Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

ConfidenceTypeSTIX Common Schema

The ConfidenceType specifies a level of Confidence held in some assertion.


Fields

Field Name Type Description
@timestampoptional dateTime

Specifies the time of this Confidence assertion.

In order to avoid ambiguity, it is strongly suggest that all timestamps include a specification of the timezone if it is known.

@timestamp_precisionoptional DateTimePrecisionEnum

Represents the precision of the associated timestamp value. If omitted, the default is "second", meaning the timestamp is precise to the full field value. Digits in the timestamp that are required by the xs:dateTime datatype but are beyond the specified precision should be zeroed out.

Value0..1 ControlledVocabularyStringType

Specifies the level of confidence held in this direct assertion.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. The default vocabulary type is HighMediumLowVocab-1.0 in the http://stix.mitre.org/default_vocabularies-1 namespace. This type is defined in the stix_default_vocabularies.xsd file or at the URL http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1/stix_default_vocabularies.xsd.

Users may also define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a string field.

Description0..1 StructuredTextType

The Description field provides a description of the confidence value and how it was derived.

Source0..1 InformationSourceType

The Source field specifies the source of this confidence assertion. An optional vocabulary name and reference allows the expression of the source name in some given vocabulary context.

This field is implemented through the xsi:type controlled vocabulary extension mechanism. No default vocabulary type has been defined for STIX 1.1.1. Users may either define their own vocabulary using the type extension mechanism, specify a vocabulary name and reference using the attributes, or simply use this as a free string field.

Confidence_Assertion_Chain0..1 ConfidenceAssertionChainType

The Confidence_Assertion_Chain field specifies a set of related confidence levels in this assertion along with who made them, when they were made and how they were made.