Document (#43308)

Author

Xu, G.
Cao, Y.
Ren, Y.
Li, X.
Feng, Z.

Title

Network security situation awareness based on semantic ontology and user-defined rules for Internet of Things

Source

IEEE Access. 10.1109/ACCESS.2017.2734681, 5, (21046-21056) [http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=7999187]

Year

2017

Abstract

Internet of Things (IoT) brings the third development wave of the global information industry which makes users, network and perception devices cooperate more closely. However, if IoT has security problems, it may cause a variety of damage and even threaten human lives and properties. To improve the abilities of monitoring, providing emergency response and predicting the development trend of IoT security, a new paradigm called network security situation awareness (NSSA) is proposed. However, it is limited by its ability to mine and evaluate security situation elements from multi-source heterogeneous network security information. To solve this problem, this paper proposes an IoT network security situation awareness model using situation reasoning method based on semantic ontology and user-defined rules. Ontology technology can provide a unified and formalized description to solve the problem of semantic heterogeneity in the IoT security domain. In this paper, four key sub-domains are proposed to reflect an IoT security situation: context, attack, vulnerability and network flow. Further, user-defined rules can compensate for the limited description ability of ontology, and hence can enhance the reasoning ability of our proposed ontology model. The examples in real IoT scenarios show that the ability of the network security situation awareness that adopts our situation reasoning method is more comprehensive and more powerful reasoning abilities than the traditional NSSA methods. [http://ieeexplore.ieee.org/abstract/document/7999187/]

Content

DOI 10.1109/ACCESS.2017.2734681.

Theme

Wissensrepräsentation

Similar documents (author)

1. Feng, S.: ¬A comparative study of indexing languages in single and multidatabase searching (1989) 6.01

   6.010904 = sum of:
     6.010904 = weight(author_txt:feng in 2494) [ClassicSimilarity], result of:
       6.010904 = fieldWeight in 2494, product of:
         1.0 = tf(freq=1.0), with freq of:
           1.0 = termFreq=1.0
         9.617446 = idf(docFreq=7, maxDocs=44218)
         0.625 = fieldNorm(doc=2494)
   

2. Feng, Y.; Agosto, D.E.: Revisiting personal information management through information practices with activity tracking technology (2019) 4.81

   4.808723 = sum of:
     4.808723 = weight(author_txt:feng in 5438) [ClassicSimilarity], result of:
       4.808723 = fieldWeight in 5438, product of:
         1.0 = tf(freq=1.0), with freq of:
           1.0 = termFreq=1.0
         9.617446 = idf(docFreq=7, maxDocs=44218)
         0.5 = fieldNorm(doc=5438)
   

3. Feng, L.; Jeusfeld, M.A.; Hoppenbrouwers, J.: Beyond information searching and browsing : acquiring knowledge from digital libraries (2005) 3.61

   3.606542 = sum of:
     3.606542 = weight(author_txt:feng in 1000) [ClassicSimilarity], result of:
       3.606542 = fieldWeight in 1000, product of:
         1.0 = tf(freq=1.0), with freq of:
           1.0 = termFreq=1.0
         9.617446 = idf(docFreq=7, maxDocs=44218)
         0.375 = fieldNorm(doc=1000)
   

4. Kong, S.; Ye, F.; Feng, L.; Zhao, Z.: Towards the prediction problems of bursting hashtags on Twitter (2015) 3.01

   3.005452 = sum of:
     3.005452 = weight(author_txt:feng in 2338) [ClassicSimilarity], result of:
       3.005452 = fieldWeight in 2338, product of:
         1.0 = tf(freq=1.0), with freq of:
           1.0 = termFreq=1.0
         9.617446 = idf(docFreq=7, maxDocs=44218)
         0.3125 = fieldNorm(doc=2338)
   

5. Bartolo, L.M.; Lowe, C.S.; Melton, A.C.; Strahl, M.; Feng, L.; Woolverton, C.J.: Effectiveness of tagging laboratory data using Dublin Core in an electronic scientific notebook (2002) 2.40

