Glossary

Advanced Technology Attachment

The reachable points through which a system could be accessed, manipulated or compromised. This can include hardware and software interfaces, network services, and application programming interfaces.

The process of assessing the source, perpetrator or sponsor of malicious activity. Statements of attribution often use probabilistic language and indicate the level of confidence in the assessment.

A chronological record of system activities including records of system access and operations performed. See also event log.

A chronological record that reconstructs the sequence of activities surrounding, or leading to, a specific operation, procedure or event.

Data not to be passed to, or accessed by, foreign nationals.

Data not to be passed to, or accessed by, foreign nationals, with the exception of seconded foreign nationals.

A program that evaluates products in order to protect systems and data against cyberthreats. These evaluation activities are certified by the Australian Certification Authority.

A program under which evaluations are performed by impartial bodies against the Common Criteria. The results of these evaluations are then certified by the Australian Certification Authority within the Australian Signals Directorate (ASD).

An Australian government statutory agency responsible for foreign intelligence, cyber security and offensive cyber operations in support of the Australian Government and the Australian Defence Force.