GLOSSARY
OF ABBREVIATIONS AND ACRONYMS
Principles
and Practice of
Information Security
Linda Volonino & Stephen R. Robinson
802.11 Wireless protocol. Also referred to as WiFi.
// (double forward slashes) Double forward slashes at the beginning of filenames meant hat the files exist on a remote server(computer). The // is common to the Internet and Websites.
§ Section or subsection.
ACFE Association of Certified Fraud Examiners
ACL Access-control list
ACLU American Civil Liberties Union
ADSL Asymmetric digital subscriber line
AIM America Online Instant Messenger
AMA American Management Association
ARIN American Registry for Internet Numbers
ASP Application service provider
ATM Asynchronous transfer mode
AUP Acceptable-use policy
AV Antivirus
BCC Blind carbon copy
bps Bits per second
BS British standard
C-SPAN Cable-Satellite Public Affairs Network
CA Certification authority
CCIPS Computer Crime and Intellectual Property Section of the Criminal Division of the DOJ
CD Compact disc
CDA Communications Decency Act
CDT Center for Democracy and Technology
CEO Chief executive officer
CERT. Computer Emergency Response Team
CFAA Computer Fraud and Abuse Act
CFE Certified fraud examiner
CFO Chief financial officer
CGI Common gateway interface
CGI-Bin Common gateway interface binaries (programs)
CIA Central Intelligence Agency
CIRT Computer incident response team
CISO Chief information security officer
CNN Cable News Network
COPPA Children’s Online Privacy Protection Act
CPPA Child Pornography Prevention Act
CPU Central processing unit
CRC Cyclic redundancy check
CRM Customer relationship management
CSI Computer Security Institute, Inc.
CTO Chief technology officer
DCA Distributed coordinated attacks
DDOS Distributed denial of service
dig sig Digital signature
DLM Digital liability management
DMS Defense message system
DMV Department of Motor Vehicles
DMZ Demilitarized zone
DNS Domain name server
DOS Denial of service
DOJ Department of Justice
DOT Department of Transportation
DPH Digital Pearl Harbor
DRM Digital rights management
DSL Digital subscriber line
Ecommerce Electronic commerce
ECPA Electronic Communications Privacy Act
EFF Electronic Frontier Foundation
email Electronic mail
EPIC Electronic Privacy Information Center
ERM Electronic records management
ESIGN Electronic Signatures in Global andNational Commerce Act
ESSENCE Electronic Surveillance System for the Early Notification of Communitybased Epidemics
EU European Union
Fax Facsimile
FBI Federal Bureau of Investigation
FedCIRC Federal Computer Incident Response Center
FinCEN Financial Crimes Enforcement Network
FISMA Federal Information Security Management Act
FTC Federal Trade Commission
FTP File transfer protocol
G-8 Group of Eight
GAAP Generally Accepted Accounting Principles
GAO General Accounting Office
GB Gigabyte (1024 megabytes)
GIF Graphic interchange format
GLB Gramm–Leach–Bliley Act of 1999
GPS Global Positioning System
HAZMAT Hazardous materials
HIPAA Health Insurance Portability and Accountability Act
HR Human Resources
HTML Hypertext markup language
HTTP Hypertext transfer protocol
HTTPS Hypertext transfer protocol secure
ICANN Internet Corporation for Assigned Names and Numbers
ICMP Internet control message protocol
ICQ “I-seek-you”
IDS Intrusion detection system
IFIA Internet False Identification Prevention Act of 2000
IIS Internet Information Services (Microsoft)
IM Instant message
IP Internet protocol
ISACs Information Sharing and Analysis Centers
ISDN Integrated services digital network
ISO International organization for standardization
ISP Internet service provider
ISS Internet security systems
IT Information technology
JS JavaScript
KBps Kilobytes per second
KM Knowledge management
LAN Local area network
LDAP Lightweight directory access protocol
LLC Limited liability corporation
MBps Megabytes per second
MD Message digest
MIME Multipurpose Internet mail extensions
MP3 Moving Picture Experts Group Layer-3 Audio
NASA National Aeronautics & Space Administration
NAT Network address translation
NIIPA National Information Infrastructure Protection Act of 1996
NIPC National Infrastructure Protection Center
NIST National Institute of Standards and Technology
NLRB National Labor Relations Board
OCC Office of the Comptroller of the Currency
OEM Original equipment manufacturer
OECD Organization for Economic Cooperation and Development
OS Operating system
OWASP Open Web Application Security Project
P2P Peer-to-peer
P3P Privacy Preferences Project
PBX Private branch exchange
PC Personal computer
PDA Personal digital assistant
PGP Pretty good privacy
PIHI Personally identifiable health information
Ping Packet Internet groper
PKI Public key infrastructure
R&D Research and development
RAT Remote-access Trojan
RF Radio frequency
ROI Return on investment
SAINT Security administrator integrated network tool
SAN Storage area network
SANS System Administration, Auditing, Networking, and Security Institute
SATAN Security administrator tool for analyzing networks
SEC Securities and Exchange Commission
SET Secure electronic transmission
SIPRNET Secret Internet protocol router network
SMTP Simple mail transport protocol
SSL Secure sockets layer
SSO Single sign-on
SQL Structured query language
TCO Total cost of ownership
TCP Transfer control protocol
TCP/IP Transmission control protocol/Internet protocol
TFN Tribe Flood Net
TFN2K Tribal Flood Net 2000
TTV Taxonomy of threats and vulnerabilities
TQM Total quality management
TXT Text
UCE Unsolicited commercial email
UDP User datagram protocol
UETA Uniform Electronic Transaction Act of 1999
UPX Ultimate packer for executables
URL Uniform resource locator
USA PATRIOT Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism
USC United States Code
USCG United States Coast Guard
VB Visual Basic
VBS Visual Basic Script
VoIP Voice over Internet protocol
VPN Virtual private network
WAN Wide area network
WAP Web application protocol
WCC White-collar crime
WWW World Wide Web
XML Extensible markup language