A Key-Recovery System for Long-term Encrypted Documents

Eric Ke Wang,Joe Cho-Ki Yau,Lucas Chi Kwong Hui,Zoe Lin Jiang,Siu-Ming Yiu

DOI: https://doi.org/10.1109/edocw.2006.8

2006-01-01

Abstract:We present the structure of an ontology for Information Security (IS) and discuss a paradigm whereby it can be used to extract knowledge from natural language texts such as IS standards, security policies and security control descriptions. Besides providing ...

What problem does this paper attempt to address?

A CoS-enabled Request Scheduling Policy

Yubin Yang,Yazhe Tang,Ming Zhao,Lei Yao

DOI: https://doi.org/10.1109/EDOCW.2006.6

2006-01-01

Abstract:We present the structure of an ontology for Information Security (IS) and discuss a paradigm whereby it can be used to extract knowledge from natural language texts such as IS standards, security policies and security control descriptions. Besides providing ...
An automated method for the ontological representation of security directives

Giampaolo Bella,Gianpietro Castiglione,Daniele Francesco Santamaria

2023-06-30

Abstract:Large documents written in juridical language are difficult to interpret, with long sentences leading to intricate and intertwined relations between the nouns. The present paper frames this problem in the context of recent European security directives. The complexity of their language is here thwarted by automating the extraction of the relevant information, namely of the parts of speech from each clause, through a specific tailoring of Natural Language Processing (NLP) techniques. These contribute, in combination with ontology development principles, to the design of our automated method for the representation of security directives as ontologies. The method is showcased on a practical problem, namely to derive an ontology representing the NIS 2 directive, which is the peak of cybersecurity prescripts at the European level. Although the NLP techniques adopted showed some limitations and had to be complemented by manual analysis, the overall results provide valid support for directive compliance in general and for ontology development in particular.

Artificial Intelligence,Computation and Language
Towards Ontological Approach to Eliciting Risk-Based Security Requirements

Oluwasefunmi 'Tale Arogundade,Zhi Jin,Xiaoguang Yang

DOI: https://doi.org/10.1504/ijics.2014.065168

2014-01-01

International Journal of Information and Computer Security

Abstract:Security requirements managers aim at eliciting, reusing and keeping their sets of requirements. They desire well defined, consistent and up to date requirements throughout the system lifecycle. This paper presents security ontology (SO) which can be used as a basis for eliciting risk-based security requirements. The ontology is based on the security relationship model described in the national institute of standards and technology special publication 800-12 but use-misuse case concepts and some extensions were used. We extended use case with some elements (action and object) to facilitate information system (IS) security policy instantiation after the system has been deployed. We incorporated risk and privilege concepts in order to represent risk knowledge in an unambiguous way and to enable ontology control security issues respectively. This ontology enriches the modelling and management of risk-based safeguard requirements within the requirements engineering discipline by organising the security knowledge to form heavy weight ontology which include concepts, concept taxonomies, relationships, properties, axioms and constraints. This ontology provides capabilities such as IS security management, traceability and reuse. OWL protégé 3.3.1 editor was used for the ontology coding. The results of its adoption in capturing safeguard requirements of healthcare IS were also discussed.
A Deep Learning Approach for Ontology Enrichment from Unstructured Text

Lalit Mohan Sanagavarapu,Vivek Iyer,Raghu Reddy

DOI: https://doi.org/10.48550/arXiv.2112.08554

2021-12-16

Computation and Language

Abstract:Information Security in the cyber world is a major cause for concern, with a significant increase in the number of attack surfaces. Existing information on vulnerabilities, attacks, controls, and advisories available on the web provides an opportunity to represent knowledge and perform security analytics to mitigate some of the concerns. Representing security knowledge in the form of ontology facilitates anomaly detection, threat intelligence, reasoning and relevance attribution of attacks, and many more. This necessitates dynamic and automated enrichment of information security ontologies. However, existing ontology enrichment algorithms based on natural language processing and ML models have issues with contextual extraction of concepts in words, phrases, and sentences. This motivates the need for sequential Deep Learning architectures that traverse through dependency paths in text and extract embedded vulnerabilities, threats, controls, products, and other security-related concepts and instances from learned path representations. In the proposed approach, Bidirectional LSTMs trained on a large DBpedia dataset and Wikipedia corpus of 2.8 GB along with Universal Sentence Encoder is deployed to enrich ISO 27001-based information security ontology. The model is trained and tested on a high-performance computing (HPC) environment to handle Wiki text dimensionality. The approach yielded a test accuracy of over 80% when tested with knocked-out concepts from ontology and web page instances to validate the robustness.
Information Security Ontology Model for Internet of Thing

