权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

CICI: SSC: TrOnto - A Community-Based Ontology for a Trustworthy and ResiliCent Scientific Cyberspace

CICI：SSC：TrOnto - 基于社区的本体论，打造值得信赖且有弹性的科学网络空间

基本信息

批准号：
1840191
负责人：
Raul Aranovich
金额：
$ 64万
依托单位：
University of California-Davis
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2018
资助国家：
美国
起止时间：
2018-09-01 至 2022-08-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1840191&HistoricalAwards=false
关键词：
CICI SSC TrOnto Community Based

项目摘要

Scientific research relies on an infrastructure of networked computers (cyberinfrastructure), which need to be secured against malicious threats and intrusions. For instance, the privacy of clinical trial subjects, the integrity of medical data, and the safety of tissue samples and cultures can be compromised if the cyberinfrastructure of a university hospital is breached. Information Security Officers (ISOs) are in charge of maintaining a secure cyberinfrastructure for research, but their task is complicated by the speed at which new threats emerge, and by the proliferation of software (often written in different languages) and obsolete or specialized hardware among labs and research centers. ISOs look for answers in their quest to fight intrusions and vulnerabilities in documentation and on-line discussion forums, but this is a time-consuming process. To streamline the process, an interdisciplinary team of researchers are developing a computer system to automatically and continuously harvest all that knowledge from online sources, organizing it into a network of concepts and relations that can be queried and reasoned upon to keep ISOs a step ahead of malicious attacks. The project develops a number of interconnected modules: 1) A sub-system that identifies concepts and relations in software documentation, advisory bulletins, and on-line technical forums, and then retrieves that information using state-of-the-art natural language processing techniques; 2) An ontology for cybersecurity, which is a knowledge representation system that organizes the retrieved concepts and relations into a logical network, allowing for implicit knowledge to be extracted by means of automatic reasoning algorithms, and; 3) A querying interface, which allows ISO staff to access the knowledge represented in the ontology to find answers to their questions about cybersecurity. This innovative approach to cybersecurity extends the use of ontologies in the biomedical field, leveraging the metaphor of vulnerabilities in information systems as viruses or infections. Even though the initial stages in the creation of the ontology will involve curation by human experts, the researchers expect that the system can itself automatically thanks to the use of information retrieval techniques, therefore overcoming one of the known bottlenecks in the usefulness of ontologies.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

科学研究依赖于联网计算机的基础设施（网络基础设施），需要保护这些基础设施免受恶意威胁和入侵。例如，如果大学医院的网络基础设施遭到破坏，临床试验受试者的隐私、医疗数据的完整性以及组织样本和培养物的安全性都可能受到损害。信息安全官员（ISO）负责维护安全的网络基础设施，但由于新威胁出现的速度，以及实验室和研究中心之间软件（通常用不同语言编写）和过时或专用硬件的扩散，他们的任务变得复杂。ISO在文档和在线讨论论坛中寻找答案，以对抗入侵和漏洞，但这是一个耗时的过程。为了简化这一过程，一个跨学科的研究团队正在开发一个计算机系统，以自动和持续地从在线资源中收集所有知识，将其组织成一个概念和关系网络，可以查询和推理，以使ISO领先恶意攻击一步。该项目开发了一些相互关联的模块：1）一个子系统，它识别软件文档、咨询公告和在线技术论坛中的概念和关系，然后使用最先进的自然语言处理技术检索这些信息; 2）用于网络安全的本体，其是将检索到的概念和关系组织成逻辑网络的知识表示系统，允许通过自动推理算法提取隐含知识; 3）查询界面，允许ISO工作人员访问本体中表示的知识，以找到有关网络安全问题的答案。这种创新的网络安全方法扩展了本体论在生物医学领域的使用，利用了信息系统中病毒或感染的脆弱性的隐喻。尽管创建本体的初始阶段将涉及人类专家的管理，但研究人员预计，由于使用了信息检索技术，该奖项反映了NSF的法定使命，并被认为值得通过使用基金会的智力价值和更广泛的评估来支持。影响审查标准。