Basis for an integrated security ontology according to a systematic review of existing proposals
Computer Standards & Interfaces
International Journal of Internet Technology and Secured Transactions
| Hi-index | 0.00 |
After being computerized, enterprises import various information assets to enhance competitiveness. In order to make management of information asset more efficient, reduce the difficulty of auditing and make professional knowledge of this domain to reach the goal of share and reuse through the concept and technique of semantic web, the research imports the methodology of knowledge engineering and combines auditing regulations composed by SWRL to build an information-asset knowledgebase system. The methodology of this research can divide into eight steps. The first six ones build professional knowledge of information asset to ontology according to OWL, RDF and technique of semantic web combined with the analyzing of information asset. The last two not only combine regulations in SWRL and utilize information-asset knowledgebase system built by Protégé, but also integrate database and import inference engine to implement. The methodology can assist auditors to know the status of information asset well at any moment. It can also support auditors to discover the problems apropos in efficiency. In addition to detecting harmful individual of information asset, it also can verify that all information assets are authorized and dealt with appropriately. Besides, it can make professional knowledge of this domain to reach the goal of share and reuse through the concept and technique of semantic web.