Weiwu Ren,Liang Hu,Kuo Zhao,Bing Jia

DOI: https://doi.org/10.4028/www.scientific.net/amr.694-697.2466

2013-01-01

Advanced Materials Research

Abstract:Semantic modeling has become indispensable to integrate various specific security issues of Internet of Things. How to describe attack scenarios and how to define an intrusion unambiguously has been an urgent problem. For solving two above problems, a new three-level information security ontology model is proposed, which is an initial attempt to solve security issues by means of ontology technology. Five top classes are proposed in the domain ontology level. Then their subclasses are also proposed on the basis of actual scenarios in the local ontology level. Our intelligent laboratory, as experiment scenarios, is partly instantiated.
Aligning social concerns with information system security: A fundamental ontology for social engineering

Tong Li,Xiaowei Wang,Yeming Ni

DOI: https://doi.org/10.1016/j.is.2020.101699

IF: 3.18

2022-02-01

Information Systems

Abstract:<p>Along with the rapid development of socio-technical systems, people are playing an increasingly important role in information system and have actually become an essential system component. However, unlike technology-based attacks that have been investigated for decades, social engineering attacks have not been efficiently addressed. In particular, due to the interdisciplinary nature of social engineering, there is a lack of consensus on its definition, hindering the further development of this research field. In this paper, we propose a comprehensive and fundamental ontology of social engineering based on a systematic review of existing social engineering taxonomies and ontologies in order to provide a theoretical foundation for social engineering analysis. The essential contributions of this paper include: (1) propose a comprehensive ontology of social engineering and precisely specify ontological definitions of its essential concepts based on Situation Calculus; (2) enumerate and summarize a set of social engineering techniques and present their fine-grained classification based on the proposed ontology; (3) incorporate psychology and sociology knowledge into social engineering analysis, encapsulating such knowledge in terms of a formalized ontology. We have evaluated our ontology based on a set of real social engineering attacks, the results of which show the usefulness of our proposal.</p>

computer science, information systems
Towards Ontological Approach to Security Risk Analysis of Information System: Model and Architecture

Oluwasefunmi 'Tale Arogundade,Olusola J. Adeniran,Zhi Jin,Xiaoguang Yang

DOI: https://doi.org/10.4018/ijsse.2016070101

2016-01-01

International Journal of Secure Software Engineering

Abstract:Resource allocation decisions can be enhanced by performing risk assessment during the early development phase. In order to improve and maintain the security of the Information System IS, hereafter, there is need to build risk analysis model that can dynamically analyze threat data collected during the operational lifetime of the IS. In this paper the authors propose an ontological approach to accomplishing this goal. They present analyzer model and architecture, an agent-based risk analysis system ARAS which gathers identified threats events, probe them and correlates those using ontologies. It explores both quantitative and qualitative risk analysis techniques using real events data for probability predictions of threats based on an existing designed security ontology. To validate the feasibility of the approach a case study on e-banking system has been conducted. Simulated IDS output serves as input into the risk analysis system. The authors used JADE to implement the agents, protégé OWL to create the ontology and ORACLE 11g SQL developer for the database. Optimistic results were obtained.
Security Ontology in a Virtual University

Loredana Mocean,Miranda-Petronella Vlad

DOI: https://doi.org/10.2478/raft-2024-0017

2024-06-01

Land Forces Academy Review

Abstract:Abstract In this paper we propose a cybersecurity ontology model designed for universities, aiming to facilitate the management and protection of sensitive data and information within the context of the growing cybersecurity threats. The proposed ontology includes four distinct hierarchical levels: the basic level, the conceptual level, the instance level and the relationships level. At the basic level, it defines essential terms and principles of cybersecurity, including concepts like vulnerability, threat, cyber-attack, security policies and security rules. At the conceptual level, the ontology categorizes information and cybersecurity systems, embracing domains such as data protection, authentication, authorization, and auditing. At the instance level, the ontology describes specific examples of information and cybersecurity systems used in universities, such as the library management system or the accounting management system. At the relationships level, the ontology establishes links between different categories of information and cybersecurity systems, as well as between these systems and the entities that use them, such as students, professors and administrative staff. By implementing this cybersecurity ontology, universities can improve the management and protection of their sensitive data and information, as well as respond more efficiently to cybersecurity threats.
Knowledge and Security

