceted approach to detecting cybersecurity attacks.
• BenchmarkThe root node of an XCCDF benchmark document; may also be the root node of an XCCDF results document (the...
• Benchmark ConsumerA product that accepts an existing XCCDF benchmark document, processes it, and produces an XCCDF results...
• Benchmark ProducerA product that generates XCCDF benchmark documents.
• bendThe use of a mechanical process to alter the physical shape of the storage media and make reading the media...
• benign environmentA non-hostile location protected from external hostile elements by physical, personnel, and procedural...
• Berkeley Internet Name Domain, see Bind
• Bernoulli Random VariableA random variable that takes on the value of one with probability p and the value of zero with probability...
• BER-TLV data objectA data object coded according to ISO/IEC 8824-2:2021.
• Best PracticeA procedure that has been shown by research and experience to produce optimal results and that is established...
• BGPThe Border Gateway Protocol is a protocol designed by the Internet Engineering Task Force (IETF) to exchange...
• BGP Origin ValidationBGP Origin Validation specifies a mechanism described in RFC 6811 where a BGP router can verify if a...
• BGP Path ValidationBGP Path Validation specifies a mechanism described in RFC 8205 that allows verifying a path an UPDATE...
• BGP PeerA router running the BGP protocol that has an established BGP session active.
• BGP Secure Routing ExtensionBGP Secure Routing Extension consisting of multiple software modules that implement Route Origin Validation...
• BGP security extensionSecurity extension to the BGP protocol. It allows to digitally sign path information that can be...
• BGP SessionA TCP session in which both ends are operating BGP and have successfully processed an OPEN message from the...
• BGP SpeakerAny router running the BGP protocol.
• BGP-OVBGP Origin Validation specifies a mechanism described in RFC 6811 where a BGP router can verify if a...
• BGP-PVBGP Path Validation specifies a mechanism described in RFC 8205 that allows verifying a path an UPDATE...
• BGPsecSecurity extension to the BGP protocol. It allows to digitally sign path information that can be...
• BGPsec Input-OutputBGPsec Input-Output (BIO) enables the generation and storage of precomputed reproducible BGPsec traffic for...
• BGPsec Path Validation, see BGP-PV
• BGPSEC-IO, see BIO
• BGPsec-IO traffic generator, see BIO
• BGP-SRxBGP Secure Routing Extension consisting of multiple software modules that implement Route Origin Validation...
• BiThe ith block of the formatted input.
• BIA, see business impact analysis (BIA)
• BiasWith respect to the uniform distribution on [0,n-1], the bias is defined to be the maximum value of...
• Biased1. A value that is chosen from a sample space is said to be biased if one value is more likely to be chosen...
• bidirectional authentication1. The process of both entities involved in a transaction verifying each other. See bidirectional...
• bi-directional (CDS)A cross domain device or system with the capability to provide both the transmission and reception of...
• Big DataExtensive datasets-primarily in the characteristics of volume, variety, velocity, and/or variability-that...
• Big-endian1. The property of a byte string having its bytes positioned in order of decreasing significance. In...
• Binary data (from a noise source)Digitized output from a noise source that consists of a single bit; that is, each sampled output value is...
• binary labelA single label indicating a product has met a baseline standard.
• Binary SequenceA sequence of zeroes and ones.
• BindTo deterministically transform a logical construct into a machine-readable representation suitable for...
• binding1. Assurance of the integrity of an asserted relationship between items of information that is provided by...
• Binomial DistributionA random variable is binomially distributed if there is an integer n and a probability p such that the random...
• BIOBGPsec Input-Output (BIO) enables the generation and storage of precomputed reproducible BGPsec traffic for...
• biometricA measurable, physical characteristic or personal behavioral trait used to identify, or verify the claimed...
• Biometric Authentication (BIO, BIO-A)A form of authentication in which authenticity is established by biometric verification of a new biometric...
• Biometric Capture DeviceDevice that collects a signal from a biometric characteristic and converts it to a captured biometric sample.
• Biometric CharacteristicBiological attribute of an individual from which distinctive and repeatable values can be extracted for the...
