Cybersecurity terminology · MLC-0102

Cybersecurity terms: D (277)

D1. A payload of data that is assembled and transmitted by the message signatory, which includes (at least)...
DAA, see Designated Accrediting Authority
DAC1. An access control policy that is enforced over all subjects and objects in an information system where the...
damageHarm caused to something in such a way as to reduce or destroy its value, usefulness, or normal function.
damage-limiting operationsProcedural and operational measures that use system capabilities to maximize the ability of an organization...
DAODesignated Authorizing Official; A senior organization official that has been given the authorization to...
DashboardSee Agency Dashboard and Federal Dashboard.
data1. Information in a specific representation, usually as a sequence of symbols that have meaning.
Data Access ObjectDesignated Authorizing Official; A senior organization official that has been given the authorization to...
data accuracyCloseness of agreement between a property value and the true value.
data action1. System operations that process PII.
Data ActionsSystem operations that process PII.
data aggregationCompilation of data that together may provide a holistic view of the data, but may also result in increased...
Data and Information Reference Model, see DRM
data asset1. An information-based resource.
data attack riskThe risk of a file type's or protocol's content being used to exploit a system based on processing (i.e...
Data Block (Block)A sequence of bits whose length is the block size of the block cipher.
Data CollectorA person who records information about actions that occur during an exercise or test.
data compilationThe act of performing operations (e.g., statistical analysis) on a collection of data to derive information...
data consumerIn a trust model for differential privacy, the data consumers are those who receive differentially private...
data curatorIn a trust model for differential privacy, the data curator is where the data is aggregated.
data dictionaryCollection of data dictionary entries that allows lookup by entity identifier.
data dictionary entryDescription of an entity type containing, at a minimum, an unambiguous identifier, a term, and a definition.
Data DiodeA network appliance or device that allows data to travel only in one direction. Also referred to as a...
data disclosure riskThe risk of a file type's or protocol's potential release of sensitive, perhaps classified, information...
Data Encryption Algorithm1. The algorithm specified in FIPS PUB 46-3, Data Encryption Algorithm (DEA).
Data Encryption Standard1. The symmetric encryption algorithm defined by the Data Encryption Standard (FIPS 46-2).
data flow controlSee with information flow control.
data governanceA set of processes that ensures that data assets are formally managed throughout the enterprise. A data...
data hiding riskThe risk of a file type's or protocol's potential to conceal information within its syntactic structure or...
Data HistorianA centralized database supporting data analysis using statistical process control techniques.
data integrity1. The property that data has not been altered in an unauthorized manner. Data integrity covers data in...
Data integrity authenticationThe process of determining the integrity of the data; also called integrity authentication or integrity...
data intruderA data user who attempts to disclose information about a population through identification or attribution.
data life cycleThe set of processes in an application that transform raw data into actionable knowledge.
Data Link LayerLayer of the TCP/IP protocol stack that handles communications on the physical network components such as...
data linkingmatching and combining data from multiple databases
data loss preventionA system's ability to identify, monitor, and protect data in use (e.g. endpoint actions), data in motion...
data managementThe development, execution, and supervision of plans, policies, programs, and practices that deliver...
Data Management OfficerAn official responsible for overviewing and carrying out the data management tasks of research projects. Main...
data miningAn analytical process that attempts to find correlations or patterns in large data sets for the purpose of...
data object1. An item of information seen at the card command interface with a specified a name, a description of...
data origin authenticationThe corroboration that the source of data received is as claimed.
data poisoningA poisoning attack in which an adversary controls part of the training data.
data privacyA condition that safeguards human autonomy and dignity through various means, including confidentiality...
data privacy attacksAttacks against machine learning models that extract sensitive information about training data.
Data Processing1. The collective set of data actions-that is, the complete data life cycle, including, but not limited to...
Data Processing EcosystemThe complex and interconnected relationships among entities involved in creating or deploying systems...
data reconstructionPrivacy attacks that reconstruct sensitive data in a model’s training data from aggregate information.
data scienceThe field that combines domain expertise, programming skills, and knowledge of mathematics and statistics to...