Riccardo Pucella

DOI: https://doi.org/10.48550/arXiv.1305.0876

2013-05-04

Abstract:Epistemic concepts, and in some cases epistemic logic, have been used in security research to formalize security properties of systems. This survey illustrates some of these uses by focusing on confidentiality in the context of cryptographic protocols, and in the context of multi-level security systems.

Cryptography and Security,Logic in Computer Science
Analysis Framework for Web Content Security Based on Ontology

Junbao Du

2008-01-01

Abstract:This paper proposes a framework of ontology-based web content security analysis. According to the experts and dictionary in the field of knowledge, the knowledge base is created, and the content security mechanisms and reasoning rules are constructed. As a result, the framework of the system is achieved. The results obtained from large number of web content tests show that the system framework is effective in detecting and identifying the security of web content.
System Security Assurance: A Systematic Literature Review

Ankur Shukla,Basel Katt,Livinus Obiora Nweke,Prosper Kandabongee Yeng,Goitom Kahsay Weldehawaryat

DOI: https://doi.org/10.1016/j.cosrev.2022.100496

2022-07-29

Abstract:System security assurance provides the confidence that security features, practices, procedures, and architecture of software systems mediate and enforce the security policy and are resilient against security failure and attacks. Alongside the significant benefits of security assurance, the evolution of new information and communication technology (ICT) introduces new challenges regarding information protection. Security assurance methods based on the traditional tools, techniques, and procedures may fail to account new challenges due to poor requirement specifications, static nature, and poor development processes. The common criteria (CC) commonly used for security evaluation and certification process also comes with many limitations and challenges. In this paper, extensive efforts have been made to study the state-of-the-art, limitations and future research directions for security assurance of the ICT and cyber-physical systems (CPS) in a wide range of domains. We conducted a systematic review of requirements, processes, and activities involved in system security assurance including security requirements, security metrics, system and environments and assurance methods. We highlighted the challenges and gaps that have been identified by the existing literature related to system security assurance and corresponding solutions. Finally, we discussed the limitations of the present methods and future research directions.

Cryptography and Security,Software Engineering
Ontological Foundations of Modelling Security Policies for Logical Analytics

Karolina Bataityte,Vassil Vassilev,Olivia Jo Gill

DOI: https://doi.org/10.1007/978-3-030-49161-1_31

2020-01-01

Abstract:Modelling of knowledge and actions in AI has advanced over the years but it is still a challenging topic due to the infamous frame problem, the inadequate formalization and the lack of automation. Some problems in cyber security such as logical vulnerability, risk assessment, policy validation etc. still require formal approach. In this paper we present the foundations of a new formal framework to address these challenges. Our approach is based on three-level formalisation: ontological, logical and analytical levels. Here we are presenting the first two levels which allow to model the security policies and provide a practical solution to the frame problem by efficient utilization of parameters as side effects. Key concepts are the situations, actions, events and rules. Our framework has potential use for analysis of a wide range of transactional systems within the financial, commercial and business domains and further work will include analytical level where we can perform vulnerability analysis of the model.
Security in Semantic Interoperation

Yi Zhao,Xia Wang,Wolfgang A. Halang

DOI: https://doi.org/10.4018/978-1-60566-650-1.ch025

2009-01-01

Abstract:With the increasing interest in Semantic Web-based applications, researchers have started to build tools enabling organisations to share information. An important aspect in maintaining the Semantic Web is, however, to preserve security during semantic interoperation of different entities. Security and privacy are indispensable to the success of Semantic Web services. Hence, this chapter aims to investigate the currently used security methods in semantic interoperation, including the security methods employing Semantic Web representation languages such as XML, RDF and ontologies, and their application methods in semantic interoperation such as secure access control and secure knowledge management. How to manage privacy, trust and reputation at the same time during semantic interoperation will also be discussed in this chapter. Finally, some directions for our further research will be presented.
Towards a relation extraction framework for cyber-security concepts

