The stix:Incident class should have ObjectProperty assertions for AttackerActivity, DefenderActivity, and InformatioImpact objects

[rhohimer]

The semantic extension for Incident will need to have new class definitions for AttackerActivity, DefenderActivity, and InformationImpact. Additionally, the ObjectProperties will need to be added.

• hasAttackerActivity some AttackActivity
• hasDefenderActivity some DefenderActivity
• hasInformationImpact some InformationImpact

These assertions best fit in semex.owl (semantic extension)

These modifications should be committed to the "threat-incident-extensions" branch.

[rhohimer]

I have added the new object types to the semex.owl file.

I will add the object properties to this file as well. The question I had/have is about "where" the new class should be asserted. Up until now all proposed or new class have be asserted in tac.owl. However, these are object referenced in the proposed CTI-TC extension of Incident.

[rhohimer]

Object Properties: