A common language for computer security incidents
A common language for computer security incidents
复制标题
计算机安全事件的通用语言
DOI：
--
复制
发表时间：
1998
期刊：
影响因子：
--
通讯作者：
T. Longstaff
中科院分区：
文献类型：
--
作者：
J. D. Howard;T. Longstaff
个人和组织定期收集和传播的大量计算机安全信息目前无法合并或比较，因为计算机安全领域尚未出现一种通用语言。通用语言由术语和分类法（分类原则）组成，能够实现信息的收集、交换和比较。本文介绍了一个为计算机安全事件开发这种通用语言的项目成果。该项目是由位于加利福尼亚州利弗莫尔的桑迪亚国家实验室的安全与网络研究小组以及位于宾夕法尼亚州匹兹堡的卡内基梅隆大学的CERT®协调中心合作开展的。这个通用语言项目并不是要开发一本计算机安全领域所用术语的综合词典。相反，作者开发了一组最少的高级术语以及表明它们之间关系的结构（一种分类法），可用于对计算机安全事件信息进行分类和理解。他们希望这些高级术语及其结构将得到广泛认可，发挥作用，并且最重要的是，能够实现计算机安全事件信息的交换和比较。然而，他们预计个人和组织将继续使用他们自己的术语，这些术语在含义和使用上可能更具体。他们设计通用语言是为了使这些较低级别的术语能够在通用语言结构内进行分类。
Much of the computer security information regularly gathered and disseminated by individuals and organizations cannot currently be combined or compared because a common language has yet to emerge in the field of computer security. A common language consists of terms and taxonomies (principles of classification) which enable the gathering, exchange and comparison of information. This paper presents the results of a project to develop such a common language for computer security incidents. This project results from cooperation between the Security and Networking Research Group at the Sandia National Laboratories, Livermore, CA, and the CERT{reg_sign} Coordination Center at Carnegie Mellon University, Pittsburgh, PA. This Common Language Project was not an effort to develop a comprehensive dictionary of terms used in the field of computer security. Instead, the authors developed a minimum set of high-level terms, along with a structure indicating their relationship (a taxonomy), which can be used to classify and understand computer security incident information. They hope these high-level terms and their structure will gain wide acceptance, be useful, and most importantly, enable the exchange and comparison of computer security incident information. They anticipate, however, that individuals and organizations will continue to use their own terms, which may be more specific both in meaning and use. They designed the common language to enable these lower-level terms to be classified within the common language structure.