OntologySecurity.owl
type: Ontology
relation: This ontology covers the domain of security in the field of mobile applications.

hasThreatType
type: DatatypeProperty
comment: A Threat type may be a passive or an active threat.
domain: Threat
range: string

AccessControlList
type: Class
subclass of: AccessControlMethods
comment: List of permissions attached to an object.

Actor
type: Class
subclass of: Thing
comment: Actors participating in the realisation and implementation of security services

AdditionalTools
type: Class
subclass of: Cost
comment: New tools that should be used for the projection or the application.

AdministrativeProcedure
type: Class
subclass of: Cost
comment: Tasks to be performed and which are out of the scope of the technical field.

ApplicationServerSide
type: Class
subclass of: Actor
subclass of: Restriction
  on property: ImplementMechanism
  some values from: Journaling
subclass of: Restriction
  on property: ImplementMechanism
  some values from: Backup
comment: The application server side may be a web server or a data base back end that the device connects to.
subclass of: Restriction
  on property: ImplementMechanism
  some values from: Journaling
subclass of: Restriction
  on property: ImplementMechanism
  some values from: Backup

Asset
type: Class
subclass of: Thing
subclass of: Restriction
  on property: victimOf
  some values from: Threat
comment: The set of assets that should be protected
subclass of: Restriction
  on property: victimOf
  some values from: Threat

AsymmetricEncryption
type: Class
subclass of: Encryption
subclass of: Restriction
  on property: Use
  some values from: AsymmetricAlgorithm
subclass of: Restriction
  on property: Use
  some values from: KeyExchangeProtocol
comment: Type of encryption in which an encryption key (the public key) is used to encrypt a message, and another encryption key (the private key) is used to decrypt the message.
subclass of: Restriction
  on property: Use
  some values from: AsymmetricAlgorithm
subclass of: Restriction
  on property: Use
  some values from: KeyExchangeProtocol

Authentication
type: Class
subclass of: Services
subclass of: Restriction
  on property: hasLevel
  on class: AuthenticationLevel
  cardinality: 1
subclass of: Restriction
  on property: AppliedTo
  some values from: DomainEntities
subclass of: Restriction
  on property: hasLevel
  on class: AuthenticationLevel
  cardinality: 1
subclass of: Restriction
  on property: AppliedTo
  some values from: DomainEntities

Availability
type: Class
subclass of: Services
subclass of: Restriction
  on property: hasDuration
  on class: Duration
  cardinality: 1
subclass of: Restriction
  on property: hasDuration
  on class: Duration
  cardinality: 1

BiometricIdentifier
type: Class
subclass of: AuthenticationToken
subclass of: Restriction
  on property: Use
  some values from: Resource
subclass of: Restriction
  on property: Hurt
  some values from: Portability
comment: Biometric identifier is one of the most secure and more reliable ways to authenticate a person’s identity is to verify that person’s innate biological characteristics, which are referred to as biometrics. Each person’s fingerprints, DNA, iris and retinal cell patterns, facial geometry, and heat signature are near unique to that person. These biometric measures, if properly recorded, validated, and embedded in identity credentials that are logically bound to a single person’s identity, can provide the highest degree of identity authentication (From NIST information security Report)
subclass of: Restriction
  on property: Use
  some values from: Resource
subclass of: Restriction
  on property: Hurt
  some values from: Portability

BlockCipherAlgorithm
type: Class
subclass of: SymmetricAlgorithm
subclass of: Restriction
  on property: hasInitialisationVector
  all values from: hexBinary
subclass of: Restriction
  on property: hasChainingMode
  on class: ChainingMode
  cardinality: 1
subclass of: Restriction
  on property: HasBlockSize
  cardinality: 1
subclass of: Restriction
  on property: hasPadding
  some values from: hexBinary
subclass of: Restriction
  on property: hasInitialisationVector
  all values from: hexBinary
subclass of: Restriction
  on property: hasChainingMode
  on class: ChainingMode
  cardinality: 1
subclass of: Restriction
  on property: HasBlockSize
  cardinality: 1
subclass of: Restriction
  on property: hasPadding
  some values from: hexBinary

Bluetooth
type: Class
subclass of: PANetwork
comment: Bluetooth is a Personal Area Network (PAN) standard that enables wireless connections between electronic devices in the 2.4 GHz range over short distances, as an alternative to cables. Designed to be power efficient, Bluetooth has become a common feature in cell phones. Since wireless communications are inherently insecure, a number of basic security provisions have been defined for this standard to mitigate the risks involved. NIST

CBC-MAC
type: Class
subclass of: MACAlgorithm
comment: The simplest way to make a key-dependent one-way hash function is to encrypt a message with a block algorithm in CBC or CFB modes . The hash is the last encrypted block, encrypted once more in CBC or CFB modes.

