Abstract:Security analysis should take advantage of a reliable knowledge base that contains semantically-rich information about a protected network. This knowledge is provided by network mapping tools. These tools rely on models to represent the entities of interest, and they, leverage off network discover), techniques to populate the model structure with the data that is pertinent to a specific target network. Unfortunately, existing tools rely on incomplete data models. Networks are complex systems and most approaches oversimplify their target models in an effort to limit the problem space. In addition, the techniques used to populate the models are limited in scope and are difficult to extend.This paper presents NetMap, a security tool for network modeling, discovery, and analysis. NetMap relies on a comprehensive network model that is not limited to a specific network level; it integrates network information throughout the layers. The model contains information about topology, infrastructure, and deployed services. In addition, the relationships among different entities in different layers of the model are made explicit. The modeled information is managed by using a suite of composable network tools that can determine various aspects of network configurations through scanning techniques and heuristics. Tools in the suite are responsible for a single, well-defined task. Each tool has an abstract specification of the input, the output, the type of processing, and the requirements for carrying out a task. Tool descriptions are expressed in a Network Tool Language. The tool descriptions are then stored in a database. By using the network model and the tool descriptions, NetMap is able to automatically determine which tools are needed to perform a particular complex task and how the tools should be scheduled to obtain the requested results.

Research on Ontology-based Network Security Knowledge Map

Ontology Construction for Security Analysis of Network Nodes

Network security situation knowledge base model based on ontology

TOWARDS AN ONTOLOGY MAPPING APPROACH FOR SECURITY MANAGEMENT

Graph database-based network security situation awareness data storage method

Integrating Heterogeneous Security Knowledge Sources for Comprehensive Security Analysis

STIX-based Network Security Knowledge Graph Ontology Modeling Method.

Immune-Based Network Dynamic Risk Control Strategy Knowledge Ontology Construction

Modelling Of Research-Team Knowledge Network Based On Ontology Engineering Technology

Research on Ontological Information Modeling for the Integration of Cyber and Physical Security in Power Systems

Research on construction method of knowledge graph in the civil aviation security field

Network Security Situation Awareness Based on Semantic Ontology and User-Defined Rules for Internet of Things.

Ontologies for Network Security and Future Challenges

Composable Tools For Network Discovery And Security Analysis

Multi-Source Knowledge Reasoning for Data-Driven IoT Security

Information Security Ontology Model for Internet of Thing

Multilevel Map of Network Security Situation Based on MapXtreme

An Ontology-Based Dynamic Attack Graph Generation Approach for the Internet of Vehicles

Network Security Situation Awareness Technology Based on Multi-source Heterogeneous Data

Construction of Organization Knowledge Map Based on Ontology

A Searchable Knowledge Map Based on Ontology