Product or technology whose primary purpose is to provide security services (e.g., confidentiality, authentication, integrity, access control, nonrepudiation of data), correct known vulnerabilities, or provide layered defense against various categories of non-authorized or malicious penetrations of information systems or networks. Note: Examples include such products as data/network encryptors, firewalls, and intrusion detection devices.
Sources:
CNSSI 4009-2022