SCA

{
  "id": "MLC-T-CYB-003705",
  "term": "SCA",
  "field": "Cybersecurity",
  "definition": "1. The individual, group, or organization responsible for conducting a security control assessment.\n\n2. An attack enabled by leakage of information from a physical cryptosystem. Characteristics that could be exploited in a side-channel attack include timing, power consumption, and electromagnetic and acoustic emissions.\n\n3. Confidence that the supply chain will produce and deliver elements, processes, and information that function as expected.",
  "abbreviation": "SRxCryptoAPI",
  "expansions": [
    "software composition analysis",
    "Security Control Assessor",
    "Side-Channel Attack",
    "Supply Chain Assurance"
  ],
  "synonyms": [
    "SRxCryptoAPI"
  ],
  "references": [
    "NIST SP 800-137 from NISTIR 7298; NIST SP 800-30 Rev. 1; NIST SP 800-37 Rev. 1 [Superseded]; NIST SP 800-39; NIST SP 800-53 Rev. 4 [Superseded]; NIST SP 800-53A Rev. 4 [Superseded]",
    "NIST SP 800-63-3 [Superseded]",
    "NISTIR 7622 from DoD Key Practices and Implementation Guide (Adapted)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/sca/"
}