A Generalized Information Security Model SOCMD for CMD Systems. Issue 3 (1st May 2020)

• Record Type: Journal Article
• Authors: Zhang, Baowen; Chang, Xiao; Li, Jianhua
• Is Part Of: Chinese journal of electronics. Volume 29:Issue 3(2020)
• Page Start: 417
• Page End: 426
• Publication Date: 2020-05-01
• Subjects: ontologies (artificial intelligence) -- security of data; CMD systems -- DHR components -- security vulnerabilities -- combination rules -- security state -- generalized information Security model SOCMD -- security defense theory -- Cyberspace mimic defense -- Dynamic heterogeneous redundancy -- defense level -- system security -- dynamic defense mechanism DHR -- traditional security modelling -- Security ontology‐based modelling method; Cyber mimic defense -- Dynamic heterogeneous redundancy -- Network security -- Security model -- Ontology; Electronics -- Periodicals; Electronics -- China -- Periodicals; Electronics; China; Periodicals; 621.38105
• DOI: 10.1049/cje.2020.02.017
• Languages: English
• ISSNs: 1022-4653

Abstract

Abstract : As a new security defense theory, Cyberspace mimic defense (CMD) provides an architecture named Dynamic heterogeneous redundancy (DHR) to enhance the defense level of system security. Due to the new dynamic defense mechanism DHR introduced in CMD systems, traditional security modelling and analysis methods can hardly be used for them. In this paper, we propose a Security ontology‐based modelling method for CMD systems (SOCMD), which uses ontology to represent DHR components and to define their inner relationships. SOCMD also connects information components including DHRs with security vulnerabilities, threats and attackers in cyberspace. Next, attacking rules, multi‐mode arbitration mechanism and combination rules are designed with SOCMD for CMD systems and a new logical‐checking method is proposed to make judgement about the security state of SOCMD. Finally, different use cases and performance tests are developed to demonstrate the application process for the model and to verify the validity of our method.