Certificate
type: Class
subclass of: AuthenticationToken
subclass of: Restriction
  on property: hasDigitalSignatureData
  cardinality: 1
subclass of: Restriction
  on property: hasSignatureAlgorithm
  some values from: DigitalSignatureAlgorithm
subclass of: Restriction
  on property: hasValidity
  cardinality: 1
subclass of: Restriction
  on property: hasSubjectName
  cardinality: 1
subclass of: Restriction
  on property: hasFormat
  some values from: CertificateFormat
subclass of: Restriction
  on property: hasIssuer
  some values from: CertificationAuthority
format: A digital certificate is a text document that contains general information about its holder with the associated public key and general informations about the validity of the certificate. The digital certificate is signed by the certification authority that has issued it and can be verified a digital signature. The digital certificates, together with the identity data and public key, are stored on a USB-compatible token or a conventional smart card for use as part of strong authentication. When users try to log on to the corporate network, they connect their token with the USB slot or their smart card with the card reader.The digital certificate and public key are sent to the authentication authority via internet. To ensure that the public key sent actually belongs to the person attempting to log on to the corporate networks, the independent certification authority confirms that the public key matches the secret key it has stored
subclass of: Restriction
  on property: hasDigitalSignatureData
  cardinality: 1
subclass of: Restriction
  on property: hasSignatureAlgorithm
  some values from: DigitalSignatureAlgorithm
subclass of: Restriction
  on property: hasValidity
  cardinality: 1
subclass of: Restriction
  on property: hasSubjectName
  cardinality: 1
subclass of: Restriction
  on property: hasFormat
  some values from: CertificateFormat
subclass of: Restriction
  on property: hasIssuer
  some values from: CertificationAuthority

CertificationAuthority
type: Class
subclass of: TrustedThirdParty
comment: The certification authority provides certificates to bind a set of informations (name, serial number, ...) to a public key.

CodeSeparation
type: Class
subclass of: BestPractises
comment: Locate and isolate critical code from from general code.

CodingStandards
type: Class
subclass of: BestPractises
comment: Deploy development regimes such as coding standards and documentation methodologies to lead to best practises

Confidentiality
type: Class
subclass of: Services
subclass of: Restriction
  on property: AppliedTo
  some values from: DomainEntities
subclass of: Restriction
  on property: hasLevel
  some values from: ConfidentialityLevel
comment: The confidentiality service
subclass of: Restriction
  on property: AppliedTo
  some values from: DomainEntities
subclass of: Restriction
  on property: hasLevel
  some values from: ConfidentialityLevel

ConfigurationData
type: Class
subclass of: Data
comment: Several configuration data are stored in the device or sent by the mobile operator.

Constraints
type: Class
subclass of: Thing
comment: Technical, quality constraints and others

ContentProvider
type: Class
subclass of: Actor
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DigitalRightsManagement
subclass of: Restriction
  on property: Provide
  some values from: Software
comment: The entity who is responsable of providing content like ringing tones or multimedia files or any other software.
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DigitalRightsManagement
subclass of: Restriction
  on property: Provide
  some values from: Software

Cost
type: Class
subclass of: Constraints
comment: Time, skills, additional equipments are considered as cost constraints

DDos
type: Class
subclass of: Threat
comment: Distributed denial of service.

DSA
type: Class
subclass of: DigitalSignatureAlgorithm
comment: Digital Signature Algorithm specified by FIPS 186-2

DataRecords
type: Class
subclass of: LocalFiles
comment: Some applications use records files to store data.

DevelopmentTime
type: Class
subclass of: Cost
comment: Addiotional development time required for the application or the project.

Device
type: Class
subclass of: Actor
subclass of: Restriction
  on property: hasOutput
  some values from: Output
subclass of: Restriction
  on property: hasInput
  some values from: Input
subclass of: Restriction
  on property: hasNetwork
  some values from: Network
subclass of: Restriction
  on property: hasMemory
  some values from: Memory
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DigitalRightsManagement
subclass of: Restriction
  on property: ImplementMechanism
  some values from: LogInSystem
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DeviceLock
subclass of: Restriction
  on property: hasProcessing
  some values from: Processing
subclass of: Restriction
  on property: hasIMEI
  cardinality: 1
comment: Mobile terminal equiped with processing capabilities offering connection to wireless networks.
subclass of: Restriction
  on property: hasOutput
  some values from: Output
subclass of: Restriction
  on property: hasInput
  some values from: Input
subclass of: Restriction
  on property: hasNetwork
  some values from: Network
subclass of: Restriction
  on property: hasMemory
  some values from: Memory
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DigitalRightsManagement
subclass of: Restriction
  on property: ImplementMechanism
  some values from: LogInSystem
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DeviceLock
subclass of: Restriction
  on property: hasProcessing
  some values from: Processing
subclass of: Restriction
  on property: hasIMEI
  cardinality: 1

DeviceDriverUpgrade
type: Class
subclass of: VulnerabilityInUse
comment: One problem in this area is that drivers are typically written by third parties and drivers are upgraded at different times to the main OS. This causes problems when implementing any validation scheme, or even isolated checking of specific software updates

DigitalRightsManagement
type: Class
subclass of: Techniques
subclass of: Restriction
  on property: Satisfice
  some values from: AccessControl
comment: A general framework for downloading Rights to Devices and sharing Rights in a domain. DRM is invented by the Open Mobile Alliance whose members are mobile phone manufacturers, mobile system manufacturers, operators , and sofware editors.
subclass of: Restriction
  on property: Satisfice
  some values from: AccessControl

