Prefix(:=) Prefix(owl:=) Prefix(rdf:=) Prefix(xml:=) Prefix(xsd:=) Prefix(xsp:=) Prefix(rdfs:=) Prefix(swrl:=) Prefix(sqwrl:=) Prefix(swrla:=) Prefix(swrlb:=) Prefix(protege:=) Ontology( Import() Import() Annotation(rdfs:seeAlso "http://onto.ir/ontologies/airs") Annotation(rdfs:isDefinedBy "Verónica Mateos, et al. \"Definition of response metrics for an ontology-based Automated Intrusion Response Systems\", Computers and Electrical Engineering Journal, Vol. 38, pp. 1102–1114, 2013.") Declaration(Class(:Component)) Declaration(Class(:Context)) Declaration(Class(:FormattedIntrusion)) Declaration(Class(:IntrusionDetectionSystem)) Declaration(Class(:IntrusionResponseSystem)) Declaration(Class(:Network)) Declaration(Class(:NetworkContext)) SubClassOf(:NetworkContext :Context) Declaration(Class(:OptimumResponse)) SubClassOf(:OptimumResponse :Response) Declaration(Class(:Response)) Declaration(Class(:Result)) Declaration(Class(:SystemComponent)) Declaration(Class(:SystemContext)) SubClassOf(:SystemContext :Context) Declaration(ObjectProperty(:carriedOutResponses)) ObjectPropertyDomain(:carriedOutResponses :IntrusionResponseSystem) ObjectPropertyRange(:carriedOutResponses :Response) Declaration(ObjectProperty(:generate)) ObjectPropertyDomain(:generate :IntrusionDetectionSystem) ObjectPropertyRange(:generate :FormattedIntrusion) Declaration(ObjectProperty(:generatedResult)) ObjectPropertyDomain(:generatedResult :IntrusionResponseSystem) ObjectPropertyRange(:generatedResult :Result) Declaration(ObjectProperty(:hasContext)) ObjectPropertyDomain(:hasContext :Network) ObjectPropertyRange(:hasContext :Context) Declaration(ObjectProperty(:hasResponseDependency)) ObjectPropertyDomain(:hasResponseDependency :Response) ObjectPropertyRange(:hasResponseDependency :Response) Declaration(ObjectProperty(:hasResponseIncompatible)) ObjectPropertyDomain(:hasResponseIncompatible :SystemComponent) ObjectPropertyRange(:hasResponseIncompatible :Response) Declaration(ObjectProperty(:hasResponseReport)) Declaration(ObjectProperty(:installedIDS)) ObjectPropertyDomain(:installedIDS :Network) ObjectPropertyRange(:installedIDS :IntrusionDetectionSystem) Declaration(ObjectProperty(:locatedComponents)) ObjectPropertyDomain(:locatedComponents :Network) ObjectPropertyRange(:locatedComponents :SystemComponent) Declaration(ObjectProperty(:optimumProactiveResponses)) ObjectPropertyDomain(:optimumProactiveResponses :FormattedIntrusion) ObjectPropertyRange(:optimumProactiveResponses :Response) Declaration(ObjectProperty(:optimumResponse)) ObjectPropertyDomain(:optimumResponse :FormattedIntrusion) ObjectPropertyRange(:optimumResponse :Response) Declaration(ObjectProperty(:protectedBy)) ObjectPropertyDomain(:protectedBy :Network) ObjectPropertyRange(:protectedBy :IntrusionResponseSystem) Declaration(ObjectProperty(:receivedFormattedIntrusion)) ObjectPropertyDomain(:receivedFormattedIntrusion :IntrusionResponseSystem) ObjectPropertyRange(:receivedFormattedIntrusion :FormattedIntrusion) Declaration(ObjectProperty(:recommendedProactiveResponses)) ObjectPropertyDomain(:recommendedProactiveResponses :FormattedIntrusion) ObjectPropertyRange(:recommendedProactiveResponses :Response) Declaration(ObjectProperty(:recommendedResponses)) ObjectPropertyDomain(:recommendedResponses :FormattedIntrusion) ObjectPropertyRange(:recommendedResponses :Response) ObjectPropertyRange(swrla:hasRuleGroup swrla:Entity) Declaration(DataProperty(:componentID)) DataPropertyRange(:componentID xsd:int) Declaration(DataProperty(:componentLevelOfImportance)) DataPropertyRange(:componentLevelOfImportance xsd:string) Declaration(DataProperty(:intrusionSeverity)) Declaration(DataProperty(:orientedToIntrusionType)) Declaration(DataProperty(:realintrusionImpact)) DataPropertyRange(:realintrusionImpact xsd:int) Declaration(DataProperty(:reportIntrusionType)) Declaration(DataProperty(:responseAbsSeverity)) Declaration(DataProperty(:responseCost)) DataPropertyDomain(:responseCost :Response) Declaration(DataProperty(:responseImpact)) DataPropertyDomain(:responseImpact :Response) DataPropertyRange(:responseImpact xsd:int) Declaration(DataProperty(:responseRelSeverity)) Declaration(DataProperty(:targetOfIntrusionID)) DataPropertyRange(:targetOfIntrusionID xsd:int) DataPropertyDomain(swrla:isRuleGroupEnabled swrla:Entity) DLSafeRule(Body(ObjectPropertyAtom(:hasResponseReport Variable() Variable()) ObjectPropertyAtom(:hasResponseReport Variable() Variable()) DataPropertyAtom(:componentID Variable() Variable()) DataPropertyAtom(:componentLevelOfImportance Variable() Variable()) DataPropertyAtom(:intrusionSeverity Variable() Variable()) DataPropertyAtom(:orientedToIntrusionType Variable() Variable()) DataPropertyAtom(:orientedToIntrusionType Variable() Variable()) DataPropertyAtom(:reportIntrusionType Variable() Variable()) DataPropertyAtom(:reportIntrusionType Variable() Variable()) DataPropertyAtom(:responseAbsSeverity Variable() Variable()) DataPropertyAtom(:responseAbsSeverity Variable() Variable()) DataPropertyAtom(:responseRelSeverity Variable() Variable()) DataPropertyAtom(:responseRelSeverity Variable() Variable()) DataPropertyAtom(:targetOfIntrusionID Variable() Variable()) BuiltInAtom(swrlb:equal Variable() "high"^^xsd:string) BuiltInAtom(swrlb:equal Variable() Variable()) BuiltInAtom(swrlb:equal Variable() Variable()) BuiltInAtom(swrlb:equal Variable() Variable()) BuiltInAtom(swrlb:greaterThan Variable() Variable()) BuiltInAtom(swrlb:greaterThanOrEqual Variable() Variable()) BuiltInAtom(swrlb:greaterThanOrEqual Variable() Variable()))Head(ObjectPropertyAtom(:optimumResponse Variable() Variable()))) AnnotationAssertion(rdfs:comment "Minimum Cost Metric (4.2.2)"^^xsd:string) AnnotationAssertion(rdfs:comment "Damege Intrusion Metric Rule (4.2.1)"^^xsd:string) AnnotationAssertion(rdfs:comment "Highest Severity And Highest Efficiency Metric Rule (4.2.3)"^^xsd:string) DLSafeRule(Body(DataPropertyAtom(:realintrusionImpact Variable() Variable()) DataPropertyAtom(:responseImpact Variable() Variable()) BuiltInAtom(swrlb:lessThanOrEqual Variable() Variable()))Head()) DLSafeRule(Body(DataPropertyAtom(:componentID Variable() Variable()) DataPropertyAtom(:componentLevelOfImportance Variable() Variable()) DataPropertyAtom(:responseCost Variable() Variable()) DataPropertyAtom(:responseCost Variable() Variable()) DataPropertyAtom(:targetOfIntrusionID Variable() Variable()) BuiltInAtom(swrlb:equal Variable() "low"^^xsd:string) BuiltInAtom(swrlb:equal Variable() Variable()) BuiltInAtom(swrlb:lessThanOrEqual Variable() Variable()))Head(ObjectPropertyAtom(:optimumResponse Variable() Variable()))) )