Ontologies for information security management and governance

Information Management and Computer Security

Volumn 16, Issue 2, 2008, Pages 150-165

  dos Santos Moreira, Edson ^a   Fondazzi Martimiano, Luciana Andréia ^a   dos Santos Brandão, Antonio José ^a   Bernardes, Mauro César ^a  

^a UNIVERSITY OF SÃO PAULO   (Brazil)

Author keywords

Data security; Governance; Knowledge management

Indexed keywords

COMPUTER SYSTEM RECOVERY; DECISION MAKING; DIGITAL SIGNAL PROCESSING; INDUSTRIAL MANAGEMENT; INFORMATION MANAGEMENT; INFORMATION SERVICES; INFORMATION THEORY; MANAGEMENT; OCCUPATIONAL RISKS; PROBLEM SOLVING; RISK ASSESSMENT; RISK MANAGEMENT; RISKS; SAFETY ENGINEERING; SECURITY OF DATA; TOOLS;

(PL) PROPERTIES; BUSINESS INTELLIGENCE (BI); DESIGN/METHODOLOGY/APPROACH; GENERAL (CO); INFORMATION SECURITY MANAGEMENT; PRACTICAL IMPLICATIONS; PRIVACY POLICIES; SECURITY DATA; SECURITY GOVERNANCE; SECURITY INCIDENTS; SECURITY MANAGEMENT; SECURITY TOOLS;

ONTOLOGY;

EID: 46249093378     PISSN: 09685227     EISSN: None     Source Type: Journal    
DOI: 10.1108/09685220810879627     Document Type: Article

References (24)

1. Bechhofer, S., Harmelen, F., van Hendler, J., Horrocks, I., McGuinness, D.L., Patel-Schneider, P.F. and Stein, L.A. (2004), "OWL web ontology language reference", Technical Report, available at: www.w3.org/TR/owl-ref.
2. Bernardes, M.C. (2005), "Modelling the information security governance with the support of information systems", PhD thesis, ICMC-USP, São Carlos (in Portuguese).
3. Brandão, A.J.S. (2004), "Using ontologies to classify vulnerabilities on security systems", Master thesis, ICMC-USP, São Carlos (in Portuguese).
4. Brewster, C., Alani, H., Dasmahapatra, S. and Wilks, S.Y. (2004), "Data driven ontology evaluation", Proceedings of the International Conference on Language Resources and Evaluation, Lisboa, Portugal.
5. Gollmann, D. (1999), Computer Security, Wiley, New York, NY.
6. Gruber, T.R.A. (1993), "Translation approach to portable ontology specification", Knowledge Acquisition, Vol. 5 No. 2, pp. 199-220.
7. Grüninger, M. and Fox, M.S. (1995), "Methodology for the design and evaluation of ontologies", Proceedings of the International Joint Conference on Artificial Intelligence (IJCAI95), Workshop on Basic Ontological Issues in Knowledge Sharing, April.
8. Howard, J.D. (1997), "An analysis of security incidents on the internet: 1989-1995", PhD thesis, Institute of Technology, Carnegie Mellon University, Pittsburgh, PA.
9. Howard, J.D. and Longstaff, T.A. (1998), A Common Language for Computer Security Incidents, Sandia National Laboratories, Livermore, CA.
10. Klyne, G. and Carroll, J.J. (2004), "Resource description framework (RDF): Concepts and abstract syntax", aWailable at: www.w3.org/TR/ rdf-concepts/.
11. Kumar, S. (1995), "Classification and detection of computer intrusions", PhD thesis, Computer Sciences Department, Purdue University, Hammond, IN.
12. Laudon, K.C. and Laudon, J.P. (2002), Management Information Systems - Managing the Digital Firm, 7th ed., Prentice-Hall, Englewood Cliffs, NJ.
13. Mann, D.E. and Christey, S.M. (1999), Towards a Common Enumeration of Vulnerabilities, The MITRE Corporation, Bedford, MA, available at: http://cve.mitre.org/docs/docs-2000/cerias.html.
14. Martimiano, L.A.F. (2006), "On the structuring of information in computer security systems: The use of ontologies", PhD thesis, ICMC-USP, São Carlos (in Portuguese).
15. Martimiano, L.A.F. and Moreira, E.D. (2006), "The evaluation process of a computer security incident ontology", Proceedings of the 2nd Workshop on Ontologies and their Applications (WONTO06), International Joint Conference, October, available on CD-ROM.
16. NCSC (1988), Glossary of Computer Security Terms, National Computer Security Center, Fort Meade, MD, Trusted Network, NCSC-TG-004, October.
17. Noy, N.F. and McGuinness, D.L. (2001), "Ontology development 101: A guide to create your first ontology", Knowledge Systems Laboratory Technical Report KSL-01-05, Stanford University, Stanford, CA.
18. Prud'hommeaux, E. and Seaborne, A. (2006), "SPARQL - query language for RDF", available at: Www.w3.org/TR/rdf-sparql-query/.
19. Schumacher, M. (2003), "Toward a security core ontology", Security Engineering with Patterns - Origins, Theoretical Model and New Applications, Lectures Notes in Computer Science (LNCS 2754), Springer, New York, NY, pp. 87-96.
20. Seaborne, A. (2004), "RDQL - a query language for RDF", available at: Www.w3.org/Submission/2004/SUBM-RDQL-20040109/.
21. Shirey, R. (2000), RFC 2828: Internet Security Glossary, GTE/BBN Technologies, Cambridge, MA.
22. Sirin, E., Parsia, B., Cuenca, B.G., Kalyanpur, A. and Katz, Y. (2006), "Pellet: A practical OWL-DL reasoner", available at: www.mindswap.org/2003/pellet/.
23. Swartout, W. and Tate, A. (1999), "Ontologies", IEEE Intelligent Systems, Vol. 14 No. 1, pp. 18-19.
24. Uschold, M. and Grüninger, M. (1996), "Ontologies: Principles, methods and applications", Knowledge Engineering Review, Vol. 11 No. 2, pp. 93-155.