A piece of code intentionally inserted into a software system that will set off a malicious function when specified conditions are met. -nist.gov