Figure 39. UML diagram of the RelatedIndicatorType The property table given in Table 317 corresponds to the UML diagram shown in Figure 39. Table 317. Properties of the class RelatedIndicatorType Name Type Multiplicity Description The property characterizes a cyber threat Indicator. The Indicator class is a minimal base class that is intended to IndicatorBaseType be extended. The default and strongly RECOMMENDED class to fully implement an Indicator is the class indicator:IndicatorType Indicator 1 IndicatorBaseType defined in . Base classes are used to minimize interdependence between STIX components, not to enable or encourage conflicting syntactic variation. Through the use of the property, a reference idref to an Indicator defined elsewhere can be specified via the direct use of the class. IndicatorBaseType RelatedObservableType Class The class characterizes a relationship to a CybOX Observable. It extends the superclass by RelatedObservableType GenericRelationshipType specifying a related Observable. The UML diagram corresponding to the class is shown in Figure 310. RelatedObservableType Figure 310. UML diagram of the class RelatedObservableType The property table given in Table 318 corresponds to the UML diagram shown in Figure 310. Table 318. Properties of the class RelatedObservableType Name Type Multiplicity Description The property characterizes the related cyber Observable Observable 1 cybox_core:ObservableType observable.
Figure 39. UML diagram of the RelatedIndicatorType The property table given in Table 317 corresponds to the UML diagram shown in Figure 39. Table 317. Properties of the RelatedIndicatorType class Name Type Multiplicity Description Indicator IndicatorBaseType 1 The Indicator property characterizes a cyber threat Indicator. The IndicatorBaseType class is a minimal base class that is intended to be extended. The default and strongly RECOMMENDED class to fully implement an Indicator is the indicator:IndicatorType class defined in . Base classes are used to minimize interdependence between STIX components, not to enable or encourage conflicting syntactic variation. Through the use of the idref property, a reference to an Indicator defined elsewhere can be specified via the direct use of the IndicatorBaseType class. RelatedObservableType Class The RelatedObservableType class characterizes a relationship to a CybOX Observable. It extends the GenericRelationshipType superclass by specifying a related Observable. The UML diagram corresponding to the RelatedObservableType class is shown in Figure 310. Figure 310. UML diagram of the RelatedObservableType class The property table given in Table 318 corresponds to the UML diagram shown in Figure 310. Table 318. Properties of the RelatedObservableType class Name Type Multiplicity Description Observable cybox_core:ObservableType 1 The Observable property characterizes the related cyber observable.
stix-v1.2.1-csprd01-part2-common.docx