Towards an ontology-based security management

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn 1, Issue , 2006, Pages 985-990

  Tsoumas, Bill ^a   Gritzalis, Dimitris ^a  

^a ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

Author keywords

Risk assessment; Security knowledge; Security management; Security ontology

Indexed keywords

COMPUTATIONAL COMPLEXITY; DATABASE SYSTEMS; INTEROPERABILITY; KNOWLEDGE BASED SYSTEMS; MANAGEMENT INFORMATION SYSTEMS;

INFORMATION SYSTEM (IS); SECURITY KNOWLEDGE; SECURITY MANAGEMENT; SECURITY ONTOLOGY;

SECURITY OF DATA;

EID: 33751088049     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2006.329     Document Type: Conference Paper

References (38)

1. British Standard 7799, Part 2 (1999), Information Technology - Specification for Information Security Management System, BSI.
2. DMTF CIM Policy Model v. 2.81, available at www.dmtf.org (Feb. 2005).
3. Gruber T., "Toward principles for the design of ontologies used for knowledge sharing". In Formal Ontology in Conceptual Analysis and Knowledge Representation, Kluwer Academic Publishers, 1993.
4. th International World Wide Web Conference, May 2005, Japan.
5. ISO/IEC17799, Information technology - Code of practice for information security management, ISO.
6. Standards Australia and Standards New Zealand, Australian/New Zealand Standard for Risk Management 4360 (1999).
7. United Kingdom Central Computer and Telecommunication Agency. CCTA Risk Analysis and Management Method: User Manual, ver. 3.0. HMSO.
8. Noy N., McGuiness D., "Ontology Development 101: A Guide to Creating Your First Ontology", Stanford Knowledge Systems Laboratory Technical Report KSL-01-05.
9. Holsapple C., Joshi K., "A collaborative approach to ontology design", Com. of the ACM, 45(2):42-47, 2002.
10. rd International Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security, September 2005, Russia.
11. Quirolgico S., Assis A., Westerinen A., Baskey M., Stokes E., "Toward a Formal Common Information Model Ontology", in Proc. of WISE, pp 11-21, 2004.
12. Protégé Ontology Development Environment, available at http://protege.stanford.edu/ (Sep. 2005)
13. Protégé OWL Plugin, available at http://protege.stanford. edu/pluging/owl/ (Sep. 2005)
14. rd Edition Control Objectives, IT Governance Institute, 2000.
15. BSI, IT Baseline Protection Manual, Germany available at www.bsi.bund.de/ (Mar. 2005).
16. Cisco Security Advisories, available at www.cisco.com/go/psirt/ (Mar. 2005).
17. SecurityFocus security portal, available at www.securityfocus.com (Mar. 2005).
18. Org Security Mailing List Archive, available at www.seclists.org (Mar. 2005).
19. Common Vulnerabilities and Exposures, available at www.cve.mitre.org/ (Mar. 2005).
20. Nmap scanner, available at wwvv.insecure.org/nmap (Mar. 2005).
21. Netstumbler 802.11 network scanner, available at www.stumbler.net (Mar. 2005).
22. th Conference of the Association for Computational Linguistics. USA, July 2002.
23. Damianou N., et al., "The Ponder Policy Specification Language". In Workshop on Policies for Distributed Systems and Networks, Springer-Verlag (LNCS 1995), 2001, pp. 18-39.
24. th IEEE International Workshop on Policies for Distributed Systems and Networks, 2003.
25. Lymberopoulos L., Lupu E., Sloman M., "Ponder Policy Implementation and Validation in a CIM and Differentiated Services Framework". NOMS 2004, Seoul, 2004.
26. Alcantara O., Sloman M., "QoS policy specification - A mapping from Ponder to the IETF", Dept. of Computing, Imperial College, UK.
27. Dean M., et al., OWL Web Ontology Language Reference W3C Recommendation, http://www.w3.org/TR/owl-ref/ (Mar. 2005)
28. Donner M., "Toward a Security Ontology", In IEEE Security and Privacy, Vol. 1, No. 3, pp. 6-7, May 2003.
29. Denker G., Access Control and Data Integrity for DAML+OIL and DAML-S, SRI International, USA, 2002.
30. Denker G., Security Mark-up and Rules, SRI International, CAIn: Dagstuhl Seminar on Rule Markup Techniques, 2002.
31. OASIS Security Service TC. Security Assertion Markup Language (SAML), www.oasis-open.org/committees/ security/ (Mar. 2005)
32. XACML Specification (2003), extensible Access Control Markup Language, v. 1.1 available at www.oasis-open. org (Mar. 2005).
33. rd International Conference on e-Commerce and Web Technologies, 2002, pp. 304-313.
34. Raskin V., et al., "Ontology in Information Security: A Useful Theoretical Foundation and Methodological Tool". In V. Raskin, et al. (Eds.), Proc. of the New Security Paradigms Workshop, ACM, USA, 2001.
35. nd International Conference on Trust Management, 2004.
36. nd International Semantic Web Conference, 2003.
37. Gandon F., Sadeh N., "Semantic web technologies to reconcile privacy and context awareness". Web Semantics Journal, 1(3), 2004.
38. st International Conference on Mobile and Ubiquitous Systems: Networking and Services, 2004.