Towards an Ontology-based Security Management

  • Authors:
  • Bill TSOUMAS;Dimitris GRITZALIS

  • Affiliations:
  • Athens University of Economics and Business, Greece;Athens University of Economics and Business, Greece

  • Venue:
  • AINA '06 Proceedings of the 20th International Conference on Advanced Information Networking and Applications - Volume 01
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

The paramount complexity of enterprise information leads to hard-to-deal security management issues and system configurations. We present a security management framework of an arbitrary information system (IS) which builds upon knowledge-based resources, such as security ontology (SO) providing reusable security knowledge interoperability, aggregation and reasoning exploiting security knowledge from diverse sources; in addition, the separation of security requirements from their technical implementations facilitates the security management. We provide a feasible framework, which links the high-level policy statements and deployable security controls and facilitates the security expert's work.