The STAC Ontology (Security Toolbox : Attacks and Countermeasures)
type: Ontology
type: Vocabulary
description: A vocabulary to describe main security and cryptographic concepts: attacks, security mechanisms, OSI model, security protocols, security tools in numerous technologies: Web applications, network management, Sensor networks, Cellular (2G, 3G, 4G) and Wireless (Wifi), etc.
creator: Amelie Gyrard. Eurecom
issued: 2013-04-30
modified: 2013-06-02
version info: 0.2
term status: Work in progress
preferred namespace prefix: stac
see also: This work has been inspired for the cryptographic concepts and security properties by "Security Ontology for Annotating resources" [Kim et al. 2005]
see also: This work has been inspired for the cryptographic concepts and security properties by "Security in the Semantic Web using OWL" [Denker et al. 2005]
see also: This work has been inspired for the cryptographic concepts and security properties by "Construction d'une ontologie pour le domaine de la securite" [Lekhchine et al. 2009]
see also: This work has been inspired for the cryptographic concepts and security properties by "An ontology of Information Security" [Herzog et al. 2007]

Requirement
type: Class
comment: The application to secure has requirements (e.g., high sensitive data or specific technologies).

DataTypeSensitive
type: Class
comment: DataTypeSensitive (low, medium or high sensitive). The data to secure.

Technology
type: Class
comment: Technologies can be wireless (Wi-Fi, Wimax), cellular (2G, 3G, 4G), sensor networks, web application, etc.
subclass of: Requirement

Architecture
type: Class

Architecture component
type: Class

Feature
type: Class
comment: Features of security mechanisms. For example a sensor technology is low energy consuming, and the symmetric algorithm (a SecurityMechanism) is low energy consumming.

Positive Feature
type: Class
comment: Positive Feature of security mechanisms
subclass of: Feature

Negative Feature
type: Class
comment: Negative Feature of security mechanisms
subclass of: Feature

SecurityProperty
type: Class
subclass of: Requirement

Attack
type: Class

SecurityMechanism
type: Class
comment: Security Mechanisms are processes that are used to detect, prevent and recover from security attacks.

Security Tool
type: Class
subclass of: SecurityMechanism

Authentication Server (AS)
type: Class
comment: It identifies the supplicant, checks its credentials, and define privileges and restrictions, and allows or denies it access to the network and services.
subclass of: Authentication Method

Obfuscation
type: Class
subclass of: Security Tool
subclass of: Restriction
  on property: occursInLayer
  some values from: ApplicationLayer

Network Management Security Tool
type: Class
subclass of: Security Tool
subclass of: Network Management Security Mechanism

Message Encryption Tool
type: Class
subclass of: Security Tool

Protocol
type: Class
subclass of: SecurityMechanism

OSI Model Layer
type: Class

isReplacedBy
type: ObjectProperty
type: ReflexiveProperty
comment: When a SecurityMechanism is not secured anymore, it is replaced by a more secure SecurityMechanism. This is also the case for technologies: a technology can be replaced by another one more recent. (E.G., 2G has been replaced by 3G)
domain: SecurityMechanism
range: SecurityMechanism

occursInLayer
type: ObjectProperty
domain: Attack
range: OSI Model Layer

protectsInLayer
type: ObjectProperty
domain: SecurityMechanism
range: OSI Model Layer

hasSecurityMechanism
type: ObjectProperty
inverse of: isSecurityMechanismOf
domain: Attack
range: SecurityMechanism

isSecurityMechanismOf
type: ObjectProperty
inverse of: hasSecurityMechanism
domain: SecurityMechanism
range: Attack

satisfies
type: ObjectProperty
comment: A security mechanism (e.g., VPN) satisfies some security properties (e.g., authentication)
domain: SecurityMechanism
range: SecurityProperty

threatens
type: ObjectProperty
comment: An attack (e.g., eavesdropping) threatens some security properties (e.g., confidentiality)
domain: Attack
range: SecurityProperty

isProtectedBy
type: ObjectProperty
inverse of: protects
domain: Technology
range: SecurityMechanism

protects
type: ObjectProperty
inverse of: isProtectedBy
domain: SecurityMechanism
range: Technology

has vulnerability
type: ObjectProperty
inverse of: is Vulnerability Of
domain: Technology
range: Attack
comment: A technology can be vulnerable to some attacks.

