Term
|
Definition
An anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory. This is a special case of violation of memory safety. |
|
|
Term
|
Definition
Software that enables continued privileged access to a computer while actively hiding its presence from administrators by subverting standard operating system functionality or other applications. |
|
|
Term
|
Definition
A hardward chip that provides a "shielded lovation" for OS integrite and authentication operations. Provides cryptographic functions, random number generator. |
|
|
Term
Virtural Machine Monitor (VMM) aka Hypervisor. |
|
Definition
One of many hardware virtualization techniques that allow multiple operating systems, termed guests, to run concurrently on a host computer. There are two types:
Type 1: Runs directly on the system hardward, i.e., level 1.
Type 2: Runs onto of another OS (i.e., "level 2"). The Virtual Machines run at "level 3". |
|
|
Term
|
Definition
A dynamic set of individuals or institutions defined around a set of resource-sharing rules and conditions. Furthermore, has the characteristics of a formal organization while not being one. It comprises a complex network of smaller organizations which each contribute a part of the production process. Boundaries between organizations are fuzzy; control is generally by market forces, reinforced by the certainty of long- term contracts. |
|
|
Term
Grid-specific security issues center on: (three things) |
|
Definition
1. Integration
2. Interoperability.
3. Trust models. |
|
|
Term
|
Definition
public key infrastructure |
|
|
Term
Public Key Infrastructure (PKI) (definition) |
|
Definition
An arrangement that binds public keys with respective user identities by means of a certificate authority (CA). The user identity must be unique within each CA domain. The binding is established through the registration and issuance process, which, depending on the level of assurance the binding has, may be carried out by software at a CA, or under human supervision. |
|
|
Term
Certificate Authority (CA) |
|
Definition
An entity that issues digital certificates. The digital certificate certifies the ownership of a public key by the named subject of the certificate. This allows others (relying parties) to rely upon signatures or assertions made by the private key that corresponds to the public key that is certified. |
|
|