A Security Testing Process supported by an Ontology Environment: a conceptual proposal

被引：0
作者：
Siqueira Bueno, Paulo Marcos [1 ,2 ]
Rosa, Ferrucio de Franco [1 ,2 ]
Jino, Mario [2 ]
Bonacin, Rodrigo [1 ,3 ]
机构：
[1] CTI Renato Archer, Campinas, SP, Brazil
[2] FEEC UNICAMP, Campinas, SP, Brazil
[3] FACCAMP, Campo Limpo, SP, Brazil
来源：
2018 IEEE/ACS 15TH INTERNATIONAL CONFERENCE ON COMPUTER SYSTEMS AND APPLICATIONS (AICCSA) | 2018年
关键词：
Test; Security; Process; Ontology;
D O I：
暂无
中图分类号：
TP301 [理论、方法];
学科分类号：
081202 ;
摘要：
Information security is a critical issue in the context of complex and interconnected nowadays IT Systems. Innovative testing approaches are demanded to verify whether the main security characteristics are provided in the systems. The conceptual formalization level required by security test processes can be supplied by semantic technologies. STEP-ONE is the Security TEst Process supported by ONtology Environment; its foundations come from largely accepted testing processes and security testing standards. The STPO (Security Testing Process Ontology) formalizes and makes explicit the main concepts of the domain. We present a conceptual characterization of STEP-ONE and describe a usage scenario to illustrate how the proposal can be applied. The main contributions are the conceptual process and the ontology. Our proposal is meant to be applied for the evaluation of IT systems with respect to security characteristics as well as to make systematic the security testing activities.
引用
收藏
页数：8
相关论文
共 39 条
[1]  
[Anonymous], 2017, 122072017 ISOIECIEEE
[2]  
[Anonymous], 2013, BS: 27001: 2013
[3]  
Bechhofer S., 2004, W3C recommendation
[4]  
Bishop M, 2003, Computer security: art and science
[5]  
Bueno PMS, 2006, LECT NOTES COMPUT SC, V4034, P263
[6]  
Burnstein I., 1996, P INT TEST C
[7]  
Cisco, 2018, CISC SEC CONTR FRAM
[8]  
de Franco Rosa F., 2018, ONTOLOGY SECURITY AS, V738
[9]  
de Franco Rosa F., 2017, SURVEY SECURITY ASSE, V569
[10]   ROoST: Reference Ontology on Software Testing [J].
de Souza, Erica Ferreira ;
Falbo, Ricardo de Almeida ;
Vijaykumar, Nandamudi Lankalapali .
APPLIED ONTOLOGY, 2017, 12 (01) :59-90
1234