Volume 4, Issue 2 (6-2012)                   IJICTR 2012, 4(2): 27-35 | Back to browse issues page

XML Print

1- Information and Communication Security Department Research Institute for ICT (ex ITRC) Tehran, Iran
Abstract:   (2475 Views)

Graph knowledge models and ontologies are very powerful modeling and reasoning tools. We propose an effective approach to model network attacks and attack prediction which plays important roles in security management. The goals of this study are: First we model network attacks, their prerequisites and consequences using knowledge representation methods in order to provide description logic reasoning and inference over attack domain concepts. And secondly, we propose an ontology-based system which predicts potential attacks using inference and observing information which provided by sensory inputs. We generate our ontology and evaluate corresponding methods using CAPEC, CWE, and CVE hierarchical datasets. Results from experiments show significant capability improvements comparing to traditional hierarchical and relational models. Proposed method also reduces false alarms and improves intrusion detection effectiveness.

Full-Text [PDF 731 kb]   (1137 Downloads)    
Type of Study: Research | Subject: Information Technology