third Cyber Security Assessment Netherlands - NCSC

Classification
Classified data
Cloud/Cloud services
Compromise
Confidentiality
Cookie
COTS
CPNI.NL
CVE
Cyber crime
Cyber security
Data breach/data leak
De-Googling
DCS
(D)DoS
DigiD
DNS
DNSSEC
Establishing which data constitute special information and specifying the level of security necessary
for this information.
Data, including documents or materials that a party or user identifies as in need of protection against
unlawful publication, identified as such in a security classification.
An internet (the ‘cloud’) based model for system architecture that mainly involves the use of Software
as a Service (SaaS).
Familiarisation, or the possibility for an unauthorised party to familiarise himself, with classified
information.
A quality characteristic of data in the context of information security. Confidentiality can be defined
as a situation in which data may only be accessed by someone with the authorisation to do so. The
owner of the data in question will decide who will have this authorisation.
A cookie is information that a web server saves on the end-user’s computer. This information can then
be retrieved by the web server the next time the end-user connects to the server. Cookies can be used
to save user settings or to track the user.
Commercial Off-The-Shelf (COTS) refers to ready-to-use software and hardware products on sale
to the public.
Centre for Protection of the National Infrastructure (CPNI.NL) is the Dutch platform for cyber security,
facilitated by the TNO.
Common Vulnerabilities and Exposures (CVE) is a unique common identification of publicly known data
security vulnerabilities.
Form of criminality that targets an IT system or the information it processes.
Cyber security protects against the danger of harm caused by the misuse, disruption, or failure of IT.
The danger or harm can cause restrictions to the availability and reliability of systems, and infringement
of confidentiality or harm to the integrity of information stored on the systems.
The intentional or unintentional release of confidential data.
Removing information on people or businesses from the internet with the aim of ensuring that this
content no longer appears in search results.
The Cyber Security Directorate (DCS), including the NCSC, is part of the NCTV.
(Distributed) Denial of Service term for a type of attack in which a particular service (e.g. a website)
becomes unavailable to the usual consumers of the service. DoS attacks on websites are often performed
by bombarding websites with huge amounts of network traffic, so that they become unavailable.
Contraction of Digital Identity, used to identify and authenticate citizens on government websites.
It allows government institutions to ascertain whether they are really dealing with the individual
in question.
The Domain Name System (DNS) links internet domain names to IP addresses and vice versa. For
example, the web address or URL (uniform resource locator) named ‘www.ncsc.nl’ represents IP address
‘62.100.52.109’.
DNS Security Extensions (DNSSEC) add authenticity and integrity controls to the existing DNS system.
106