   2.4043615 = sum of:
     2.4043615 = weight(author_txt:feng in 3598) [ClassicSimilarity], result of:
       2.4043615 = fieldWeight in 3598, product of:
         1.0 = tf(freq=1.0), with freq of:
           1.0 = termFreq=1.0
         9.617446 = idf(docFreq=7, maxDocs=44218)
         0.25 = fieldNorm(doc=3598)
   

Similar documents (content)

1. Mao, M.: Ontology mapping : towards semantic interoperability in distributed and heterogeneous environments (2008) 0.24

   0.24113114 = sum of:
     0.24113114 = product of:
       0.60282785 = sum of:
         0.027844938 = weight(abstract_txt:problem in 4659) [ClassicSimilarity], result of:
           0.027844938 = score(doc=4659,freq=4.0), product of:
             0.05707422 = queryWeight, product of:
               1.0064783 = boost
               4.460548 = idf(docFreq=1388, maxDocs=44218)
               0.01271298 = queryNorm
             0.48787242 = fieldWeight in 4659, product of:
               2.0 = tf(freq=4.0), with freq of:
                 4.0 = termFreq=4.0
               4.460548 = idf(docFreq=1388, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.009265726 = weight(abstract_txt:more in 4659) [ClassicSimilarity], result of:
           0.009265726 = score(doc=4659,freq=1.0), product of:
             0.049801897 = queryWeight, product of:
               1.151471 = boost
               3.402088 = idf(docFreq=4002, maxDocs=44218)
               0.01271298 = queryNorm
             0.18605168 = fieldWeight in 4659, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               3.402088 = idf(docFreq=4002, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.025735939 = weight(abstract_txt:limited in 4659) [ClassicSimilarity], result of:
           0.025735939 = score(doc=4659,freq=1.0), product of:
             0.085965164 = queryWeight, product of:
               1.2352239 = boost
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.01271298 = queryNorm
             0.29937637 = fieldWeight in 4659, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.061511572 = weight(abstract_txt:solve in 4659) [ClassicSimilarity], result of:
           0.061511572 = score(doc=4659,freq=2.0), product of:
             0.12197112 = queryWeight, product of:
               1.4713397 = boost
               6.5207376 = idf(docFreq=176, maxDocs=44218)
               0.01271298 = queryNorm
             0.5043126 = fieldWeight in 4659, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               6.5207376 = idf(docFreq=176, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.04215552 = weight(abstract_txt:semantic in 4659) [ClassicSimilarity], result of:
           0.04215552 = score(doc=4659,freq=4.0), product of:
             0.086140856 = queryWeight, product of:
               1.5143793 = boost
               4.4743214 = idf(docFreq=1369, maxDocs=44218)
               0.01271298 = queryNorm
             0.4893789 = fieldWeight in 4659, product of:
               2.0 = tf(freq=4.0), with freq of:
                 4.0 = termFreq=4.0
               4.4743214 = idf(docFreq=1369, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.02304367 = weight(abstract_txt:proposed in 4659) [ClassicSimilarity], result of:
           0.02304367 = score(doc=4659,freq=1.0), product of:
             0.091417074 = queryWeight, product of:
               1.5600686 = boost
               4.6093135 = idf(docFreq=1196, maxDocs=44218)
               0.01271298 = queryNorm
             0.25207183 = fieldWeight in 4659, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.6093135 = idf(docFreq=1196, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.033797637 = weight(abstract_txt:rules in 4659) [ClassicSimilarity], result of:
           0.033797637 = score(doc=4659,freq=1.0), product of:
             0.118009545 = queryWeight, product of:
               1.7725098 = boost
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.01271298 = queryNorm
             0.2863975 = fieldWeight in 4659, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.054411113 = weight(abstract_txt:ability in 4659) [ClassicSimilarity], result of:
           0.054411113 = score(doc=4659,freq=1.0), product of:
             0.1784148 = queryWeight, product of:
               2.516604 = boost
               5.5765896 = idf(docFreq=454, maxDocs=44218)
               0.01271298 = queryNorm
             0.30496973 = fieldWeight in 4659, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.5765896 = idf(docFreq=454, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.11516138 = weight(abstract_txt:reasoning in 4659) [ClassicSimilarity], result of:
           0.11516138 = score(doc=4659,freq=2.0), product of:
             0.23343559 = queryWeight, product of:
               2.8786108 = boost
               6.378767 = idf(docFreq=203, maxDocs=44218)
               0.01271298 = queryNorm
             0.4933326 = fieldWeight in 4659, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               6.378767 = idf(docFreq=203, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
         0.20990036 = weight(abstract_txt:ontology in 4659) [ClassicSimilarity], result of:
           0.20990036 = score(doc=4659,freq=10.0), product of:
             0.21942423 = queryWeight, product of:
               3.1203027 = boost
               5.5314693 = idf(docFreq=475, maxDocs=44218)
               0.01271298 = queryNorm
             0.9565961 = fieldWeight in 4659, product of:
               3.1622777 = tf(freq=10.0), with freq of:
                 10.0 = termFreq=10.0
               5.5314693 = idf(docFreq=475, maxDocs=44218)
               0.0546875 = fieldNorm(doc=4659)
       0.4 = coord(10/25)
   