Data Segment (Segment)In the CFB mode, a sequence of bits whose length is a parameter that does not exceed the block size.
data spillage1. See spillage.
data steward1. Data stewards enforce policies, and functional data managers implement the policies and manage day-to-day...
data subjects1. Persons to whom data refer.
data tagA non-hierarchical keyword or term assigned to a piece of information which helps describe an item and allows...
Data Transfer DeviceFill device designed to securely store, transport, and transfer electronically both COMSEC and TRANSEC key...
data transfer solutionInterconnected networks or information systems that operate in different security domains and transfer data...
data universeAll possible data within a specified domain.
data use agreementexecuted agreement between a data provider and a data recipient that specifies the terms under which the data...
data validationThe process of determining that data or a process for collecting data is acceptable according to a predefined...
Database1. A repository of information that usually holds plant-wide information including process data, recipes...
Data-encryption key1. A key used to encrypt and decrypt information other than keys.
Dataset1. A collection of data.
dataset with identifiersA dataset that contains information that directly identifies individuals.
dataset without identifiersA dataset that does not contain direct identifiers.
DATODenial of Authorization to Operate; issued by a DAO to an issuer that is not authorized as being reliable for...
DB1. A repository of information that usually holds plant-wide information including process data, recipes...
DCA server responsible for managing domain information, such as login identification and passwords.
DCO, see defensive cyberspace operations (DCO)
DCO-RA, see defensive cyberspace operation response action (DCO-RA)
DCSIn a control system, refers to control achieved by intelligence that is distributed about the process to be...
DDoSA denial of service technique that uses numerous hosts to perform the attack.
DEDevelop and implement the appropriate activities to identify the occurrence of a cybersecurity event.
DEA1. The algorithm specified in FIPS PUB 46-3, Data Encryption Algorithm (DEA).
Deactivated state1. A lifecycle state of a key whereby the key is no longer to be used for applying cryptographic protection...
decapsulationThe process of applying the Decaps algorithm of a KEM. This algorithm accepts a KEM ciphertext and the...
decapsulation key1. A cryptographic key produced by a KEM during key generation and used during the decapsulation process. The...
Decentralized Autonomous OrganizationDesignated Authorizing Official; A senior organization official that has been given the authorization to...
Decentralized networkA network configuration where there are multiple authorities that serve as a centralized hub for a subsection...
decertificationRevocation of the certification of an information system item or equipment for cause.
decipherConvert enciphered text to plain text by means of a cryptographic system.
Decision or branch coverageThe percentage of branches that have been evaluated to both true and false by a test set.
decision tree, see DT
decodeConvert encoded data back to its original form of representation.
decryptA generic term encompassing decoding and deciphering.
Decryption1. The process of transforming ciphertext into plaintext.
decryption key1. A cryptographic key that is used with a PKE in order to decrypt ciphertexts into plaintexts. The...
Decryption-VerificationThe process of CCM in which a purported ciphertext is decrypted and the authenticity of the resulting payload...
Dedicated Proxy ServerA form of proxy server that has much more limited firewalling capabilities than an application-proxy gateway.
default classificationClassification reflecting the highest classification being processed in an information system. Default...
DefectAn occurrence of a defect check that failed on an assessment object. It indicates a weakened state of...
Defect CheckA defect check is a way to assess determination statements. It has the following additional properties. A...
Defect TypeA kind of defect that could occur on many assessment objects. Generally, a defect check tests for the...
Defense Courier Service, see DCS
Defense Discovery Metadata Standard (DDMS)Defines discovery metadata elements for resources posted to community and organizational shared spaces...
Defense Industrial BaseThe Department of Defense, government, and private sector worldwide industrial complex with capabilities to...
defense-in-breadth1. A planned, systematic set of multi- disciplinary activities that seek to identify, manage, and reduce risk...
defense-in-depth1. Information security strategy integrating people, technology, and operations capabilities to establish...
defensive cyberspace operation response action (DCO-RA)Deliberate, authorized defensive measures or activities taken outside of the defended network to protect and...
defensive cyberspace operations (DCO)Passive and active cyberspace operations intended to preserve the ability to utilize friendly cyberspace...
Defensive DesignDesign techniques which explicitly protect supply chain elements from future attacks or adverse events...
degauss1. To reduce the magnetic flux to virtual zero by applying a reverse magnetizing field that is matched to the...
