安全评估领域：分类法和本体论综述
The Security Assessment Domain: A Survey of Taxonomies and Ontologies
摘要：
本体和分类法的使用有助于提供定义概念的手段，最大限度地减少歧义，提高互操作性和管理安全领域的知识。因此，本文提出了一个关于安全评估领域的本体论和分类法的文献调查。我们进行了它，以发现旨在正式化研究领域的信息安全和测试与评估概念的举措。我们在七个科学数据库中应用了系统评价方法。138篇论文被确定，并根据他们的主要贡献分为类别，即：本体论，分类学和调查。根据它们的内容，我们选择了47篇关于本体论的论文，22篇关于分类学的论文，11篇关于调查的论文。已设计了一种分类法，用于评估论文。摘要，表格，并初步分析选定的作品。我们的主要贡献是：1）更新的文献综述，描述论文的主要特征、结果、研究问题和应用领域; 2）评估过程的分类。我们还发现了安全评估文献中的空白，这可能是该领域进一步研究的主题。这项工作的目的是有用的安全研究人员谁希望在他们的方法和技术中采用正式的方法。
英文摘要：
The use of ontologies and taxonomies contributes by providing means to define concepts, minimize the ambiguity, improve the interoperability and manage knowledge of the security domain. Thus, this paper presents a literature survey on ontologies and taxonomies concerning the Security Assessment domain. We carried out it to uncover initiatives that aim at formalizing concepts from the Information Security and Test and Assessment fields of research. We applied a systematic review approach in seven scientific databases. 138 papers were identified and divided into categories according to their main contributions, namely: Ontology, Taxonomy and Survey. Based on their contents, we selected 47 papers on ontologies, 22 papers on taxonomies, and 11 papers on surveys. A taxonomy has been devised to be used in the evaluation of the papers. Summaries, tables, and a preliminary analysis of the selected works are presented. Our main contributions are: 1) an updated literature review, describing key characteristics, results, research issues, and application domains of the papers; and 2) the taxonomy for the evaluation process. We have also detected gaps in the Security Assessment literature that could be the subject of further studies in the field. This work is meant to be useful for security researchers who wish to adopt a formal approach in their methods and techniques.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