2. Ahmad, A.; Desouza, K.C.; Maynard, S.B.; Naseer, H.; Baskerville, R.L.: How integration of cyber security management and incident response enables organizational learning (2020) 0.17

   0.17026366 = sum of:
     0.17026366 = product of:
       1.064148 = sum of:
         0.062424477 = weight(abstract_txt:damage in 5949) [ClassicSimilarity], result of:
           0.062424477 = score(doc=5949,freq=1.0), product of:
             0.112683706 = queryWeight, product of:
               8.863674 = idf(docFreq=16, maxDocs=44218)
               0.01271298 = queryNorm
             0.55397964 = fieldWeight in 5949, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               8.863674 = idf(docFreq=16, maxDocs=44218)
               0.0625 = fieldNorm(doc=5949)
         0.06661716 = weight(abstract_txt:attack in 5949) [ClassicSimilarity], result of:
           0.06661716 = score(doc=5949,freq=1.0), product of:
             0.11767438 = queryWeight, product of:
               1.0219047 = boost
               9.05783 = idf(docFreq=13, maxDocs=44218)
               0.01271298 = queryNorm
             0.56611437 = fieldWeight in 5949, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               9.05783 = idf(docFreq=13, maxDocs=44218)
               0.0625 = fieldNorm(doc=5949)
         0.09263808 = weight(abstract_txt:awareness in 5949) [ClassicSimilarity], result of:
           0.09263808 = score(doc=5949,freq=1.0), product of:
             0.23272206 = queryWeight, product of:
               2.874208 = boost
               6.369011 = idf(docFreq=205, maxDocs=44218)
               0.01271298 = queryNorm
             0.39806318 = fieldWeight in 5949, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               6.369011 = idf(docFreq=205, maxDocs=44218)
               0.0625 = fieldNorm(doc=5949)
         0.84246826 = weight(abstract_txt:security in 5949) [ClassicSimilarity], result of:
           0.84246826 = score(doc=5949,freq=9.0), product of:
             0.66157544 = queryWeight, product of:
               7.662299 = boost
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.01271298 = queryNorm
             1.2734274 = fieldWeight in 5949, product of:
               3.0 = tf(freq=9.0), with freq of:
                 9.0 = termFreq=9.0
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.0625 = fieldNorm(doc=5949)
       0.16 = coord(4/25)
   

3. Szofran, N.: Internet etiquette and ethics (1994) 0.14

   0.13733001 = sum of:
     0.13733001 = product of:
       1.1444168 = sum of:
         0.11587762 = weight(abstract_txt:rules in 7424) [ClassicSimilarity], result of:
           0.11587762 = score(doc=7424,freq=1.0), product of:
             0.118009545 = queryWeight, product of:
               1.7725098 = boost
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.01271298 = queryNorm
             0.9819343 = fieldWeight in 7424, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.1875 = fieldNorm(doc=7424)
         0.18607095 = weight(abstract_txt:network in 7424) [ClassicSimilarity], result of:
           0.18607095 = score(doc=7424,freq=1.0), product of:
             0.21463245 = queryWeight, product of:
               3.6514566 = boost
               4.6236176 = idf(docFreq=1179, maxDocs=44218)
               0.01271298 = queryNorm
             0.86692834 = fieldWeight in 7424, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.6236176 = idf(docFreq=1179, maxDocs=44218)
               0.1875 = fieldNorm(doc=7424)
         0.84246826 = weight(abstract_txt:security in 7424) [ClassicSimilarity], result of:
           0.84246826 = score(doc=7424,freq=1.0), product of:
             0.66157544 = queryWeight, product of:
               7.662299 = boost
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.01271298 = queryNorm
             1.2734274 = fieldWeight in 7424, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               6.7916126 = idf(docFreq=134, maxDocs=44218)
               0.1875 = fieldNorm(doc=7424)
       0.12 = coord(3/25)
   

