Case Retrieval for Network Security Emergency Response Based on Description Logic - Intelligent Information Processing VII (IIP 2014)
Conference Papers Year : 2014

Case Retrieval for Network Security Emergency Response Based on Description Logic

Fei Jiang
  • Function : Author
  • PersonId : 990818
Tianlong Gu
  • Function : Author
  • PersonId : 990789
Liang Chang
  • Function : Author
  • PersonId : 990787
Zhoubo Xu
  • Function : Author
  • PersonId : 990791

Abstract

Network security emergency response (NSER) is an important topic in information security. Nowadays, a large number of NSER systems and tools are developed, which can effectively detect part of security incidents and provide general best-practice guidelines for handling some type of security incidents, but not give a reasonable, fast, effective processing method for every security incidents in actual environment. An intelligent method based on case-based reasoning (CBR) and description logic (DL) is proposed for NSER. Firstly, a case base for NSER is organized in such a way that domain knowledge of NSER is described by the DL ALCO(D). Secondly, based on refinement operator and refinement graph in DLs, an algorithm for measuring the similarity of ALCO(D) concepts is designed and used for retrieving cases from the case base. It is demonstrated that our method can reuse past experiences on security incidents to generate response automatically.
Fichier principal
Vignette du fichier
978-3-662-44980-6_32_Chapter.pdf (497.57 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01383343 , version 1 (18-10-2016)

Licence

Identifiers

Cite

Fei Jiang, Tianlong Gu, Liang Chang, Zhoubo Xu. Case Retrieval for Network Security Emergency Response Based on Description Logic. 8th International Conference on Intelligent Information Processing (IIP), Oct 2014, Hangzhou, China. pp.284-293, ⟨10.1007/978-3-662-44980-6_32⟩. ⟨hal-01383343⟩
47 View
118 Download

Altmetric

Share

More