Name Type Multiplicity Description The property specifies a globally unique identifier for a data id id 0..1 basicDataTypes:QualifiedName marking specification instance. The property specifies a reference to the identifier of a idref data marking specification instance specified elsewhere; the referenced data marking should be evaluated as if it were located where the data marking reference is defined. When the idref basicDataTypes:QualifiedName 0..1 property is used, the property MUST NOT also be idref id specified and the other properties of the class SHOULD NOT hold any MarkingSpecificationType content. The property specifies the version number of the STIX version version basicDataTypes:BasicString 0..1 Data Marking data used to capture the data marking associated with the STIX content. The property specifies the full explicit Controlled_Structure set of STIX structured elements to which the marking is to be applied. The controlled structure MUST explicitly select all structured elements that the marking applies to; selecting a parent structured element may not imply that the marking also applies to its children. Specific syntax for how the set of STIX Controlled_Structure 0..1 structured elements will be specified is dependent on the basicDataTypes:BasicString particular syntactic implementation (XML, JSON, etc.) of the STIX language and MUST be explicitly specified in a separate binding specification for that syntactic implementation (e.g. a STIX XML Binding Specification). For example, a STIX XML Binding Specification could specify XPath 1.0 as an appropriate choice for the syntax of the property. Controlled_Structure The property characterizes the marking Marking_Structure information to be applied to a portion of STIX content as specified in the property. Its Controlled_Structure Marking_Structure 0..* MarkingStructureType underlying is intended to be extended to enable the expression of any structured or unstructured data marking mechanism.
Name Type Multiplicity Description id basicDataTypes:QualifiedName 0..1 The id property specifies a globally unique identifier for a data marking specification instance. idref basicDataTypes:QualifiedName 0..1 The idref property specifies a reference to the identifier of a data marking specification instance specified elsewhere; the referenced data marking should be evaluated as if it were located where the data marking reference is defined. When the idref property is used, the id property MUST NOT also be specified and the other properties of the MarkingSpecificationType class SHOULD NOT hold any content. version basicDataTypes:BasicString 0..1 The version property specifies the version number of the STIX Data Marking data used to capture the data marking associated with the STIX content. Controlled_Structure basicDataTypes:BasicString 0..1 The Controlled_Structure property specifies the full explicit set of STIX structured elements to which the marking is to be applied. The controlled structure MUST explicitly select all structured elements that the marking applies to; selecting a parent structured element may not imply that the marking also applies to its children. Specific syntax for how the set of STIX structured elements will be specified is dependent on the particular syntactic implementation (XML, JSON, etc.) of the STIX language and MUST be explicitly specified in a separate binding specification for that syntactic implementation (e.g. a STIX XML Binding Specification). For example, a STIX XML Binding Specification could specify XPath 1.0 as an appropriate choice for the syntax of the Controlled_Structure property. Marking_Structure MarkingStructureType 0..* The Marking_Structure property characterizes the marking information to be applied to a portion of STIX content as specified in the Controlled_Structure property. Its underlying is intended to be extended to enable the expression of any structured or unstructured data marking mechanism.