The STAC Ontology (Security Toolbox : Attacks and Countermeasures)
A vocabulary to describe main security and cryptographic concepts: attacks, security mechanisms, OSI model, security protocols, security tools in numerous technologies: Web applications, network management, Sensor networks, Cellular (2G, 3G, 4G) and Wireless (Wifi), etc.
This work has been inspired for the cryptographic concepts and security properties by "Security Ontology for Annotating resources" [Kim et al. 2005]
This work has been inspired for the cryptographic concepts and security properties by "Security in the Semantic Web using OWL" [Denker et al. 2005]
This work has been inspired for the cryptographic concepts and security properties by "Construction d'une ontologie pour le domaine de la securite" [Lekhchine et al. 2009]
This work has been inspired for the cryptographic concepts and security properties by "An ontology of Information Security" [Herzog et al. 2007]
Requirement
The application to secure has requirements (e.g., high sensitive data or specific technologies).
DataTypeSensitive
DataTypeSensitive (low, medium or high sensitive). The data to secure.
Technology
Technologies can be wireless (Wi-Fi, Wimax), cellular (2G, 3G, 4G), sensor networks, web application, etc.
Architecture
Architecture component
Feature
Features of security mechanisms. For example a sensor technology is low energy consuming, and the symmetric algorithm (a SecurityMechanism) is low energy consumming.
Positive Feature
Positive Feature of security mechanisms
Negative Feature
Negative Feature of security mechanisms
SecurityProperty
Attack
SecurityMechanism
Security Mechanisms are processes that are used to detect, prevent and recover from security attacks.
Security Tool
Authentication Server (AS)
It identifies the supplicant, checks its credentials, and define privileges and restrictions, and allows or denies it access to the network and services.
Obfuscation
Network Management Security Tool
Message Encryption Tool
Protocol
OSI Model Layer
isReplacedBy
When a SecurityMechanism is not secured anymore, it is replaced by a more secure SecurityMechanism. This is also the case for technologies: a technology can be replaced by another one more recent. (E.G., 2G has been replaced by 3G)
occursInLayer
protectsInLayer
hasSecurityMechanism
isSecurityMechanismOf
satisfies
A security mechanism (e.g., VPN) satisfies some security properties (e.g., authentication)
threatens
An attack (e.g., eavesdropping) threatens some security properties (e.g., confidentiality)
isProtectedBy
protects
has vulnerability
A technology can be vulnerable to some attacks.
is Vulnerability Of
Some attacks cannot be thwart in technologies. For example, the Denial of Service is difficult to thwart in different technologies.
hasFeature
A SecurityMechanism has specific features (secured, depreceted, low energy consuming). For example, an asymmetric algorithm is high energy consuming.
isFeatureOf
Features are related to security mechanisms. For example, an asymmetric algorithm is high energy consuming.
hasArchitecture
A technology has a specific architecture.
Worm
Worms are self-propagating pieces of malicious software. They propagate from one computer/device to another via a network link.
See Paper: Malicious actions against the GPRS technology [Xenakis 2006]
Virus
See Paper: Malicious actions against the GPRS technology [Xenakis 2006], Paper: Survey of Security and Privacy Issues of Internet of Things [Borgohain et al. 2015]
Spam
Spyware
Troyan
A Trojan horse is a malicious piece of software hidden in a program that performs normal tasks. Program that does something malicious (such as capturing passwords) when run by an unsuspecting user.
Polymorphic Virus
Antivirus
Anti-viruses softwares applications will reduce viruses and malware on M2M equipment.
See Paper: A study of information security for M2M and IoT [Jiang et al. 2010]
Honeypot
Honeypots are hosts meant to be attacked either to distract the attackers or to research their techniques.
Anti Spyware
Anti Spam
External Attack
Passive Attack
Malicious users violate the confidentiality of the information exchanged over the network.
Active Attack
Active attacks involve actions performed by adversaries to gain the control of the network.
Internal Attack
Internal attacks are launched from compromised nodes, are much more sophisticated than external attacks.
Sniffer
A Sniffer tries to spy passwords for instance.
Wifi Attack Tool
Java Api
Captcha
SymmetricSensorKey
Sensor Key Management
GSM Key Management
UMTS Key Management
Wimax Key Management
Wifi Key Management
Mesh Key Management
Sensor Attack
Manet Attack
Manet (Mobile ad hoc network) is a self-configuring network of mobile devices connected.
Mesh Attack
M2M Attack
Uwb Attack
RFID Attack
Bluetooth Attack
Zigbee Attack
Wifi Attack
Wimax Attack
GSM Attack
HSPDA Attack
UMTS Attack
EDGE Attack
GPRS Attack
LTE Attack
Web Attack
Cloud Attack
Framework Attack
Database Attack
ECommerce Attack
Programming Language Attack
Web Service Attack
Network Management Attack
Server Attack
Operating System Attack
Ethernet Attack
Ethernet SecurityMechanism
M2M SecurityMechanism
Manet SecurityMechanism
Sensor Security Mechanism
Sensor nodes have very limited computationnal power, and traditional security and encryption techniques are not-well suitd to this domain.
