arXiv:2412.13964cs.AIcs.LO2024-12被引 1

用对象驱动的破坏图建模风险,让物体角色更透明。

WATCHDOG: an ontology-aWare risk AssessmenT approaCH via object-oriented DisruptiOn Graphs

  • 用对象破坏图(DOGs)融合本体与形式化方法,提升风险建模表达力。
  • 支持查询破坏传播路径、发生概率和风险等级,量化对象贡献。
  • 适合安全评估、系统设计等需追踪对象影响的场景。

在评估风险事件或行为时,不能忽视相关物体的作用:手机中的充电电池可避免车辆爆胎后被困沙漠,而正常运行的防火墙能降低黑客入侵网络的风险。共同价值与风险本体(COVER)强调物体及其关系在实现透明、完整、可问责风险评估中的核心作用。本文通过将COVER中提出的概念(如物体间的部分关系、物体参与事件)具体化,提出新的风险评估框架WATCHDOG。该框架拓展了已验证的形式化模型(如故障树、攻击树)的表达能力,融合本体与形式化方法,构建了由更丰富的建模形式(对象破坏图,DOGs)、逻辑语言(DOGLog)及中间查询语言(DOGLang)组成的一体化框架。借助此框架,风险评估者可探究破坏传播路径、破坏可能性及风险水平,始终将处于风险中的物体置于评估中心。

原文摘要 · Abstract (English)

When considering risky events or actions, we must not downplay the role of involved objects: a charged battery in our phone averts the risk of being stranded in the desert after a flat tyre, and a functional firewall mitigates the risk of a hacker intruding the network. The Common Ontology of Value and Risk (COVER) highlights how the role of objects and their relationships remains pivotal to performing transparent, complete and accountable risk assessment. In this paper, we operationalize some of the notions proposed by COVER -- such as parthood between objects and participation of objects in events/actions -- by presenting a new framework for risk assessment: WATCHDOG. WATCHDOG enriches the expressivity of vetted formal models for risk -- i.e., fault trees and attack trees -- by bridging the disciplines of ontology and formal methods into an ontology-aware formal framework composed by a more expressive modelling formalism, Object-Oriented Disruption Graphs (DOGs), logic (DOGLog) and an intermediate query language (DOGLang). With these, WATCHDOG allows risk assessors to pose questions about disruption propagation, disruption likelihood and risk levels, keeping the fundamental role of objects at risk always in sight.

风险评估本体形式化方法建模

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。