基于本体模型的网络系统安全参数采集过程

doi:10.11959/j.issn.2096-109x.2017.00131

Chinese Journal of Network and Information Security ›› 2017, Vol. 3 ›› Issue (2): 39-45.doi: 10.11959/j.issn.2096-109x.2017.00131

• Academic paper • Previous Articles Next Articles

Ontology model based on security parameters capturing process for network systems

Tao LI¹,NJiu-chuan LI²(),Ai-qun HU¹

¹ School of Information Science and Engineering, Southeast University, Nanjing 210096, China
² The Third Research Institute of Ministry of Public Security, Shanghai 200031, China

Revised:2016-11-25 Online:2017-02-01 Published:2017-02-10
Supported by:
The National Natural Science Foundation of China(61601113);The National Key Basic Research De-velopment Program(2103CB338003);Fund from the Third Research Institute of Ministry of Public Se-curity(C15606)

Abstract

Abstract:

A general security data capturing process for network system was proposed, which combined hierarchical capturing framework and ontology model to whole network architecture. Attributes of security parameter were di-vided and relationships of parameter were descripted. Security parameters were extended to multiple dimensions. Multiple attributes such as information source and hierarchy were abstracted, which were benefit for analysis of se-curity parameters. Based on the proposed framework, the process of application in real systems were described. The whole processes and framework efficiently provided guidance for network security evaluation and supporting of ba-sic parameters.

Key words: security evaluation, security parameter capture, ontology theory, system security

CLC Number:

TN929.53

Tao LI,NJiu-chuan LI,Ai-qun HU. Ontology model based on security parameters capturing process for network systems[J]. Chinese Journal of Network and Information Security, 2017, 3(2): 39-45.

Figures/Tables 6

References 18

[1]	张焕国，韩文报，来学嘉，等．网络空间安全概述[J]. 中国科学：信息科学， 2016,46(2):125-164.
	ZHANG H G , HAN W B , LAI X J , et al. Survey on cyberspace se-curity[J]. Scientia Sinica Informations, 2016,46(2):125-164.
[2]	A system for reliable large-scale log collection[EB/OL]. .
[3]	JONGHOON K . PsyBoG: a scalable botnet detection method for large-scale DNS traffic[J]. Computer Networks, 2016,97(14):48-73.
[4]	KIRUBAVATHI G , ANITHA R . Botnet detection via mining of traffic flow characteristics[J]. Computers ＆ Electrical Engineering, 2016,50:91-101.
[5]	ZHANG Y , An adaptive flow counting method for anomaly detection in SDN[C]// The 9th ACM Conference on Emerging Networking Ex-periments and Technologies. 2013:25-30.
[6]	王威，方滨兴，崔翔．基于终端行为特征的IRC僵尸网络检测[J]. 计算机学报， 2009,32(10):1980-1988.
	WANG W , FANG B X , CUI X . IRC botnet detection based on host behavior[J]. Chinese Journal of Computers, 2009,32(10):1980-1988.
[7]	BHANDARI P , GUJRAL M S . Ontology based approach for per-ception of network security state[C]// Recent Advances in En-gineering and Computational Sciences (RAECS). 2014:1-6.
[8]	G′ OMEZ-P′EREZ A , FERN′ANDEZ-L′OPEZ M , CORCHO O . Ontological engineering[M]// Metasynthetic Computing and Engi-neering of Complex System. Berlin: Springer, 2004.
[9]	GUARINO N . Formal ontology and information systems[C]// FOIS'98. 1998:3-15.
[10]	FRANK A U . Spatial ontology: a geographical information point of view[M]. Berlin: Springer, 1997.
[11]	ARANGO G , WILLIAMS G , ISCOE N . Domain modeling for software engineering[C]// The 13th International Conference on Software Engineering. 1991:340-343.
[12]	GRUBER T R . A translation approach to portable ontologies[J]. Knowledge Acquisition, 1993,5(2):199-220.
[13]	BORST W N . Construction of engineering ontologies for knowl-edge sharing and reuse[D]. Enschede: University Twente, 1997.
[14]	AVIZIENIS A , LAPRIE J C , RANDELL B , et al. Basic concepts and taxonomy of dependable and secure computing[J]. IEEE Trans. Dependable Sec. Computer, 2004,1(1):11-33.
[15]	LANDWEHR C E , BULL A R , MCDERMOTT J P , et al. A tax-onomy of computer program security flaws[J]. ACM Computer Survay, 1994,26(3):211-254.
[16]	Owl Web ontology language[EB/OL]. .
[17]	The protege ontology editor and knowledge acquisition system[EB/OL]. .
[18]	GRUBER T R . A translation approach to portable ontology specifi-cation[J]. International Journal Human-Computer Studies, 1993,43:907-928.

Metrics

Recommended 0

No Suggested Reading articles found!

Ontology model based on security parameters capturing process for network systems

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 6

References 18

Related Articles 4

Metrics

Recommended 0

[1]	Renfeng CHEN, Hongbin ZHU. Research on credit card transaction security supervision based on PU learning [J]. Chinese Journal of Network and Information Security, 2023, 9(3): 73-78.
[2]	Jinyin CHEN, Rongchang LI, Guohan HUANG, Tao LIU, Haibin ZHENG, Yao CHENG. Survey on vertical federated learning: algorithm, privacy and security [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 1-20.
[3]	Jinxin ZUO,Ziyu GUO,Jin LI,Jie ZHANG,Yueming LU. Security evaluation method for confidential and stable complex systems [J]. Chinese Journal of Network and Information Security, 2019, 5(2): 58-65.
[4]	Cui-cui WANG,Zhi-wei YAN,Guang-gang GENG. Internet naming and addressing system security technology and application analysis [J]. Chinese Journal of Network and Information Security, 2017, 3(3): 34-42.