Common Vulnerabilities and Exposures from Emails

Abstract

Ontologies are used for knowledge management, concept definition and semantic search. Ontology is applicable to the organization and management of knowledge in a single given domain. This paper is an attempt to construct a knowledge base for email vulnerabilities using ontologies. It presents a method of building relations among CVEs email entries as established by the MITRE Corporation’s weaknesses data base. The use of ontology is illustrated with queries analyzing software products from a security manager's point of view. This work is based on the MITRE community effort CWE List, Version 3.1—Research concept view CWE-1000.