SNIP_CLASSIC_IDSM_SECTION_2_Acronyms_and_Abbreviations

2 Acronyms and Abbreviations The glossary below includes acronyms and abbreviations that are only relevant to Intrusion Detection System Manager. A general list of acronyms and abbreviations is available in the [1, AUTOSAR glossary]. Acronym Description: Filter Chain A set of consecutive filters which is applied to Security Events- Intrusion Detection System An Intrusion Detection System is a security control which detects and processes security events. Intrusion Detection System Manager The Intrusion Detection System Manager handles security events reported by security sensors. Intrusion Detection System Reporter The Intrusion Detection System Reporter handles qualified security events received from Idsm instances. Security Extract The Security Extract specifies which security events are handled by IdsM instances and their configuration parameters. Security Event Type A security event type can be identified by its security event type ID. Instances of security event types are called security events and share the same security event type ID. Security Events Onboard Security Events are instances of security event types which are reported by BSW or SWC to the IdsM. Security Event Memory A user defined diagnostic event memory which is independent from the primary diagnostic event memory. Security Sensors BSW or SWC which report security events to the Idsm. Qualified Security Events Security events which pass their filter chain are regarded as Qualified Security Events. Security Incident and Event Management Process for handling a confirmed security incident Security Operation Centre Organization of security and domain experts who are analyzing security events and contributing to mitigation of threats. DID Data Identifier according to Unified Diagnostic Services DTC Diagnostics Trouble Code FC Functional Cluster IDS Intrusion Detection System IdsM Intrusion Detection System Manager IdsR Intrusion Detection System Reporter SecXT Security Extract SEv Security Event QSEv Qualified Security Event Sem Security Event Memory SIEM Security Incident and Event Management SOC Security Operation Centre SWCL Software Cluster Table 2.1: Acronyms and abbreviations used in the scope of this Document Manager for Adaptive Platform