Information security fortification by ontological mapping of the ISO/IEC 27001 standard

Proceedings - 13th Pacific Rim International Symposium on Dependable Computing, PRDC 2007

Volumn , Issue , 2007, Pages 381-388

  Fenz, Stefan ^a   Goluch, Gernot ^a   Ekelhart, Andreas ^a   Riedl, Bernhard ^a   Weippl, Edgar ^b  

^a Secure Business Austria   (Austria)

^b VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION SERVICES; KNOWLEDGE BASED SYSTEMS; MILITARY ENGINEERING; STANDARDS;

DEPENDABLE COMPUTING; INFORMATION SECURITY; INTERNATIONAL SYMPOSIUM; ISO/IEC; KNOWLEDGE BASE; PACIFIC RIM; RULE-BASED; SECURITY REQUIREMENTS;

ONTOLOGY;

EID: 50049109224     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PRDC.2007.45     Document Type: Conference Paper

References (17)

1. BASEL2. Basel Committee on Banking Supervision (BCBS), Basel 2 - International Convergence of Capital Measurement and Capital Standards - A Revised Framework, 2001.
2. British Department of Trade and Industry (DTI). BS7799-2:2002 Information security management systems - Specification with guidance for use, 2002.
3. A. Ekelhart, S. Fenz, G. Goluch, and E. Weippl. Ontological mapping of common criteria's security assurance requirements. In 22nd IFIP TC-11 International Information Security Conference (IFIPSEC07), 2007.
4. A. Ekelhart, S. Fenz, M. Kiemen, and E. Weippl. Security ontology: Simulating threats to corporate assets. In A. Bagchi and V. Atluri, editors, Information Systems Security, volume 4332 of Lecture Notes in Computer Science, pages 249-259. Springer, Dec 2006.
5. A. Ekelhart, S. Fenz, M. Kiemen, and E. Weippl. Security ontologies: Improving quantitative risk analysis. In 40th Hawaii International Conference on System Sciences, HICSS2007, number 0-7695-2755-8. pages 156-162, Waikoloa, HI, USA. January 2007. IEEE Computer Society.
6. C. Forgy. Rete: A Fast Algorithm for the Many Patterns/Many Objects Match Problem. Artif. Intell., 19(1): 17-37, 1982.
7. Google. Web Toolkit Beta. http://code.google.com/webtoolkit/.
8. E. F. Hill. Jess in Action: Java Rule-Based Systems. Manning Publications Co.. Greenwich, CT, USA, 2003.
9. International Organization for Standardization and International Electrotechnical Commission. Iso/iec 17799:2005, information technology - code of practice for information security management, 2005.
10. International Organization for Standardization and International Electrotechnical Commission. Iso/iec 27001:2005, information technology - security techniques - information security management systems- requirements, 2005.
11. J. Mei, E. P. Bontas, and Z. Lin. OWL2Jess: A Transformational Implementation of the OWL Semantics. In ISPA Workshops, pages 599-608, 2005.
12. PriceWaterhouseCoopers. Information security breaches survey. www.dti.gov.uk/industries/information_security.2006.
13. SOX. One hundred seventh congress of the united states of america, sarbanes oxley act - to protect investors by improving the accuracy and reliability of corporate disclosures made pursuant to the securities laws, and for other purposes., 2002.
14. World Wide Web Consortium. OWL Web Ontology Language. http://www.w3.org/TR/owl-features/, 2004.
15. World Wide Web Consortium. SWRL: A Semantic Web Rule Language Combining OWL and RuleML. http://www.w3.org/Submission/SWRL/, 2004.
16. World Wide Web Consortium. Resource Description Framework (RDF). www.w3.org/RDF/, 2006.
17. World Wide Web Consortium. SPARQL Query Language for RDF. http://www.w3.org/TR/rdf-sparql-query/, 2006.