• Biometric DataBiological attribute of an individual from which distinctive and repeatable values can be extracted for the...
• Biometric Data RecordBiometric sample or aggregation of biometric samples at any stage of processing.
• Biometric Information TemplateBiometric Information Template - a [CARD-BIO] data structure indicating Card capability
• Biometric On-Card Comparison Authentication (OCC-AUTH)An authentication mechanism where biometric on-card comparison (OCC) is used instead of a PIN to activate a...
• Biometric On-Card Comparison (OCC)A one-to-one comparison of fingerprint biometric data records transmitted to the PIV Card with a biometric...
• biometric referenceOne or more stored biometric samples, templates, or models attributed to an individual and used as the object...
• biometric sampleAn analog or digital representation of biometric characteristics prior to biometric feature extraction, such...
• Biometric VerificationAutomated process of confirming a biometric claim through biometric comparison.
• Biometric Verification DecisionA determination of whether biometric probe(s) and biometric reference(s) have the same biometric source based...
• Biometrics1. Automated recognition of individuals based on their biological or behavioral characteristics. Biological...
• BIOS, see Basic Input/Output System (BIOS)
• bit1. A binary digit, 0 or 1. In this standard, bits are indicated in the Courier New font.
• Bit ErrorThe substitution of a ‘0’ bit for a ‘1’ bit, or vice versa.
• bit error rateRatio between the number of bits incorrectly received and the total number of bits transmitted through a...
• Bit Length1. The number of bits in a bit string (e.g., the bit length of the string 0110010101000011 is sixteen bits)...
• Bit Stream ImagingA bit-for-bit copy of the original media, including free space and slack space. Also known as disk imaging.
• bit string1. An ordered sequence of bits (represented as 0s and 1s). Unless otherwise stated in this document, bit...
• Bitstring1. An ordered sequence (string) of 0s and 1s. The leftmost bit is the most significant bit.
• Bitwise Exclusive-OrAn operation on two bitstrings of equal length that combines corresponding bits of each bitstring using an...
• BLACK1. Designation applied to information systems, and to associated areas, circuits, components, and equipment...
• black box testing1. A test methodology that assumes no knowledge of the internal structure and implementation detail of the...
• black core1. A network environment (point-to-point and multi-point) supporting end-to-end encrypted information at a...
• BLACK dataData that is protected by encryption so that it can be transported or stored without fear of compromise. Also...
• black transportA network environment (point-to-point and multi-point) supporting end-to-end encrypted information at a...
• blacklist1. Words or phrases that are not allowed to appear in given content and are an indication the content is...
• bLenThe length of the bit string B in bits
• blended attack1. Deliberate, aggressive action that causes harm to both cyber and physical systems.
• blended threatA danger that originates in one domain and has the potential to impact another domain, for example a CS...
• block1. A sequence of bits of a given fixed length. In this Standard, blocks consist of 128 bits, sometimes...
• block cipher1. A family of permutations of blocks that is parameterized by the key.
• Block Cipher Algorithm1. A family of functions and their inverse functions that is parameterized by cryptographic keys; the...
• block cipher mode of operation1. The value of the random sample that occurs with the greatest frequency. This value is not necessarily...
• Block Cipher-based Message Authentication CodeCipher-based Message Authentication Code (as specified in NIST SP 800-38B).
• Block dataThe portion of a block that contains a set of validated transactions and ledger events.
• Block Frequency TestThe purpose of the block frequency test is to determine whether the number of ones and zeros in each of M...
• Block headerThe portion of a block that contains information about the block itself (block metadata), typically including...
• Block rewardA reward (typically cryptocurrency) awarded to publishing nodes for successfully adding a block to the...
• block size1. The number of bits in an input (or output) block of the block cipher.
• blockchain1. A distributed digital ledger of cryptographically-signed transactions that are grouped into blocks. Each...
• Blockchain ExplorerA software for visualizing blocks, transactions, and blockchain network metrics (e.g., average transaction...
• Blockchain implementationa specific blockchain.
