<?xml version="1.0"?>

<!DOCTYPE owl [
  <!ENTITY rdf "http://www.w3.org/1999/02/22-rdf-syntax-ns#">
  <!ENTITY rdfs "http://www.w3.org/2000/01/rdf-schema#">
  <!ENTITY xsd "http://www.w3.org/2001/XMLSchema#">
  <!ENTITY owl "http://www.w3.org/2002/07/owl#">
  <!ENTITY cc "http://web.resource.org/cc/#">
  <!ENTITY project "http://ebiquity.umbc.edu/ontology/project.owl#">
  <!ENTITY person "http://ebiquity.umbc.edu/ontology/person.owl#">
  <!ENTITY pub "http://ebiquity.umbc.edu/ontology/publication.owl#">
  <!ENTITY assert "http://ebiquity.umbc.edu/ontology/assertion.owl#">]>

<!--
  This ontology document is licensed under the Creative Commons
  Attribution License. To view a copy of this license, visit
  http://creativecommons.org/licenses/by/2.0/ or send a letter to
  Creative Commons, 559 Nathan Abbott Way, Stanford, California
  94305, USA.
-->

<rdf:RDF 
  xmlns:rdf = "&rdf;"
  xmlns:rdfs = "&rdfs;"
  xmlns:xsd = "&xsd;"
  xmlns:owl = "&owl;"
  xmlns:cc = "&cc;"
  xmlns:project = "&project;"
  xmlns:person = "&person;"
  xmlns:pub = "&pub;"
  xmlns:assert = "&assert;">
  <pub:Article rdf:about="http://ebiquity.umbc.edu/paper/html/id/61/Using-DAML-OIL-to-classify-intrusive-behaviours">
    <rdfs:label><![CDATA[Using DAML+ OIL to classify intrusive behaviours]]></rdfs:label>
    <pub:title><![CDATA[Using DAML+ OIL to classify intrusive behaviours]]></pub:title>
    <pub:publishedOn rdf:datatype="&xsd;dateTime">2004-01-16T00:00:00-05:00</pub:publishedOn>
    <pub:abstract><![CDATA[We have produced an ontology specifying a model of computer
attack. Our ontology is based upon an analysis of over 4,000 classes
of computer intrusions and their corresponding attack strategies and
is categorized according to: system component targeted, means of
attack, consequence of attack and location of attacker.  We argue that
any taxonomic characteristics used to define a computer attack be
limited in scope to those features that are observable and measurable
at the target of the attack.  We present our model as a target-centric
ontology that is to be refined and expanded over time.  We state the
benefits of forgoing dependence upon taxonomies, in favor of
ontologies, for the classification of computer attacks and intrusions.
We have specified our ontology using the DARPA Agent Markup Language +
Ontology Inference Layer and have prototyped it using DAMLJessKB.  We
present our model as a target-centric ontology and illustrate the
benefits of utilizing an ontology lieu of a taxonomy, by presenting a
use case scenario of a distributed intrusion detection system.  ]]></pub:abstract>
    <pub:edition><![CDATA[Special Issue on Ontologies for Distributed Systems]]></pub:edition>
    <pub:pages><![CDATA[221-241]]></pub:pages>
    <pub:number><![CDATA[3]]></pub:number>
    <pub:volume><![CDATA[18]]></pub:volume>
    <pub:googleKey>AK44Swl66xYJ</pub:googleKey>
    <pub:googleCitations>3</pub:googleCitations>
    <pub:tag><![CDATA[security]]></pub:tag>
    <pub:tag><![CDATA[semantic web]]></pub:tag>
    <pub:tag><![CDATA[intrusion detection]]></pub:tag>
    <pub:journal><![CDATA[Knowledge Engineering Review]]></pub:journal>
    <pub:publisher><![CDATA[Cambridge University Press]]></pub:publisher>
    <pub:author>
       <rdf:List>
         <rdf:first></rdf:first>
         <rdf:rest>
           <rdf:List>
             <rdf:first><person:PrincipalFaculty rdf:about="http://ebiquity.umbc.edu/person/html/Anupam/Joshi/"><person:name><![CDATA[Anupam  Joshi]]></person:name><rdfs:label><![CDATA[Anupam  Joshi]]></rdfs:label></person:PrincipalFaculty></rdf:first>
             <rdf:rest>
               <rdf:List>
                 <rdf:first><person:PrincipalFaculty rdf:about="http://ebiquity.umbc.edu/person/html/Tim/Finin/"><person:name><![CDATA[Tim  Finin]]></person:name><rdfs:label><![CDATA[Tim  Finin]]></rdfs:label></person:PrincipalFaculty></rdf:first>
                 <rdf:rest>
                   <rdf:List>
                     <rdf:first><person:Collaborator rdf:about="http://ebiquity.umbc.edu/person/html/John/Pinkston/"><person:name><![CDATA[John  Pinkston]]></person:name><rdfs:label><![CDATA[John  Pinkston]]></rdfs:label></person:Collaborator></rdf:first>
                     <rdf:rest rdf:resource="&rdf;nil" />
                   </rdf:List>
                 </rdf:rest>
               </rdf:List>
             </rdf:rest>
           </rdf:List>
         </rdf:rest>
       </rdf:List>
    </pub:author>
    <pub:relatedProject><project:PastProject rdf:about="http://ebiquity.umbc.edu/project/html/id/33/Intrusion-Detection"><project:title><![CDATA[Intrusion Detection]]></project:title><rdfs:label><![CDATA[Intrusion Detection]]></rdfs:label></project:PastProject></pub:relatedProject>
  </pub:Article>

  <rdf:Description rdf:about="">
    <cc:License rdf:resource="http://creativecommons.org/licenses/by/2.0/" />
  </rdf:Description>

</rdf:RDF>