DigitalSignature
type: Class
subclass of: CoreCounterMeasure
subclass of: Class
  union of: Restriction
    on property: Use
    some values from: MACAlgorithm
  union of: Restriction
    on property: Use
    some values from: Class
      intersection of: CryptographicHashFunction
      intersection of: DigitalSignatureAlgorithm
subclass of: Restriction
  on property: Satisfice
  some values from: Authentication
subclass of: Restriction
  on property: Satisfice
  some values from: NonRepudiation
comment: A digital signature is represented in a computer as a string of binary digits. A digital signature is computed using a set of rules and a set of parameters such that the identity of the signatory and integrity of the data can be verified. An algorithm provides the capability to generate and verify signatures. Signature generation makes use of a private key to generate a digital signature. Signature verification makes use of a public key which corresponds to, but is not the same as, the private key. (http://csrc.nist.gov/publications/fips/fips186-2/fips186-2-change1.pdf)
subclass of: Class
  union of: Restriction
    on property: Use
    some values from: MACAlgorithm
  union of: Restriction
    on property: Use
    some values from: Class
      intersection of: CryptographicHashFunction
      intersection of: DigitalSignatureAlgorithm
subclass of: Restriction
  on property: Satisfice
  some values from: Authentication
subclass of: Restriction
  on property: Satisfice
  some values from: NonRepudiation

DigitalSignatureAlgorithm
type: Class
subclass of: Algorithm
subclass of: Restriction
  on property: Use
  on class: PrivateKey
  cardinality: 1
subclass of: Restriction
  on property: Use
  on class: PrivateKey
  cardinality: 1

DisplayScreen
type: Class
subclass of: Output
subclass of: Restriction
  on property: hasScreenSize
  cardinality: 1
subclass of: Restriction
  on property: hasScreenSize
  cardinality: 1

ECB
type: Class
subclass of: ChainingMode
comment: Electronic code book

ECDSA
type: Class
subclass of: DigitalSignatureAlgorithm
comment: Elliptic Curve Digital Signature Algorithm (ECDSA) (ANSI X9-62)

EDGE
type: Class
subclass of: 2.5G
comment: Enhanced Data rates for GSM Evolution

EMS
type: Class
subclass of: Messaging
comment: Enhanced Messaging Service - An improved message system for GSM mobile phones allowing picture, sound, animation and text elements to be conveyed through one or more concatenated SMS messages. NIST

Efficiency
type: Class
subclass of: Usability
comment: Best use of the available resources.

Encryption
type: Class
subclass of: CoreCounterMeasure
subclass of: Restriction
  on property: Use
  some values from: PRNGAlgorithm
subclass of: Restriction
  on property: Satisfice
  some values from: Authentication
subclass of: Restriction
  on property: Satisfice
  some values from: Confidentiality
subclass of: Restriction
  on property: Satisfice
  some values from: Integrity
comment: Discipline which embodies principles, means, and methods for the transformation of data in order to hide its information content, prevent its undetected modification and/or prevent its unauthorised use. (CCITT)
subclass of: Restriction
  on property: Use
  some values from: PRNGAlgorithm
subclass of: Restriction
  on property: Satisfice
  some values from: Authentication
subclass of: Restriction
  on property: Satisfice
  some values from: Confidentiality
subclass of: Restriction
  on property: Satisfice
  some values from: Integrity

EncryptionKeys
type: Class
equivalent class: Keys
subclass of: AuthenticationToken
comment: The encryption keys are digital bitstrings that are stored in non-volatile memory, and verification of the identity proceeds by a challenge-response protocol.

FunctionGroups
type: Class
subclass of: AccessControlMethods
comment: A set of sensitive functions under a named group that can get authorization.

GPRS
type: Class
subclass of: 2G
comment: General Packet Radio Service

GPSNetwork
type: Class
subclass of: Network
comment: A system for determining position by comparing radio signals from several satellites. NIST

GPSvalues
type: Class
subclass of: LocalisationData
comment: Global positioning system coordinates used by some applications.

GSM
type: Class
subclass of: 2G
comment: Global System for Mobile communications

Hardware
type: Class
equivalent class: Resource
subclass of: Asset
comment: Mainly the physical device with the embedded memory and processing units.

HashBasedOTP
type: Class
subclass of: O.T.P
comment: A server side list of hashed tokens is stored and each consumed token is removed from the list.

Images
type: Class
subclass of: LocalFiles
comment: All supported image files for mobile devices.

Input
type: Class
subclass of: Resource
comment: Keypad or any input tool

InteractionModes
type: Class
subclass of: AccessControlMethods
comment: User interaction to confirm the execution of some senstive actions like sending a sms or opening a network connection/

IrDA
type: Class
subclass of: PANetwork
comment: A standard for line-of-sight infrared communication between devices over short distances. NIST

Kerberos
type: Class
subclass of: AuthenticationProtocol
comment: Kerberos is an authentication process that proceeds as follows: A client sends a request to the authentication server (AS) requesting "credentials" for a given server. The AS responds with these credentials, encrypted in the client's key. The credentials consist of 1) a "ticket" for the server and 2) a temporary encryption key ( a "session key"). The client transmits the ticket (which contains the client's identity and a copy of the session key, all encrypted in the server's key) to the server. The session key (now shared by the client and server) is used to authenticate the client, and may optionally be used to authenticate the server. It may also be used to encrypt further communication between the two parties or to exchange a separate sub-session key to be used to encrypt further communication. RFC 1510

KeyManagement
type: Class
subclass of: Mechanism
comment: The process and procedure for safely storing and distributing accurate cryptographic keys; the overall process of generating and distributing cryptographic key to authorized recipients in a secure manner.

