campaign and the content it contains. Note that data handling markings can also be specified at a higher level. Related_Packages stixCommon: RelatedPackagesRefsType 0..1 The Related_Packages property specifies a set of one or more STIX Packages that are related to the Campaign. DEPRECATED: This property is deprecated and will be removed in the next major version of STIX. Its use is strongly discouraged except for legacy applications. CampaignVersionType Enumeration The CampaignVersionType enumeration is an inventory of all versions of the Campaign data model for STIX Version 1.2.1. The enumeration literals are given in Table 32. Table 32. Literals of the CampaignVersionType enumeration Enumeration Literal Description stix-1.2.1 Campaign data model for STIX v1.2.1 NamesType Class The NamesType class specifies a set of one or more names used to identify the Campaign. Note that an equivalent NamesType class is defined in the STIX Common data model; this duplication is due to backward-compatiblity issues and will be corrected in the next major release of STIX. At that time, the campaign:NamesType class will be removed, and Campaign names will be defined via the stixCommon:NamesType class. The property of the NamesType class is shown in Table 33. Table 33. Properties of the NamesType class Name Type Multiplicity Description Name stixCommon: VocabularyStringType 1..* The Name property is used to specify a single name or alias that identifies the Campaign. The content creator may choose any arbitrary value or may constrain the set of possible values by referencing an externally-defined vocabulary or leveraging a formally defined vocabulary extending from the
AssociatedCampaignsType The AssociatedCampaignType class specifies a set of one or more other Campaigns asserted as related to this Campaign and therefore is a relationship. It extends the GenericRelationshipListType superclass defined in the STIX Common data model, which specifies the scope (whether the elements of the set are related individually or as a group). The UML diagram corresponding to the AssociatedCampaignsType class is shown in Figure 36. Figure 36. UML Diagram of the AssociatedCampaignsType class Table 38 shows the properties of the AssociatedCampaignType specialization and is associated with the UML diagram in Figure 36. Table 38. Properties of the AssociatedCampaigns class Name Type Multiplicity Description Associated_Campaign stixCommon:RelatedCampaignType 1..* The Associated_Campaign property specifies another Campaign associated with this Campaign and characterizes the relationship between the Campaigns by capturing information such as the of confidence that the Campaigns are related, the source of the relationship information, and type of the relationship. A relationship between Campaigns may represent assertions of general associativity or different versions of the same Campaign.
Acknowledgments The following individuals have participated in the creation of this specification and are gratefully acknowledged: Participants: Dean Thompson, Australia and New Zealand Banking Group (ANZ Bank) Bret Jordan, Blue Coat Systems, Inc. Adnan Baykal, Center for Internet Security (CIS) Jyoti Verma, Cisco Systems Schiff, Comilion (mobile) Ltd. Jane Ginn, Threat Intelligence Network, Inc. (CTIN) Richard Struse, DHS Office of Cybersecurity and Communications (CS&C) Marlon Taylor, DHS Office of Cybersecurity and Communications (CS&C) David Eilken, Financial Services Information Sharing and Analysis Center (FS-ISAC) Sarah Brown, Fox-IT Ryusuke Masuoka, Fujitsu Limited Eric Burger, Georgetown University Jason Keirstead, IBM Paul Martini, iboss, Inc. Jerome Athias, Individual MacDonald, Individual Alex Pinto, Individual Patrick Maroney, Integrated Networking Technologies, Inc. Wouter Bolsterlee, Intelworks BV Joep Gommers, Intelworks BV Sergey Polzunov, Intelworks BV Rutger Prins, Intelworks BV Andrei Sîrghi, Intelworks BV Raymon van der Velde, Intelworks BV Jonathan MITRE Corporation Sean Barnum, MITRE Corporation Desiree Beck, MITRE Corporation Mark Davidson, MITRE Corporation Ivan Kirillov, Corporation Jon Salwen, Corporation John Wunder, MITRE Corporation Mike Boyle, National Security Agency Jessica Fitzgerald-McKay, National Security Agency Takahiro Kakumaru, NEC Corporation John-Mark Gurney, New Context Services, Inc. Christian Hunt, New Context Services, Inc. Daniel Riedel, New Context Services, Inc. Andrew Storms, New Context Services, Inc. John Tolbert, Queralt, Inc. Igor Baikalov, Securonix Bernd Grobauer, Siemens AG Jonathan Bush, Soltra Aharon Chernin, Soltra Trey Darley, Soltra Paul Dion, Soltra Ali Khan, Soltra Natalie Suarez, Soltra Cedric LeRoux, Splunk Inc. Luger, Splunk Inc.