Beyond NVD: Cybersecurity meets the Semantic Web.
Beyond NVD: Cybersecurity meets the Semantic Web.
复制标题
DOI：
10.1145/3498891.3501259
复制
发表时间：
2021-10
期刊：
影响因子：
--
通讯作者：
Raúl Aranovich;Katya Katsy;Benyamin Ahmadnia;V. Filkov;K. Sagae
中科院分区：
文献类型：
--
作者：
Raúl Aranovich;Katya Katsy;Benyamin Ahmadnia;V. Filkov;K. Sagae
网络安全专家依靠 NVD 等数据库中存储的知识来完成工作，但这些并不是有关威胁和漏洞的唯一信息来源。其中大部分信息通过社交媒体渠道流动。在本文中，我们认为安全专家和普通用户都可以从语义网技术中受益，将异构知识源合并到本体表示中。我们提出了一个以漏洞本体为核心的系统，但通过 NLP 工具进行了增强，可以识别社交媒体中与网络安全相关的信息，并对异构数据源发起查询。评估和讨论了语义网技术对网络安全的变革力量，该力量已在生物医学领域得到证实。
Cybersecurity experts rely on the knowledge stored in databases like the NVD to do their work, but these are not the only sources of information about threats and vulnerabilities. Much of that information flows through social media channels. In this paper we argue that security experts and general users alike can benefit from the technologies of the Semantic Web, merging heterogeneous sources of knowledge in an ontological representation. We present a system that has an ontology of vulnerabilities at its core, but that is enhanced with NLP tools to identify cybersecurity-related information in social media and to launch queries over heterogeneous data sources. The transformative power of Semantic Web technologies for cybersecurity, which has been proven in the biomedical field, is evaluated and discussed.