A NetFlowSecurityEvent is a capture of IP traffic between two end hosts. The number of packets, number of bytes, and other characteristics about the flow are captured, so further analysis can be performed with other inputs to determine malicious activity.

Attributes
SecurityEventEndpoint	_securityEventEndpoint
String	flags	Flags set in packet headers
Integer	numberOfBytes	Total number of bytes captured in a network flow
Integer	numberOfPackets	Total number of packets in the network flow
Integer	protocol	Integer number of the protocol used in the network flow.

Attributes inherited from  SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Event ABE::SecurityEvent

_securityEvent,  _securityEvent1,  _eventSpecification,  _securityEventCollectionMethod,  _securityVulnerability,  _securityIncident,  comments,  validFor

Attributes inherited from  SID Models::Common Domain::Root Business Entities ABE::Entity

_entityIdentification,  _entityRole,  managedEntity,  characteristicValue

Attributes inherited from  SID Models::Common Domain::Root Business Entities ABE::RootEntity

_rootEntityType,  _revenueAssuranceParmValue,  _characteristicValue,  name,  description,  ID,  metric,  _monitoredMetricInstancesCriteria,  directedEdge,  vertex,  entityCatalogItem,  rootEntityGroupMember,  rootEntityGroup,  rootEntityRelationship,  rootEntityRelationship2,  associationRole,  entitySpecificationAttachment,  interactionUseCase,  interactionResult

 _securityEventEndpoint

Public SecurityEventEndpoint _securityEventEndpoint

Constraints:

Properties:

Aggregation	None
Alias
Association	SecurityEventEndpointsInvolvedInNetFlowSecurityEvent
Association End
Class	NetFlowSecurityEvent
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..2
Name	_securityEventEndpoint
Name Expression
Namespace	NetFlowSecurityEvent
Opposite	_netFlowSecurityEvent
Owner	NetFlowSecurityEvent
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Event ABE::NetFlowSecurityEvent::_securityEventEndpoint
Stereotype
Template Parameter
Type	SecurityEventEndpoint
Upper	2
Upper Value	(2)
Visibility	Public

 flags

Public String flags

Flags set in packet headers

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	NetFlowSecurityEvent
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..1
Name	flags
Name Expression
Namespace	NetFlowSecurityEvent
Opposite
Owner	NetFlowSecurityEvent
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Event ABE::NetFlowSecurityEvent::flags
Stereotype	required
Template Parameter
Type	String
Upper	1
Upper Value	(1)
Visibility	Public

 numberOfBytes

Public Integer numberOfBytes

Total number of bytes captured in a network flow

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	NetFlowSecurityEvent
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..1
Name	numberOfBytes
Name Expression
Namespace	NetFlowSecurityEvent
Opposite
Owner	NetFlowSecurityEvent
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Event ABE::NetFlowSecurityEvent::numberOfBytes
Stereotype
Template Parameter
Type	Integer
Upper	1
Upper Value	(1)
Visibility	Public

 numberOfPackets

Public Integer numberOfPackets

Total number of packets in the network flow

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	NetFlowSecurityEvent
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..1
Name	numberOfPackets
Name Expression
Namespace	NetFlowSecurityEvent
Opposite
Owner	NetFlowSecurityEvent
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Event ABE::NetFlowSecurityEvent::numberOfPackets
Stereotype
Template Parameter
Type	Integer
Upper	1
Upper Value	(1)
Visibility	Public

 protocol

Public Integer protocol

Integer number of the protocol used in the network flow.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	NetFlowSecurityEvent
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..1
Name	protocol
Name Expression
Namespace	NetFlowSecurityEvent
Opposite
Owner	NetFlowSecurityEvent
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Event ABE::NetFlowSecurityEvent::protocol
Stereotype
Template Parameter
Type	Integer
Upper	1
Upper Value	(1)
Visibility	Public