is Vulnerability Of
type: ObjectProperty
inverse of: has vulnerability
domain: Attack
range: Technology
comment: Some attacks cannot be thwart in technologies. For example, the Denial of Service is difficult to thwart in different technologies.

hasFeature
type: ObjectProperty
comment: A SecurityMechanism has specific features (secured, depreceted, low energy consuming). For example, an asymmetric algorithm is high energy consuming.
domain: SecurityMechanism
range: Feature
inverse of: isFeatureOf

isFeatureOf
type: ObjectProperty
comment: Features are related to security mechanisms. For example, an asymmetric algorithm is high energy consuming.
domain: Feature
range: SecurityMechanism
inverse of: hasFeature

hasArchitecture
type: ObjectProperty
domain: Technology
range: Architecture
comment: A technology has a specific architecture.

Worm
type: Class
comment: Worms are self-propagating pieces of malicious software. They propagate from one computer/device to another via a network link.
subclass of: Web Attack
subclass of: GPRS Attack
subclass of: Restriction
  on property: occursInLayer
  some values from: ApplicationLayer
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006]

Virus
type: Class
subclass of: GPRS Attack
subclass of: RFID Attack
subclass of: Web Attack
subclass of: Network Management Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Antivirus
subclass of: Restriction
  on property: occursInLayer
  some values from: ApplicationLayer
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006], Paper: Survey of Security and Privacy Issues of Internet of Things [Borgohain et al. 2015]

Spam
type: Class
subclass of: Web Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Anti Spam
subclass of: Restriction
  on property: occursInLayer
  some values from: ApplicationLayer

Spyware
type: Class
subclass of: Web Attack

Troyan
type: Class
comment: A Trojan horse is a malicious piece of software hidden in a program that performs normal tasks. Program that does something malicious (such as capturing passwords) when run by an unsuspecting user.
subclass of: Virus
subclass of: Restriction
  on property: is Vulnerability Of
  some values from: Web Attack
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006]

Polymorphic Virus
type: Class
subclass of: Virus

Antivirus
type: Class
comment: Anti-viruses softwares applications will reduce viruses and malware on M2M equipment.
description: See Paper: A study of information security for M2M and IoT [Jiang et al. 2010]
subclass of: Web Security Mechanism
subclass of: M2M SecurityMechanism
subclass of: Network Management Security Mechanism
subclass of: Integrity Method

Honeypot
type: Class
comment: Honeypots are hosts meant to be attacked either to distract the attackers or to research their techniques.
subclass of: Web Security Mechanism
subclass of: Network Management Security Mechanism

Anti Spyware
type: Class
subclass of: Web Security Mechanism

Anti Spam
type: Class
subclass of: Web Security Mechanism

External Attack
type: Class
subclass of: Active Attack
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006]

Passive Attack
type: Class
comment: Malicious users violate the confidentiality of the information exchanged over the network.
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006]
subclass of: Attack

Active Attack
type: Class
comment: Active attacks involve actions performed by adversaries to gain the control of the network.
subclass of: Attack
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006]

Internal Attack
type: Class
comment: Internal attacks are launched from compromised nodes, are much more sophisticated than external attacks.
subclass of: Active Attack
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006]

Sniffer
type: Class
comment: A Sniffer tries to spy passwords for instance.
subclass of: Security Tool

Wifi Attack Tool
type: Class
subclass of: Security Tool

Java Api
type: Class
subclass of: Web Security Mechanism

Captcha
type: Class
subclass of: Web Security Mechanism

SymmetricSensorKey
type: Class
subclass of: Symmetric Key

Sensor Key Management
type: Class
subclass of: Key Management
subclass of: Sensor Security Mechanism

GSM Key Management
type: Class
subclass of: Key Management
subclass of: GSM SecurityMechanism

