Assessment

The Assessment class is used to provide the analyzer's assessment of an event -- its impact, actions taken in response, and confidence.

Assessment Assessment Assessment Impact Impact [ENUM] severity (Optional) [ENUM] completion (Optional) [ENUM] type (Optional) Assessment->Impact 0..1 Action Action [ENUM] category () Assessment->Action 0..* Confidence Confidence [ENUM] rating () Assessment->Confidence 0..1

digraph Assessment { graph [bb="0,0,346,228", rankdir=LR ]; node [label="\N"]; Assessment [height=0.5, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Assessment.html" TITLE="The Assessment class is used to provide the analyzer&#39;s assessment of an event -- its impact, actions taken in response, and confidence. ">Assessment</td> </tr>" %</table>>, pos="43.5,93", shape=plaintext, width=1.2083]; Impact [height=1.2778, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="The Impact class is used to provide the analyzer&#39;s assessment of the impact of the event on the target(s). It is represented in the IDMEF DTD as follows: ">Impact</td> </tr>" %<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] severity (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] completion (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="value is &quot;other&quot;. (See also Section 10.)">[ENUM] type (Optional) </td></tr>%</table>>, pos="245.5,182", shape=plaintext, width=2.7917]; Assessment -> Impact [label="0..1", lp="116,136.5", pos="e,144.95,137.7 84.973,111.01 99.844,117.63 117.48,125.47 135.5,133.5"]; Action [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Action.html" TITLE="The Action class is used to describe any actions taken by the analyzer in response to the event. Is is represented in the IDMEF DTD as follows: ">Action</td> </tr>" %<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Action.html" TITLE="The default value is &quot;other&quot;. (See also Section 10.)">[ENUM] category () </td></tr>%</table>>, pos="245.5,93", shape=plaintext, width=1.9306]; Assessment -> Action [label="0..*", lp="116,100.5", pos="e,175.71,93 87.405,93 110.2,93 138.95,93 165.61,93"]; Confidence [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Confidence.html" TITLE="The Confidence class is used to represent the analyzer&#39;s best estimate of the validity of its analysis. It is represented in the IDMEF DTD as follows: ">Confidence</td> </tr>" %<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Confidence.html" TITLE="also Section 10.)">[ENUM] rating () </td></tr>%</table>>, pos="245.5,25", shape=plaintext, width=1.7222]; Assessment -> Confidence [label="0..1", lp="116,78.5", pos="e,183.45,45.756 87.405,78.412 112.57,69.857 144.98,58.837 173.82,49.03"]; }


Aggregates

Impact (0..1)

The analyzer's assessment of the impact of the event on the target(s).

Action (0..*)

The action(s) taken by the analyzer in response to the event.

Confidence (0..1)

A measurement of the confidence the analyzer has in its evaluation of the event.



IDMEF


IODEF