jailbreak
Jailbreaking removes restrictions on iOS devices and permits root-level access to the underlying operating system. It is similar to rooting a device running the Android operating system.
Java
A platform-independent programming language developed by Sun Microsystems.
job description
A detailed document outlining a specific position needed by an organization. A job description includes information about security classification, work tasks, and so on.
job responsibilities
The specific work tasks an employee is required to perform on a regular basis.
job rotation
A means by which an organization improves its overall security by rotating employees among numerous job positions. Job rotation serves two functions. First, it provides a type of knowledge redundancy. Second, moving personnel around reduces the risk of fraud, data modification, theft, sabotage, and misuse of information.
Keccak algorithm
In 2012, the federal government announced the selection of the Keccak algorithm as the SHA-3 standard.
Kerberos
A ticket-based authentication mechanism that employs a trusted third party to provide identification and authentication.
Kerckchoffs's assumption/principle
The idea that all algorithms should be public but all keys should remain private. Kerckchoffs's assumption or principle is held by a large number of cryptologists, but not all of them.
kernel
The part of an operating system that always remains resident in memory (so that it can run on demand at any time).
kernel proxy firewalls
A firewall that is integrated into an operating system's core to provide multiple levels of session and packet evaluation. Kernel proxy firewalls are known as fifth-generation firewalls.
key
1) A secret value used to encrypt or decrypt messages. 2) A column, attribute, or field of a database.
key distribution center (KDC)
An element of the Kerberos authentication system. The KDC maintains all the secret keys of enrolled subjects and objects. A KDC is also a COMSEC facility that distributes symmetric crypto keys, especially for government entities.
key escrow system
A cryptographic recovery mechanism by which keys are stored in a database and can be recovered only by authorized key escrow agents in the event of key loss or damage.
keyspace or key space
The range of values that are valid for use as a key for a specific algorithm.
keystroke dynamics
A biometric factor that measures how a subject uses a keyboard by analyzing flight time and dwell time.
keystroke monitoring
The act of recording the keystrokes a user performs on a physical keyboard. The act of recording can be visual (such as with a video recorder) or logical/ technical (such as with a capturing hardware device or a software program).
keystroke patterns
An example of a biometric factor, which is a behavioral or physiological characteristic that is unique to a subject. The pattern and speed of a person typing a passphrase is used to establish identity or provide authentication.
knowledge base
A component of an expert system, the knowledge base contains the rules known by an expert system and seeks to codify the knowledge of human experts in a series of "if/then" statements.
knowledge-based detection
An intrusion discovery mechanism used by IDS and based on a database of known attack signatures. The primary drawback to a knowledge-based IDS is that it is effective only against known attack methods.
known plain-text attack
An attack in which the attacker has a copy of the encrypted message along with the plain-text message used to generate the cipher text (the copy). This greatly assists the attacker in breaking weaker codes.
KryptoKnight
A ticket-based authentication mechanism similar to Kerberos but based on peer-to-peer authentication.
Whether you're preparing for Cybersecurity certification, working with government standards, or simply starting your career in compliance, these are the NIST Federal Information Processing Standards (FIPS), Special Publication (SP), and Interagency Report (IR) topics