CoreSec: uma ontologia para o domÃnio de seguranÃa da informaÃÃo

AUTOR(ES)

Ryan Ribeiro de Azevedo

DATA DE PUBLICAÇÃO

2008

RESUMO

In corporative and heterogeneous environments, the resources sharing to solve problems is tightly associated to information security. A critical aspect to be considered for the organizations is the requirement of an effective and efficient acquisition and distribution of knowledge about risks, vulnerabilities and threats that can be, therefore, explored and able to cause security incidents and impacting negatively on business. Several environments of human actuation need transparent means to plan and manage problems related to information security. There is a significant increase in complexity of design and plan safety requiring manipulation means of information. For that, this thesis proposes an ontology for this field of computer security, called CoreSec. The study aims to demonstrate that once knowledge is formalized, it is possible reuse it, perform inference, process it computationally, as well as become capable communication among humans and intelligent agents. Our proposal considers that information security will be more efficient if it is based on a formal model of domain information, as an ontology, being applied to assist the activities of those responsible for security, in analysis and risk assessment, elicitation of security requirements, analysis of vulnerabilities and development of more specific ontologies for the field of information security.

ASSUNTO(S)

information of security ontologia semantic web ontology ciencia da computacao web semÃntica seguranÃa da informaÃÃo

Documentos Relacionados

• Modelo de governanÃa da seguranÃa da informaÃÃo no escopo da governanÃa computacional
• Proposta de um modelo de avaliaÃÃo da seguranÃa da informaÃÃo nas organizaÃÃes centrada no usuÃrio
• IdentificaÃÃo de informaÃÃes gerenciais para melhoria da seguranÃa no trÃnsito de alagoas usando o desdobramento da funÃÃo qualidade - QFD
• AplicaÃÃo da abordagem de domÃnio espectral para anÃlise de moduladores eletroÃpticos integrados.
• Proposta de um modelo de seguranÃa para VPNs na interligaÃÃo de redes corporativas