An Ontology for Digital Forensics in IT Security Incidents - OPUS
An Ontology for Digital Forensics in IT Security Incidents - OPUS
An Ontology for Digital Forensics in IT Security Incidents - OPUS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
38 CHAPTER 5. ONTOLOGY<br />
to be Augsburg.<br />
The query from list<strong>in</strong>g 5.4 can be written shorter. The variable ?address<br />
is only used to store the address object temporarily and is not needed anywhere<br />
else. In most programm<strong>in</strong>g languages the code address = person.<br />
address; address.city == "Augsburg" can be replaced by person.address<br />
.city == "Augsburg". This is similarly also possible <strong>in</strong> SPARQL as it is<br />
shown <strong>in</strong> list<strong>in</strong>g 5.5.[Pérez et al., 2009][W3C, 2008]<br />
More details on writ<strong>in</strong>g queries are given <strong>in</strong> section 7.6.<br />
1 PREFIX p:< http :// www . example . org / person #><br />
2 PREFIX a:< http :// www . example . org / address #><br />
3 SELECT ? lastname ? firstname<br />
4 WHERE {<br />
5 ? person p: firstname ? firstname .<br />
6 ? person p: lastname ? lastname .<br />
7 ? person p: address ? address .<br />
8 ? address a: city " Augsburg " .<br />
9 }<br />
List<strong>in</strong>g 5.4: Advanced SPARQL query<br />
1 PREFIX p:< http :// www . example . org / person #><br />
2 PREFIX a:< http :// www . example . org / address #><br />
3 SELECT ? lastname ? firstname<br />
4 WHERE {<br />
5 ? person p: firstname ? firstname .<br />
6 ? person p: lastname ? lastname .<br />
7 ? person p: address [ a: city " Augsburg " ] .<br />
8 }<br />
List<strong>in</strong>g 5.5: Advanced SPARQL query (shortened)<br />
5.2 <strong>Ontology</strong> Tools<br />
In this section tools are presented <strong>for</strong> creat<strong>in</strong>g and visualiz<strong>in</strong>g ontologies. As<br />
last section a conclusion of the tools is given.<br />
5.2.1 Altova Semantic Works<br />
Altova Semantic Works[Altova, 2013] is a tool to create RDF(S) and OWL<br />
les. Class hierarchies can be created graphically. It allows to use les as a