An Ontology for Digital Forensics in IT Security Incidents - OPUS

32 CHAPTER 5. ONTOLOGY
Person
name
private address
private phone
Name
Address
PhoneNumber
first name last name title street city
street number zip code area code phone number
Text
Number
Figure 5.1: Address book ontology
the characteristics of the concepts. In the address book example the rst
and last name are properties of the class name and street, city and zip code
are properties of the address. The restrictions constrain the applicability of
the properties. The properties can be thought of as the edges that connect
the nodes of a directed graph. The restrictions limit what types of edges
are allowed between what types of nodes. In the example it would not make
any sense if the edge that represents the property for the rst name would
be allowed to connect nodes of the type address and person. One possibility
for the address book ontology is shown in gure 5.1. An instance of the
structure of the example ontology that describes the address book entry of
a specic person may look similar to gure 5.2.
P1
Person
name
private address
private phone
Nm1
Name
A1
Address
PN1
PhoneNumber
last name
title
first name
city
street
zip code
street number
phone number area code
Doe
Dr
John
Sampleville
Samplestreet
0815
42
0690
555
type
type type
type
type
type type
type
type
Text
Number
Figure 5.2: Address book instance