Effective vulnerability management requires the integration of vulnerability information
available on multiple sources, including social media. The information could be used to …

This paper introduces an evolving cybersecurity knowledge graph that integrates and links
critical information on real-world vulnerabilities, weaknesses and attack patterns from …

Security is an important issue that needs to be taken into account at all stages of information
system development, including early requirements elicitation. Early analysis of security …

Purpose The purpose of this paper is to provide a method to formalize information security
control descriptions and a decision support system increasing the automation level and …

Purpose The purpose of this paper is to increase the degree of automation within
information security compliance projects by introducing a formal representation of the ISO …

This paper provides a novel method for evaluating Incident Response (IR) teams through
the application of the Cube Socio-technical Systems Analysis (STSA) methodology. Cube is …

Sažetak The past several years we have witnessed that information has become the most
precious asset, while protection and security of information is becoming an ever greater …

Ontologies have been developed and used by several researchers in different knowledge
domains aiming to ease the structuring and management of knowledge, and to create a …

The paper shows how to apply a new ontology-based approach to the security problem
definition (SPD), which is the key stage of the IT security development process compliant …

Both non-profit and commercial organizations rely heavily on information to process their
daily activities. The information security management standards are widely used and …