UMTS Key Management
type: Class
subclass of: Key Management
subclass of: UMTS SecurityMechanism

Wimax Key Management
type: Class
subclass of: Key Management
subclass of: Wimax SecurityMechanism

Wifi Key Management
type: Class
subclass of: Key Management
subclass of: Wifi SecurityMechanism

Mesh Key Management
type: Class
subclass of: Key Management
subclass of: Mesh Security Mechanism

Sensor Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Sensor Security Mechanism

Manet Attack
type: Class
comment: Manet (Mobile ad hoc network) is a self-configuring network of mobile devices connected.
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Manet SecurityMechanism

Mesh Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Mesh Security Mechanism

M2M Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: M2M SecurityMechanism

Uwb Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Uwb SecurityMechanism

RFID Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Rfid SecurityMechanism

Bluetooth Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Bluetooth SecurityMechanism

Zigbee Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Zigbee SecurityMechanism

Wifi Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Wifi SecurityMechanism

Wimax Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Wimax SecurityMechanism

GSM Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: GSM SecurityMechanism

HSPDA Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: HSPDA SecurityMechanism

UMTS Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: UMTS SecurityMechanism

EDGE Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: EDGE SecurityMechanism

GPRS Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: GPRS SecurityMechanism

LTE Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: LTE Security Mechanism

Web Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Web Security Mechanism
subclass of: Restriction
  on property: occursInLayer
  some values from: ApplicationLayer

Cloud Attack
type: Class
subclass of: Web Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Cloud Security Mechanism

Framework Attack
type: Class
subclass of: Web Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Framework Security Mechanism

Database Attack
type: Class
subclass of: Web Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Database Security Mechanism

ECommerce Attack
type: Class
subclass of: Web Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: ECommerceSecurityMechanism

Programming Language Attack
type: Class
subclass of: Web Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Programming Language Security Mechanism

Web Service Attack
type: Class
subclass of: Web Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: WebServiceSecurityMechanism

Network Management Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Network Management Security Mechanism

Server Attack
type: Class
subclass of: Network Management Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Server Security Mechanism

Operating System Attack
type: Class
subclass of: Network Management Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Operating System Security Mechanism

Ethernet Attack
type: Class
subclass of: Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: Ethernet SecurityMechanism

Ethernet SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Ethernet

M2M SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Machine-to-Machine(M2M)

Manet SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Manet Technology

Sensor Security Mechanism
type: Class
comment: Sensor nodes have very limited computationnal power, and traditional security and encryption techniques are not-well suitd to this domain.
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Sensor Technology

Mesh Security Mechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Mesh Technology

Web Security Mechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Web Technology
subclass of: Restriction
  on property: protectsInLayer
  some values from: ApplicationLayer

Cloud Security Mechanism
type: Class
subclass of: Web Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: Cloud Technology

Framework Security Mechanism
type: Class
subclass of: Web Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: Framework Technology

Database Security Mechanism
type: Class
subclass of: Web Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: Database Technology

Programming Language Security Mechanism
type: Class
subclass of: Web Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: Programming Language

ECommerce Mechanism
type: Class
subclass of: Web Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: ECommerce Technology

Web Service Mechanism
type: Class
subclass of: Web Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: WebServiceTechnology

Network Management Security Mechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Network Management Technology

Operating System Security Mechanism
type: Class
subclass of: Network Management Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: Operating system Technology

Server Security Mechanism
type: Class
subclass of: Network Management Security Mechanism
subclass of: Restriction
  on property: protects
  some values from: Server Technology

LTE Security Mechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Long Term Evolution (LTE) Technology or 4G

GSM SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Global System for Mobile Communication (GSM) or 2G

HSPDA SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: High-Speed Download Packet Access (HSPDA) or 3.5G

GPRS SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: General Packet Radio Service (GPRS) or 2.5G

UMTS SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: 3G technology (UMTS:Universal Mobile Telecommunications System)

EDGE SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Enhanced Data Rates for GSM Evolution (EDGE) or 2.75G

Rfid SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Rfid Technology

Uwb SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Ultra Wideband (UWB) Technology

