AttackPatternType Class The class characterizes an individual attack pattern through the capture of information such as a textual description and a AttackPatternType Common Attack Pattern Enumeration and Classification (CAPEC) reference. The class is intended to be extended as appropriate AttackPatternType to enable the structured description of an attack pattern. STIX v1.2.1 defines a default extension to the class to leverage the AttackPatternType Common Attack Pattern Enumeration and Classification (CAPEC) data model. The UML diagram corresponding to the class is shown in Figure 33. Please see for extension-related details. SuggestedCOAsType Figure . UML diagram of the class AttackPatternType The property table given in Table 35 corresponds to the UML diagram given in Figure 33. Table . Properties of the class AttackPatternType Name Type Multiplicity Description The property specifies a globally unique identifier for the id id 0..1 basicDataTypes:QualifiedName attack pattern. The property specifies an identifier reference to an idref attack pattern specified elsewhere. When the idref property is used, the property MUST NOT also be id idref basicDataTypes:QualifiedName 0..1 specified and the other properties of the class SHOULD NOT hold any AttackPatternType content. The property specifies a particular attack capec_id capec_id basicDataTypes:CAPEC_ID 0..1 pattern (via identifier) in the Common Attack Pattern Enumeration and Classification (CAPEC) registry. The property captures a title for the attack pattern Title and reflects what the content producer thinks the attack Title 0..1 pattern as a whole should be called. The property is basicDataTypes:BasicString Title typically used by humans to reference a particular attack pattern; however, it is not suggested for correlation. The property captures a textual description Description 0..* Description stixCommon:StructuredTextType of the attack pattern. Any length is permitted. Optional
AttackPatternType Class The AttackPatternType class characterizes an individual attack pattern through the capture of information such as a textual description and a Common Attack Pattern Enumeration and Classification (CAPEC) reference. The AttackPatternType class is intended to be extended as appropriate to enable the structured description of an attack pattern. STIX v1.2.1 defines a default extension to the AttackPatternType class to leverage the Common Attack Pattern Enumeration and Classification (CAPEC) data model. The UML diagram corresponding to the SuggestedCOAsType class is shown in Figure 33. Please see for extension-related details. Figure . UML diagram of the AttackPatternType class The property table given in Table 35 corresponds to the UML diagram given in Figure 33. Table . Properties of the AttackPatternType class Name Type Multiplicity Description id basicDataTypes:QualifiedName 0..1 The id property specifies a globally unique identifier for the attack pattern. idref basicDataTypes:QualifiedName 0..1 The idref property specifies an identifier reference to an attack pattern specified elsewhere. When the idref property is used, the id property MUST NOT also be specified and the other properties of the AttackPatternType class SHOULD NOT hold any content. capec_id basicDataTypes:CAPEC_ID 0..1 The capec_id property specifies a particular attack pattern (via identifier) in the Common Attack Pattern Enumeration and Classification (CAPEC) registry. Title basicDataTypes:BasicString 0..1 The Title property captures a title for the attack pattern and reflects what the content producer thinks the attack pattern as a whole should be called. The Title property is typically used by humans to reference a particular attack pattern; however, it is not suggested for correlation. Description stixCommon:StructuredTextType 0..* The Description property captures a textual description of the attack pattern. Any length is permitted. Optional
stix-v1.2.1-csd01-part5-ttp.docx