The ontological approach for SIEM data repository implementation

Proceedings - 2012 IEEE Int. Conf. on Green Computing and Communications, GreenCom 2012, Conf. on Internet of Things, iThings 2012 and Conf. on Cyber, Physical and Social Computing, CPSCom 2012

Volumn , Issue , 2012, Pages 761-766

  Kotenko, Igor ^a   Polubelova, Olga ^a   Saenko, Igor ^a  

^a ST PETERSBURG INSTITUTE FOR INFORMATICS AND AUTOMATION   (Russian Federation)

Author keywords

Data model; Data representation; Logical inference; Ontology; Repository; Security information and event management

Indexed keywords

DATA REPRESENTATIONS; HYBRID ARCHITECTURES; INTERNET OF THINGS (IOT); LOGICAL INFERENCE; REPOSITORY; RESEARCH APPLICATIONS; SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM); SECURITY INFORMATION AND EVENT MANAGEMENTS;

DATA STRUCTURES; DIGITAL STORAGE; INTERNET; MODELS; NETWORK SECURITY; STANDARDS;

ONTOLOGY;

EID: 84875525747     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GreenCom.2012.125     Document Type: Conference Paper

References (23)

1. Miller D., Harris S., Harper A., VanDyke S., Blask C. Security information and event management (SIEM) implementation. McGraw-Hill Companies. 2011.
2. Baader F., Horrocks I., Sattler U. Description Logics as Ontology Languages for the Semantic Web. Festschrift in honor of Jörg Siekmann, Lecture Notes in Artificial Intelligence (2003), pp. 228-248.
3. Cruz I. F., Gjomemo R., Lin B., M. Orsini. A Constraint and Attribute Based Security Framework for Dynamic Role Assignment in Collaborative Environments. Proc. The 4th International Conference on Collaborative Computing: Networking, Applications and Worksharing. Orlando, FL, USA, November 13-16, 2008.
4. Da Silva G. M. H., Rademaker A., Vasconcelos D. R., Amaral F. N., Bazílio C., Costa V. G., Haeusler E. H. Dealing with the Formal Analysis of Information Security Policies through Ontologies: A Case Study. 3rd Australasian Ontology Workshop (AOW-07), Gold Coast, Queensland, Australia. Conferences in Research and Practice in Information Technology, Vol. 85, 2007.
5. Kolovski, V., Hendler, J., and Parsia B. Analyzing web access control policies. In WWW '07: Proceedings of the 16th international conference on World Wide Web. ACM, New York, NY, USA, 2007, pp. 677-686.
6. Rochaeli T., Eckert C. RBAC Policy Engineering with Patterns. Proc. of the Semantic Web and Policy Workshop. Nov. 2005.
7. Fitzgerald W. M., Foley S. N., O'Foghlu M. Confident Firewall Policy Configuration Management using Description Logic. Twelfth Nordic Workshop on Secure IT Systems, Short Paper, Reykjavik, Iceland, October 11-12, 2007.
8. Rochaeli T., Eckert C. Attack Goal Generation Using Description Logic-based Knowledge Representation. Proceedings of the 2005 International Workshop on Description Logics (DL2005), Edinburgh, Scotland, UK, July 26-28, 2005.
9. Schatz B., Mohay G., Clark A. Generalizing Event Forensics Across Multiple Domains. Proc. of 2nd Australian Computer Network & Information Forensics Conference (Forensics 2004), pages 136-144. Edith Cowan University, November 2004.
10. Kenaza T., Yahi S., Benferhat S. From representing Contextual Intrusion Detection Information in Description Logics to Monitoring Target Events. Agence Nationale de la Recherche. Délivrable, 2006, No.10, 20 p.
11. Nicolett M., Kavanagh K.M. Critical Capabilities for Security Information and Event Management. Gartner. 21 May 2012.
12. SCAP, 2011. The Security Content Automation Protocol (SCAP). Website. http://scap.nist.gov.
13. Ogle, D., Kreger, H., Salahshour, A., Cornpropst, J., Labadie, E., Chessell, M., Horn, B., Gerken, J., Schoech, J., Wamboldt, M., 2004. Canonical Situation Data Format: The Common Base Event V1.0.1. International Business Machines Corporation.
14. CIM, 2011. Common Information Model (CIM), DMTF. Website. http://dmtf.org/standards/cim.
15. Kowalski R., Sergot M. A logic-based calculus of events. New Generation Computing, 1986. V.4.
16. Holzmann, G. The Spin Model Checker. IEEE Transactions on Software Engineering, 1997, vol. 23, No. 5.
17. Kotenko I., Chechulin A., Novikova E. Attack Modelling and Security Evaluation for Security Information and Event Management. SECRYPT 2012. International Conference on Security and Cryptography. Proceedings. Rome, Italy. 24-27 July 2012.
18. Marco D. "Building and Managing the Meta Data Repository: A Full Lifecycle Guide,". Wiley. 2000.
19. Garcia-Molina H., Ullman J.D., Widom J.D. Database Systems: The Complete Book. 2001.
20. Triple Store Evaluation Analysis Report. Revelytix, Inc. 2010.
21. Barret R. XML Database Products: Native XML Databases, 2010. http://www.rpbourret.com/xml/ProdsNative.htm.
22. Storage And Inference Layer Solutions, 2009. http://alexidsa.blogspot. com/2009/12/sail.html
23. Virtuoso. http://virtuoso.openlinksw.com