Bluetooth SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Bluetooth Technology

Zigbee SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Zigbee Technology

Wimax SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Wimax Technology

Wifi SecurityMechanism
type: Class
subclass of: SecurityMechanism
subclass of: Restriction
  on property: protects
  some values from: Wi-Fi technology (Wireless-Fidelity)

Ethernet
type: Class
subclass of: Technology
subclass of: Restriction
  on property: hasFeature
  some values from: HighCostDeployment
subclass of: Restriction
  on property: has vulnerability
  some values from: Ethernet Attack

Global System for Mobile Communication (GSM) or 2G
type: Class
comment: Global System for Mobile Communication (GSM) or 2G
subclass of: Technology
subclass of: Restriction
  on property: isReplacedBy
  some values from: General Packet Radio Service (GPRS) or 2.5G
subclass of: Restriction
  on property: hasArchitecture
  some values from: GSM Architecture
subclass of: Restriction
  on property: has vulnerability
  some values from: GSM Attack

General Packet Radio Service (GPRS) or 2.5G
type: Class
comment: General Packet Radio Service (GPRS) or 2.5G
subclass of: Technology
subclass of: Restriction
  on property: isReplacedBy
  some values from: Enhanced Data Rates for GSM Evolution (EDGE) or 2.75G
subclass of: Restriction
  on property: hasArchitecture
  some values from: GPRS Architecture
subclass of: Restriction
  on property: has vulnerability
  some values from: GPRS Attack

Enhanced Data Rates for GSM Evolution (EDGE) or 2.75G
type: Class
comment: Enhanced Data Rates for GSM Evolution (EDGE) or 2.75G
subclass of: Technology
subclass of: Restriction
  on property: isReplacedBy
  some values from: 3G technology (UMTS:Universal Mobile Telecommunications System)
subclass of: Restriction
  on property: has vulnerability
  some values from: EDGE Attack

3G technology (UMTS:Universal Mobile Telecommunications System)
type: Class
comment: Universal Mobile Telecommunications System (UMTS). Third Generation (3G)
subclass of: Technology
subclass of: Restriction
  on property: isReplacedBy
  some values from: High-Speed Download Packet Access (HSPDA) or 3.5G
subclass of: Restriction
  on property: hasArchitecture
  some values from: UMTS Architecture
subclass of: Restriction
  on property: has vulnerability
  some values from: UMTS Attack

High-Speed Download Packet Access (HSPDA) or 3.5G
type: Class
comment: High-Speed Download Packet Access (HSPDA) or 3.5G
subclass of: Technology
subclass of: Restriction
  on property: isReplacedBy
  some values from: Long Term Evolution (LTE) Technology or 4G
subclass of: Restriction
  on property: has vulnerability
  some values from: HSPDA Attack

Long Term Evolution (LTE) Technology or 4G
type: Class
comment: Long Term Evolution (LTE) Technology or 4G
subclass of: Technology
subclass of: Restriction
  on property: hasArchitecture
  some values from: LTE Architecture
subclass of: Restriction
  on property: has vulnerability
  some values from: LTE Attack

Bluetooth Technology
type: Class
comment: A protocol for short-range (up to 100 meters) wireless networks.
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Bluetooth Attack

Rfid Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: RFID Attack

Zigbee Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: hasFeature
  some values from: LowCost
subclass of: Restriction
  on property: hasFeature
  some values from: LowEnergyConsuming
subclass of: Restriction
  on property: hasFeature
  some values from: Scalable
subclass of: Restriction
  on property: has vulnerability
  some values from: Zigbee Attack

Ultra Wideband (UWB) Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Uwb Attack

Wi-Fi technology (Wireless-Fidelity)
type: Class
subclass of: Technology
subclass of: Restriction
  on property: hasFeature
  some values from: LowCostDeployment
subclass of: Restriction
  on property: hasArchitecture
  some values from: Wifi Architecture
subclass of: Restriction
  on property: has vulnerability
  some values from: Wifi Attack

