SYCAMORE: Vulnerability Analysis and Risk Assessment of Cyber Security Policies

Sycamore自动化了分析业务运营的逻辑漏洞和评估与数字业务组织的安全策略相关的风险的过程。该工具可以在监控模式下运行，执行完整的情景和预测模式，分析与特定安全策略相关的潜在风险。它基于语义技术，并使用业务操作和安全策略的标准逻辑模型，这些模型可以使用标准语义建模工具(如Protégé和OntoEdit)进行开发。该工具以OWL和SWRL格式加载业务模型和安全策略。分析的输出以流程图的图形形式呈现，并补充了有关脆弱性和风险的信息。Sycamore服务于使用第三方服务的大型企业、商业和服务提供商以及中型公司的需求。Sycamore已经在与网络安全和安全管理相关的几个应用领域进行了测试，这些领域包括数字银行中的跨渠道欺诈、公共安全中的疏散政策和业务工作流程管理。它已经在DCMS的支持下，在伦敦城市大学网络安全研究中心学术团队之前的研究和实验开发的基础上，成为了具有商业可行性的产品。

"Sycamore automates the process of analysing the logical vulnerability of business operations and assessing the risks associated with the security policies of organisations working in digital businesses. The tool can operate in monitoring mode, implementing full scenarios and in predictive mode, analysing the potential risks associated with particular security policies. It is based on semantic technologies and works with standard logical models of business operations and security policies which can be developed using standard semantic modeling tools such as Protégé and OntoEdit. The tool loads business models and security policies in OWL and SWRL format. The output of the analysis is presented in a graphical format as a flowchart, augmented with information about the vulnerability and risks. Sycamore serves the needs of large corporates, business and service providers and midrange companies which use third-party services.Sycamore has been tested in several application domains related to cyber security and safety management -- cross-channel fraud in digital banking, evacuation policy in public safety and business workflow management. It has been made commercially viable product with the support of DCMS on the basis of previous research and experimental development by an academic team of the Cyber Security Research Centre of London Metropolitan University."