Professional Penetration Testing

Appendix B. Definitions

Terminology	Definition
Access Control	A security service that prevents the unauthorized use of information system resources (Information Assurance Technical Framework [IATF], 2000).
Access Control List	Mechanism implementing discretionary and/or mandatory access control between subjects and objects (IATF, 2000).
Accountability	The security goal that generates the requirement for actions of an entity to be traced uniquely to that entity. This supports nonrepudiation, deterrence, fault isolation, intrusion detection and prevention, and after-action recovery and legal action (IATF, 2000).
Application-Level Firewall	A firewall system in which service is provided by processes that maintain complete TCP connection state and sequencing; ...