Onto CSD: an ontology-based security model for an integrated solution of cyberspace defense  

作　　者：Dandan WU Jie CHEN Ruiyun XIE Ke CHEN 

机构地区：[1]School of Computer Science,Chengdu College of University of Electronic Science and Technology of China,Chengdu 610731,China [2]School of Cybersecurity,Northwestern Polytechnical University,Xi'an 710000,China [3]China Electronics Technology Cyber Security Co.,Ltd.,Chengdu 610000,China

出　　处：《Frontiers of Information Technology & Electronic Engineering》2024年第9期1209-1225,共17页信息与电子工程前沿（英文版）

摘　　要：The construction of an integrated solution for cyberspace defense with dynamic, flexible, and intelligent features is a new idea. To solve the problem whereby traditional static protection methods cannot respond to various network attacks or security demands in an adversarial network environment in time, and to form a complete integrated solution from “threat discovery” to “decision-making generation,” we propose an ontology-based security model, Onto CSD, for an integrated solution of cyberspace defense that uses Web ontology language(OWL) to represent the ontology classes and relationships of threat monitoring, decision-making, response, and defense in cyberspace, and uses semantic Web rule language(SWRL) to design the defensive reasoning rules. Onto CSD can discover potential relationships among network attacks, vulnerabilities, the security state, and defense strategies. Further, an artificial intelligence(AI) expert system based on case-based reasoning(CBR) is used to quickly generate a detailed and comprehensive decision-making scheme. Finally, through Kendall ' s coefficient of concordance(W) and four experimental cases in a typical computer network defense(CND) system, which reasons on represented facts and the ontology, Onto CSD ' s consistency and its feasibility to solve the issues in the field of cyberspace defense are validated. Onto CSD supports automatic association and reasoning, and provides an integrated solution framework of cyberspace defense.

关 键 词：Cyberspace defense Integrated solution ONTOLOGY Case-based reasoning(CBR) Computer network defense(CND) 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]