Cisco IPS-4255-K9 Installation Guide - Page 375

Glossary aspect version Version information associated with a group of IDIOM default configuration settings. For example, Cisco Systems publishes the standard set of attack signatures as a collection of default settings with the S aspect. The S-aspect version number is displayed after the S in the signature update package file name. Other aspects include the Virus signature definitions in the V-aspect and IDIOM signing keys in the key-aspect. atomic attack Represents exploits contained within a single packet. For example, the "ping of death" attack is a single, abnormally large ICMP packet. Atomic engine There are two Atomic engines: Atomic IP inspects IP protocol packets and associated Layer-4 transport protocols, and Atomic ARP inspects Layer-2 ARP protocol. attack An assault on system security that derives from an intelligent threat, that is, an intelligent act that is a deliberate attempt (especially in the sense of method or technique) to evade security services and violate the security policy of a system. attack relevance rating ARR. A weight associated with the relevancy of the targeted OS. The attack relevance rating is a derived value (relevant, unknown, or not relevant), which is determined at alert time. The relevant OSes are configured per signature. attack severity rating ASR. A weight associated with the severity of a successful exploit of the vulnerability. The attack severity rating is derived from the alert severity parameter (informational, low, medium, or high) of the signature. The attack severity rating is configured per signature and indicates how dangerous the event detected is. authentication Process of verifying that a user has permission to use the system, usually by means of a password key or certificate. AuthenticationApp A component of the IPS. Authorizes and authenticates users based on IP address, password, and digital certificates. autostate In normal autostate mode, the Layer 3 interfaces remain up if at least one port in the VLAN remains up. If you have appliances, such as load balancers or firewall servers that are connected to the ports in the VLAN, you can configure these ports to be excluded from the autostate feature to make sure that the forwarding SVI does not go down if these ports become inactive. AV Anti-Virus. B backplane base version benign trigger BIOS The physical connection between an interface processor or card and the data buses and the power distribution buses inside a chassis. A software release that must be installed before a follow-up release, such as a service pack or signature update, can be installed. Major and minor updates are base version releases. A situation in which a signature is fired correctly, but the source of the traffic is nonmalicious. Basic Input/Output System. The program that starts the sensor and communicates between the devices in the sensor and the system. OL-18504-01 Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0 GL-3