DegradationDecline in quality or performance; the process by which the decline is brought about.
Degraded Cybersecurity StateA cybersecurity state that indicates the device’s cybersecurity has been significantly negatively impacted...
de-identification1. General term for any process of removing the association between a set of identifying data and the data...
de-identification modelAn approach to the application of data de-identification techniques that enables the calculation of...
de-identification processA general term for any process of removing the association between a set of identifying data and the data...
de-identified information1. Records that have had enough PII removed or obscured such that the remaining information does not identify...
delay (path delay)The [signal] delay between a transmitter and a receiver. Path delay is often the largest contributor to time...
demilitarize1. The act of eliminating the functional capabilities and/or inherent military design features [from DoD...
demilitarized zone (DMZ)1. Perimeter network segment that is logically between internal and external networks. Its purpose is to...
denial of service (DoS)1. The prevention of authorized access to a system resource or the delaying of system operations and...
Deny by DefaultTo block all inbound and outbound traffic that has not been expressly permitted by firewall policy.
Department of Defense information network operationsOperations to design, build, configure, secure, operate, maintain, and sustain Department of Defense networks...
Department of Defense information networks (DODIN)The set of information capabilities, and associated processes for collecting, processing, storing...
deployment stageThe stage of the machine learning pipeline in which a model is deployed into a live or real-world environment...
deprecatedThe algorithm and key length may be used, but the user must accept some security risk. The term is used when...
Deprecated Identifier NameAn identifier name that is no longer valid because it has either been replaced by a new identifier name or...
depth1. An attribute associated with an assessment method that addresses the rigor and level of detail associated...
De-registration (of a key)The inactivation of the records of a key that was registered by a registration authority.
derived attribute valueA statement that asserts a limited identity attribute of a subscriber without containing the attribute value...
Derived Personal Identity Verification Credential, see DPC
Derived Personal Identity Verification (PIV)A credential issued based on proof of possession and control of the PIV Card, so as not to duplicate the...
Derived PIV Application1. A standardized application residing on a removable, hardware cryptographic token that hosts a Derived PIV...
Derived PIV Credential1. A credential issued based on proof of possession and control of a PIV Card. Derived PIV credentials are...
Derived PIV Credential IssuerDerived PIV Credential (and associated token) Issuer; an issuer of Derived PIV Credentials as defined in...
Derived PIV Credentials, see DPC
Derived Relationship MappingA potential mapping between Reference Document Elements identified by finding elements from two or more...
derived requirement1. A requirement deduced or inferred from the collection and organization of requirements into a particular...
Derived Test RequirementA statement of requirement, needed information, and associated test procedures necessary to test a specific...
DES1. The symmetric encryption algorithm defined by the Data Encryption Standard (FIPS 46-2).
descriptive labelProvides facts about properties or features of a product without any grading or evaluation. Information may...
design1. Process to define the architecture, system elements, interfaces, and other characteristics of a system or...
design characteristicsDesign attributes or distinguishing features that pertain to a measurable description of a product or service.
design margin1. The margin allocated during design based on assessments of uncertainty and unknowns. This margin is often...
design principleA distillation of experience designing, implementing, integrating, and upgrading systems that systems...
Designated Accrediting AuthoritySynonymous with designated accrediting authority (DAA).
designated cipher functionAs part of the choice of the underlying block cipher with a KEK, either the forward transformation or the...
Desired State1. See Desired State Specification.
Desired State Specification1. See Desired State Specification.
destroy1. An action applied to a key or a piece of secret data. After a key or a piece of secret data is destroyed...
Destroyed state1. A lifecycle state of a key whereby the key is no longer available and cannot be reconstructed.
Destruction1. The process of overwriting, erasing, or physically destroying a key so that it cannot be recovered.
DETDetection Error Tradeoff (characteristic) - A plot of FRR vs. FAR, or FNMR vs. FMR, used to inform...
detailed assessmentAn assessment that contains all the elements (critical and non-critical) for a given breadth.
Detect, see DE
detect (CSF function)Develop and implement the appropriate activities to identify the occurrence of a cybersecurity event.
Deterministic AlgorithmAn algorithm that, given the same inputs, always produces the same outputs.
