Ontology-based framework for E-survivability analysis

In an era where networked information systems play a vital role in most organizations in producing and delivering online products and services, survivability of information system (e-survivability) against cyber attacks is increasingly important and critical. E-survivability needs to be addressed from both business and technical perspective, which expand the view of security from a solely technical specialty towards a risk management across all business functions to ensure the critical missions to be fulfilled. The paper presents an ontology-driven approach towards a framework for understanding e-survivability issues that must be addressed to improve the survivability of business operations and to outline the strategies for ensuring the e-survivability readiness of companies' information systems.