Skip to content

Class: StixSocketExtension

The Network Socket extension specifies a default extension for capturing network traffic properties associated with network sockets.

URI: attack:StixSocketExtension

 classDiagram
    class StixSocketExtension
    click StixSocketExtension href "../StixSocketExtension/"
      StixSocketExtension : address_family
        
          
    
        
        
        StixSocketExtension --> "1" StixNetworkSocketAddressFamily : address_family
        click StixNetworkSocketAddressFamily href "../StixNetworkSocketAddressFamily/"
    

        
      StixSocketExtension : is_blocking
        
      StixSocketExtension : is_listening
        
      StixSocketExtension : options
        
          
    
        
        
        StixSocketExtension --> "0..1" StixSocketOptions : options
        click StixSocketOptions href "../StixSocketOptions/"
    

        
      StixSocketExtension : socket_descriptor
        
      StixSocketExtension : socket_handle
        
      StixSocketExtension : socket_type
        
          
    
        
        
        StixSocketExtension --> "0..1" StixNetworkSocketType : socket_type
        click StixNetworkSocketType href "../StixNetworkSocketType/"
    

        
      
Name Cardinality and Range Description Inheritance
address_family 1
StixNetworkSocketAddressFamily
Specifies the address family (AF_*) that the socket is configured for direct
is_blocking 0..1
Boolean
Specifies whether the socket is in blocking mode direct
is_listening 0..1
Boolean
Specifies whether the socket is in listening mode direct
options 0..1
StixSocketOptions
Specifies any options (SO_*) that may be used by the socket, as a dictionary direct
socket_type 0..1
StixNetworkSocketType
Specifies the type of the socket direct
socket_descriptor 0..1
Integer
Specifies the socket file descriptor value associated with the socket, as a n… direct
socket_handle 0..1
Integer
Specifies the handle or inode value associated with the socket direct
property value
stix_extension_name socket-ext
Mapping Type Mapped Value
self attack:StixSocketExtension
native attack:StixSocketExtension
name: StixSocketExtension
annotations:
stix_extension_name:
tag: stix_extension_name
value: socket-ext
description: The Network Socket extension specifies a default extension for capturing
network traffic properties associated with network sockets.
from_schema: https://w3id.org/lmodel/attack
slots:
- address_family
- is_blocking
- is_listening
- options
- socket_type
- socket_descriptor
- socket_handle
slot_usage:
address_family:
name: address_family
required: true
name: StixSocketExtension
annotations:
stix_extension_name:
tag: stix_extension_name
value: socket-ext
description: The Network Socket extension specifies a default extension for capturing
network traffic properties associated with network sockets.
from_schema: https://w3id.org/lmodel/attack
slot_usage:
address_family:
name: address_family
required: true
attributes:
address_family:
name: address_family
description: Specifies the address family (AF_*) that the socket is configured
for.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:address_family
owner: StixSocketExtension
domain_of:
- StixSocketExtension
range: StixNetworkSocketAddressFamily
required: true
is_blocking:
name: is_blocking
description: Specifies whether the socket is in blocking mode.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:is_blocking
owner: StixSocketExtension
domain_of:
- StixSocketExtension
range: boolean
is_listening:
name: is_listening
description: Specifies whether the socket is in listening mode.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:is_listening
owner: StixSocketExtension
domain_of:
- StixSocketExtension
range: boolean
options:
name: options
description: Specifies any options (SO_*) that may be used by the socket, as a
dictionary.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:options
owner: StixSocketExtension
domain_of:
- StixSocketExtension
range: StixSocketOptions
inlined: true
socket_type:
name: socket_type
description: Specifies the type of the socket.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:socket_type
owner: StixSocketExtension
domain_of:
- StixSocketExtension
range: StixNetworkSocketType
socket_descriptor:
name: socket_descriptor
description: Specifies the socket file descriptor value associated with the socket,
as a non-negative integer.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:socket_descriptor
owner: StixSocketExtension
domain_of:
- StixSocketExtension
range: integer
minimum_value: 0
socket_handle:
name: socket_handle
description: Specifies the handle or inode value associated with the socket.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:socket_handle
owner: StixSocketExtension
domain_of:
- StixSocketExtension
range: integer