Deterministic Random Bit Generator1. An RBG that includes a DRBG mechanism and (at least initially) has access to a randomness source. The DRBG...
developer1. The party that develops the entire entropy source or the noise source.
Development Operations (DevOps)A set of practices for automating the processes between software development and information technology...
Device1. A combination of components that function together to serve a specific purpose.
device birth certificateCredentials that a device needs in order to establish communications with and be authenticated by the network...
device bootstrapping credentialsCredentials that a device needs in order to establish communications with and be authenticated by the network...
Device Cybersecurity Capability1. A cybersecurity feature or function provided by an IoT device through its own technical means (i.e...
Device Cybersecurity Capability Core BaselineSee core baseline.
device distribution profileAn approval-based access control list (ACL) for a specific product that 1) names the user devices in a...
Device IdentifierA context-unique value - a value unique within a specific context - that is associated with a device (for...
device information declarationA trusted digital assertion with information about the IoT device, such as the identity or certificate of the...
device onboarderThe person or a proxy that is performing onboarding.
device registration managerThe management role that is responsible for performing activities related to registering users that are...
Device RoleA device role is a group of devices with the same rules. For example, the list of white-listed software for a...
DevOps, see Development Operations (DevOps)
DH1. A method used to securely exchange or establish secret keys across an insecure network. Ephemeral...
DI1. The property that data has not been altered in an unauthorized manner. Data integrity covers data in...
DiagnosticsInformation concerning known failure modes and their characteristics. Such information can be used in...
DIASDocuments the results of the digital identity risk management process. This includes the impact assessment...
DIB, see Defense Industrial Base
DictionaryA dynamic-length data structure that stores a collection of elements or values, where a unique label...
Dictionary ContributorAn organization or person that submits new identifier CPE names to a dictionary for inclusion.
Dictionary CreatorAn organization that instantiates a CPE dictionary that conforms to the guidance within this specification. A...
Dictionary MaintainerAn organization that manages a CPE dictionary and all processes relating to that CPE dictionary. In the...
Dictionary Management DocumentsA set of documentation that captures the rules and processes specific to a CPE dictionary.
Dictionary SearchThe process of determining which identifier names within a CPE dictionary are members of a source name that...
Dictionary UserAn organization, individual, product, or service that consumes a CPE dictionary for any purpose.
differential privacy1. A rigorous mathematical definition of disclosure that considers the risk that an individual's confidential...
differentially private synthetic datasetA synthetic dataset that is produced by mechanisms that satisfy differential privacy.
Diffie Hellman (algorithm)The (non-cofactor) FFC Diffie-Hellman key-agreement primitive.
Diffie-Hellman1. A method used to securely exchange or establish secret keys across an insecure network. Ephemeral...
Diffie-Hellman key exchangeThe (non-cofactor) FFC Diffie-Hellman key-agreement primitive.
diffusion modelsA class of latent variable generative models consisting of three major components: a forward process, a...
Digest1. Output of a hash function or XOF.
Digital assetAny asset that is purely digital, or is a digital representation of a physical asset.
Digital CertificateCertificate (as defined above).
Digital EvidenceElectronic information stored or transmitted in binary form.
Digital Fingerprint1. A hash that uniquely identifies data. Changing a single bit in the data stream used to generate the...
digital forensics1. In its strictest connotation, the application of computer science and investigative procedures involving...
digital identity1. Unique group element 0 for which x+0=x for each group element x, relative to the binary group operator +.
Digital Identity Acceptance StatementDocuments the results of the digital identity risk management process. This includes the impact assessment...
digital infrastructureThe ability to store and exchange data through a centralized communication system. Data communication and...
digital media1. A form of electronic media where data are stored in digital (as opposed to analog) form.
digital policyAccess control rules that compile directly into machine executable codes or signals. Subject/object...
digital signature1. The result of a cryptographic transformation of data that, when properly implemented, provides a mechanism...
Digital Signature Algorithm1. the digital signature algorithm specified in FIPS PUB 186.
digital transaction1. A discrete digital event between a user and a system that supports a business or programmatic purpose.
digital twinThe virtual (i.e., digital) representation of a physical or perceived real-world entity, concept, or notion.
digital twin application softwareA software application that comprehends, manipulates, reads, writes, or modifies digital twin definitions and...
digital twin definitionA machine-readable specification that describes features that may be modeled for a particular type of...
digital twin instanceA digital data structure, object, or entity in a computer software environment that represents a specific...