Keys
type: Class
subclass of: Mechanism
subclass of: Restriction
  on property: HasKeySize
  cardinality: 1
subclass of: Restriction
  on property: hasKeyLifeTime
  some values from: Duration
subclass of: Restriction
  on property: HasKeySize
  cardinality: 1
subclass of: Restriction
  on property: hasKeyLifeTime
  some values from: Duration

Learnability
type: Class
subclass of: Usability
comment: Easy to learn how to use the application.

LocalDataBase
type: Class
subclass of: ApplicationData
comment: Special database management systems for embedded applications.

LockingScreen
type: Class
subclass of: LockingMechanism
comment: In some situations it is useful to lock the screen display until a task is terminated. This is technique is used to avoid the screen modification until a answer is received.

MACAlgorithm
type: Class
subclass of: Algorithm
subclass of: Restriction
  on property: Use
  on class: SecretKey
  cardinality: 1
subclass of: Restriction
  on property: Use
  some values from: CryptographicHashFunction
comment: Message authentication code that include a key for authentication
subclass of: Restriction
  on property: Use
  on class: SecretKey
  cardinality: 1
subclass of: Restriction
  on property: Use
  some values from: CryptographicHashFunction

Manufacturer
type: Class
subclass of: Actor
subclass of: Restriction
  on property: Issue
  all values from: ManufacturerCertificate
subclass of: Restriction
  on property: Provide
  some values from: Device
subclass of: Restriction
  on property: Issue
  some values from: ManufacturerCertificate
subclass of: Restriction
  on property: hasTrustIn
  some values from: TrustedThirdParty
subclass of: Restriction
  on property: Provide
  some values from: SourceCodeVerification
comment: Mobile device manufacturer which may implement some security features in the device
subclass of: Restriction
  on property: Issue
  all values from: ManufacturerCertificate
subclass of: Restriction
  on property: Provide
  some values from: Device
subclass of: Restriction
  on property: Issue
  some values from: ManufacturerCertificate
subclass of: Restriction
  on property: hasTrustIn
  some values from: TrustedThirdParty
subclass of: Restriction
  on property: Provide
  some values from: SourceCodeVerification

ManufacturerCertificate
type: Class
subclass of: Certificate
format: A certificate which is issued by the device manufacturer like Nokia or Samsung for example.

Mechanism
type: Class
subclass of: Thing
comment: Security mechanisms used for security services

Memorability
type: Class
subclass of: Usability
comment: A limited period of time during which the use of the application will be memorised.

MemoryCardLock
type: Class
subclass of: LockingMechanism
subclass of: Restriction
  on property: Satisfice
  some values from: AccessControl
comment: Memory card can be protected with a password each time someone tries to access the card
subclass of: Restriction
  on property: Satisfice
  some values from: AccessControl

MessageDigest
type: Class
subclass of: CoreCounterMeasure
subclass of: Restriction
  on property: HasOutputLength
  some values from: positiveInteger
comment: A function that takes a string (or message) of any length as input and produces a fixed-length string as output,it is used for authentication and message integrity.
subclass of: Restriction
  on property: HasOutputLength
  some values from: positiveInteger

MobileNetworkProvidervalues
type: Class
subclass of: LocalisationData
comment: Mobile network Cell ID to which the device is attached.

NFC
type: Class
subclass of: PANetwork
comment: A short-range point-to-point wireless communication technology. The technology is a simple extension of the ISO/IEC 14443 proximity-card standard (contactless card, RFID) that combines the interface of a smartcard and a reader into a single device. An NFC device can communicate with both existing ISO/IEC 14443 smartcards and readers, as well as with other NFC devices, and is thereby compatible with existing contactless infrastructure already in use for public transportation and payment.

NFCEnabled
type: Class
subclass of: DeviceCapabilities
comment: The device may be or not equiped with Near Field Communication Ship (NFC).

Network
type: Class
subclass of: Resource
subclass of: Restriction
  on property: hasNetworkLatency
  cardinality: 1
subclass of: Restriction
  on property: HasBandwidth
  cardinality: 1
subclass of: Restriction
  on property: hasNetworkLatency
  cardinality: 1
subclass of: Restriction
  on property: HasBandwidth
  cardinality: 1

NonRepudiation
type: Class
subclass of: Services
subclass of: Restriction
  on property: hasType
  on class: NonRepudiationType
  cardinality: 1
subclass of: Restriction
  on property: hasType
  on class: NonRepudiationType
  cardinality: 1

O.T.P
type: Class
subclass of: Password
comment: Password used for once and generated from time, counter and/or key. May be a displayed from a hardware device.

