Novell APPARMOR 1.2, Руководство администратора, Страница: 129 / 130

Glossary
Apache
Apache is a freely available UNIX-based Web server. It is currently the most
commonly used Web server on the Internet. More information about Apache can
be found at the Apache Web site at
http://www.apache.org
.
application firewalling
Novell AppArmor contains applications and limits the actions they are permitted
to take. It uses privilege confinement to prevent attackers from using malicious
programs on the protected server and even using trusted applications in unintended
ways.
attack signature
Pattern in system or network activity that signals a possible virus or hacker attack.
Intrusion detection systems might use attack signatures to distinguish between le-
gitimate and potentially malicious activity.
By not relying on attack signatures, Novell AppArmor provides "proactive" instead
of "reactive" defense from attacks. This is better because there is no window of
vulnerabilty where the attack signature must be defined for Novell AppArmor as
it does for products using attack signatures to secure their networks.
GUI
Graphical User Interface. Refers to a software front-end meant to provide an attrac-
tive and easy-to-use interface between a computer user and application. Its elements
include such things as windows, icons, buttons, cursors, and scroll bars.
HIP
Host Intrusion Prevention. Works with the operating system kernel to block abnor-
mal application behavior in the expectation that the abnormal behavior represents
an unknown attack. Blocks malicious packets on the host at the network level before
they can “hurt” the application they target.
mandatory access control
A means of restricting access to objects that is based on fixed security attributes
assigned to users, files, and other objects. The controls are mandatory in the sense
that they cannot be modified by users or their programs.