Corinne L. Jones,Robert A. Bridges,Kelly Huffer,John Goodall

DOI: https://doi.org/10.48550/arXiv.1504.04317

2015-04-16

Information Retrieval

Abstract:In order to assist security analysts in obtaining information pertaining to their network, such as novel vulnerabilities, exploits, or patches, information retrieval methods tailored to the security domain are needed. As labeled text data is scarce and expensive, we follow developments in semi-supervised Natural Language Processing and implement a bootstrapping algorithm for extracting security entities and their relationships from text. The algorithm requires little input data, specifically, a few relations or patterns (heuristics for identifying relations), and incorporates an active learning component which queries the user on the most important decisions to prevent drifting from the desired relations. Preliminary testing on a small corpus shows promising results, obtaining precision of .82.
Security to text (S2T): multi-layered based security approaches for secret text content

Shamal Kashid,Lalit K. Awasthi,Krishan Berwal

DOI: https://doi.org/10.1007/s11042-024-19669-9

IF: 2.577

2024-06-20

Multimedia Tools and Applications

Abstract:In the digital world, text data is produced in an unstructured manner across various communication channels. Extracting valuable information from such data with security is crucial and requires the development of techniques in text mining, information retrieval, and natural language processing (NLP). To solve this issue, we introduce two novel approaches: keyword extraction (KE) and a multi-layered secret sharing scheme (MLSS) to provide security to extracted keywords rather than overall text documents. The KE approach encompasses a sequence of text pre-processing procedures, including tokenization, stopword removal, stemming, and bag of words representation, followed by indexing. This methodology aims to efficiently extract keywords from text datasets. For this research work, we have proposed three datasets, including text messages, whatsapp messages, and electronic mail. MLSS enhances the security of extracted textual data by leveraging text pre-processing steps. This scheme ensures better confidentiality and the non-revealment of sensitive information. Additionally, we evaluate our KE model on our dataset as well as on standard datasets. Experimental results demonstrate the effectiveness of our proposed security to text (S2T) model, which outperform existing state-of-the-art approaches. The model obtains a 100% correlation between the reconstructed text and the original text.

computer science, information systems, theory & methods,engineering, electrical & electronic, software engineering
Modeling for Investment Guidance as a Performance Pre-assessment Method of Enterprise Integration

Jian Zhou,Qing Li,Dafeng Xu,Tianyuan Xiao

DOI: https://doi.org/10.1109/EDOCW.2006.49

2006-01-01

Abstract:We present the structure of an ontology for Information Security (IS) and discuss a paradigm whereby it can be used to extract knowledge from natural language texts such as IS standards, security policies and security control descriptions. Besides providing ...
A Smart City Infrastructure Ontology for Threats, Cybercrime, and Digital Forensic Investigation

Yee Ching Tok,Davis Zheng Yang,Sudipta Chattopadhyay

2024-08-04

Abstract:Cybercrime and the market for cyber-related compromises are becoming attractive revenue sources for state-sponsored actors, cybercriminals and technical individuals affected by financial hardships. Due to burgeoning cybercrime on new technological frontiers, efforts have been made to assist digital forensic investigators (DFI) and law enforcement agencies (LEA) in their investigative efforts. Forensic tool innovations and ontology developments, such as the Unified Cyber Ontology (UCO) and Cyber-investigation Analysis Standard Expression (CASE), have been proposed to assist DFI and LEA. Although these tools and ontologies are useful, they lack extensive information sharing and tool interoperability features, and the ontologies lack the latest Smart City Infrastructure (SCI) context that was proposed. To mitigate the weaknesses in both solutions and to ensure a safer cyber-physical environment for all, we propose the Smart City Ontological Paradigm Expression (SCOPE), an expansion profile of the UCO and CASE ontology that implements SCI threat models, SCI digital forensic evidence, attack techniques, patterns and classifications from MITRE. We showcase how SCOPE could present complex data such as SCI-specific threats, cybercrime, investigation data and incident handling workflows via an incident scenario modelled after publicly reported real-world incidents attributed to Advanced Persistent Threat (APT) groups. We also make SCOPE available to the community so that threats, digital evidence and cybercrime in emerging trends such as SCI can be identified, represented, and shared collaboratively.