Operator
type: Class
subclass of: Actor
subclass of: Restriction
  on property: hasTrustIn
  some values from: TrustedThirdParty
subclass of: Restriction
  on property: Provide
  some values from: SourceCodeVerification
subclass of: Restriction
  on property: Issue
  some values from: OperatorCertificate
subclass of: Restriction
  on property: Provide
  some values from: BestPractises
subclass of: Restriction
  on property: Issue
  all values from: OperatorCertificate
comment: Telecom Network Operator knowing as MNO
subclass of: Restriction
  on property: hasTrustIn
  some values from: TrustedThirdParty
subclass of: Restriction
  on property: Provide
  some values from: SourceCodeVerification
subclass of: Restriction
  on property: Issue
  some values from: OperatorCertificate
subclass of: Restriction
  on property: Provide
  some values from: BestPractises
subclass of: Restriction
  on property: Issue
  all values from: OperatorCertificate

OperatorCertificate
type: Class
subclass of: Certificate
subclass of: Class
  union of: SmartCard
  union of: Restriction
    on property: storedOn
    some values from: Device
format: A certificate which is issued by the mobile network operator.
subclass of: Class
  union of: SmartCard
  union of: Restriction
    on property: storedOn
    some values from: Device

OrganizationsAndStandards
type: Class
subclass of: ValueTypes
comment: Organizations and associations providing standards in the mobile field arena.

PKI
type: Class
subclass of: SecurityInfrastructure
subclass of: Restriction
  on property: Use
  some values from: AsymmetricEncryption
subclass of: Restriction
  on property: Satisfice
  some values from: Confidentiality
subclass of: Restriction
  on property: Satisfice
  some values from: Authentication
subclass of: Restriction
  on property: Satisfice
  some values from: Integrity
subclass of: Restriction
  on property: Satisfice
  some values from: NonRepudiation
subclass of: Restriction
  on property: Use
  some values from: Certificate
subclass of: Restriction
  on property: Use
  some values from: CertificationAuthority
comment: Public-key infrastructure (PKI) consists of protocols, services, and standards supporting applications of public-key cryptography. PKI sometimes refers simply to a trust hierarchy based on public-key certificates, and in other contexts embraces encryption and digital signature services provided to end-user applications as well. RSA (http://www.rsa.com/rsalabs/node.asp?id=2268)
subclass of: Restriction
  on property: Use
  some values from: AsymmetricEncryption
subclass of: Restriction
  on property: Satisfice
  some values from: Confidentiality
subclass of: Restriction
  on property: Satisfice
  some values from: Authentication
subclass of: Restriction
  on property: Satisfice
  some values from: Integrity
subclass of: Restriction
  on property: Satisfice
  some values from: NonRepudiation
subclass of: Restriction
  on property: Use
  some values from: Certificate
subclass of: Restriction
  on property: Use
  some values from: CertificationAuthority

PRNG
type: Class
subclass of: KeyGeneration
subclass of: Restriction
  on property: Use
  some values from: PRNGAlgorithm
comment: Pseudo Random Number Generation
subclass of: Restriction
  on property: Use
  some values from: PRNGAlgorithm

PRNGAlgorithm
type: Class
subclass of: Algorithm
comment: Pseudo Random Number Generation algorithm

Platform
type: Class
subclass of: Actor
subclass of: Restriction
  on property: ImplementMechanism
  some values from: KeyManagement
subclass of: Restriction
  on property: ImplementMechanism
  some values from: ResourceMonitoring
subclass of: Restriction
  on property: ImplementMechanism
  some values from: Algorithm
subclass of: Restriction
  on property: ImplementMechanism
  some values from: MessageDigest
subclass of: Restriction
  on property: ImplementMechanism
  some values from: LogInSystem
subclass of: Restriction
  on property: ImplementMechanism
  some values from: AccessControlMethods
comment: The software device platform layer
subclass of: Restriction
  on property: ImplementMechanism
  some values from: KeyManagement
subclass of: Restriction
  on property: ImplementMechanism
  some values from: ResourceMonitoring
subclass of: Restriction
  on property: ImplementMechanism
  some values from: Algorithm
subclass of: Restriction
  on property: ImplementMechanism
  some values from: MessageDigest
subclass of: Restriction
  on property: ImplementMechanism
  some values from: LogInSystem
subclass of: Restriction
  on property: ImplementMechanism
  some values from: AccessControlMethods

Portability
type: Class
subclass of: Quality
comment: ability of Application running on several devices or/and platforms.

RC4
type: Class
subclass of: StreamCipherAlgorithm
comment: A free algorithm provided by RSA security, implemented since 1970.

RSA
type: Class
subclass of: DigitalSignatureAlgorithm
subclass of: Restriction
  on property: Use
  some values from: RSAAlgorithm
comment: RSA signature algorithm (American National Standard ANSI X9-31)
subclass of: Restriction
  on property: Use
  some values from: RSAAlgorithm

RegistrationAuthority
type: Class
subclass of: TrustedThirdParty
comment: Registration authority is an administrative entity which is responsable of verifying the identity of the claimer of a certificate

RemoteDeviceLock
type: Class
subclass of: DeviceLock
comment: Sending a Short message to lock the device

RingTones
type: Class
subclass of: StandardFiles
comment: Audio files used as rings in mobile devices.

