Showing:

Annotations
Attributes
Diagrams
Facets
Source
Used by
Imported schema scap-core_0.9.xsd
Namespace http://scap.nist.gov/schema/scap-core/1.0
Element control-mappings
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#controlMappingsType_control-mapping scap-core_0_9_xsd.tmp#controlMappingsType
Type controlMappingsType
Children control-mapping
Source
<xsd:element name="control-mappings" type="controlMappingsType"/>
Element controlMappingsType / control-mapping
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#controlMappingType_system-id scap-core_0_9_xsd.tmp#controlMappingType_source scap-core_0_9_xsd.tmp#controlMappingType_last-modified scap-core_0_9_xsd.tmp#controlMappingType_mapping scap-core_0_9_xsd.tmp#controlMappingType
Type controlMappingType
Children mapping
Attributes
QName Type Use
last-modified xsd:dateTime required
source xsd:anyURI required
system-id xsd:anyURI required
Source
<xsd:element name="control-mapping" type="controlMappingType" minOccurs="1" maxOccurs="unbounded"/>
Element controlMappingType / mapping
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#mappingInstanceType_published scap-core_0_9_xsd.tmp#mappingInstanceType
Type mappingInstanceType
Attributes
QName Type Use
published xsd:dateTime required
Source
<xsd:element name="mapping" type="mappingInstanceType" minOccurs="0" maxOccurs="unbounded"/>
Element assessment-check
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#checkSearchType_system scap-core_0_9_xsd.tmp#checkSearchType_name scap-core_0_9_xsd.tmp#checkSearchType scap-core_0_9_xsd.tmp#checkReferenceType_href scap-core_0_9_xsd.tmp#checkReferenceType
Type checkReferenceType
Type hierarchy
Attributes
QName Type Use
href xsd:anyURI required
name xsd:token optional
system xsd:anyURI required
Source
<xsd:element name="assessment-check" type="checkReferenceType"/>
Element cpeReferenceGroup / cpe-name
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#cpeNamePatternType
Type cpeNamePatternType
Facets
pattern [c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%]*){0,6}
Source
<xsd:element name="cpe-name" type="cpeNamePatternType"/>
Element cpeReferenceGroup / cpe-searchable-name
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#cpeSearchableNamePatternType
Type cpeSearchableNamePatternType
Facets
pattern [c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%*]*){0,6}
Source
<xsd:element name="cpe-searchable-name" type="cpeSearchableNamePatternType"/>
Element assessmentMethodType / assessment-check
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
Identifies a check that can be used to detect the vulnerability or misconfiguration
Diagram
Diagram scap-core_0_9_xsd.tmp#checkSearchType_system scap-core_0_9_xsd.tmp#checkSearchType_name scap-core_0_9_xsd.tmp#checkSearchType scap-core_0_9_xsd.tmp#checkReferenceType_href scap-core_0_9_xsd.tmp#checkReferenceType
Type checkReferenceType
Type hierarchy
Attributes
QName Type Use
href xsd:anyURI required
name xsd:token optional
system xsd:anyURI required
Source
<xsd:element name="assessment-check" type="checkReferenceType">
  <xsd:annotation>
    <xsd:documentation>Identifies a check that can be used to detect the vulnerability or misconfiguration</xsd:documentation>
  </xsd:annotation>
</xsd:element>
Element assessmentMethodType / assessment-engine
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
The CPE name of the scanning tool.  A value must be supplied for this element.  The CPE name can be used for a CPE from the NVD.  The CPE title attribute can be used for internal naming conventions. (or both, if possible)
Diagram
Diagram scap-core_0_9_xsd.tmp#cpeNamePatternType
Type cpeNamePatternType
Facets
pattern [c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%]*){0,6}
Source
<xsd:element name="assessment-engine" type="cpeNamePatternType" minOccurs="0" maxOccurs="unbounded">
  <xsd:annotation>
    <xsd:documentation>The CPE name of the scanning tool. A value must be supplied for this element. The CPE name can be used for a CPE from the NVD. The CPE title attribute can be used for internal naming conventions. (or both, if possible)</xsd:documentation>
  </xsd:annotation>
</xsd:element>
Element assessment-method
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#assessmentMethodType_assessment-check scap-core_0_9_xsd.tmp#assessmentMethodType_assessment-engine scap-core_0_9_xsd.tmp#assessmentMethodType scap-core_0_9_xsd.tmp#identifyableAssessmentMethodType_id scap-core_0_9_xsd.tmp#identifyableAssessmentMethodType
Type identifyableAssessmentMethodType
Type hierarchy
Children assessment-check, assessment-engine
Attributes
QName Type Use
id xsd:positiveInteger optional
Source
<xsd:element name="assessment-method" type="identifyableAssessmentMethodType"/>
Complex Type controlMappingsType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#controlMappingsType_control-mapping
