Table 39. Properties of the class NatureOfSecurityEffectType Name Type Multiplicity Description The property characterizes how a particular Property_Affected Property_Affected 0..* PropertyAffectedType security property of the was affected. PropertyAffectedType Class The class characterizes aspects of how security properties of an asset, such as Availability, Confidentiality, etc., PropertyAffectedType were affected in this Incident. The properties of the class are given in Table 310. PropertyAffectedType 310. Properties of the class PropertyAffectedType Name Type Multiplicity Description The property specifies the security property Property that was affected by the incident. Examples of potential security properties are and confidentiality, integrity availability specific values are only provided to help explain the property: they are neither recommended values nor necessarily part of any existing vocabulary). stixCommon: Property 0..1 The content creator may choose any arbitrary value or VocabularyStringType may constrain the set of possible values by referencing an externally-defined vocabulary or leveraging a formally defined vocabulary extending from the stixCommon:ControlledVocabularyStringType class. The STIX default vocabulary class for use in the property is ‘LossPropertyVocab-1.0.’ The property captures a Description_Of_Effect textual description of how the security property was affected. stixCommon: Description_Of_Effect 0..* Any length is permitted. Optional formatting is StructuredTextType supported via the property of structuring_format the StructuredTextType
Table 39. Properties of the NatureOfSecurityEffectType class Name Type Multiplicity Description Property_Affected PropertyAffectedType 0..* The Property_Affected property characterizes how a particular security property of the was affected. PropertyAffectedType Class The PropertyAffectedType class characterizes aspects of how security properties of an asset, such as Availability, Confidentiality, etc., were affected in this Incident. The properties of the PropertyAffectedType class are given in Table 310. 310. Properties of the PropertyAffectedType class Name Type Multiplicity Description Property stixCommon: VocabularyStringType 0..1 The Property property specifies the security property that was affected by the incident. Examples of potential security properties are confidentiality, integrity and availability specific values are only provided to help explain the property: they are neither recommended values nor necessarily part of any existing vocabulary). The content creator may choose any arbitrary value or may constrain the set of possible values by referencing an externally-defined vocabulary or leveraging a formally defined vocabulary extending from the stixCommon:ControlledVocabularyStringType class. The STIX default vocabulary class for use in the property is ‘LossPropertyVocab-1.0.’ Description_Of_Effect stixCommon: StructuredTextType 0..* The Description_Of_Effect property captures a textual description of how the security property was affected. Any length is permitted. Optional formatting is supported via the structuring_format property of the StructuredTextType
stix-v1.2.1-part6-incident.docx