Similar articles

Abstract: The construction of an integrated solution for cyberspace defense with dynamic, flexible, and intelligent features is a new idea. In order to solve the problem whereby traditional static protection methods cannot respond to various network attacks or security demands in an adversarial network environment in good time, and to form a complete integrated solution from “threat discovery” to “decision-making generation”, we propose an ontology-based security model, OntoCSD, for an integrated solution for cyberspace defense that uses Web ontology Language (OWL) to represent the ontology classes and relationships of threat monitoring, decision-making, response, defense in cyberspace, and uses Semantic Web Rule Language (SWRL) to design the defensive reasoning rules. OntoCSD can discover potential relationships between network attacks, vulnerabilities, the security state, and defense strategies. Further, an Artificial Intelligence (AI) expert system based on case-based reasoning (CBR) is used to quickly generate a detailed and comprehensive decision-making scheme. Finally, through the Kendall's coefficient of concordance (W) and four experimental cases in a typical computer network defense (CND) system, which reasons on represented facts and the ontology, OntoCSD’s consistency and its feasibility to solve the issues in the field of cyberspace defense are validated. OntoCSD supports automatic association and reasoning, and provides an integrated solution framework of cyberspace defense.