1. Information, other than cryptographic keys, that is needed to establish and describe the protection mechanisms that secure the communications between two entities. 2. A security attribute is a piece of security information which is associated with an entity in a distributed system. 3. Attributes associated with processes and files and used to determine access rights of a subject to an object.