SCAP Asset Identification Standard 1.1

Owned by Former user (Deleted)
Aug 22, 2014
2 min read
This page is a summary of NIST Interagency Report 7693: Asset Identification 1.1, whose purpose is to provide a mechanism for identifying assets within an organization, whether those assets are persons, organizations, things or logical constructs such as software or data.
High Level Data Model

 

Identification related terminology
  • Asset Identification: The use of attributes and methods to uniquely identify an asset

  • Asset Identification Element: A complete, bound expression of an asset identification using the constructs defined in this specification.

  • Identifying Information: The set of an asset‟s attributes that may be useful for identifying that asset, including discoverable information about the asset and identifiers assigned to the asset.

  • Matching: The process of determining whether two or more asset identification expressions refer to the same asset.

  • Relationship Identifier: Identifying information where the value is a relationship to another asset. 

  • Synthetic Identifier: An identifier that is assigned to an asset in the context of some management domain.

  • Literal Identifier: Pre-defined fields that may contain information to identify an asset (e.g. a MAC from the point of view of the asset owner is generally a fixed value)
Relationships
Use Cases
  • Correlation of Sensed Data
  • Federation of Asset Databases
  • Directly Targeted Remediation Actions
  • Management of Asset Data