Wimax Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: hasArchitecture
  some values from: WiMAX Architecture
subclass of: Restriction
  on property: has vulnerability
  some values from: Wimax Attack

Sensor Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Sensor Attack

Machine-to-Machine(M2M)
type: Class
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: M2M Attack

Manet Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Manet Attack

Mesh Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: hasArchitecture
  some values from: Mesh Architecture
subclass of: Restriction
  on property: has vulnerability
  some values from: Mesh Attack

Framework Technology
type: Class
subclass of: Web Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Framework Attack

Cloud Technology
type: Class
subclass of: Web Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Cloud Attack

Web Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Web Attack

ECommerce Technology
type: Class
subclass of: Web Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: ECommerce Attack

Database Technology
type: Class
subclass of: Web Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Database Attack

Programming Language
type: Class
subclass of: Web Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Programming Language Attack

Web Service
type: Class
subclass of: Web Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Web Service Attack

Network Management Technology
type: Class
subclass of: Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Network Management Attack

Server Technology
type: Class
subclass of: Network Management Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Server Attack

Operating system Technology
type: Class
subclass of: Network Management Technology
subclass of: Restriction
  on property: has vulnerability
  some values from: Operating System Attack

Sensor Security Protocol
type: Class
subclass of: Protocol
subclass of: Sensor Security Mechanism

GSM Security Protocol
type: Class
subclass of: Protocol
subclass of: GSM SecurityMechanism

UMTS Security Protocol
type: Class
subclass of: Protocol
subclass of: UMTS SecurityMechanism

Wifi Security Protocol
type: Class
subclass of: Protocol
subclass of: Wifi SecurityMechanism

Mesh Security Protocol
type: Class
subclass of: Protocol
subclass of: Mesh Security Mechanism

Wimax Security Protocol
type: Class
subclass of: Protocol
subclass of: Wimax SecurityMechanism

Web Security Protocol
type: Class
subclass of: Protocol
subclass of: Web Security Mechanism

GSM Security Algorithm
type: Class
subclass of: Security Algorithm
subclass of: GSM SecurityMechanism

GPRS Security Algorithm
type: Class
subclass of: Security Algorithm
subclass of: GPRS SecurityMechanism

UMTS Security Algorithm
type: Class
subclass of: Security Algorithm
subclass of: UMTS SecurityMechanism

Bluetooth Security Algorithm
type: Class
subclass of: Security Algorithm
subclass of: Bluetooth SecurityMechanism

LowSensitive
type: Class
subclass of: DataTypeSensitive

MediumSensitive
type: Class
subclass of: DataTypeSensitive

HighSensitive
type: Class
subclass of: DataTypeSensitive

DataProvenanceType
type: Class

Bank
type: Class
subclass of: DataProvenanceType

Personal
type: Class
subclass of: DataProvenanceType

CryptographicConcept
type: Class
subclass of: SecurityMechanism

Physical Key
type: Class
subclass of: Physical Authentication

Badge
type: Class
subclass of: Physical Authentication

Physical Authentication
type: Class
subclass of: Authentication Method

Symmetric Key
type: Class
comment: Symmetric key: the same key is used for encryption and decryption.

Asymmetric Key
type: Class

Public Key
type: Class
comment: The public key is used for verifying a digital signature and is used for encryption.
subclass of: Asymmetric Key

Private Key
type: Class
comment: The private key is used for computing signatures and decryption.
subclass of: Asymmetric Key

Digital Signature
type: Class
comment: The digital signature verifies that the contents of the electronic message have not been altered.
subclass of: CryptographicConcept
subclass of: Integrity Method
subclass of: Authentication Method
subclass of: Non Repudiation Method
has part: Asymmetric algorithm

System Logs
type: Class
subclass of: Non Repudiation Method

Digital Certificate
type: Class
subclass of: Authentication Method

Hash Function
type: Class
subclass of: CryptographicConcept
subclass of: Integrity Method
subclass of: Authentication Method
has part: Symmetric algorithm

Checksum Algorithm
type: Class
subclass of: Integrity Method

hasModeOperation
type: ObjectProperty
domain: Symmetric algorithm
range: Mode of operation

