SCAP Asset Identification Standard 1.1

This page is a summary of NIST Interagency Report 7693: Asset Identification 1.1, whose purpose is to provide a mechanism for identifying assets within an organization, whether those assets are persons, organizations, things or logical constructs such as software or data.

High Level Data Model

Identification related terminology

Asset Identification: The use of attributes and methods to uniquely identify an asset
Asset Identification Element: A complete, bound expression of an asset identification using the constructs defined in this specification.
Identifying Information: The set of an asset‟s attributes that may be useful for identifying that asset, including discoverable information about the asset and identifiers assigned to the asset.
Matching: The process of determining whether two or more asset identification expressions refer to the same asset.
Relationship Identifier: Identifying information where the value is a relationship to another asset.
Synthetic Identifier: An identifier that is assigned to an asset in the context of some management domain.
Literal Identifier: Pre-defined fields that may contain information to identify an asset (e.g. a MAC from the point of view of the asset owner is generally a fixed value)

Relationships

Use Cases

Correlation of Sensed Data
Federation of Asset Databases
Directly Targeted Remediation Actions
Management of Asset Data