Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

TLPMarkingStructureTypeTLP Schema

The TLPMarkingStructureType is an implementation of the data marking schema that allows for a TLP Designation to be attached to an identified XML structure. Information about TLP is available here: http://www.us-cert.gov/tlp.

Nodes may be marked by multiple TLP Marking statements. When this occurs, the node should be considered marked at the most restrictive TLP Marking of all TLP Markings that were applied to it. For example, if a node is marked both GREEN and AMBER, the node should be considered AMBER.


Fields

Field Name Type Description
@marking_model_nameoptional QName

This field specifies the name of the marking model to be applied within this Marking_Structure.

@marking_model_refoptional anyURI

This field contains a reference to an authoritative source on the marking model to be applied within this Marking_Structure.

@idoptional QName

Specifies a unique ID for this Marking_Structure.

@idrefoptional QName

Specifies a reference to the ID of a Marking_Structure defined elsewhere.

When idref is specified, the id attribute must not be specified, and any instance of this Marking_Structure should not hold content.

@coloroptional TLPColorEnum

The TLP color designation of the marked structure.