Used by
Children control-mapping
Source
<xsd:complexType name="controlMappingsType">
  <xsd:sequence>
    <xsd:element name="control-mapping" type="controlMappingType" minOccurs="1" maxOccurs="unbounded"/>
  </xsd:sequence>
</xsd:complexType>
Complex Type controlMappingType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#controlMappingType_system-id scap-core_0_9_xsd.tmp#controlMappingType_source scap-core_0_9_xsd.tmp#controlMappingType_last-modified scap-core_0_9_xsd.tmp#controlMappingType_mapping
Used by
Children mapping
Attributes
QName Type Use
last-modified xsd:dateTime required
source xsd:anyURI required
system-id xsd:anyURI required
Source
<xsd:complexType name="controlMappingType">
  <xsd:sequence>
    <xsd:element name="mapping" type="mappingInstanceType" minOccurs="0" maxOccurs="unbounded"/>
  </xsd:sequence>
  <xsd:attribute name="system-id" type="xsd:anyURI" use="required"/>
  <xsd:attribute name="source" type="xsd:anyURI" use="required"/>
  <xsd:attribute name="last-modified" type="xsd:dateTime" use="required"/>
</xsd:complexType>
Complex Type mappingInstanceType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#mappingInstanceType_published
Type extension of xsd:token
Used by
Attributes
QName Type Use
published xsd:dateTime required
Source
<xsd:complexType name="mappingInstanceType">
  <xsd:simpleContent>
    <xsd:extension base="xsd:token">
      <xsd:attribute name="published" type="xsd:dateTime" use="required"/>
    </xsd:extension>
  </xsd:simpleContent>
</xsd:complexType>
Complex Type checkReferenceType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
Data type for the check element, a checking system specification URI, string content, and an optional external file reference. The checking system specification should be the URI for a particular version of OVAL or a related system testing language, and the content will be an identifier of a test written in that language. The external file reference could be used to point to the file in which the content test identifier is defined.
Diagram
Diagram scap-core_0_9_xsd.tmp#checkSearchType_system scap-core_0_9_xsd.tmp#checkSearchType_name scap-core_0_9_xsd.tmp#checkSearchType scap-core_0_9_xsd.tmp#checkReferenceType_href
Type extension of checkSearchType
Type hierarchy
Used by
Attributes
QName Type Use
href xsd:anyURI required
name xsd:token optional
system xsd:anyURI required
Source
<xsd:complexType name="checkReferenceType">
  <xsd:annotation>
    <xsd:documentation xml:lang="en">Data type for the check element, a checking system specification URI, string content, and an optional external file reference. The checking system specification should be the URI for a particular version of OVAL or a related system testing language, and the content will be an identifier of a test written in that language. The external file reference could be used to point to the file in which the content test identifier is defined.</xsd:documentation>
  </xsd:annotation>
  <xsd:complexContent>
    <xsd:extension base="checkSearchType">
      <xsd:attribute name="href" type="xsd:anyURI" use="required"/>
    </xsd:extension>
  </xsd:complexContent>
</xsd:complexType>
Complex Type checkSearchType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#checkSearchType_system scap-core_0_9_xsd.tmp#checkSearchType_name
Used by
Complex Type checkReferenceType
Attributes
QName Type Use
name xsd:token optional
system xsd:anyURI required
Source
<xsd:complexType name="checkSearchType">
  <xsd:attribute name="system" type="xsd:anyURI" use="required"/>
  <xsd:attribute name="name" type="xsd:token" use="optional"/>
</xsd:complexType>
Simple Type cpeNamePatternType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
Define the format for acceptable CPE Names. An urn format is used with the id starting with the word oval followed by a unique string, followed by the three letter code 'def', and ending with an integer.
Diagram
Diagram
Type restriction of xsd:anyURI
Facets
pattern [c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%]*){0,6}
Used by
Source
<xsd:simpleType name="cpeNamePatternType">
  <xsd:annotation>
    <xsd:documentation xml:lang="en">Define the format for acceptable CPE Names. An urn format is used with the id starting with the word oval followed by a unique string, followed by the three letter code 'def', and ending with an integer.</xsd:documentation>
  </xsd:annotation>
  <xsd:restriction base="xsd:anyURI">
    <xsd:pattern value="[c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%]*){0,6}"/>
  </xsd:restriction>
</xsd:simpleType>
Simple Type cpeSearchableNamePatternType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
Define the format for acceptable
searchableCPE Names.  The URI escaped code '%25' may be used
to represent the character '%' which will be interpreted as a
wildcard.
