Assessment

The Assessment class is used to provide the analyzer's assessment of an event -- its impact, actions taken in response, and confidence.

Assessment Assessment Assessment Impact Impact [ENUM] severity (Optional) [ENUM] completion (Optional) [ENUM] type (Optional) Assessment->Impact 0..1 Action Action [ENUM] category () Assessment->Action 0..* Confidence Confidence [ENUM] rating () Assessment->Confidence 0..1

digraph Assessment { graph [rankdir=LR]; node [label="\N"]; graph [bb="0,0,404,220"]; Assessment [label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Assessment.html" TITLE="The Assessment class is used to provide the analyzer&#39;s assessment of an event -- its impact, actions taken in response, and confidence. ">Assessment</td> </tr>" %</table>>, shape=plaintext, pos="53,90", width="1.4444", height="0.5"]; Impact [label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="The Impact class is used to provide the analyzer&#39;s assessment of the impact of the event on the target(s). It is represented in the IDMEF DTD as follows: ">Impact</td> </tr>" %<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] severity (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] completion (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="value is &quot;other&quot;. (See also Section 10.)">[ENUM] type (Optional) </td></tr>%</table>>, shape=plaintext, pos="287,176", width="3.25", height="1.2361"]; Action [label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Action.html" TITLE="The Action class is used to describe any actions taken by the analyzer in response to the event. Is is represented in the IDMEF DTD as follows: ">Action</td> </tr>" %<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Action.html" TITLE="The default value is &quot;other&quot;. (See also Section 10.)">[ENUM] category () </td></tr>%</table>>, shape=plaintext, pos="287,90", width="2.2222", height="0.68056"]; Confidence [label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Confidence.html" TITLE="The Confidence class is used to represent the analyzer&#39;s best estimate of the validity of its analysis. It is represented in the IDMEF DTD as follows: ">Confidence</td> </tr>" %<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Confidence.html" TITLE="also Section 10.)">[ENUM] rating () </td></tr>%</table>>, shape=plaintext, pos="287,24", width="1.9444", height="0.68056"]; Assessment -> Impact [label="0..1", pos="e,169.56,132.84 102.05,108.03 119.25,114.35 139.45,121.77 160.06,129.35", lp="138,133.5"]; Assessment -> Action [label="0..*", pos="e,206.62,90 105.51,90 132.27,90 165.57,90 196.31,90", lp="138,98.5"]; Assessment -> Confidence [label="0..1", pos="e,216.32,43.212 105.7,74.297 111.86,72.494 118.07,70.696 124,69 150.78,61.343 180.1,53.181 206.4,45.939", lp="138,77.5"]; }


Aggregates

Impact (0..1)

The analyzer's assessment of the impact of the event on the target(s).

Action (0..*)

The action(s) taken by the analyzer in response to the event.

Confidence (0..1)

A measurement of the confidence the analyzer has in its evaluation of the event.



IDMEF


IODEF