Mode of operation
type: Class
comment: A mode of operation describes the process of encrypting each of block cipher.
subclass of: BlockCipher

Asymmetric algorithm
type: Class
comment: The keys used for encryption and decryption are different, allowing for easier key distribution.
subclass of: Encryption Algorithm
subclass of: Authentication Method
subclass of: Restriction
  on property: hasFeature
  some values from: HighEnergyConsuming
subclass of: Restriction
  on property: hasFeature
  some values from: ExchangeKeyEasy
has part: IndividualKey
has part: Private Key
has part: Public Key

Symmetric algorithm
type: Class
comment: The same secret key is used for encryption and decryption.
subclass of: Encryption Algorithm
subclass of: Restriction
  on property: hasFeature
  some values from: ExchangeKeyNotEasy
subclass of: Restriction
  on property: hasFeature
  some values from: LowEnergyConsuming

BlockCipher
type: Class
subclass of: Symmetric algorithm

StreamCipher
type: Class
subclass of: Symmetric algorithm

Key Management
type: Class
comment: Key management protocols are fundamental requirements to develop a secure application. These protocols are used to set up and distribute various kinds of cryptographic keys to nodes in the network.
subclass of: CryptographicConcept
subclass of: Authentication Method

Encryption Algorithm
type: Class
comment: Encryption algorithm ensures the confidentiality property.
subclass of: Security Algorithm
subclass of: CryptographicConcept
subclass of: Confidentiality Method

Security Algorithm
type: Class
subclass of: SecurityMechanism

Flooding
type: Class
comment: Floodings attacks generally are used to drain the memry resources by sensing the control signals.
description: See Paper: Survey of Security and Privacy Issues of Internet of Things [Borgohain et al. 2015]
subclass of: Sensor Attack
subclass of: Restriction
  on property: hasSecurityMechanism
  some values from: ClientPuzzle
subclass of: Restriction
  on property: occursInLayer
  some values from: TransportLayer

Mesh Architecture component
type: Class
subclass of: Architecture component

Wimax Architecture component
type: Class
subclass of: Architecture component

Wifi Architecture component
type: Class
subclass of: Architecture component

LTE Architecture component
type: Class
subclass of: Architecture component

UMTS Architecture component
type: Class
subclass of: Architecture component

GPRS Architecture component
type: Class
subclass of: Architecture component

GSM Architecture component
type: Class
subclass of: Architecture component

GPRS Architecture
type: Class
comment: The GPRS system are a much more expesed to intruders, because of its IP based backbone.
subclass of: Architecture

UMTS Architecture
type: Class
subclass of: Architecture

LTE Architecture
type: Class
subclass of: Architecture

Mesh Architecture
type: Class
subclass of: Architecture
subclass of: Restriction
  on property: hasFeature
  some values from: LowCostDeployment
subclass of: Restriction
  on property: hasFeature
  some values from: Scalable
subclass of: Restriction
  on property: hasFeature
  some values from: Flexible

WiMAX Architecture
type: Class
subclass of: Architecture

GSM Architecture
type: Class
subclass of: Architecture

Wifi Architecture
type: Class
subclass of: Architecture

Security Magazine
type: Class
subclass of: SecurityMechanism

Security Property Method
type: Class
subclass of: SecurityMechanism

Confidentiality Method
type: Class
comment: Confidentiality means that only destined user must be able to read data.
subclass of: Security Property Method

Semantic Security Method
type: Class
comment: Semantic security ensures that an eavesdropper has no information about the message, even if it sees multiple encryptions of the same messages.
subclass of: Security Property Method

Authentication Method
type: Class
comment: Authentication prevents unauthorized access to the network.
subclass of: Security Property Method

Integrity Method
type: Class
comment: Data integrity guarantees that the transmitted messages are not modified by attackers, either due to malicious intent or by accident.
subclass of: Security Property Method

Access Control Method
type: Class
comment: Access Control is the mechanism that allows owners of resources to define, manage and enforce access conditions applicable to each resource.
subclass of: Security Property Method

