Security Mechanism

Trusted Functionality is a #Security Mechanism where the functionality is perceived to be true with respect to some criteria such as those defined by a security policy.

Traffic Padding is a #Security Mechanism where bits are inserted into gaps in a data stream. It could be used to confuse Traffic Analysis# with a cost of continuous traffic.

Specific Security Mechanism is a group of #Security Mechanism which may be incorporated into a specific protocol layer. This included:

Security Service is a service that improve the security data processing system and/or information transfers. It needs to at least secure four elements: confidentiality#, authenticity#, integrity#, and availability#. It has Security Mechanism# implemented in order to fulfil its promises and prevents potential Security Attack.

Security Recovery is a #Security Mechanism dealing with requests from mechanisms, e.g., event handling and management functions, and takes recovery actions.

Security Label is a #Security Mechanism marking resources with a label that adheres to its security attributes.

Security Audit Trail is a #Security Mechanism where an independent security auditor will review and examine system records and activities.

Scavenger QoS imposes a traffic limit on ports, and if the packets exceeding the limits, it will be marked to lower priority, and might be dropped eventually. If we know an application’s normal behaviour on a device and on the network, a safeguard could be built using Scavenger QoS to recognise and stop the application upon abnormal behaviours. It works in the opposite way of Quality of Service (QoS)#. It reduces Network Congestion and possible DDoS or worm attacks especially if the attacks create a traffic spike (exceeding bandwidth thresholds) for sustained periods.

Routing Control is a #Security Mechanism which enables selection of particular physically secure routes for certain data and allows routing# changes.

Pervasive Security Mechanism is a group of #Security Mechanism which are not specific to any particular Security Service or protocol layer.

Notarisation is a #Security Mechanism assuring specific properties of data exchange with a trusted third party.

Event Detection is a #Security Mechanism that detect security-relevant events.

Digital Signature is a #Security Mechanism where hashed# data is appended to (sometimes encrypted# using Rivest-Shamir-Adleman (RSA)#) a data unit, allowing a recipient of the data unit to prove the source and Integrity# of the data unit. It could protect against forgery# due to its Non-Repudiation# nature. At the receiver side, it will either reject (return value 0) or accept (return value 1) the signature.

Data Integrity is a #Security Mechanism that used to ensure the Integrity# of a data unit or stream of data units.

Authentication Exchange is a #Security Mechanism that confirm an entity’s identity by means of information exchange before gaining access to a resource. It usually involves a unique piece of information that could unambiguously recognise an entity such as username/password pair#, secret key, or biometric data.

Accounting is a #Security Mechanism that provides a mean for collecting information about user’s resource consumption during their access session to the server. It is particular useful to [Security Audit Trail# for billing, auditing, and capacity-planning purposes.