STIX[TM] Core Data Model The primary class of the STIX Core package is the class, which defines a bundle of information characterized in the Structured Threat STIXType Information Expression (STIX) language. We refer to this bundle of information as a Package”. “STIX The properties of the class, are illustrated in the UML diagram given in Figure 31 on page 14. STIXType Figure 31. UML diagram of the class STIXType 31. Properties of The class STIXType Name Type Multiplicity Description BasicDataTypes: The property specifies a globally unique identifier for the id id 0..1 STIX Package. QualifiedName The property specifies an identifier reference to a STIX idref Package specified elsewhere. When the property is idref used, the id property MUST NOT also be specified and the BasicDataTypes: other properties of the class SHOULD NOT hold STIXType idref 0..1 any content. QualifiedName DEPRECATED: This property is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications. The property specifies a timestamp for the timestamp definition of a specific version of a STIX Package. When used in conjunction with the property, this property specifies the id BasicDataTypes: timestamp 0..1 definition time for the specific version of the STIX Package. DateTime When used in conjunction with the property, this property specifies a reference to a specific version of a STIX Package defined elsewhere. This property has no defined
STIX[TM] Core Data Model The primary class of the STIX Core package is the STIXType class, which defines a bundle of information characterized in the Structured Threat Information Expression (STIX) language. We refer to this bundle of information as a “STIX Package”. The properties of the STIXType class, are illustrated in the UML diagram given in Figure 31 on page 14. Figure 31. UML diagram of the STIXType class 31. Properties of The STIXType class Name Type Multiplicity Description id BasicDataTypes: QualifiedName 0..1 The id property specifies a globally unique identifier for the STIX Package. idref BasicDataTypes: QualifiedName 0..1 The idref property specifies an identifier reference to a STIX Package specified elsewhere. When the idref property is used, the id property MUST NOT also be specified and the other properties of the STIXType class SHOULD NOT hold any content. DEPRECATED: This property is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications. timestamp BasicDataTypes: DateTime 0..1 The timestamp property specifies a timestamp for the definition of a specific version of a STIX Package. When used in conjunction with the id property, this property specifies the definition time for the specific version of the STIX Package. When used in conjunction with the property, this property specifies a reference to a specific version of a STIX Package defined elsewhere. This property has no defined
stix-v1.2.1-csd01-part3-core.docx