A System for Managing Security Knowledge using Case Based Reasoning and Misuse Cases
Corrado Aaron Visaggio, Francesca de Rosa · Zenodo (CERN European Organization for Nuclear Research) · 2020
Abstract: Making secure a software system is a very critical purpose, especially because it is very hard to consolidate an exhaustive body of knowledge about security risks and related countermeasures. To define a technological infrastructure for exploiting this knowledge poses many challenges. This paper introduces a system to capture, share and reuse software security knowledge within a Software Organization. The system collects knowledge in the form of misuse cases and makes use of Case Based Reasoning for implementing knowledge management processes.