4. Pankowski, T.: Ontological databases with faceted queries (2022) 0.13

   0.13394086 = sum of:
     0.13394086 = product of:
       0.4185652 = sum of:
         0.023119109 = weight(abstract_txt:method in 666) [ClassicSimilarity], result of:
           0.023119109 = score(doc=666,freq=2.0), product of:
             0.058112815 = queryWeight, product of:
               1.0155946 = boost
               4.50095 = idf(docFreq=1333, maxDocs=44218)
               0.01271298 = queryNorm
             0.3978315 = fieldWeight in 666, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               4.50095 = idf(docFreq=1333, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
         0.020266578 = weight(abstract_txt:description in 666) [ClassicSimilarity], result of:
           0.020266578 = score(doc=666,freq=1.0), product of:
             0.06706379 = queryWeight, product of:
               1.0910094 = boost
               4.835176 = idf(docFreq=954, maxDocs=44218)
               0.01271298 = queryNorm
             0.3021985 = fieldWeight in 666, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.835176 = idf(docFreq=954, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
         0.029412502 = weight(abstract_txt:limited in 666) [ClassicSimilarity], result of:
           0.029412502 = score(doc=666,freq=1.0), product of:
             0.085965164 = queryWeight, product of:
               1.2352239 = boost
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.01271298 = queryNorm
             0.34214443 = fieldWeight in 666, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
         0.013441027 = weight(abstract_txt:user in 666) [ClassicSimilarity], result of:
           0.013441027 = score(doc=666,freq=1.0), product of:
             0.05838302 = queryWeight, product of:
               1.2467327 = boost
               3.6835442 = idf(docFreq=3020, maxDocs=44218)
               0.01271298 = queryNorm
             0.23022151 = fieldWeight in 666, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               3.6835442 = idf(docFreq=3020, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
         0.026335621 = weight(abstract_txt:proposed in 666) [ClassicSimilarity], result of:
           0.026335621 = score(doc=666,freq=1.0), product of:
             0.091417074 = queryWeight, product of:
               1.5600686 = boost
               4.6093135 = idf(docFreq=1196, maxDocs=44218)
               0.01271298 = queryNorm
             0.2880821 = fieldWeight in 666, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.6093135 = idf(docFreq=1196, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
         0.038385298 = weight(abstract_txt:defined in 666) [ClassicSimilarity], result of:
           0.038385298 = score(doc=666,freq=1.0), product of:
             0.117519036 = queryWeight, product of:
               1.7688221 = boost
               5.2260876 = idf(docFreq=645, maxDocs=44218)
               0.01271298 = queryNorm
             0.32663047 = fieldWeight in 666, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.2260876 = idf(docFreq=645, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
         0.06690197 = weight(abstract_txt:rules in 666) [ClassicSimilarity], result of:
           0.06690197 = score(doc=666,freq=3.0), product of:
             0.118009545 = queryWeight, product of:
               1.7725098 = boost
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.01271298 = queryNorm
             0.56692 = fieldWeight in 666, product of:
               1.7320508 = tf(freq=3.0), with freq of:
                 3.0 = termFreq=3.0
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
         0.20070311 = weight(abstract_txt:ontology in 666) [ClassicSimilarity], result of:
           0.20070311 = score(doc=666,freq=7.0), product of:
             0.21942423 = queryWeight, product of:
               3.1203027 = boost
               5.5314693 = idf(docFreq=475, maxDocs=44218)
               0.01271298 = queryNorm
             0.9146807 = fieldWeight in 666, product of:
               2.6457512 = tf(freq=7.0), with freq of:
                 7.0 = termFreq=7.0
               5.5314693 = idf(docFreq=475, maxDocs=44218)
               0.0625 = fieldNorm(doc=666)
       0.32 = coord(8/25)
   