Digital Versatile Disc-RecordableA write-once (read only) DVD for both movies and data endorsed by the DVD Forum.
Digital Video Disc1. A Digital Video Disc (DVD) has the same shape and size as a CD, but with a higher density that gives the...
DigitizationThe process of generating bits from the noise source.
direct BLACK wirelineA BLACK metallic wireline that directly leaves the inspectable space in a continuous electrical path with no...
Direct Current, see DC
Direct Digital Manufacturingfabricating physical objects from a data file using computer-controlled processes with little to no human...
direct identifierAn attribute that alone enables unique identification of a data principal within a specific operational...
direct identifying data1. Data that directly identify a single individual.
direct prompt injectionA direct prompting attack in which the attacker exploits prompt injection.
direct prompting attackIn the generative AI context, an attack conducted by the primary user of the system through query access...
Direct Random StringIn the RBG-based construction of IVs, an output string of an RBG that is used as the random field for an IV.
directly identifying variablesa category of data that contains direct identifiers
DirectoryOrganizational structures that are used to group files together.
dirty word list1. Words or phrases that are not allowed to appear in given content and are an indication the content is...
disallowedThe algorithm or key length is no longer allowed for applying cryptographic protection.
disassociability1. Enabling the processing of information or events without association to individuals or devices beyond the...
disaster recovery plan (DRP)1. Management policy and procedures used to guide an enterprise response to a perceived loss of mission...
disciplined oscillatorAn oscillator whose output frequency is continuously adjusted (often through the use of a phase locked loop)...
disclosure1. Divulging of, or provision of access to, data.
disclosure limitationStatistical methods used to hinder anyone from identifying an individual respondent or establishment by...
DiscoveryThe act of locating a machine-processable description of a Web service-related resource that may have been...
Discovery ServiceA service that enables agents to retrieve Web services-related resource description.
Discrete Fourier Transform TestThe purpose of this test is to detect periodic features (i.e., repetitive patterns that are near each other)...
Discrete Logarithm CryptographyDiscrete Logarithm Cryptography, which is comprised of both Finite Field Cryptography (FFC) and Elliptic...
Discrete ProcessA type of process where a specified quantity of material moves as a unit (part or group of parts) between...
discriminativeA type of machine learning method that learns to discriminate between classes.
discussion1. Statements used to provide additional explanatory information for controls, control enhancements, security...
DisinfectingRemoving malware from within a file.
disinformationThe process of providing deliberately deceptive information to adversaries to mislead or confuse them...
Disk imageA virtual representation of a real disk drive.
Disk ImagingGenerating a bit-for-bit copy of the original media, including free space and slack space. Also known as a...
Disk-to-Disk CopyCopying the contents of media directly to another media.
Disk-to-File CopyCopying the contents of media to a single logical data file.
dispositionThe process of reusing, recycling, converting, redistributing, transferring, donating, selling...
disruption1. An unplanned event that causes the general system or major application to be inoperable for an...
distinguishable information1. Information that can be used to identify an individual.
distinguished name (DN)An identifier that uniquely represents an object in the X.500 directory information tree.
Distributed networkA network configuration where every participant can communicate with one another without going through a...
Distributed Network ProtocolDNP3 Distributed Network Protocol (published as IEEE 1815)
distributed self-assessment1. The least formal type of assessment; the element judgments are based on the evaluations by small groups...
Distribution1. The transport of a key and other keying material from an entity that either owns or generates the key to...
District of Columbia, see DC
DisturbanceAn undesired change in a variable being applied to a system that tends to adversely affect the value of a...
DKEYx(Y)Decrypt Y with the key KEYx
DLCDiscrete Logarithm Cryptography, which is comprised of both Finite Field Cryptography (FFC) and Elliptic...
DLP, see data loss prevention
DMZ1. A perimeter network or screened subnet separating an internal network that is more trusted from an...
DNAn identifier that uniquely represents an object in the X.500 directory information tree.
DNP3DNP3 Distributed Network Protocol (published as IEEE 1815)
DNSThe system by which Internet domain names and addresses are tracked and regulated as defined by IETF RFC 1034...
