Web of cybersecurity: Linking, locating, and discovering structured cybersecurity information
Web of cybersecurity: Linking, locating, and discovering structured cybersecurity information
复制标题
DOI：
10.1002/dac.3470
复制
发表时间：
2018-02
影响因子：
2.1
通讯作者：
Takeshi Takahashi;Bhola Panta;Y. Kadobayashi;K. Nakao
中科院分区：
文献类型：
--
作者：
Takeshi Takahashi;Bhola Panta;Y. Kadobayashi;K. Nakao
网络安全是当今许多组织的主要关注点之一，及时获取网络安全信息对于维护网络安全至关重要。互联网上公开提供各种网络安全相关信息的存储库。然而，用户并不知道其中许多，并且跟踪所有这些对他们来说是不切实际的。存储在这些存储库中的网络安全信息必须能够被需要的各方找到和访问。针对这一问题，本文提出了一种链接、定位和发现各种网络安全信息的机制，以提高其及时可及性。这种机制允许我们通过生成管理网络安全信息列表的元数据来定位具有不同模式的各种网络安全信息。该机制中包含的信息结构是独特的，它使我们的机制灵活且可扩展。该结构由相互链接的类别和格式组成。该机制可以传播信息更新以最小化信息过时的风险。本文还介绍了该机制的原型来证明其可行性，并分析了该机制的可扩展性、可扩展性和信息可信性。通过这项研究，我们的目标是提高互联网上网络安全信息的可访问性，促进超越组织边界的信息共享，最终目标是创建一个网络安全网络。
Cybersecurity is one of the main concerns of many organizations today, and accessibility to cybersecurity information in a timely manner is crucial to maintaining cybersecurity. Various repositories of cybersecurity‐related information are publicly available on the Internet. However, users are unaware of many of them, and it is impractical for them to keep track of all of them. Cybersecurity information stored in these repositories must be able to be located and accessed by the parties who need it. To address this issue, this paper proposes a mechanism of linking, locating, and discovering various cybersecurity information to improve its accessibility in a timely manner. This mechanism allows us to locate various cybersecurity information having different schemata by generating metadata with which a list of cybersecurity information is managed. The information structure incorporated in this mechanism is unique, and it makes our mechanism flexible and extensible. The structure consists of categories and formats that are linked to each other. The mechanism can propagate information updates to minimize the risk of obsolete information. This paper also introduces a prototype of the mechanism to demonstrate its feasibility, and it analyzes the mechanism's extensibility, scalability, and information credibility. Through this study, we aim to improve the accessibility of cybersecurity information on the Internet and facilitate information sharing beyond organizational borders, with the eventual goal of creating a web of cybersecurity.