Employing Ontologies for the Development of Security Critical Applications

Abstract

Abstract:Key words:Incorporating security in the application development process is a fundamental requirement for building secure applications, especially with regard to security sensitive domains, such as e-government. In this paper we follow a novel approach to demonstrate how the process of developing an e-poll application can be substantially facilitated by employing a specialized security ontology. To accomplish this, we describe the security ontology we have developed, and provide a set of indicative questions that developers might face, together with the solutions that ontology deployment provides.

Building Secure Systems: From Threats to Security Patterns

“…[4] use ontologies to develop a secure application; they use the ontologies to answer questions about the requirements but not to guide the actual design.…”

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

“…Dritsas et al [215] develop an ontology with an intention to support design and development of e-commerce systems. However, the support is limited to asking a proper competence questions formulated by a system engineer.…”

A conceptual approach to secure electronic elections based on patterns

“…Their analysis applies to any internet voting system but focuses on implementation aspects and does not use a conceptual model as reference to enumerate threats. Dritsas et al (2005) propose the use of ontologies to build secure systems and applies them to a secure e-polling system. The authors don't separate clearly analysis from design aspects and their threat analysis is not systematic.…”