Ontology-Based Risk Analysis System Concept

Abstract

The work is dedicated to the development of an ontology concept for assessment risk of threats for information systems on the Microsoft approach – the model of identifying threats STRIDE and methodology DREAD for assessment risk of threats. The aim of the study is to describe the security implementation methodology of information systems offered by Microsoft. The basic concepts and techniques of this model are given and ontology concept of risk assessment is proposed, some of the classes and subclasses of the developed ontology are Described.