基于本体模型的网络系统安全参数采集过程

李涛; 林九川; 胡爱群

doi:10.11959/j.issn.2096-109x.2017.00131

您当前的位置：

首页 >

文章列表页 >

基于本体模型的网络系统安全参数采集过程

学术论文 | 更新时间：2024-06-03

- 基于本体模型的网络系统安全参数采集过程
- Ontology model based on security parameters capturing process for network systems
- 网络与信息安全学报 2017年3卷第2期页码：39-45
- 作者机构：
  
  1. 东南大学信息科学与工程学院，江苏南京 210096
  2. 公安部第三研究所，上海 200031
- 作者简介：
  
  [ "李涛（1984-），男，江苏镇江人，博士，东南大学讲师，主要研究方向为安全评估、移动终端防护。" ]
  [ "林九川（1980-），男，江苏盐城人，公安部第三研究所副研究员，主要研究方向为系统安全评估、漏洞挖掘。" ]
  [ "胡爱群（1964-），男，江苏如皋人，博士，东南大学教授、博士生导师，主要研究方向为网络与信息安全、物理层安全技术。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(61601113);国家重点基础研究发展计划基金资助项目;The National Key Basic Research De-velopment Program(2103CB338003);公安部第三研究所开放课题基金资助项目;Fund from the Third Research Institute of Ministry of Public Se-curity(C15606)
- DOI：10.11959/j.issn.2096-109x.2017.00131
  中图分类号： TN929.53
- 网络首发：2017-02，
  
  纸质出版：2017-02-15
- 稿件说明：
移动端阅览
李涛, 林九川, 胡爱群. 基于本体模型的网络系统安全参数采集过程[J]. 网络与信息安全学报, 2017,3(2):39-45.

Tao LI, NJiu-chuan LI, Ai-qun HU. Ontology model based on security parameters capturing process for network systems[J]. Chinese Journal of Network and Information Security, 2017, 3(2): 39-45.
李涛, 林九川, 胡爱群. 基于本体模型的网络系统安全参数采集过程[J]. 网络与信息安全学报, 2017,3(2):39-45. DOI： 10.11959/j.issn.2096-109x.2017.00131.

Tao LI, NJiu-chuan LI, Ai-qun HU. Ontology model based on security parameters capturing process for network systems[J]. Chinese Journal of Network and Information Security, 2017, 3(2): 39-45. DOI： 10.11959/j.issn.2096-109x.2017.00131.

摘要

提出一种通用的网络系统安全参数采集过程，将层次化的安全参数采集框架和本体化采集模型融入到整体网络架构中，根据实际网络环境对安全数据进行属性分类和关联性描述，对安全参数进行了多维度扩展，抽象出信源、层级等多种属性，有利于对参数进行进一步的分析。在此基础上，描述了在实际系统中应用本框架进行参数采集的步骤，能够有效地为整体网络安全评估提供指导和基础参数的支撑。

Abstract

A general security data capturing process for network system was proposed

which combined hierarchical capturing framework and ontology model to whole network architecture. Attributes of security parameter were di-vided and relationships of parameter were descripted. Security parameters were extended to multiple dimensions. Multiple attributes such as information source and hierarchy were abstracted

which were benefit for analysis of se-curity parameters. Based on the proposed framework

the process of application in real systems were described. The whole processes and framework efficiently provided guidance for network security evaluation and supporting of ba-sic parameters.

关键词

Keywords

references

张焕国，韩文报，来学嘉，等．网络空间安全概述 [J ] . 中国科学：信息科学， 2016 , 46 ( 2 ): 125 - 164 .

ZHANG H G , HAN W B , LAI X J , et al . Survey on cyberspace se-curity [J ] . Scientia Sinica Informations , 2016 , 46 ( 2 ): 125 - 164 .

A system for reliable large-scale log collection [EB/OL ] . http://www.eecs.berkeley.edu/Pubs/TechRpts/2010/EECS-2010-25.html http://www.eecs.berkeley.edu/Pubs/TechRpts/2010/EECS-2010-25.html .

JONGHOON K . PsyBoG: a scalable botnet detection method for large-scale DNS traffic [J ] . Computer Networks , 2016 , 97 ( 14 ): 48 - 73 .

KIRUBAVATHI G , ANITHA R . Botnet detection via mining of traffic flow characteristics [J ] . Computers ＆ Electrical Engineering , 2016 , 50 : 91 - 101 .

ZHANG Y , An adaptive flow counting method for anomaly detection in SDN [C ] // The 9th ACM Conference on Emerging Networking Ex-periments and Technologies . 2013 : 25 - 30 .

王威，方滨兴，崔翔．基于终端行为特征的IRC僵尸网络检测 [J ] . 计算机学报， 2009 , 32 ( 10 ): 1980 - 1988 .

WANG W , FANG B X , CUI X . IRC botnet detection based on host behavior [J ] . Chinese Journal of Computers , 2009 , 32 ( 10 ): 1980 - 1988 .

BHANDARI P , GUJRAL M S . Ontology based approach for per-ception of network security state [C ] // Recent Advances in En-gineering and Computational Sciences (RAECS) . 2014 : 1 - 6 .

G´ OMEZ-P´EREZ A , FERN´ANDEZ-L´OPEZ M , CORCHO O . Ontological engineering [M ] // Metasynthetic Computing and Engi-neering of Complex System . Berlin : Springer , 2004 .

GUARINO N . Formal ontology and information systems [C ] // FOIS'98 . 1998 : 3 - 15 .

FRANK A U . Spatial ontology: a geographical information point of view [M ] . Berlin : Springer , 1997 .

ARANGO G , WILLIAMS G , ISCOE N . Domain modeling for software engineering [C ] // The 13th International Conference on Software Engineering . 1991 : 340 - 343 .

GRUBER T R . A translation approach to portable ontologies [J ] . Knowledge Acquisition , 1993 , 5 ( 2 ): 199 - 220 .

BORST W N . Construction of engineering ontologies for knowl-edge sharing and reuse [D ] . Enschede: University Twente , 1997 .

AVIZIENIS A , LAPRIE J C , RANDELL B , et al . Basic concepts and taxonomy of dependable and secure computing [J ] . IEEE Trans. Dependable Sec. Computer , 2004 , 1 ( 1 ): 11 - 33 .

LANDWEHR C E , BULL A R , MCDERMOTT J P , et al . A tax-onomy of computer program security flaws [J ] . ACM Computer Survay , 1994 , 26 ( 3 ): 211 - 254 .

Owl Web ontology language [EB/OL ] . http://www.w3.org/TR/owl-features http://www.w3.org/TR/owl-features .

The protege ontology editor and knowledge acquisition system [EB/OL ] . http://protege.stanford.edu http://protege.stanford.edu .

GRUBER T R . A translation approach to portable ontology specifi-cation [J ] . International Journal Human-Computer Studies , 1993 , 43 : 907 - 928 .

浏览量

2616

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

暂无数据