Trust Model for Security Automation Data 1.0 (TMSAD)

Booth, Harold; Halbardier, Adam

doi:https://doi.org/10.6028/NIST.IR.7802

NISTIR 7802

Trust Model for Security Automation Data 1.0 (TMSAD)

Documentation Topics

Date Published: September 2011

Author(s)

Harold Booth (NIST), Adam Halbardier (NIST)

Abstract

This report defines the Trust Model for Security Automation Data 1.0 (TMSAD), which permits users to establish integrity, authentication, and traceability for security automation data. Since security automation data is primarily stored and exchanged using Extensible Markup Language (XML) documents, the focus of the trust model is on the processing of XML documents. The trust model is composed of recommendations on how to use existing specifications to represent signatures, hashes, key information, and identity information in the context of an XML document within the security automation domain.

Keywords

digital signatures; SCAP; security automation; Security Content Automation Protocol

Control Families

Audit and Accountability; Assessment, Authorization and Monitoring; Configuration Management; Identification and Authentication; System and Information Integrity

Documentation

Publication:
NISTIR 7802 (DOI)
Local Download

Supplemental Material:
None available

Document History:
09/20/11: NISTIR 7802 (Final)

Topics

Security and Privacy
audit & accountability; authentication; digital signatures; risk management; security automation

Laws and Regulations
OMB Circular A-130