OntoSecure: A Semantic Web Based Tool for Network Security Status Prediction
Pardeep Bhandari, Manpreet Singh · 2016
Computer networks are becoming more and more important because of variety of services being applied through them, so is the trend of increase of threats to these networks. Traditional approaches of network security like packet filtering, IDS and more advanced IPS suffer from various problems. E.g. These mechanisms are not aware of the resources they are protecting, these mechanisms are independent of the context of their application, their working is common to every kind of environment, these approaches do not adapt to the changing environment (configuration of the network and changing scenarios) on the run, these approaches do not take the holistic view of security situation. The concept of Network Security Situational awareness has been proposed to tackle the network security in a holistic manner. For holistic view of security biggest challenge for computing community is an efficient interoperability among heterogeneous data sources Ontologies have proved to play important role in resolving semantic heterogeneity by providing formalization of knowledge in a particular domain. Ontology represents the concepts of interest in a domain and the relations among them in a machine processable format. Separate ontologies may be developed for related domains and various ontologies may be integrated. Individual ontologies allow the development of ontology for one information source independently, hence making possible the addition of new and removal of obsolete information sources. This feature makes the application of ontology in areas where configuration of a system is continuously changing like in a computer network. In this paper we have implemented a tool OntoSecure, a semantic web based tool for network security status prediction. The effectiveness of this tool has been proved by considering various test cases.