security service

{
  "id": "MLC-T-CYB-003847",
  "term": "security service",
  "field": "Cybersecurity",
  "definition": "1. A capability that supports one, or many, of the security goals. Examples of security services are key management, access control, and authentication.\n\n2. A processing or communication service that is provided by a system to give a specific kind of protection to resources, where said resources may reside with said system or reside with other systems, for example, an authentication service or a PKI-based document attribution and authentication service. A security service is a superset of AAA services. Security services typically implement portions of security policies and are implemented via security mechanisms.\n\n3. Mechanisms used to provide confidentiality, identity authentication, integrity authentication, source authentication, and/or support the non-repudiation of information.\n\n4. A security capability or function provided by an entity that supports one or more security objectives.\n\n5. A security capability or function provided by an entity.",
  "references": [
    "CNSSI 4009-2022 from NIST SP 800-160 Vol. 2 Rev. 1 (adapted)",
    "NIST SP 800-95 from Web Services Glossary - W3C Working Group Note 11 February 2004",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NIST SP 800-53 Rev. 5",
    "NIST SP 800-160v1r1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-service/"
}