5. Raghu, T.S.; Ramesh, R.; Whinston, A.B.: Addressing the homeland security problem : a collaborative decision-making framework (2005) 0.13

   0.12876832 = sum of:
     0.12876832 = product of:
       0.45988685 = sum of:
         0.015911393 = weight(abstract_txt:problem in 3235) [ClassicSimilarity], result of:
           0.015911393 = score(doc=3235,freq=1.0), product of:
             0.05707422 = queryWeight, product of:
               1.0064783 = boost
               4.460548 = idf(docFreq=1388, maxDocs=44218)
               0.01271298 = queryNorm
             0.27878425 = fieldWeight in 3235, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.460548 = idf(docFreq=1388, maxDocs=44218)
               0.0625 = fieldNorm(doc=3235)
         0.029412502 = weight(abstract_txt:limited in 3235) [ClassicSimilarity], result of:
           0.029412502 = score(doc=3235,freq=1.0), product of:
             0.085965164 = queryWeight, product of:
               1.2352239 = boost
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.01271298 = queryNorm
             0.34214443 = fieldWeight in 3235, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.474311 = idf(docFreq=503, maxDocs=44218)
               0.0625 = fieldNorm(doc=3235)
         0.037244193 = weight(abstract_txt:proposed in 3235) [ClassicSimilarity], result of:
           0.037244193 = score(doc=3235,freq=2.0), product of:
             0.091417074 = queryWeight, product of:
               1.5600686 = boost
               4.6093135 = idf(docFreq=1196, maxDocs=44218)
               0.01271298 = queryNorm
             0.4074096 = fieldWeight in 3235, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               4.6093135 = idf(docFreq=1196, maxDocs=44218)
               0.0625 = fieldNorm(doc=3235)
         0.038625874 = weight(abstract_txt:rules in 3235) [ClassicSimilarity], result of:
           0.038625874 = score(doc=3235,freq=1.0), product of:
             0.118009545 = queryWeight, product of:
               1.7725098 = boost
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.01271298 = queryNorm
             0.32731143 = fieldWeight in 3235, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               5.236983 = idf(docFreq=638, maxDocs=44218)
               0.0625 = fieldNorm(doc=3235)
         0.09263808 = weight(abstract_txt:awareness in 3235) [ClassicSimilarity], result of:
           0.09263808 = score(doc=3235,freq=1.0), product of:
             0.23272206 = queryWeight, product of:
               2.874208 = boost
               6.369011 = idf(docFreq=205, maxDocs=44218)
               0.01271298 = queryNorm
             0.39806318 = fieldWeight in 3235, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               6.369011 = idf(docFreq=205, maxDocs=44218)
               0.0625 = fieldNorm(doc=3235)
         0.06202365 = weight(abstract_txt:network in 3235) [ClassicSimilarity], result of:
           0.06202365 = score(doc=3235,freq=1.0), product of:
             0.21463245 = queryWeight, product of:
               3.6514566 = boost
               4.6236176 = idf(docFreq=1179, maxDocs=44218)
               0.01271298 = queryNorm
             0.2889761 = fieldWeight in 3235, product of:
               1.0 = tf(freq=1.0), with freq of:
                 1.0 = termFreq=1.0
               4.6236176 = idf(docFreq=1179, maxDocs=44218)
               0.0625 = fieldNorm(doc=3235)
         0.18403116 = weight(abstract_txt:situation in 3235) [ClassicSimilarity], result of:
           0.18403116 = score(doc=3235,freq=2.0), product of:
             0.36776644 = queryWeight, product of:
               5.10976 = boost
               5.6614056 = idf(docFreq=417, maxDocs=44218)
               0.01271298 = queryNorm
             0.5004023 = fieldWeight in 3235, product of:
               1.4142135 = tf(freq=2.0), with freq of:
                 2.0 = termFreq=2.0
               5.6614056 = idf(docFreq=417, maxDocs=44218)
               0.0625 = fieldNorm(doc=3235)
       0.28 = coord(7/25)