Mesh Security Mechanism
Web Security Mechanism
Cloud Security Mechanism
Framework Security Mechanism
Database Security Mechanism
Programming Language Security Mechanism
ECommerce Mechanism
Web Service Mechanism
Network Management Security Mechanism
Operating System Security Mechanism
Server Security Mechanism
LTE Security Mechanism
GSM SecurityMechanism
HSPDA SecurityMechanism
GPRS SecurityMechanism
UMTS SecurityMechanism
EDGE SecurityMechanism
Rfid SecurityMechanism
Uwb SecurityMechanism
Bluetooth SecurityMechanism
Zigbee SecurityMechanism
Wimax SecurityMechanism
Wifi SecurityMechanism
Ethernet
Global System for Mobile Communication (GSM) or 2G
General Packet Radio Service (GPRS) or 2.5G
Enhanced Data Rates for GSM Evolution (EDGE) or 2.75G
3G technology (UMTS:Universal Mobile Telecommunications System)
Universal Mobile Telecommunications System (UMTS). Third Generation (3G)
High-Speed Download Packet Access (HSPDA) or 3.5G
Long Term Evolution (LTE) Technology or 4G
Bluetooth Technology
A protocol for short-range (up to 100 meters) wireless networks.
Rfid Technology
Zigbee Technology
Ultra Wideband (UWB) Technology
Wi-Fi technology (Wireless-Fidelity)
Wimax Technology
Sensor Technology
Machine-to-Machine(M2M)
Manet Technology
Mesh Technology
Framework Technology
Cloud Technology
Web Technology
ECommerce Technology
Database Technology
Programming Language
Web Service
Network Management Technology
Server Technology
Operating system Technology
Sensor Security Protocol
GSM Security Protocol
UMTS Security Protocol
Wifi Security Protocol
Mesh Security Protocol
Wimax Security Protocol
Web Security Protocol
GSM Security Algorithm
GPRS Security Algorithm
UMTS Security Algorithm
Bluetooth Security Algorithm
LowSensitive
MediumSensitive
HighSensitive
DataProvenanceType
Bank
Personal
CryptographicConcept
Physical Key
Badge
Physical Authentication
Symmetric Key
Symmetric key: the same key is used for encryption and decryption.
Asymmetric Key
Public Key
The public key is used for verifying a digital signature and is used for encryption.
Private Key
The private key is used for computing signatures and decryption.
Digital Signature
The digital signature verifies that the contents of the electronic message have not been altered.
System Logs
Digital Certificate
Hash Function
Checksum Algorithm
hasModeOperation
Mode of operation
A mode of operation describes the process of encrypting each of block cipher.
Asymmetric algorithm
The keys used for encryption and decryption are different, allowing for easier key distribution.
Symmetric algorithm
The same secret key is used for encryption and decryption.
BlockCipher
StreamCipher
Key Management
Key management protocols are fundamental requirements to develop a secure application. These protocols are used to set up and distribute various kinds of cryptographic keys to nodes in the network.
Encryption Algorithm
Encryption algorithm ensures the confidentiality property.
Security Algorithm
Flooding
Floodings attacks generally are used to drain the memry resources by sensing the control signals.
See Paper: Survey of Security and Privacy Issues of Internet of Things [Borgohain et al. 2015]
Mesh Architecture component
Wimax Architecture component
Wifi Architecture component
LTE Architecture component
UMTS Architecture component
GPRS Architecture component
GSM Architecture component
GPRS Architecture
The GPRS system are a much more expesed to intruders, because of its IP based backbone.
UMTS Architecture
LTE Architecture
Mesh Architecture
WiMAX Architecture
GSM Architecture
Wifi Architecture
Security Magazine
Security Property Method
Confidentiality Method
Confidentiality means that only destined user must be able to read data.
Semantic Security Method
Semantic security ensures that an eavesdropper has no information about the message, even if it sees multiple encryptions of the same messages.
Authentication Method
Authentication prevents unauthorized access to the network.
Integrity Method
Data integrity guarantees that the transmitted messages are not modified by attackers, either due to malicious intent or by accident.
Access Control Method
Access Control is the mechanism that allows owners of resources to define, manage and enforce access conditions applicable to each resource.
Availability Method
Data availability ensures that the network is alive and that data are accessible.
Non Repudiation Method
Non repudiation means that a sender is unable to deny having sent a message or infoomation.
Anonymity Method
Anonymity protects user identity, making it hard to track the whereabouts of a certain user.
Data Freshness Method
Data freshness suggests that the data is recent, and it ensures that no old messages have been replayed.
Counter Value
Since the counter value is incremented after each message, the same message is encrypted differently each time.
Timestamp
In order to ensure the freshness of packet, a timestamp can be attached to the packet. A receiving node can compare the timestamp in the packet with its own time clock and determine whether the packet is valid or not.
Temporary Identity
Intrusion Prevention System (IPS)
Intrusion Detection System (IDS)
Proxy
A proxy analyzes application commands, performs authentication and keeps logs.
Reverse Proxy
Role Based Access Control (RBAC)
Mechanism for access control that organizes users (in the system) into specific groups called Roles. E.g., Doctor and nurses are different roles in a hospital.
Context Aware Role Based Access Control (CA-RBAC)
E.g. herat attack is a critical event. Criticaly is a context aware permission.
Attribute Based Access control (ABAC)
Permissions are associated with a set of rules expressed on measurable parameters and are granted to users who can prove compliance with these rules.
Relation Based Access Control (RelBAC)
Permissions are modeled as relations between users (subjects) and data (objects).
Discretionary Access Control (DAC)
Object owners can add access rights.
Firewall
Login/Password
The simple form of authentication is providing a user name and password which is mainly the case in internet based authentication (e.g. email, online shopping, etc)
Mandatory Access Control (MAC)
Only an administrator is authorized to add a new access right to the system.
Initial Vector
Integrity Check Value (ICV)
The purpose of this value is to enable the receiver to detect any malicious modifications of the message by an attacker.
Message Authentication Code (MAC)
MAC is a short piece of information used to authenticate a message and check the integrity.
Pre Shared Key
Mutual Authentication ot two-way authentication
One Way Authentication
Challenge Response
Challenge/Response is a mechanism where on entity in the network proves to another entity that it knows the password without revealing it.