Diagram
Diagram
Type restriction of xsd:anyURI
Facets
pattern [c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%*]*){0,6}
Used by
Source
<xsd:simpleType name="cpeSearchableNamePatternType">
  <xsd:annotation>
    <xsd:documentation xml:lang="en">Define the format for acceptable searchableCPE Names. The URI escaped code '%25' may be used to represent the character '%' which will be interpreted as a wildcard.</xsd:documentation>
  </xsd:annotation>
  <xsd:restriction base="xsd:anyURI">
    <xsd:pattern value="[c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%*]*){0,6}"/>
  </xsd:restriction>
</xsd:simpleType>
Complex Type searchableCpeReferencesType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#cpeReferenceGroup_cpe-name scap-core_0_9_xsd.tmp#cpeReferenceGroup_cpe-searchable-name scap-core_0_9_xsd.tmp#cpeReferenceGroup
Children cpe-name, cpe-searchable-name
Source
<xsd:complexType name="searchableCpeReferencesType">
  <xsd:sequence>
    <xsd:group ref="cpeReferenceGroup" minOccurs="1" maxOccurs="unbounded"/>
  </xsd:sequence>
</xsd:complexType>
Complex Type assessmentMethodType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
Denotes a scanner and required configuration that is capable of detecting the referenced vulnerability.  May also be an OVAL definition and omit scanner name.
Identifies a tool and any associated information about the tool, such as signature versions, that indicate the tool is capable or properly detecting and/or remdiating the vulnerability or misconfiguration
Diagram
Diagram scap-core_0_9_xsd.tmp#assessmentMethodType_assessment-check scap-core_0_9_xsd.tmp#assessmentMethodType_assessment-engine
Used by
Children assessment-check, assessment-engine
Source
<xsd:complexType name="assessmentMethodType">
  <xsd:annotation>
    <xsd:documentation>Denotes a scanner and required configuration that is capable of detecting the referenced vulnerability. May also be an OVAL definition and omit scanner name.</xsd:documentation>
    <xsd:documentation>Identifies a tool and any associated information about the tool, such as signature versions, that indicate the tool is capable or properly detecting and/or remdiating the vulnerability or misconfiguration</xsd:documentation>
  </xsd:annotation>
  <xsd:sequence>
    <xsd:element name="assessment-check" type="checkReferenceType">
      <xsd:annotation>
        <xsd:documentation>Identifies a check that can be used to detect the vulnerability or misconfiguration</xsd:documentation>
      </xsd:annotation>
    </xsd:element>
    <xsd:element name="assessment-engine" type="cpeNamePatternType" minOccurs="0" maxOccurs="unbounded">
      <xsd:annotation>
        <xsd:documentation>The CPE name of the scanning tool. A value must be supplied for this element. The CPE name can be used for a CPE from the NVD. The CPE title attribute can be used for internal naming conventions. (or both, if possible)</xsd:documentation>
      </xsd:annotation>
    </xsd:element>
  </xsd:sequence>
</xsd:complexType>
Complex Type identifyableAssessmentMethodType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#assessmentMethodType_assessment-check scap-core_0_9_xsd.tmp#assessmentMethodType_assessment-engine scap-core_0_9_xsd.tmp#assessmentMethodType scap-core_0_9_xsd.tmp#identifyableAssessmentMethodType_id
Type extension of assessmentMethodType
Type hierarchy
Used by
Children assessment-check, assessment-engine
Attributes
QName Type Use
id xsd:positiveInteger optional
Source
<xsd:complexType name="identifyableAssessmentMethodType">
  <xsd:complexContent>
    <xsd:extension base="assessmentMethodType">
      <xsd:attribute name="id" type="xsd:positiveInteger"/>
    </xsd:extension>
  </xsd:complexContent>
</xsd:complexType>
Simple Type cpeNamePVPVPatternType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
Define the format for acceptable CPE Names. A URN format is used with the id starting with the word cpe followed by :/ and then some number of individual  components separated by colons.
