Glossary

The disclosure of information to unauthorised persons, or a violation of the security policy of a system in which unauthorised intentional or unintentional disclosure, modification, destruction or loss of an object may have occurred.

A programmable electronic device designed to accept data, perform high speed prescribed mathematical and logical operations, and display the results.

Accounts used to identify computers that belong to a domain, also known as machine accounts. Computer accounts provide a means for authenticating and auditing computer access to networks and domain resources.

Two or more interconnected devices that can exchange data.

A tube, duct or pipe used to protect cables.

The assurance that data is disclosed only to authorised entities.

A change in the actual configuration of a system away from its approved baseline.

Any vehicle that is connected to the internet enabling the relay of data to or from the vehicle. Connected vehicles may be connected to the internet either via embedded internet connectivity, such as a built-in modem, or via a tethered connection to the driver’s smartphone.

The use of network address translation to allow a port on a node inside a network to be accessed from outside the network. Alternatively, using a Secure Shell server to forward a Transmission Control Protocol connection to an arbitrary port on the local host.

An authorisation provided by a human user or administrator that permits an application to access specified data or resources on behalf of that user or an organisation.