Vorträge und Posterpräsentationen (mit Tagungsband-Eintrag):
S. Fenz, G. Goluch, A. Ekelhart, B. Riedl, E. Weippl:
"Information Security Fortification by Ontological Mapping of the ISO/IEC 27001 Standard";
Vortrag: 13th Pacific Rim International Symposium on Dependable Computing (PRDC 07),
Melbourne, Australia;
17.12.2007
- 19.12.2007; in: "Proceedings of the 13th IEEE Pacific Rim International Symposium on Dependable Computing (PRDC 07)",
Springer,
(2007),
S. 381
- 388.
Kurzfassung englisch:
This paper introduces an ontology-based framework to improve the preparation of ISO/IEC 27001 audits, and to strengthen the security state of the company respectively. Building on extensive previous work on security ontologies, we elaborate on how ISO/IEC 27001 artifacts can be integrated into this ontology. A basic introduction to security ontologies is given first. Specific examples show how certain ISO/IEC 27001 requirements are to be integrated into the ontology; moreover, our rule-based engine is used to query the knowledge base to check whether specific security requirements are fulfilled. The aim of this paper is to explain how security ontologies can be used for a tool to support the ISO/IEC 27001 certification, providing pivotal information for the preparation of audits and the creation and maintenance of security guidelines and policies.
"Offizielle" elektronische Version der Publikation (entsprechend ihrem Digital Object Identifier - DOI)
http://dx.doi.org/10.1109/PRDC.2007.29
Elektronische Version der Publikation:
http://publik.tuwien.ac.at/files/pub-inf_4689.pdf
Zugeordnete Projekte:
Projektleitung A Min Tjoa:
Security Ontologies