Ontology Construction for Security Analysis of Network Nodes

Security related data in cyberspace is multi-source and heterogeneous, so it cannot be effectively used in network security analysis. To solve this problem, a network security ontology model for network node security analysis is proposed. The model reflects the security status of network nodes through three key sub domains: network assets, security information, defense strategy, and modeling concepts and relationships in a hierarchical and structured form. Ontology related language is used for query, and user-defined rules are used to enhance the reasoning ability of ontology, so as to assist network security analysis. Experiments and quality evaluation results show that the ontology model can integrate multi-source data, query and reason the network security status, and has higher quality evaluation than the same type of ontology.