Diagram
Diagram scap-core_0_9_xsd.tmp#cpeNamePatternType
Type restriction of cpeNamePatternType
Type hierarchy
Facets
pattern ([c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9._\-~%]*){0,6}) & ([c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){3,6})
Source
<xsd:simpleType name="cpeNamePVPVPatternType">
  <xsd:annotation>
    <xsd:documentation xml:lang="en-US">Define the format for acceptable CPE Names. A URN format is used with the id starting with the word cpe followed by :/ and then some number of individual components separated by colons.</xsd:documentation>
  </xsd:annotation>
  <xsd:restriction base="cpeNamePatternType">
    <xsd:pattern value="[c][pP][eE]:/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){3,6}"/>
  </xsd:restriction>
</xsd:simpleType>
Simple Type cpeComponentPatternType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
The name pattern of a CPE component.
Diagram
Diagram
Type restriction of xsd:token
Facets
pattern [A-Za-z0-9._\-~]*
Used by
Source
<xsd:simpleType name="cpeComponentPatternType">
  <xsd:annotation>
    <xsd:documentation>The name pattern of a CPE component.</xsd:documentation>
  </xsd:annotation>
  <xsd:restriction base="xsd:token">
    <xsd:pattern value="[A-Za-z0-9._\-~]*"/>
  </xsd:restriction>
</xsd:simpleType>
Simple Type cpePartComponentPatternType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Annotations
The name pattern of the CPE part component.
Diagram
Diagram scap-core_0_9_xsd.tmp#cpeComponentPatternType
Type restriction of cpeComponentPatternType
Type hierarchy
Facets
pattern ([A-Za-z0-9._\-~]*) & ([hoaHOA])
Source
<xsd:simpleType name="cpePartComponentPatternType">
  <xsd:annotation>
    <xsd:documentation>The name pattern of the CPE part component.</xsd:documentation>
  </xsd:annotation>
  <xsd:restriction base="cpeComponentPatternType">
    <xsd:pattern value="[hoaHOA]"/>
  </xsd:restriction>
</xsd:simpleType>
Simple Type cweNamePatternType
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram
Type restriction of xsd:token
Facets
pattern CWE-[1-9]\d{0,5}
Source
<xsd:simpleType name="cweNamePatternType">
  <xsd:restriction base="xsd:token">
    <xsd:pattern value="CWE-[1-9]\d{0,5}"/>
  </xsd:restriction>
</xsd:simpleType>
Attribute mappingInstanceType / @published
Namespace No namespace
Type xsd:dateTime
Used by
Complex Type mappingInstanceType
Source
<xsd:attribute name="published" type="xsd:dateTime" use="required"/>
Attribute controlMappingType / @system-id
Namespace No namespace
Type xsd:anyURI
Used by
Complex Type controlMappingType
Source
<xsd:attribute name="system-id" type="xsd:anyURI" use="required"/>
Attribute controlMappingType / @source
Namespace No namespace
Type xsd:anyURI
Used by
Complex Type controlMappingType
Source
<xsd:attribute name="source" type="xsd:anyURI" use="required"/>
Attribute controlMappingType / @last-modified
Namespace No namespace
Type xsd:dateTime
Used by
Complex Type controlMappingType
Source
<xsd:attribute name="last-modified" type="xsd:dateTime" use="required"/>
Attribute checkSearchType / @system
Namespace No namespace
Type xsd:anyURI
Used by
Complex Type checkSearchType
Source
<xsd:attribute name="system" type="xsd:anyURI" use="required"/>
Attribute checkSearchType / @name
Namespace No namespace
Type xsd:token
Used by
Complex Type checkSearchType
Source
<xsd:attribute name="name" type="xsd:token" use="optional"/>
Attribute checkReferenceType / @href
Namespace No namespace
Type xsd:anyURI
Used by
Complex Type checkReferenceType
Source
<xsd:attribute name="href" type="xsd:anyURI" use="required"/>
Attribute identifyableAssessmentMethodType / @id
Namespace No namespace
Type xsd:positiveInteger
Used by
Source
<xsd:attribute name="id" type="xsd:positiveInteger"/>
Element Group cpeReferenceGroup
Namespace http://scap.nist.gov/schema/scap-core/1.0
Diagram
Diagram scap-core_0_9_xsd.tmp#cpeReferenceGroup_cpe-name scap-core_0_9_xsd.tmp#cpeReferenceGroup_cpe-searchable-name
Used by
Children cpe-name, cpe-searchable-name
Source
<xsd:group name="cpeReferenceGroup">
  <xsd:choice>
    <xsd:element name="cpe-name" type="cpeNamePatternType"/>
    <xsd:element name="cpe-searchable-name" type="cpeSearchableNamePatternType"/>
  </xsd:choice>
</xsd:group>