摘要
研究本体在构建信息安全漏洞专业领域知识库中的应用.分析和确立信息安全漏洞本体知识库的分类体系,定义子类的对象属性和数据属性,给出漏洞实例的表示方法,并利用Protégé,Jena和Java平台实现信息安全漏洞知识库的系统原型.与传统检索相比,基于本体的语义检索方法在保持精确率的同时,能明显提高召回率.利用本体构建信息安全漏洞知识库更有利于挖掘漏洞知识元素的内在联系,为用户提供更为快捷有效的知识服务.
The purpose of this paper is to study the application of ontology in the construction of knowledge base in the field of information security vulnerabilities.The classification system of information security vulnerability ontology knowledge base is analyzed and established.The object attribute and data attribute of subclass is defined and the representation method of vulnerability instance is pointed out.Protégé,Jena and Java platform are used to realize the system prototype.Compared with traditional retrieval,ontology based semantic retrieval method can significantly improve recall rate while maintaining accuracy.Using ontology to build information security vulnerability knowledge base is more conducive to mining the internal relationship of vulnerability knowledge elements and providing users with more efficient knowledge services.
作者
郭锡泉
Guo Xiquan(Network Center,Qingyuan Polytechnic,Qingyuan,Guangdong 511510)
出处
《信息安全研究》
2020年第10期933-940,共8页
Journal of Information Security Research
基金
广东省科技计划项目(2019A141405002)
广东省普通高校重点科研项目(2018GKTSCX099)
清远市科技计划项目(2019A006,2019A046)。
关键词
本体
信息安全
漏洞
知识库
语义
知识服务
ontology
information security
vulnerability
knowledge base
semantic
knowledge service