SET
type: Class
subclass of: BestPractises
comment: Secure Electronic Transaction

SIM
type: Class
subclass of: SmartCard
subclass of: Restriction
  on property: Provide
  some values from: CryptographicHashFunction
subclass of: Restriction
  on property: Provide
  all values from: BlockCipherAlgorithm
subclass of: Restriction
  on property: Provide
  some values from: AsymmetricAlgorithm
subclass of: Restriction
  on property: Provide
  some values from: DigitalSignatureAlgorithm
comment: Subscriber Identity Module; A smart card for GSM networks access.
subclass of: Restriction
  on property: Provide
  some values from: CryptographicHashFunction
subclass of: Restriction
  on property: Provide
  all values from: BlockCipherAlgorithm
subclass of: Restriction
  on property: Provide
  some values from: AsymmetricAlgorithm
subclass of: Restriction
  on property: Provide
  some values from: DigitalSignatureAlgorithm

Skills
type: Class
subclass of: Cost
comment: Additional skills that should be acquired to achieve some tasks or goals.

SmartCard
type: Class
subclass of: Actor
subclass of: Restriction
  on property: hasIMSI
  cardinality: 1
subclass of: Restriction
  on property: ImplementMechanism
  some values from: AsymmetricEncryption
subclass of: Restriction
  on property: ImplementMechanism
  some values from: SmartCardLock
subclass of: Restriction
  on property: ImplementMechanism
  some values from: MessageDigest
subclass of: Restriction
  on property: ImplementMechanism
  some values from: SymmetricEncryption
subclass of: Restriction
  on property: hasMemory
  all values from: SmartCardMemory
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DigitalSignature
subclass of: Restriction
  on property: ImplementMechanism
  some values from: KeyStore
comment: A smart card is any limited-sized card with embedded integrated circuits. The smart card may integrate or not processing capabilities.
subclass of: Restriction
  on property: hasIMSI
  cardinality: 1
subclass of: Restriction
  on property: ImplementMechanism
  some values from: AsymmetricEncryption
subclass of: Restriction
  on property: ImplementMechanism
  some values from: SmartCardLock
subclass of: Restriction
  on property: ImplementMechanism
  some values from: MessageDigest
subclass of: Restriction
  on property: ImplementMechanism
  some values from: SymmetricEncryption
subclass of: Restriction
  on property: hasMemory
  all values from: SmartCardMemory
subclass of: Restriction
  on property: ImplementMechanism
  some values from: DigitalSignature
subclass of: Restriction
  on property: ImplementMechanism
  some values from: KeyStore

SmartCardMemory
type: Class
subclass of: Add-OnMemory
comment: Memory available on smart card like SIM, USIM or others;

Software
type: Class
subclass of: Asset
comment: All the applications and data provided with or installed on the device.

Static password
type: Class
subclass of: Password
comment: The standard couple of login and password authentication

Steganography
type: Class
subclass of: Encryption
comment: Steganography is the art and science of writing hidden messages in such a way that no-one, apart from the sender and intended recipient, suspects the existence of the message, a form of security through obscurity. Wikipedia

StoredData
type: Class
subclass of: Data
subclass of: Class
  intersection of: Class
    union of: ApplicationData
    union of: ConfigurationData
  intersection of: Restriction
    on property: hasDataStructure
    some values from: Class
      union of: LocalDataBase
      union of: LocalFiles
comment: Data stored either in the device or on the memory card.
subclass of: Class
  intersection of: Class
    union of: ApplicationData
    union of: ConfigurationData
  intersection of: Restriction
    on property: hasDataStructure
    some values from: Class
      union of: LocalDataBase
      union of: LocalFiles

SymmetricAlgorithm
type: Class
subclass of: Algorithm
subclass of: Restriction
  on property: Help
  some values from: Efficiency
subclass of: Restriction
  on property: hasKey
  on class: SecretKey
  cardinality: 1
subclass of: Restriction
  on property: Help
  some values from: Efficiency
subclass of: Restriction
  on property: hasKey
  on class: SecretKey
  cardinality: 1

SymmetricEncryption
type: Class
subclass of: Encryption
subclass of: Restriction
  on property: Use
  some values from: SymmetricAlgorithm
comment: Also known as conventional, secret-key, and single-key algorithms; the encryption and decryption key are either the same or can be calculated from one another. Block ciphers and stream ciphers are both used for symmetric encryption.
subclass of: Restriction
  on property: Use
  some values from: SymmetricAlgorithm

TLS
type: Class
subclass of: SecureNetworkCommunication
comment: Transport Layer Security is an IETF standard that is intended to replace the SSL protocol. (IETF Working Group)

TRNG
type: Class
subclass of: KeyGeneration
subclass of: Restriction
  on property: Use
  some values from: Input
comment: True Random Number Generation : extract randomness from physical phenomena and introduce it into computing device.
subclass of: Restriction
  on property: Use
  some values from: Input

Technical
type: Class
subclass of: Constraints
comment: All limitations related to technologies like the network bandwidth or processor capabilities.

TimeBasedOTP
type: Class
subclass of: O.T.P
comment: A client and server time synchronization is required for the authentication token verification.

TimeStampToken
type: Class
subclass of: AuthenticationToken
comment: A digital signature that makes possible the verification of the sending time of a message.

Training
type: Class
subclass of: Cost
comment: Requirement for additional training to use some tools or to do some technalical or management tasks.

