Enhanced Vulnerability Ontology for Information Risk Assessment and Dependability Management
Marco Domenico Aime, Fabio Guasconi · 2010
Security vulnerabilities play an increasing role within dependability procedures for information systems. However, traditional vulnerability models present several general shortcomings when matched with today requirements. To overcome these limits, we propose a vulnerability ontology based on three main enhancements: deeper integration with system asset ontology, better modelling of cause-effect relationships, and deeper integration with dependability control ontology.