signature

{
  "id": "MLC-T-CYB-003946",
  "term": "signature",
  "field": "Cybersecurity",
  "definition": "1. A recognizable, distinguishing pattern.\n\n2. A specific sequence of events indicative of an unauthorized access attempt.\n\n3. A text string (algorithm or expression), used to configure intrusion detection systems and sensors, describing characteristics, patterns or other identifying information of cyber threat activity.\n\n4. A recognizable, distinguishing pattern associated with an attack, such as a binary string in a virus or a particular set of keystrokes used to gain unauthorized access to a system.\n\n5. The ability to trace the origin of the data.\n\n6. A set of characteristics of known malware instances that can be used to identify known malware and some new variants of known malware.",
  "references": [
    "CNSSI 4009-2022",
    "CNSSI 4009-2022 from NIST SP 800-12 Rev. 1 (under 'attack signature')",
    "NIST SP 800-12 Rev. 1",
    "NIST SP 800-113",
    "NIST SP 800-83 Rev. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/signature/"
}