An Approach to Security Policy Configuration Using Semantic Threat Graphs

摘要: Managing the configuration of heterogeneous enterprise security mechanisms is a wholly complex task. The effectiveness may be constrained by poor understanding and/or management overall policy requirements, which may, in turn, unnecessarily expose to known threats. This paper proposes threat approach, whereby knowledge about mitigating countermeasures used guide autonomic mechanisms. modeled terms Semantic Threat Graphs , variation traditional Threat/Attack Tree, extended order relate semantic information with threats, vulnerabilities and countermeasures. An ontology-based approach representing reasoning over this taken. A case study on Network Access Controls demonstrates how threats can analyzed automated recommendations made based catalogues best-practice