IT security - Briefing - IT jargon named and explained.

(From Financial Director)

The security of IT systems and websites is a major barrier to large-scale IT implementations. Any discussion of e-commerce, wireless networking, or maintaining a website or email system, must be accompanied by an analysis of the risks posed by hackers, internal breaches of security and viruses.

While most readers will be familiar with basic security terminology, a vast lexicon of words and abbreviations is often used without definition.

The glossary below gives a brief introduction to general terminology, industry standards, preventative measures and good practice.

- Authentication - a way to positively identify a user or device, often as a means to allow access to system resources. Examples of authentication include passwords, keys (see public-key infrastructure) and biometric access control (fingerprinting, voice recognition and retina scanning).

- Back door - hardware or software mechanisms that allow access to systems. These are often built-in by developers and administrators to allow privileged access. Back doors are generally not publicly known and are not intended for malicious practice. A hidden flaw in a system that allows access to intruders is known as a "trap door".

- Encryption - method of securely transmitting data from one system or user to another. Encryption transfers "plain text" data into "cipher text" via a mathematical algorithm. The International Data Encryption Algorithm (IDEA) is a patented cipher that uses a 128-bit key. The increased length of this algorithmic key gives 3x1026 times more security than 40-bit encryption, the previous standard.