Mapping of vulnerabilities in the public cloud with the use of foundational ontology: A perspective for service IaaS

In the present days, business applications are still designed for human consumption, which does not allow machines to understand the information contained in them, particularly preventing the correlation between concepts from different fields, in the generation and submission of new information for the handling of large data sets. The increasing complexity of applications, increases the attention in the construction of knowledgeable systems that can be understood and shared by all (application / machines / people). Using the concept of Ontology as a tool for knowledge representation has been effective, in order to develop applications with these said characteristics, since the semantic models have the ability to map and integrate different concepts from the same domain or different domains of knowledge, related to each other, therefore providing conditions for understanding the information contained herewith. Presently, there are different proposals for the aforesaid mapping, considering the semantics and ontological integrations, as well as interoperability of the information systems. This study presents a conceptual modeling in domain knowledge, about the potential vulnerabilities in environments, IaaS, in the public cloud, as a scenario using ontology reasoning. The purpose this modeling, is to provide an effective mechanism, capable of handling two major security issues, such as: providing a common vocabulary to describe vulnerabilities unambiguously and resolving the issue of semantic interoperability between the databases of vulnerabilities maintained by various entities1.