Assessment

The Assessment class is used to provide the analyzer's assessment of an event -- its impact, actions taken in response, and confidence.

Assessment Assessment Assessment Impact Impact [ENUM] severity (Optional) [ENUM] completion (Optional) [ENUM] type (Optional) Assessment->Impact 0..1 Action Action [ENUM] category () Assessment->Action 0..* Confidence Confidence [ENUM] rating () Assessment->Confidence 0..1

digraph Assessment { graph [bb="0,0,360,228", rankdir=LR ]; node [label="\N"]; Assessment [height=0.5, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#cc6a51" HREF="/idmef_parser/IDMEFv2/Assessment.html" TITLE="The Assessment class is used to provide the analyzer&#39;s assessment of an event -- its impact, actions taken in response, and confidence. "><FONT FACE="Nimbus Sans L">Assessment</FONT></td> </tr>" %</table>>, pos="48.5,93", shape=plaintext, width=1.3472]; Impact [height=1.2778, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#cc6a51" HREF="/idmef_parser/IDMEFv2/Impact.html" TITLE="The Impact class is used to provide the analyzer&#39;s assessment of the impact of the event on the target(s). It is represented in the IDMEF DTD as follows: "><FONT FACE="Nimbus Sans L">Impact</FONT></td> </tr>" %<tr><td BGCOLOR="#ff8465" HREF="/idmef_parser/IDMEFv2/Impact.html" TITLE="Section 10.)"><FONT FACE="Nimbus Sans L">[ENUM] severity (Optional)</FONT></td></tr>%<tr><td BGCOLOR="#ff8465" HREF="/idmef_parser/IDMEFv2/Impact.html" TITLE="Section 10.)"><FONT FACE="Nimbus Sans L">[ENUM] completion (Optional)</FONT></td></tr>%<tr><td BGCOLOR="#ff8465" HREF="/idmef_parser/IDMEFv2/Impact.html" TITLE="value is &quot;other&quot;. (See also Section 10.)"><FONT FACE="Nimbus Sans L">[ENUM] type (Optional)</FONT></td></tr>%</table>>, pos="258,182", shape=plaintext, width=2.8333]; Assessment -> Impact [label="0..1", lp="126.5,136.5", pos="e,155.91,138.63 90.895,111.01 107.2,117.94 126.68,126.21 146.48,134.63"]; Action [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#cc6a51" HREF="/idmef_parser/IDMEFv2/Action.html" TITLE="The Action class is used to describe any actions taken by the analyzer in response to the event. Is is represented in the IDMEF DTD as follows: "><FONT FACE="Nimbus Sans L">Action</FONT></td> </tr>" %<tr><td BGCOLOR="#ff8465" HREF="/idmef_parser/IDMEFv2/Action.html" TITLE="The default value is &quot;other&quot;. (See also Section 10.)"><FONT FACE="Nimbus Sans L">[ENUM] category ()</FONT></td></tr>%</table>>, pos="258,93", shape=plaintext, width=1.9306]; Assessment -> Action [label="0..*", lp="126.5,100.5", pos="e,188.24,93 97.09,93 121.1,93 150.7,93 177.93,93"]; Confidence [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#cc6a51" HREF="/idmef_parser/IDMEFv2/Confidence.html" TITLE="The Confidence class is used to represent the analyzer&#39;s best estimate of the validity of its analysis. It is represented in the IDMEF DTD as follows: "><FONT FACE="Nimbus Sans L">Confidence</FONT></td> </tr>" %<tr><td BGCOLOR="#ff8465" HREF="/idmef_parser/IDMEFv2/Confidence.html" TITLE="also Section 10.)"><FONT FACE="Nimbus Sans L">[ENUM] rating ()</FONT></td></tr>%</table>>, pos="258,25", shape=plaintext, width=1.6806]; Assessment -> Confidence [label="0..1", lp="126.5,78.5", pos="e,197.3,44.703 97.09,77.229 123.91,68.522 157.71,57.551 187.4,47.914"]; }


Aggregates

Impact (0..1)

The analyzer's assessment of the impact of the event on the target(s).

Action (0..*)

The action(s) taken by the analyzer in response to the event.

Confidence (0..1)

A measurement of the confidence the analyzer has in its evaluation of the event.



IDMEFv1


IDMEFv2


IODEFv1


IODEFv2