CAREER: Semantic Web-Interoperation versus Security

该项目的重点是开发通过语义增强的半结构化信息中的非法推理来预防安全威胁的模型和技术。XML和RDF数据越来越多地用于存储和交换信息，从而使Internet用户能够智能地访问和集成大量数据。这种大规模的数据集成，特别是在本体支持下，可能会带来严重的安全和隐私威胁。因此，需要开发安全方法和工具来防止安全违规。要在语义Web环境中提供信息保障，需要解决几个问题——技术、管理和法律。本项目主要关注提供信息保密性和隐私性的技术问题，并做出了一些新颖的贡献：(1)能够表达基于上下文和语义需求的Web数据；(2)全面研究半结构化数据的非法推理能力对安全的影响；(3)在语义Web安全中考虑了防御和进攻两种安全模型。有关该项目的更多信息，请访问该项目的网站（http://www.cse.sc.edu/research/isl）。除了理论研究外，开发的模型和技术将在实际数据上进行实施和测试。原型将根据可伸缩性、效率和保证级别进行评估。该项目更广泛的影响在于为Web和广泛的Web应用程序提供数据安全，并保证信息的机密性。研究和教育活动相结合，以提高学生和社区的安全意识。此外，为了减少利用青少年的网络犯罪，还将开发提高初高中学生网络安全意识的研讨会和网站。

The focus of this project is to develop models and technologies for prevention of security threats via illegal inferences in semantically enhanced semistructured information. XML and RDF data has been increasingly used for storing and exchanging information, thus enabling Internet users to access and integrate large amounts of data intelligently. This large-scale data integration, especially when supported with ontologies, may pose significant security and privacy threats. Therefore, security methods and tools need to be developed to prevent security violations. To provide information assurance in the context of Semantic Web several issues - technological, managerial, and legal - need to be addressed. This project focuses mainly on technological issues to provide information confidentiality and privacy, and makes several novel contributions: (1) Web data that can express context-based and semantic requirements; (2) comprehensive study of the security implications for illegal inference capabilities on semistructured data; and (3) both defensive and offensive security models are considered in Semantic Web security. More information about the project is available on the project web site (http://www.cse.sc.edu/research/isl). In addition to theoretical research, the developed models and technologies will be implemented and tested on real data. The prototypes will be evaluated based on scalability, efficiency, and level of assurance. Broader impact of this project lies in providing data security on the Web and a wide range of Web applications, with a guarantee of information confidentiality. Research and educational activities are tied together to increase the security awareness of students and community. In addition, seminars and Web sites to increase cyber-security awareness of middle and high school students will be developed, aiming to reduce the number of cyber crimes exploiting juvenile users.