Cryptography and Security
TOWARDS AN ONTOLOGY MAPPING APPROACH FOR SECURITY MANAGEMENT

Alfred Ka Yiu Wong,Nandan Paranesh,Pradeep Ray

DOI: https://doi.org/10.1142/s0218213006003120

IF: 1.1

2006-01-01

International Journal on Artificial Intelligence Tools

Abstract:In the past decade, ontology has been actively researched in various domains. The different ontological tasks range from simple language modeling in the linguistic domain, to semantic integration in the semantic web, and recently to application-specific tasks such as financial fraud management. We follow the trend and attempt to tackle some of the ontological problems in security management. The most complicated problem out of all is the semantic interoperability problem that is evident in the existence of various types of security elements such as IDS, firewall and virus scanner. Another problem is related to the semantic modeling tasks required for autonomous and intelligent reasoning. Semantic modeling of security events is essential for automatic and intelligent event correlation tasks that analyze semantically the different sources of security information to more accurately present the holistic network security status. We present in this paper a novel and formal ontology mapping approach and security ontology for the supporting and possibly resolution of these problems.
OntoCSD: an ontology-based security model for an integrated solution of cyberspace defense

Dandan Wu,Jie Chen,Ruiyun Xie,Ke Chen

DOI: https://doi.org/10.1631/fitee.2300662

IF: 2.526

2024-10-01

Frontiers of Information Technology & Electronic Engineering

Abstract:The construction of an integrated solution for cyberspace defense with dynamic, flexible, and intelligent features is a new idea. To solve the problem whereby traditional static protection methods cannot respond to various network attacks or security demands in an adversarial network environment in time, and to form a complete integrated solution from "threat discovery" to "decision-making generation," we propose an ontology-based security model, OntoCSD, for an integrated solution of cyberspace defense that uses Web ontology language (OWL) to represent the ontology classes and relationships of threat monitoring, decision-making, response, and defense in cyberspace, and uses semantic Web rule language (SWRL) to design the defensive reasoning rules. OntoCSD can discover potential relationships among network attacks, vulnerabilities, the security state, and defense strategies. Further, an artificial intelligence (AI) expert system based on case-based reasoning (CBR) is used to quickly generate a detailed and comprehensive decision-making scheme. Finally, through Kendall's coefficient of concordance ( W ) and four experimental cases in a typical computer network defense (CND) system, which reasons on represented facts and the ontology, OntoCSD's consistency and its feasibility to solve the issues in the field of cyberspace defense are validated. OntoCSD supports automatic association and reasoning, and provides an integrated solution framework of cyberspace defense.

engineering, electrical & electronic,computer science, information systems, software engineering
The Design of Secure Document Management System

马晨华,陆国栋,钟云伟

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.19.022

2003-01-01

Abstract:This paper presents a three-tier secure document management system, using PKI, session key and RBAC. This system provides a key exchange protocol prolvodes in order to secure the encrypted documents in clients and only the users who own the proper key can read them. The middleware-tier constructs a RBAC authority database and utilizes SQL language to descript the constraint policies, providing an efficient way to implement role-based access control.

A Key-Recovery System for Long-term Encrypted Documents

A CoS-enabled Request Scheduling Policy

An automated method for the ontological representation of security directives

Towards Ontological Approach to Eliciting Risk-Based Security Requirements

A Deep Learning Approach for Ontology Enrichment from Unstructured Text

Information Security Ontology Model for Internet of Thing

Aligning social concerns with information system security: A fundamental ontology for social engineering

Towards Ontological Approach to Security Risk Analysis of Information System: Model and Architecture

Security Ontology in a Virtual University

Knowledge and Security

Analysis Framework for Web Content Security Based on Ontology

System Security Assurance: A Systematic Literature Review

Ontological Foundations of Modelling Security Policies for Logical Analytics

Security in Semantic Interoperation

Towards a relation extraction framework for cyber-security concepts

Security to text (S2T): multi-layered based security approaches for secret text content

Modeling for Investment Guidance as a Performance Pre-assessment Method of Enterprise Integration

A Smart City Infrastructure Ontology for Threats, Cybercrime, and Digital Forensic Investigation

TOWARDS AN ONTOLOGY MAPPING APPROACH FOR SECURITY MANAGEMENT

OntoCSD: an ontology-based security model for an integrated solution of cyberspace defense

The Design of Secure Document Management System