• Blockchain networkthe network in which a blockchain is being used.
• Blockchain network userAny single person, group, business, or organization which is using or operating a blockchain node.
• Blockchain SubnetworkA blockchain network that is tightly coupled with one or more other blockchain networks, as found in sharding.
• Blockchain technologya term to describe the technology in the most generic form.
• blocklistA documented list of specific elements that are blocked, per policy decision. This concept has historically...
• blue team1. The group responsible for defending an enterprise's use of information systems by maintaining its security...
• Bluetooth1. A wireless protocol that allows two similarly equipped devices to communicate with each other within a...
• BNA, see Broad network access
• BodyThe section of an email message that contains the actual content of the message.
• body of evidence1. The set of data that documents the information system’s adherence to the security controls applied.
• BoE, see body of evidence
• BOF1. A condition at an interface under which more input can be placed into a buffer or data holding area than...
• bootstrappingA subprocess of network-layer onboarding. It introduces just enough information to a device and a network...
• Border Gateway ProtocolThe Border Gateway Protocol is a protocol designed by the Internet Engineering Task Force (IETF) to exchange...
• Border Gateway Protocol Secure Routing Extension, see BGP-SRx
• Border Gateway Protocol Security, see BGPsec
• Border Gateway Protocol with Security Extensions, see BGPsec
• BotnetThe word “botnet” is formed from the words “robot” and ”network.” Cyber criminals use special Trojan viruses...
• bound authenticatorAn authenticator verified by the RP in addition to an assertion at FAL3. The bound authenticator is bound to...
• boundary1. A physical or logical perimeter of a system.
• boundary protection1. Monitoring and control of communications at the external boundary of an information system to prevent and...
• boundary protection device1. A device with appropriate mechanisms that: (i) facilitates the adjudication of different interconnected...
• bounded differential privacyA unit of privacy variant that calls two datasets D_1 and D_2 neighbors if it is possible to construct D_2...
• breach1. The loss of control, compromise, unauthorized disclosure, unauthorized acquisition, or any similar...
• breadth1. An attribute associated with an assessment method that addresses the scope or coverage of the assessment...
• breakdown structureFramework for efficiently controlling some aspect of the activities for a program or project.
• bridgingFacilitating interoperation by the act of transforming the syntax and semantics of data and control from one...
• Broad network accessCapabilities are available over the network and accessed through standard mechanisms that promote use by...
• Brokered TrustDescribes the case where two entities do not have direct business agreements with each other, but do have...
• Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext, see breach
• browsingAct of searching through information system storage or active content to locate or acquire information...
• Brute Force Password Attack1. In cryptography, an attack that involves trying all possible combinations to find a match.
• buffer overflow1. A condition at an interface under which more input can be placed into a buffer or data holding area than...
• Buffer Overflow Attack1. A method of overloading a predefined amount of memory storage in a buffer, which can potentially overwrite...
• bug bountyA method of compensating individuals for reporting software errors, flaws, or faults (“bugs”) that might...
• bulk encryptionSimultaneous encryption of all channels of a multi-channel telecommunications link.
• bus1. The primary spacecraft structure containing power, temperature control, and directional thrusters of the...
• Business Areas“Business areas” separate government operations into high-level categories relating to the purpose of...
• business impact analysis (BIA)Process of analyzing operational functions and the effect that a disruption might have on them.
• Business/Mission ObjectivesBroad expression of business goals. Specified target outcome for business operations.
• BuyerThe people or organizations that consume a given product or service.
• Byte1. A sequence of eight bits.
• Byte length1. The number of consecutive (non-overlapping) bytes in a byte string. For example, 0110010101000011 =...
• Byte String1. An ordered sequence of bytes, beginning with the most significant (leftmost) byte and ending with the...
• Bytewise matchingrelies only on the sequences of bytes that make up a digital object, without reference to any structures...
• Byzantine fault tolerant proof of stake consensus modelA proof of stake consensus model where the blockchain decides the next block by allowing all staked members...

149 of 4,693 terms in Cybersecurity terminology (MLC-0102). Request the full dataset.