Availability Method
type: Class
comment: Data availability ensures that the network is alive and that data are accessible.
subclass of: Security Property Method

Non Repudiation Method
type: Class
comment: Non repudiation means that a sender is unable to deny having sent a message or infoomation.
subclass of: Security Property Method

Anonymity Method
type: Class
comment: Anonymity protects user identity, making it hard to track the whereabouts of a certain user.
subclass of: Security Property Method

Data Freshness Method
type: Class
comment: Data freshness suggests that the data is recent, and it ensures that no old messages have been replayed.
subclass of: Security Property Method

Counter Value
type: Class
comment: Since the counter value is incremented after each message, the same message is encrypted differently each time.
subclass of: Data Freshness Method

Timestamp
type: Class
comment: In order to ensure the freshness of packet, a timestamp can be attached to the packet. A receiving node can compare the timestamp in the packet with its own time clock and determine whether the packet is valid or not.
subclass of: Data Freshness Method

Temporary Identity
type: Class
subclass of: Anonymity Method

Intrusion Prevention System (IPS)
type: Class
subclass of: Network Management Security Mechanism
subclass of: Availability Method

Intrusion Detection System (IDS)
type: Class
subclass of: Network Management Security Mechanism
subclass of: Availability Method

Proxy
type: Class
comment: A proxy analyzes application commands, performs authentication and keeps logs.
subclass of: Network Management Security Mechanism
subclass of: Access Control Method

Reverse Proxy
type: Class
subclass of: Network Management Security Mechanism
subclass of: Access Control Method

Role Based Access Control (RBAC)
type: Class
comment: Mechanism for access control that organizes users (in the system) into specific groups called Roles. E.g., Doctor and nurses are different roles in a hospital.
subclass of: Access Control Method
subclass of: Restriction
  on property: hasFeature
  some values from: NotFlexible

Context Aware Role Based Access Control (CA-RBAC)
type: Class
comment: E.g. herat attack is a critical event. Criticaly is a context aware permission.
subclass of: Access Control Method

Attribute Based Access control (ABAC)
type: Class
comment: Permissions are associated with a set of rules expressed on measurable parameters and are granted to users who can prove compliance with these rules.
subclass of: Access Control Method

Relation Based Access Control (RelBAC)
type: Class
comment: Permissions are modeled as relations between users (subjects) and data (objects).
subclass of: Access Control Method

Discretionary Access Control (DAC)
type: Class
comment: Object owners can add access rights.
subclass of: Access Control Method

Firewall
type: Class
type: Network Management Security Mechanism
type: UMTS SecurityMechanism
subclass of: Access Control Method
subclass of: Restriction
  on property: protectsInLayer
  some values from: ApplicationLayer
subclass of: Restriction
  on property: protects
  some values from: Web Technology
description: See Paper: Malicious actions against the GPRS technology [Xenakis 2006]

Login/Password
type: Class
comment: The simple form of authentication is providing a user name and password which is mainly the case in internet based authentication (e.g. email, online shopping, etc)
subclass of: Access Control Method
subclass of: Authentication Method

Mandatory Access Control (MAC)
type: Class
comment: Only an administrator is authorized to add a new access right to the system.
subclass of: Access Control Method

Initial Vector
type: Class
subclass of: Semantic Security Method

Integrity Check Value (ICV)
type: Class
comment: The purpose of this value is to enable the receiver to detect any malicious modifications of the message by an attacker.
subclass of: Integrity Method

Message Authentication Code (MAC)
type: Class
comment: MAC is a short piece of information used to authenticate a message and check the integrity.
subclass of: Integrity Method
subclass of: Authentication Method

Pre Shared Key
type: Class
subclass of: Authentication Method

Mutual Authentication ot two-way authentication
type: Class
subclass of: Authentication Method

One Way Authentication
type: Class
subclass of: Authentication Method

Challenge Response
type: Class
comment: Challenge/Response is a mechanism where on entity in the network proves to another entity that it knows the password without revealing it.
subclass of: Authentication Method