TransmittedData
type: Class
subclass of: Data
comment: Messaging data or data transferred through Internet connection

TrustedThirdParty
type: Class
subclass of: Actor
subclass of: Restriction
  on property: Provide
  some values from: SourceCodeVerification
subclass of: Restriction
  on property: Issue
  some values from: Certificate
subclass of: Restriction
  on property: hasTrustIn
  some values from: TrustedThirdParty
comment: security authority or its agent, trusted by other entities with respect to security-related activities. In the context of ISO/IEC 9798, a trusted third party is trusted by a claimant and/or a verifier for the purposes of authentication. ISO/IEC 9798
subclass of: Restriction
  on property: Provide
  some values from: SourceCodeVerification
subclass of: Restriction
  on property: Issue
  some values from: Certificate
subclass of: Restriction
  on property: hasTrustIn
  some values from: TrustedThirdParty

TrustedThirdPartyCertificate
type: Class
subclass of: Certificate
format: A certificate which is issued by a trusted third party.

UICC
type: Class
subclass of: SmartCard
comment: The UICC is a generic platform for smart card applications. It has been standardised by ETSI EP SCP (ETSI Project Smart Card Platform) with the aim of defining a physical and logical platform for all smart card applications and to develop advanced security methods for financial transactions, to take an example. Mobey forum

USIM
type: Class
subclass of: SmartCard
comment: A (U)SIM is a special type of smart card that typically contains a processor and between 16 to 128 KB of persistent Electronically Erasable, Programmable ROM (EEPROM). It also includes RAM for program execution and ROM for the operating system, user authentication and data encryption algorithms, and other applications.

Usability
type: Class
subclass of: Quality
comment: A good response time of the application.

VPN
type: Class
subclass of: SecurityInfrastructure
subclass of: Restriction
  on property: Use
  some values from: Class
    union of: IPSec
    union of: SSL
    union of: TLS
comment: Virtula private network. FIPS 140-2
subclass of: Restriction
  on property: Use
  some values from: Class
    union of: IPSec
    union of: SSL
    union of: TLS

ValueTypes
type: Class
subclass of: Thing
comment: Additional and required types for the ontology

WPKI
type: Class
equivalent class: Class
  intersection of: PKI
  intersection of: Restriction
    on property: Use
    some values from: CommChannel
subclass of: PKI
comment: Wireless Public Key Infrastructure.
equivalent class: Class
  intersection of: PKI
  intersection of: Restriction
    on property: Use
    some values from: CommChannel

vCard
type: Class
subclass of: StandardFiles
comment: vCard is a virtual electronic business card format.

Services
type: Class
subclass of: Thing
comment: Security services ontology

AccessToUntrustedWebSite
type: Class
subclass of: VulnerabilityInUse
comment: Several attacks may be achieved after access to hacked web sites like cross site scripting (XSS) for example.

BufferOverFlow
type: Class
subclass of: MalformedInput
comment: By passing data through an API where it is known that the API is designed to receive X bytes and we are passing X+N bytes, it can be arranged that the N bytes overflow into an area that was used by other storage (if it is a heap overflow) or will cause the return address to be corrupted (if it is a stack overflow). OMTP

DefaultPIN
type: Class
subclass of: InsecureDefaultSettings
comment: Always set to manufacturer default values

DefaultPassword
type: Class
subclass of: InsecureDefaultSettings
comment: Always set to manufacturer default values

DevicePortability
type: Class
subclass of: PhysicalVulnerability
comment: The easy portability of the device make it vulnerable to rabbers and theft.

DoS
type: Class
subclass of: Threat
comment: Most common type involves flooding a host until it cannot respond to legitimate traffic.

Emanation
type: Class
subclass of: PhysicalVulnerability
comment: The fact of making internal data available to third parties by radio.. In that case,the issuer is the passive victim of the attack. Almost all electrical devices emit radiation to the exterior that can be intercepted by other equipment (radio receivers) causing a leak of information. This threat is frequently but inaccurately called, a TEMPEST attack (“Transient Electromagnetic Pulse Standard”).

EquipmentDos
type: Class
subclass of: NetworkInfrastructureAttack
comment: The attacker causes an overload or a disruption in the system such that network functions in an abnormal manner. The abnormal behavior could be legitimate subscribers not receiving service, illegitimate subscribers receiving service or the entire network may disabled as a result of the attack.

ExternalBatteryRemovel
type: Class
subclass of: HardwareAttack
comment: Bypassing security barries may be performed through a battery removal. For example in a DRM situation, a song may have been played, but if the rights count is not decremented until the end of the song, then removing the power source could result in the user playing the song indefinitely(OMPT).

ExternalMemoryCardRemoval
type: Class
subclass of: HardwareAttack
comment: Bypassing security barries may be performed through a battery removal. For example in a DRM situation, a song may have been played, but if the rights count is not decremented until the end of the song, then removing the memory card could result in the user playing the song indefinitely(OMPT).

FOTAUnAuthorizedReFlash
type: Class
subclass of: SoftwareAttack
comment: UnAuthorized reflash via Firmware Over The Air. FOTA consists in replacing one version of the general OS(s) with another over the Air.

InputOutputLimitation
type: Class
subclass of: PhysicalVulnerability
comment: Limited screen display and small keypad ad some aggravation to attacks like phishing for example.

Interception
type: Class
subclass of: NetworkInfrastructureAttack
comment: The attacker intercepts information without modifing or deleting them. This is a passive attack. This affects the privacy of the subscriber and the network operator.

