摘要: Vulnerability assessment is a vital part of the risk management process. The accuracy and reliability calculated depends on comprehensive correct system vulnerabilities. Current vulnerability techniques fail to consider systems in their entirety consequently are unable identify complex vulnerabilities (i.e. those that due configuration settings unique environments). Complex can exist for example when combination components present configured such way they be collectively misused compromise system. Ontologies have emerged as useful means modeling domains interest. This research shows taking an ontological approach results improved identification By ontologically domain assessment, resulting ontology instantiated with process instantiating doubles technique methodically discovering given system. Furthermore, it suggested will also able queried order discover additional by reasoning through implicit knowledge captured ontology.