General Security Concepts Research Articles

Managing Software Security Knowledge in Context: An Ontology Based Approach

In the setting of software development, knowledge can be both dynamic and situation specific, and the complexity of knowledge usually exceeds the capacity of individuals to solve problems by themselves. Software developers not only require knowledge about the general security concepts but also about the context for which software is being developed. With traditional security knowledge formats, which are usually organized in a security-centric way, it is difficult for knowledge users to retrieve the desired security information to fulfill the requirements of their working context. In order to effectively regulate the operation of security knowledge and be an essential part of practical software development practices, we argue that security knowledge must first incorporate additional features, that is, to first specify which contextual information is to be handled, and then represent the security knowledge in a format that is understandable and acceptable to the individuals. This study introduces a novel ontology approach for modeling security knowledge in a context-sensitive manner where the security knowledge can be retrieved while taking the context of the application in hand into consideration. In this paper, we present our security ontology with the design concepts and the evaluation process.

Data security in X.25 networks

This paper discusses the selection, design and implementation of data communications security mechanisms in X.25 networks. The reader is introduced to general security concepts, including threats, mechanisms and cryptographic key requirements. The applicability of these general concepts and their implementation difficulties in X.25 are described. This is followed by a discussion on the design and implementation of a prototype X.25 security system that was successfully demonstrated on a public X.25 network. International standards and recommendations were adhered to in the design of this product, which gives it a general versatility.