TA
Term · Cybersecurity · MLC-T-CYB-004234
1. Entity authorized to act as a representative of an Agency in confirming Subscriber identification during the registration process. Trusted Agents do not have automated interfaces with Certification Authorities.
2. A public or symmetric key that is trusted because it is directly built into hardware or software, or securely provisioned via out-of-band means, rather than because it is vouched for by another trusted entity (e.g. in a public key certificate). A trust anchor may have name or policy constraints limiting its scope.
3. A configured DNSKEY RR or DS RR hash of a DNSKEY RR. A validating DNSSEC-aware resolver uses this public key or hash as a starting point for building the authentication chain to a signed DNS response. In general, a validating resolver will need to obtain the initial values of its trust anchors via some secure or trusted means outside the DNS protocol. The presence of a trust anchor also implies that the resolver should expect the zone to which the trust anchor points to be signed. This is sometimes referred to as a “secure entry point.”
4. The analysis of patterns in communications for the purpose of gaining intelligence about a system or its users. Traffic analysis does not require examination of the content of the communications, which may or may not be decipherable. For example, an adversary may be able to detect a signal from a reader that could enable it to infer that a particular activity is occurring (e.g., a shipment has arrived, someone is entering a facility) without necessarily learning an identifier or associated data.
5. A public or symmetric key that is trusted because it is directly built into hardware or software, or securely provisioned via out-of-band means, rather than because it is vouched for by another trusted entity (e.g. in a public key certificate).
| Identifier | MLC-T-CYB-004234 |
|---|---|
| Field | Cybersecurity |
| Expansions | Template Attack; Transmitter Address; Trust Agent; Trusted Application; Traffic Analysis; Trust Anchor; Trusted Agent |
| References | NIST SP 800-32 [Withdrawn]; NIST SP 800-63-3 [Superseded]; NIST SP 800-81-2 [Superseded]; NIST SP 800-98; NIST SP 800-63-2 [Superseded]; NIST CSRC Glossary |
Record as JSON
{
"id": "MLC-T-CYB-004234",
"term": "TA",
"field": "Cybersecurity",
"definition": "1. Entity authorized to act as a representative of an Agency in confirming Subscriber identification during the registration process. Trusted Agents do not have automated interfaces with Certification Authorities.\n\n2. A public or symmetric key that is trusted because it is directly built into hardware or software, or securely provisioned via out-of-band means, rather than because it is vouched for by another trusted entity (e.g. in a public key certificate). A trust anchor may have name or policy constraints limiting its scope.\n\n3. A configured DNSKEY RR or DS RR hash of a DNSKEY RR. A validating DNSSEC-aware resolver uses this public key or hash as a starting point for building the authentication chain to a signed DNS response. In general, a validating resolver will need to obtain the initial values of its trust anchors via some secure or trusted means outside the DNS protocol. The presence of a trust anchor also implies that the resolver should expect the zone to which the trust anchor points to be signed. This is sometimes referred to as a “secure entry point.”\n\n4. The analysis of patterns in communications for the purpose of gaining intelligence about a system or its users. Traffic analysis does not require examination of the content of the communications, which may or may not be decipherable. For example, an adversary may be able to detect a signal from a reader that could enable it to infer that a particular activity is occurring (e.g., a shipment has arrived, someone is entering a facility) without necessarily learning an identifier or associated data.\n\n5. A public or symmetric key that is trusted because it is directly built into hardware or software, or securely provisioned via out-of-band means, rather than because it is vouched for by another trusted entity (e.g. in a public key certificate).",
"expansions": [
"Template Attack",
"Transmitter Address",
"Trust Agent",
"Trusted Application",
"Traffic Analysis",
"Trust Anchor",
"Trusted Agent"
],
"references": [
"NIST SP 800-32 [Withdrawn]",
"NIST SP 800-63-3 [Superseded]",
"NIST SP 800-81-2 [Superseded]",
"NIST SP 800-98",
"NIST SP 800-63-2 [Superseded]",
"NIST CSRC Glossary"
],
"url": "https://mlchart.com/terminology/cybersecurity/ta/"
}
Record 4,234 of 4,693 in Cybersecurity terminology (MLC-0102). Request the full dataset.