基于本体模型的网络系统安全参数采集过程ontologymodel-大数据.pdfVIP

第 3 卷第 2 期 网络与信息安全学报 Vol.3 No.2 2017 年 2 月 Chinese Journal of Network and Information Security February 2017 基于本体模型的网络系统安全参数采集过程 李涛 1 ，林九川 2 ，胡爱群 1 （1. 东南大学信息科学与工程学院，江苏 南京 210096 ； 2. 公安部第三研究所，上 200031 ） 摘 要：提出一种通用的网络系统安全参数采集过程，将层次化的安全参数采集框架和本体化采集模型融入 到整体网络架构中，根据实际网络环境对安全数据进行属性分类和关联性描述，对安全参数进行了多维度扩 展，抽象出信源、层级等多种属性，有利于对参数进行进一步的分析。在此基础上，描述了在实际系统中应 用本框架进行参数采集的步骤，能够有效地为整体网络安全评估提供指导和基础参数的支撑。 关键词：安全评估；安全参数采集；本体论；系统安全 中图分类号：TN929.53 文献标识码：A doi: 10.11959/j.issn.2096-109x.2017.00131 Ontology model based on security parameters capturing process for network systems 1 2 1 LI Tao , LIN Jiu-chuan , HU Ai-qun (1. School of Information Science and Engineering, Southeast University, Nanjing 210096, China; 2. The Third Research Institute of Ministry of Public Security, Shanghai 200031, China) Abstract: A general security data capturing process for network system was proposed, which combined hierarchical capturing framework and ontology model to whole network architecture. Attributes of security parameter were di- vided and relationships of parameter were descripted. Security parameters were extended to multiple dimensions. Multiple attributes such as information source and hierarchy were abstracted, which were benefit for analysis of se- curity parameters. Based on the proposed framework, the process of application in real systems were described. The whole processes and framework efficiently provided guidance for network security evaluation and supporting of b