Captures prose information about an individual attack pattern as well as a CAPEC reference.
In addition to capturing basic information, this type is intended to be extended to enable the structured description of an attack pattern instance using the XML Schema extension feature. The STIX default extension uses the Common Attack Pattern Enumeration and Classification (CAPEC) schema to do so. The extension that defines this is captured in the CAPEC2.7InstanceType in the http://stix.mitre.org/extensions/AP#CAPEC2.7-1 namespace. This type is defined in the extensions/attack_pattern/capec_2.7_attack_pattern.xsd file or at the URL http://stix.mitre.org/XMLSchema/extensions/attack_pattern/capec_2.7/1.0.1/capec_2.7_attack_pattern.xsd.
| Field Name | Type | Description |
|---|---|---|
| @idoptional | QName |
Specifies a unique ID for this Attack Pattern. |
| @idrefoptional | QName |
Specifies a reference to the ID for this Attack Pattern specified elsewhere. |
| @capec_idoptional | @capec_idInlineType |
This field specifies a reference to a particular entry within the Common Attack Pattern Enumeration and Classification (CAPEC) |
| Title0..1 | string |
The Title field provides a simple title for an individual Attack Pattern. |
| Description0..n | StructuredTextType |
The Description field is optional and provides an unstructured, text description of an individual Attack Pattern. |
| Short_Description0..n | StructuredTextType |
The Short_Description field is optional and provides a short, unstructured, text description of an individual Attack Pattern. |
