Specification for the asset reporting format 1.1

Abstract

The Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation"s measurement and standards infrastructure. ITL develops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the development and productive use of information technology. ITL"s responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems. This Interagency Report discusses ITL"s research, guidance, and outreach efforts in computer security and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately. Such identification is not intended to imply recommendation or endorsement by the National Institute of Standards and Technology, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose. AbstractThis specification describes the Asset Reporting Format (ARF), a data model for expressing the transport format of information about assets and the relationships between assets and reports. The standardized data model facilitates the reporting, correlating, and fusing of asset information throughout and between organizations. ARF is vendor and technology neutral, flexible, and suited for a wide variety of reporting applications. The intent of ARF is to provide a uniform foundation for the expression of reporting results, fostering more widespread application of sound IT management practices. ARF can be used for any type of asset, not just IT assets.

Automation of Asset Inventory for Cyber Security: Investigation of Event Correlation-Based Technique

“…In [22], a model of data exchange format expression for aggregated assets is introduced. Asset summary reporting may be used as a part of an asset reporting format document [23]. In [23], a data model of data exchange format expression for assets and relationships between them and reports is introduced.…”

“…Asset summary reporting may be used as a part of an asset reporting format document [23]. In [23], a data model of data exchange format expression for assets and relationships between them and reports is introduced. However, there is still an open question as to how to detect assets before their identification and reporting on them.…”

Web of cybersecurity: Linking, locating, and discovering structured cybersecurity information

“…The Incident Object Description Exchange Format (IODEF) defines a data model for reporting incident information and provides an XML schema, while the Extensible Configuration Checklist Description Format defines an XML schema on security configuration checklist. There are many other information structures, including the Asset Reporting Format, Common Attack Pattern Enumeration and Classification, Common Configuration Enumeration (CCE), Common Configuration Scoring System, Common Event Expression, Common Platform Enumeration (CPE), Common Vulnerability Reporting Framework (CVRF), Common Vulnerability Scoring System (CVSS), Common Weakness Enumeration, Common Weakness Scoring System, Cyber Observable Expression, Malware Attribute Enumeration and Characterization, Malware Metadata Exchange Format, Open Checklist Interactive Language, Open Vulnerability and Assessment Language (OVAL), Structured Threat Information Exchange, Software Identification, Web Services Agreement Specification, and Extensible Access Control Markup Language . These are useful for accumulating cybersecurity‐related information and building repositories.…”