Cisco Systems IPS4510K9 manual GL-19

Glossary

shared secret	A piece of data known only to the parties involved in a secure communication. The shared secret can
	be a password, a passphrase, a big number, or an array of randomly chosen bytes.
shun command	Enables a dynamic response to an attacking host by preventing new connections and disallowing
	packets from any existing connection. It is used by ARC when blocking with a PIX Firewall.
Signature Analysis	A processor in the IPS. Dispatches packets to the inspectors that are not stream-based and that are
Processor	configured for interest in the packet in process.
signature	A signature distills network information and compares it against a rule set that indicates typical
	intrusion activity.
signature engine	A component of the sensor that supports many signatures in a certain category. An engine is composed
	of a parser and an inspector. Each engine has a set of legal parameters that have allowable ranges or
	sets of values.
signature engine	Executable file with its own versioning scheme that contains binary code to support new signature
update	updates.
Signature Event	Subtracts actions based on the signature event signature ID, addresses, and risk rating. The input to the
Action Filter	Signature Event Action Filter is the signature event with actions possibly added by the Signature Event
	Action Override.
Signature Event	Performs the requested actions. The output from Signature Event Action Handler is the actions being
Action Handler	performed and possibly an evIdsAlert written to the Event Store.
Signature Event	Adds actions based on the risk rating value. Signature Event Action Override applies to all signatures
Action Override	that fall into the range of the configured risk rating threshold. Each Signature Event Action Override is
	independent and has a separate configuration value for each action type.
Signature Event	Processes event actions. Event actions can be associated with an event risk rating threshold that must
Action Processor	be surpassed for the actions to take place.
signature fidelity	SFR. A weight associated with how well a signature might perform in the absence of specific
rating	knowledge of the target. The signature fidelity rating is configured per signature and indicates how
	accurately the signature detects the event or condition it describes.
signature update	Executable file that contains a set of rules designed to recognize malicious network activities, such as
	worms, DDOS, viruses, and so forth. Signature updates are released independently, are dependent on a
	required signature engine version, and have their own versioning scheme.
Slave Dispatch	A processor in the IPS. Process found on dual CPU systems.
Processor
SMB	Server Message Block. File-system protocol used in LAN manager and similar NOSs to package data
	and exchange information with other systems.
SMTP	Simple Mail Transfer Protocol. Internet protocol providing e-mail services.
SN	Serial Number. Part of the UDI. The SN is the serial number of your Cisco product.

	Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01		GL-19