provide a variety of security services such as the encryption of data. this is to ensure confidentiality, data integrity, and can provide end-point authentication
rules followed in a security application (ssl, ipsec)
sets of rules and standards that allow computers to exchange information such that the information is not visible to those who are not allowed to view it.