{"id":"https://openalex.org/W3021531425","doi":"https://doi.org/10.1145/3383219.3383292","title":"A Comparison Study of Available Sofware Security Ontologies","display_name":"A Comparison Study of Available Sofware Security Ontologies","publication_year":2020,"publication_date":"2020-04-15","ids":{"openalex":"https://openalex.org/W3021531425","doi":"https://doi.org/10.1145/3383219.3383292","mag":"3021531425"},"language":"en","primary_location":{"id":"doi:10.1145/3383219.3383292","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3383219.3383292","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040564397","display_name":"Mamdouh Alenezi","orcid":"https://orcid.org/0000-0001-6852-1206"},"institutions":[{"id":"https://openalex.org/I142024983","display_name":"Prince Sultan University","ror":"https://ror.org/053mqrf26","country_code":"SA","type":"education","lineage":["https://openalex.org/I142024983"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mamdouh Alenezi","raw_affiliation_strings":["College of Computer and Information Sciences, Prince Sultan University Riyadh, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Information Sciences, Prince Sultan University Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I142024983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039252859","display_name":"Hamid Abdul Basit","orcid":"https://orcid.org/0000-0002-1684-4262"},"institutions":[{"id":"https://openalex.org/I142024983","display_name":"Prince Sultan University","ror":"https://ror.org/053mqrf26","country_code":"SA","type":"education","lineage":["https://openalex.org/I142024983"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Hamid Abdul Basit","raw_affiliation_strings":["College of Computer and Information Sciences, Prince Sultan University Riyadh, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Information Sciences, Prince Sultan University Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I142024983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113605772","display_name":"Faraz Idris Khan","orcid":null},"institutions":[{"id":"https://openalex.org/I142024983","display_name":"Prince Sultan University","ror":"https://ror.org/053mqrf26","country_code":"SA","type":"education","lineage":["https://openalex.org/I142024983"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Faraz Idris Khan","raw_affiliation_strings":["Security Engineering Lab (SEL), Prince Sultan University Riyadh, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Engineering Lab (SEL), Prince Sultan University Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I142024983"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061664732","display_name":"Maham Anwar Beg","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Maham Anwar Beg","raw_affiliation_strings":["Lahore, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lahore, Pakistan","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"499","last_page":"504"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7730945944786072},{"id":"https://openalex.org/keywords/ontology","display_name":"Ontology","score":0.7618184089660645},{"id":"https://openalex.org/keywords/idef5","display_name":"IDEF5","score":0.6060700416564941},{"id":"https://openalex.org/keywords/domain-knowledge","display_name":"Domain knowledge","score":0.5528179407119751},{"id":"https://openalex.org/keywords/process-ontology","display_name":"Process ontology","score":0.5483629107475281},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.4975610077381134},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4679155945777893},{"id":"https://openalex.org/keywords/upper-ontology","display_name":"Upper ontology","score":0.4506528377532959},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.4468046724796295},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.3821675777435303},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.32340264320373535},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2434033453464508},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.2126833200454712},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.06369158625602722}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7730945944786072},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.7618184089660645},{"id":"https://openalex.org/C118248724","wikidata":"https://www.wikidata.org/wiki/Q5969997","display_name":"IDEF5","level":4,"score":0.6060700416564941},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.5528179407119751},{"id":"https://openalex.org/C137003198","wikidata":"https://www.wikidata.org/wiki/Q7247296","display_name":"Process ontology","level":3,"score":0.5483629107475281},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.4975610077381134},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4679155945777893},{"id":"https://openalex.org/C78726541","wikidata":"https://www.wikidata.org/wiki/Q3882785","display_name":"Upper ontology","level":3,"score":0.4506528377532959},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4468046724796295},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3821675777435303},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32340264320373535},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2434033453464508},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.2126833200454712},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.06369158625602722},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3383219.3383292","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3383219.3383292","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Evaluation and Assessment in Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Partnerships for the goals","score":0.41999998688697815,"id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W175213186","https://openalex.org/W193748482","https://openalex.org/W2009823402","https://openalex.org/W2052086751","https://openalex.org/W2151306939","https://openalex.org/W2153300407","https://openalex.org/W2164947858","https://openalex.org/W2172287543","https://openalex.org/W2205555974","https://openalex.org/W2257787605","https://openalex.org/W2321420494","https://openalex.org/W2410623418","https://openalex.org/W2417374371","https://openalex.org/W2503060256","https://openalex.org/W2529133275","https://openalex.org/W2550355384","https://openalex.org/W2556186360","https://openalex.org/W2578235727","https://openalex.org/W2611695239","https://openalex.org/W2782969241","https://openalex.org/W2791828696","https://openalex.org/W2792553346","https://openalex.org/W2801413116","https://openalex.org/W2890144868","https://openalex.org/W2946518611","https://openalex.org/W2953580873","https://openalex.org/W2982458316","https://openalex.org/W3046558492"],"related_works":["https://openalex.org/W3143216745","https://openalex.org/W1506177826","https://openalex.org/W2595799331","https://openalex.org/W2726617685","https://openalex.org/W2125569773","https://openalex.org/W991275336","https://openalex.org/W2051438479","https://openalex.org/W2399767494","https://openalex.org/W2398356932","https://openalex.org/W2032492244"],"abstract_inverted_index":{"A":[0],"rising":[1],"number":[2],"of":[3,16,25,37,54,79,137],"software":[4,17,30,67,107,127,159],"and":[5,19,35,41,61,98,119,132],"services":[6],"malfunctioning":[7],"due":[8],"to":[9,143,152],"security":[10,18,68,108,128,160],"flaws":[11],"has":[12],"increased":[13],"the":[14,26,33,38,63,95,121,135,145,154,158],"importance":[15],"resulted":[20],"in":[21,109,141],"numerous":[22],"knowledge":[23,44,55],"sources":[24],"domain.":[27,161],"Building":[28],"secure":[29],"systems":[31],"require":[32],"understanding":[34],"extraction":[36],"available":[39],"knowledge,":[40,129],"a":[42,84,103],"standard":[43,104,155],"management":[45,56],"platform":[46],"is":[47],"needed.":[48],"Ontologies":[49],"form":[50],"an":[51],"integral":[52],"part":[53,78],"platforms":[57],"as":[58,77,102],"they":[59],"capture":[60,126],"structure":[62],"given":[64],"knowledge.":[65],"Various":[66],"ontologies":[69,91,123],"have":[70,117],"been":[71],"proposed":[72],"previously,":[73],"either":[74],"stand-alone":[75],"or":[76,86],"some":[80],"bigger":[81],"ontology":[82,105,138,147,156],"like":[83],"computer":[85],"information":[87],"security.":[88],"However,":[89],"these":[90],"do":[92],"not":[93],"cover":[94],"entire":[96],"domain":[97],"cannot":[99],"be":[100,150],"used":[101],"for":[106,157],"its":[110],"current":[111],"form.":[112],"In":[113],"this":[114],"paper,":[115],"we":[116],"identified":[118],"evaluated":[120],"existing":[122],"that":[124,148],"specifically":[125],"both":[130],"qualitatively":[131],"quantitatively":[133],"with":[134],"help":[136],"evaluation":[139],"tools,":[140],"order":[142],"select":[144],"best":[146],"can":[149],"extended":[151],"prepare":[153]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}