Mubashar Iqbal (mubashar.iqbal@ut.ee) and Raimundas Matulevičius (rma@ut.ee)
Security risk analysis of healthcare applications using blockchain
HealthOnt presents the blockchain as a countermeasure solution for security threats of traditional healthcare applications. Also, it presents what security threats can appear in blockchain-based healthcare applications.
Healthcare Security Ontology (HealthOnt)
Éric Dubois, Patrick Heymans, Nicolas Mayer, Raimundas Matulevičius
A Systematic Approach to Define the Domain of Information System Security Risk Management
A vulnerability is the characteristic of an IS asset or group of IS assets that exposes a weakness or flaw in terms of security.
Asset are valuable and plays a role accomplishing the organization’s objectives. Assets are classified as system and business assets.
The information and services are available to authorized users when needed.
Security criteria is a constraint on business assets and characterize a security need which are expressed as confidentiality, integrity and availability of business assets.
A threat is an incident initiated by a threat agent using an attack method to target one or more IS assets by exploiting their vulnerabilities.
The data is only available to authorized users.
Systems assets are the component or part of an information system, valuable to the organization since it supports business assets.
Countermeasures are controls to improve the security of the system. Countermeasure can be processes, policies, devices, practices or other actions or components of the information system and its organisation that act to reduce risks.
Integrity refers to the certainty that the data is not tampered with during or after the submission.
Business assets describe the information, processes, capabilities and skills essential to the business and its core mission.
It is an inverse relation of constraintOf where security criteria is a constraint of business assets.
Vulnerability negates the defined security criteria of business assets.
A countermeasure mitigates one or more vulnerabilities associated to a particular threat.
Security criteria is a constraint of business assets.
It is an inverse relation of exploits where vulnerability in the system is exploited by threat.
It is an inverse relation of harms where an asset is harmed by a vulnerability.
It is an inverse relation of mitigates where one or more vulnerabilities associated to a particular threat are mitigated by countermeasure.
It is an inverse relation of targets where one or more system assets are targeted by threat.
A system asset supports one or more business assets.
It is an inverse relation of negates where security criteria of business assets is negated by vulnerability.
It is an inverse relation of supports where one or more business assets is supported by system asset.
It is an inverse relation of characteristicOf where one or more system assets has a characteristic vulnerability that exposes weakness of system assets.
A threat targets one or more system assets.
A threat exploits vulnerabilities in the system.
A vulnerability is a characteristic of a one or more system assets that exposes weakness.
It defines the authors of the book, book chapter, or research paper.
It defines who published the book, book chapter, or reserach paper.
Digital object identifier to uniquely identify a book, book chapter, or research paper.
It defines the number of pages in the book, book chapter, or research paper.
It defines the title of the book, book chapter, or research paper.
It defines the type, for example, is it a book, book chapter, research paper, or web article.
It defines in which year the book, book chapter, or research paper is published.
It defines the link of the source if it is a web article.
Specification of all metadata terms maintained by the Dublin Core Metadata Initiative.
This annotation property indicates the source from which the knowledge is retrieved for a particular concept.
This annotation property indicates the license document.
This annotation property defines who created this ontology.
This annotation property defines the title of ontology.
Dublin core annotation property to determine if the threat is connected to traditional or blockchain-based applications.