Classes that extend the class are used to explicitly represent the one-to-many relationship between constructs. In this GenericRelationshipListType way, the model enables the ability to express a property of the set itself. Currently, the only property defined is the scope of the relationship whether the – elements of the set are related individually or as a group. Examples of STIX classes that extend the class include the class in the Campaign data GenericRelationshipListType AttributeType defined model, the class in the Incident data model, and the class defined in the TTP data model (to name RelatedIndicatorsType ExploitTargetsType just a few). An explicit example is given in Figure 315, which illustrates how the class can be extended by the GenericRelationshipListType class to associate a set of Indicators to an Incident. RelatedIndicatorsType Figure 315. Example extension of the class GenericRelationshipListType The property table given in Table 323 corresponds to the UML diagram shown in Figure 315. Table 323. Properties of the class GenericRelationshipListType Name Type Multiplicity Description The property specifies how the set of relationships should be interpreted. scope Potential values are specified by the enumeration. If 'inclusive' is ScopeEnum specified, then a single conceptual relationship is being defined between the scope 0..1 RelationshipScopeEnum subject construct and the combined collection of related constructs. If 'exclusive' is specified (the default), then multiple relationships are being defined beween the subject construct and each individual related construct. ConfidenceAssertionChainType Class The class specifies a set of one or more related confidence levels in an assertion. ConfidenceAssertionChainType The property table of the class is given in Table 324. ConfidenceAssertionChainType Table 324. Properties of the class ConfidenceAssertionChainType Name Type Multiplicity Description The property characterizes confidence in an Confidence_Assertion Confidence_Assertion 1..* ConfidenceType assertion.
Classes that extend the GenericRelationshipListType class are used to explicitly represent the one-to-many relationship between constructs. In this way, the model enables the ability to express a property of the set itself. Currently, the only property defined is the scope of the relationship – whether the elements of the set are related individually or as a group. Examples of STIX classes that extend the GenericRelationshipListType class include the AttributeType class defined in the Campaign data model, the RelatedIndicatorsType class in the Incident data model, and the ExploitTargetsType class defined in the TTP data model (to name just a few). An explicit example is given in Figure 315, which illustrates how the GenericRelationshipListType class can be extended by the RelatedIndicatorsType class to associate a set of Indicators to an Incident. Figure 315. Example extension of the GenericRelationshipListType class The property table given in Table 323 corresponds to the UML diagram shown in Figure 315. Table 323. Properties of the GenericRelationshipListType class Name Type Multiplicity Description scope RelationshipScopeEnum 0..1 The scope property specifies how the set of relationships should be interpreted. Potential values are specified by the ScopeEnum enumeration. If 'inclusive' is specified, then a single conceptual relationship is being defined between the subject construct and the combined collection of related constructs. If 'exclusive' is specified (the default), then multiple relationships are being defined beween the subject construct and each individual related construct. ConfidenceAssertionChainType Class The ConfidenceAssertionChainType class specifies a set of one or more related confidence levels in an assertion. The property table of the ConfidenceAssertionChainType class is given in Table 324. Table 324. Properties of the ConfidenceAssertionChainType class Name Type Multiplicity Description Confidence_Assertion ConfidenceType 1..* The Confidence_Assertion property characterizes confidence in an assertion.
stix-v1.2.1-csprd01-part2-common.docx