Interruption
type: Class
subclass of: NetworkInfrastructureAttack
comment: The attacker caused an Interruption by destroying resources. The attacker may delete a subscriber data in the entity such as an HLR.

MissingErrorHandling
type: Class
subclass of: VulnerabilityInDevelopment
comment: Missing error handling may reveal hidden coding details.

MissingInputValidation
type: Class
subclass of: VulnerabilityInDevelopment
comment: Leaving inputs to a lightweight validation i's one of the most relevant applicationn vulnerability.

MultipleServicesIntegration
type: Class
subclass of: CommunicationVulnerability
comment: The integration of several networkign services like access to PAN, LAN and WAN in the same divice makes hard the set up of access control policies. This integration agravates also the multi-session attacks.

NAKAttack
type: Class
subclass of: SoftwareAttack
comment: Concurrent processes may cause logical breaks. These breaks could be exploited by malicious code to get access to protected resources.

NetworkInfrastructureAttack
type: Class
subclass of: Threat
comment: These attacks belong to the mobile network operator. Most of them require physical air interface equipments like fake base station or modified antenna.

NotAuthenticatedSoftInstallation
type: Class
subclass of: VulnerabilityInUse
comment: Several untrusted softwares are available for free download or through the trasnfer from an other device. These softwares may be infected with viruses or have trojans. They may also come up with bad code that leads to denial of service.

OTASoftwareUpdate
type: Class
subclass of: VulnerabilityInUse
comment: Software Update can be performed Over The Air without user konwledge or confirmation. These softwares may be infected or trojanized.

PhysicalVulnerability
type: Class
subclass of: Vulnerability
comment: Features related to the physical aspect of the device and its properties.

ProcessingPowerLimitation
type: Class
subclass of: PhysicalVulnerability
comment: Limited Processing power is boundary for cryptographic enhanced tasks.

Replay
type: Class
subclass of: NetworkInfrastructureAttack
comment: In this case the attacker may insert spurious objects into the system. The attacker may insert fake signaling messages, the effects could result in the attacker masquerading as an authority.

RoamingConfigChallenges
type: Class
subclass of: CommunicationVulnerability
comment: Switching from one network to an other should respect security policies.

SmartCardUpdate
type: Class
subclass of: CommunicationVulnerability
comment: The procedure of updating the SIM card is a heavy task for the operator.

StatisticalAttack
type: Class
subclass of: CryptographicAttack
comment: A cryptanalysis that exploits the predictibility of a particular data segment or a prdicatable relationships among different data segments in a cipher codestream to deduce the plaintext without the knowledge of the decryption key or to substantially reduce the search space such that a brute force attack is feasable.

TestWithEmulatorOnly
type: Class
subclass of: VulnerabilityInDevelopment
comment: After developement, applications should be tested with real and different devices and not only with emulators.

UnsafeMessageAcceptance
type: Class
subclass of: VulnerabilityInUse
comment: Non authenticated SMS or MMS may deal to denial fo service or virus infection.

UnsafeStorageDevicePlugging
type: Class
subclass of: VulnerabilityInUse
comment: Exchanging Memory card may lead to virus infection.

UseofUntrustedAPI
type: Class
subclass of: VulnerabilityInDevelopment
comment: Some API, components may be downloaded and used by developers without any security garantee.

VulnerabilityInConfig
type: Class
subclass of: SoftwareVulnerability
comment: Some default configurations of services may be exploited by hackers.

VulnerabilityInUse
type: Class
subclass of: SoftwareVulnerability
comment: Vulnerabilities during the use of the application or service.

VulnerableServiceAutoStart
type: Class
subclass of: InsecureDefaultSettings
comment: Some services like Bluetooth for example starts automatically which may lead to intrusion and access controls attacks.

WirelessTransmission
type: Class
subclass of: CommunicationVulnerability
comment: Wireless transmission could be exploited by hacker to eavesdrop traffic, analyse authentication tokens and sensitive information in general.

AutoInvocationFunctionGroup
type: FunctionGroups
comment: Permissions related to automatically starting a MIDlet, for example by Push Registration.

Axiom
subject: CertificateInstallationApplication
predicate: type
object: CertificateInstallation
comment: A Symbian and Nokia application that provides capabilities to install symbian certificates on some Nokia devices

MessagingFunctionsGroup
type: FunctionGroups
comment: Set of permissions related to sending or receiving messages like SMS

NetAccessFunctionGroup
comment: Contains permissions related to network data connections.

PIN
type: SmartCardLock
comment: Personal Identification Number

PUK
type: SmartCardLock
comment: Personal Unblocking Keys

RMS
type: DataRecords
comment: Record Management Store are data structure used to store JME data

ReadUserDataFunctionGroup
type: FunctionGroups
comment: Read User Data: Set of permissions to read user’s data like phone book or calendar entries

SD
comment: Multi Media Card

Axiom
subject: SD
predicate: type
object: CardMemory
comment: Secure Digital Memory Card

TypeSafe-Unsafe
type: CodingStandards
comment: Don't mix type safe and type-unsafe API

Axiom
subject: CertificateInstallationApplication
predicate: type
object: CertificateInstallation
comment: A Symbian and Nokia application that provides capabilities to install symbian certificates on some Nokia devices

Axiom
subject: SD
predicate: type
object: CardMemory
comment: Secure Digital Memory Card