An ontology-based approach to information systems security management

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3685 LNCS, Issue , 2005, Pages 151-164

  Tsoumas, Bill ^a   Dritsas, Stelios ^a   Gritzalis, Dimitris ^a  

^a ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

Author keywords

IS Security; Security Management; Security Ontology; Security Policy

Indexed keywords

CONTROL SYSTEMS; IDENTIFICATION (CONTROL SYSTEMS); KNOWLEDGE BASED SYSTEMS; SECURITY OF DATA; STANDARDS;

IS SECURITY; SECURITY MANAGEMENT; SECURITY ONTOLOGY; SECURITY POLICY;

INFORMATION THEORY;

EID: 33646150432     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11560326_12     Document Type: Conference Paper

References (44)

1. Karygiannis T., Owens L., Wireless Network Security: 802.11, Bluetooth and Handheld Devices, NIST Special Publication no. 800-48, US Dept. of Commerce, USA 2002.
2. PAMPAS ("Pioneering Advanced Mobile Privacy and Security") Project, EU-1ST-2001-37763, Final Roadmap, Deliverable D4, www.pampas.eu.org/, May 2003.
3. DMTF CIM Policy Model v. 2.81, available at http://www.dmtf.org/ standards/published_documents.php (Feb. 2005).
4. Clemente F., Perez G., Blaya J., Skarmeta A., Representing Security Policies in Web Information Systems, Policy Management for the Web - WWW2005 Workshop, 14th International World Wide Web Conference, May 2005, Chiba, Japan.
5. Gruber T., "Toward principles for the design of ontologies used for knowledge sharing". In Formal Ontology in Conceptual Analysis and Knowledge Representation, Kluwer Academic Publishers, 1993.
6. Decker S., et al., "Ontobroker: Ontology based access to distributed and semi-structured information". In R. Meersman et al. (Eds.), DS-8: Semantic Issues in Multimedia Systems. Kluwer Academic Publishers, 1999.
7. Damianou N. et al., "The Ponder Policy Specification Language". In Workshop on Policies for Distributed Systems and Networks, Springer-Verlag LNCS 1995, 2001, pp. 18-39.
8. ISO/IEC 17799 (2000-12-01), Information technology - Code of practice for information security management, ISO.
9. COBIT 3rd Edition Control Objectives, IT Governance Institute, 2000.
10. BSI, IT Baseline Protection Manual, Germany available at http://www.bsi.bund.de/english/index.htm (Mar. 2005).
11. Cisco Security Advisories, http://www.cisco.com/go/psirt/ (Mar. 2005).
12. SecurityFocus security portal, (http://www.securityfocus.com (Mar. 2005).
13. Seclists. Org Security Mailing List Archive (http://seclists.org (Mar. 2005).
14. Common Vulnerabilities and Exposures (http://www.cve.mitre.org/ (Mar. 2005).
15. OVAL - Open Vulnerability Assessment Language (http://oval.mitre.org/) (Mar. 2005)
16. Cunningham H., et al., "GATE: A Framework and Graphical Development Environment for Robust NLP Tools and Applications". Proc. of the 40th meeting of the Association for Computational Linguistics (ACL'02). USA, July 2002.
17. Bontcheva K., et al., Evolving GATE to Meet New Challenges in Language Engineering. Natural Language Engineering (to appear).
18. Dean M., et al., OWL Web Ontology Language Reference W3C Recommendation, http://www.w3.org/TR/owl-ref/ (Mar. 2005)
19. Noy N., McGuiness D., "Ontology Development 101: A Guide to Creating Your First Ontology", Stanford Knowledge Systems Laboratory Technical Report KSL-01-05 and Stanford Medical Informatics Technical Report SMI-2001-0880, March 2001.
20. Holsapple C., Joshi K., "A collaborative approach to ontology design", Com. of the ACM, 45(2):42-47, 2002.
21. British Standard 7799, Part 2 (1999), Information Technology - Specification for Information Security Management System, BSI.
22. Standards Australia and Standards New Zealand, Australian/New Zealand Standard for Risk Management 4360 (1999).
23. ISO/IEC 15408-1, 2, 3:1999 Information technology - Security techniques - Evaluation criteria for IT security - Part 1: Introduction and general model, Part 2: Security functional requirements, Part 3: Security assurance requirements.
24. Nmap scanner, available at http://www.insecure.org/nmap (Mar. 2005).
25. Netstumbler 802.11 network scanner, available at http://www.stumbler.net (Mar. 2005).
26. Protégé Ontology Development Environment, at http://protege.stanford.edu/ (Mar. 2005)
27. Andrea Westerinen, Julie Schott "Implementation of the CIM Policy Model Using PONDER", 5th IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY 2004), 7-9 June 2004, Yorktown Heights, NY, USA. IEEE Computer Society 2004, ISBN 0-7695-2141-X
28. L. Lymberopoulos, E. C. Lupu, M. S. Sloman "Ponder Policy Implementation and Validation in a CIM and Differentiated Services Framework". Presented at NOMS 2004, Seoul, April 2004.
29. Oscar Diaz Alcantara, Morris Sloman, "QoS policy specification - A mapping from Ponder to the IETF", Department of Computing, Imperial College, 180 Queen's Gate, London SW7 2BZ,
30. Hewlett-Packard, A Primer on Policy-based Network Management, September 14, 1999.
31. ANSI INCITS 359-2004, "Information Technology - Role Based Access Control", 2004.
32. Hegering H.-G., Abeck S., Neumair B., Integrated Management of Network Systems: Concepts, Architectures and Their Operational Application, 1999: Kaufmann Publ.
33. Donner M., "Toward a Security Ontology", In IEEE Security and Privacy, Vol. 1, No. 3, pp. 6-7, May 2003.
34. Denker G., Access Control and Data Integrity for DAML+OIL and DAML-S, SRI International, USA, 2002.
35. Denker G., Security Mark-up and Rules, SRI International, CAIn: Dagstuhl Seminar on Rule Markup Techniques, 2002.
36. OASIS Security Service TC. Security Assertion Markup Language (SAML), http://www.oasis-open.org/committees/security/ (Mar. 2005)
37. Bozsak E., Ehrig M., Handschuh S., Hotho J., "KAON - Towards a Large Scale Semantic Web", in: Bauknecht, K., et al. (Eds.): Proc. of the 3rd International Conference on e-Commerce and Web Technologies, EC-WEB-2002, 2002, pp. 304-313.
38. Kagal L., et al., "A policy language for a pervasive computing environment". In 4th IEEE International Workshop on Policies for Distributed Systems and Networks, 2003.
39. Raskin V., et al., "Ontology in Information Security: A Useful Theoretical Foundation and Methodological Tool". In V. Raskin, et al. (Eds.), Proc. of the New Security Paradigms Workshop, ACM, USA, 2001.
40. Uszok A., et al., "KAoS: A Policy and Domain Services Framework for Grid Computing and Semantic Web Services", Proc. of the Second International Conference on Trust Management, 2004.
41. nd International Semantic Web Conference, 2003.
42. Gandon F. L., Sadeh M. N., "Semantic web technologies to reconcile privacy and context awareness". Web Semantics Journal, 1 (3), 2004.
43. Chen H., et al., "SOUPA: Standard ontology for ubiquitous and pervasive applications", Proc. of the First International Conference on Mobile and Ubiquitous Systems: Networking and Services, 2004.
44. XACML Specification (2003), eXtensible Access Control Markup Language, v. 1.1, available at http://www.oasis-open.org (Mar. 2005).