Document Type Definition (DTD)A document defining the format of the contents present between the tags in an XML or SGML document, and the...
DoD informationAny information that has not been cleared for public release in accordance with Department of Defense (DoD)...
DoDIN, see Department of Defense information networks (DODIN)
domain1. A set of elements, data, resources, and functions that share a commonality in combinations of (1) roles...
Domain authorityAn FCKMS role that is responsible for determining whether another domain’s FCKMS Security Policy is...
Domain ControllerA server responsible for managing domain information, such as login identification and passwords.
Domain NameA label that identifies a network domain using the Domain Naming System.
Domain Name ServerThe internet's equivalent of a phone book. It maintains a directory of domain names, as defined by the Domain...
Domain Name System (DNS)The system by which Internet domain names and addresses are tracked and regulated as defined by IETF RFC 1034...
Domain of UseThe intended usage of a format
Domain parameter1. Parameters used with cryptographic algorithms that are usually common to a domain of users. An ECDSA or...
Domain parameter seedA string of bits that is used as input for a domain parameter generation or validation process.
Domain SeparationFor a function, a partitioning of the inputs to different application domains so that no input is assigned to...
dominance ruleA cell is regarded as confidential, if the n largest units contribute more than k % to the cell total, e.g...
DoS1. The prevention of authorized access to a system resource or the delaying of system operations and...
Double spend (attack)An attack where a blockchain network user attempts to explicitly double spend a digital asset.
Double spend (problem)Transacting with the same set of digital assets more than once. This is a problem which has plagued many...
DowngradingAn authorized reduction in the level of protection to be provided to specified information, e.g., from a...
downlinkCommunication that originates from the satellite to the ground.
dP1. RSA private exponent for the prime factor p in the CRT format, i.e., d mod (p - 1); an integer.
DPC1. A credential issued based on proof of possession and control of a PIV Card. Derived PIV credentials are...
DPCIDerived PIV Credential (and associated token) Issuer; an issuer of Derived PIV Credentials as defined in...
dQ1. RSA private exponent for the prime factor q in the CRT format, i.e., d mod (q - 1); an integer.
DRBG1. An RBG that includes a DRBG mechanism and (at least initially) has access to a randomness source. The DRBG...
DRBG mechanism1. The portion of an RBG that includes the functions necessary to instantiate and uninstantiate the RBG...
DRBG Mechanism BoundaryA conceptual boundary that is used to explain the operations of a DRBG mechanism and its interaction with and...
DRMA potential mapping between Reference Document Elements identified by finding elements from two or more...
DRPA written plan for processing critical applications in the event of a major hardware or software failure or...
D/SA distributed database service capable of storing information, such as certificates and CRLs, in various...
DSA1. the digital signature algorithm specified in FIPS PUB 186.
DSIG1. The result of a cryptographic transformation of data which, when properly implemented, provides the...
DTThe virtual (i.e., digital) representation of a physical or perceived real-world entity, concept, or notion.
DTD, see Data Transfer Device; Document Type Definition (DTD)
DTR, see Derived Test Requirement
DUA, see data use agreement
dual authorization1. A system of storage and handling that is designed to prohibit individual access to certain resources by...
Dual_EC_DRBGA DRBG originally specified in SP 800-90A that has been withdrawn.
dual-use foundation modelAn AI model that is trained on broad data; generally uses self-supervision; contains at least tens of...
Duplicate Digital EvidenceA duplicate is an accurate digital reproduction of all data objects contained on the original physical item...
Duty CycleThe percentage of time that a device is operating over a specified period. For example, a reader that is...
DVD1. A Digital Video Disc (DVD) has the same shape and size as a CD, but with a higher density that gives the...
DVD-RA write-once (read only) DVD for both movies and data endorsed by the DVD Forum.
DVD-RecordableA write-once (read only) DVD for both movies and data endorsed by the DVD Forum.
DVD-RewritableA rewritable (re-recordable) DVD for both movies and data from the DVD Forum.
DVD-RWA rewritable (re-recordable) DVD for both movies and data from the DVD Forum.
dynamic code analyzerA tool that analyzes computer software by executing programs built from the software being analyzed on a real...

277 of 4,693 terms in Cybersecurity terminology (MLC-0102). Request the full dataset.