Glossary

This topic provides a brief glossary of terms and abbreviations used in the NetCrusader/Web manuals and help files. For more complete descriptions, use the index to find a related topic.

ACL Access Control List. Used to control access to secure data. NetCrusader ACLs are similar to the file permission mechanisms provided by most operating systems, but provide much finer-grained access control. See also Explicit ACL, Inherited ACL.

ACL entry Lists the permissions that are enabled for a specific user, group of users, special object, or category of users (for example, unauthenticated and any_other).

ACL model A set of permissions.

Authentication Proving "you are who you say you are" through such mechanisms as encrypted passwords, digital certificates, smart cards, or token cards.

Authorization Ensuring that only authorized use of resources is allowed by matching an authenticated entity to established access control privileges.

Certificate A digital document that attests to the identity of an entity. Certificates are also referred to as digital IDs. The format of the certificate complies with the international standard X.509. Certificates can be stored on the browser or web server. Certificates on the browser are also referred to as client certificates or personal certificates. Certificates on the web server are referred to as server certificates or web site certificates.

Data privacy Ensuring the protection of private information from electronic eavesdropping through the use of encryption.

Data integrity Ensuring that data is not changed in transit.

Digital IDs See Certificate.

Explicit ACL An ACL that explicitly sets the access permissions for an object, and in the case of a container object, also sets the access permissions for the objects contained in that container object. Sometimes called a real ACL. See also ACL, Inherited ACL.

Group A collection of users in the NetCrusader environment that have similar security requirements. Associating users into groups simplifies overall NetCrusader administration. For more information on NetCrusader groups, see the NetCrusader Commander online help.

Inherited ACL An ACL that is not explicitly set on an object, but is instead inherited from the next highest container object (for example, a directory) on the file tree on which a real ACL has been set. See also ACL, Explicit ACL.

Junction A mechanism to proxy URL requests from a Security Adapter server to another web server. Junctions make it possible to add NetCrusader security to an environment that runs non-secure web servers.

Junction Server The web server on which you create a junction. See also Target Server.

Real ACL See Explicit ACL.

Root ACL The ACL at the top of a hierarchy.

SSL Secure Sockets Layer.

Target Server The web server that you access through the junction. See also Junction Server.

X.509 International standard that defines the format for certificates.