Class: StixSocketExtension
The Network Socket extension specifies a default extension for capturing network traffic properties associated with network sockets.
URI: attack:StixSocketExtension
classDiagram
class StixSocketExtension
click StixSocketExtension href "../StixSocketExtension/"
StixSocketExtension : address_family
StixSocketExtension --> "1" StixNetworkSocketAddressFamily : address_family
click StixNetworkSocketAddressFamily href "../StixNetworkSocketAddressFamily/"
StixSocketExtension : is_blocking
StixSocketExtension : is_listening
StixSocketExtension : options
StixSocketExtension --> "0..1" StixSocketOptions : options
click StixSocketOptions href "../StixSocketOptions/"
StixSocketExtension : socket_descriptor
StixSocketExtension : socket_handle
StixSocketExtension : socket_type
StixSocketExtension --> "0..1" StixNetworkSocketType : socket_type
click StixNetworkSocketType href "../StixNetworkSocketType/"
| Name | Cardinality and Range | Description | Inheritance |
|---|---|---|---|
| address_family | 1 StixNetworkSocketAddressFamily |
Specifies the address family (AF_*) that the socket is configured for | direct |
| is_blocking | 0..1 Boolean |
Specifies whether the socket is in blocking mode | direct |
| is_listening | 0..1 Boolean |
Specifies whether the socket is in listening mode | direct |
| options | 0..1 StixSocketOptions |
Specifies any options (SO_*) that may be used by the socket, as a dictionary | direct |
| socket_type | 0..1 StixNetworkSocketType |
Specifies the type of the socket | direct |
| socket_descriptor | 0..1 Integer |
Specifies the socket file descriptor value associated with the socket, as a n… | direct |
| socket_handle | 0..1 Integer |
Specifies the handle or inode value associated with the socket | direct |
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Annotations
Section titled “Annotations”| property | value |
|---|---|
| stix_extension_name | socket-ext |
Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | attack:StixSocketExtension |
| native | attack:StixSocketExtension |
LinkML Source
Section titled “LinkML Source”Direct
Section titled “Direct”name: StixSocketExtensionannotations: stix_extension_name: tag: stix_extension_name value: socket-extdescription: The Network Socket extension specifies a default extension for capturing network traffic properties associated with network sockets.from_schema: https://w3id.org/lmodel/attackslots:- address_family- is_blocking- is_listening- options- socket_type- socket_descriptor- socket_handleslot_usage: address_family: name: address_family required: trueInduced
Section titled “Induced”name: StixSocketExtensionannotations: stix_extension_name: tag: stix_extension_name value: socket-extdescription: The Network Socket extension specifies a default extension for capturing network traffic properties associated with network sockets.from_schema: https://w3id.org/lmodel/attackslot_usage: address_family: name: address_family required: trueattributes: address_family: name: address_family description: Specifies the address family (AF_*) that the socket is configured for. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:address_family owner: StixSocketExtension domain_of: - StixSocketExtension range: StixNetworkSocketAddressFamily required: true is_blocking: name: is_blocking description: Specifies whether the socket is in blocking mode. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:is_blocking owner: StixSocketExtension domain_of: - StixSocketExtension range: boolean is_listening: name: is_listening description: Specifies whether the socket is in listening mode. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:is_listening owner: StixSocketExtension domain_of: - StixSocketExtension range: boolean options: name: options description: Specifies any options (SO_*) that may be used by the socket, as a dictionary. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:options owner: StixSocketExtension domain_of: - StixSocketExtension range: StixSocketOptions inlined: true socket_type: name: socket_type description: Specifies the type of the socket. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:socket_type owner: StixSocketExtension domain_of: - StixSocketExtension range: StixNetworkSocketType socket_descriptor: name: socket_descriptor description: Specifies the socket file descriptor value associated with the socket, as a non-negative integer. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:socket_descriptor owner: StixSocketExtension domain_of: - StixSocketExtension range: integer minimum_value: 0 socket_handle: name: socket_handle description: Specifies the handle or inode value associated with the socket. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:socket_handle owner: StixSocketExtension domain_of: - StixSocketExtension range: integer