Symantec 10521146 Administration Guide - Page 340

340 Glossary asymmetric encryption A type of encryption that is based on the concept of a key pair. Also called public key cryptography. Each half of the pair (one key) can encrypt information so that only the other half (the other key) can decrypt it. One part of the key pair, the private key, is known only by the designated owner; the other part, the public key, is published widely but is still associated with the owner. See also synchronous transmission. asynchronous transmission A form of data transmission in which information is sent intermittently. The sending device transmits a start bit and stop bit to indicate the beginning and end of a piece of data. attack signature The features of network traffic, either in the heading of a packet or in the pattern of a group of packets, that distinguish attacks from legitimate traffic. attribute A property of an object, such as a file or display device. authenticated, self-signed SSL A type of Secure Sockets Layer (SSL) that provides authentication and data encryption through a self-signed certificate. authentication The process of determining the identity of a user attempting to access a network. Authentication occurs through challenge/response, time-based code sequences, or other techniques. Authentication typically involves the use of a password, certificate, PIN, or other information that can be used to validate identity over a computer network. See also PAP (Password Authentication Protocol). authentication token A portable device used for authenticating a user. Authentication tokens operate by challenge/response, time-based code sequences, or other techniques. This may include paper-based lists of one-time passwords. See also iButton. authorization The process of determining the type of activities or access that is permitted on a network. Usually used in the context of authentication: once you have authenticated a user, the user can be authorized to have access to a specific service. back door An entry point to a program or a system that is hidden or disguised, often created by the software's author for maintenance. A certain sequence of control characters permits access to the system manager account. If the back door becomes known, unauthorized users (or malicious software) can gain entry and cause damage. bandwidth The amount of data transmitted or received per unit time. In digital systems, bandwidth is proportional to the data speed in bits per second (bps). Thus, a modem that works at 57,600 bps has twice the bandwidth of a modem that works at 28,800 bps. baseline risk The risk that exists before safeguards are considered. benefit The effectiveness of a safeguard in terms of vulnerability measure. If the safeguard is applied by itself, it lowers the danger that the vulnerability poses by the amount specified. bezel The front panel of a Symantec Network Security 7100 Series appliance. blocking A configured mode for preventing malicious or unwanted network traffic from passing a certain point in the network.